last executing test programs: 2.268785637s ago: executing program 1 (id=782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 2.161719478s ago: executing program 1 (id=784): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.840015713s ago: executing program 4 (id=786): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 1.797580143s ago: executing program 3 (id=787): r0 = syz_io_uring_setup(0x749, &(0x7f00000003c0)={0x0, 0x6666, 0x400, 0x1000, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000, 0x0, 0x2000c081}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.746814264s ago: executing program 4 (id=788): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0xfffff49b, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 1.744397704s ago: executing program 3 (id=789): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r3 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x6, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0xaf2) epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0xe000200f}) 1.667432145s ago: executing program 3 (id=790): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) 1.535810357s ago: executing program 4 (id=791): sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r6, 0x0, 0x1, 0x4) write(r2, 0x0, 0x0) 1.38958741s ago: executing program 4 (id=792): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.3790426s ago: executing program 4 (id=793): r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0), 0x0) semop(r0, &(0x7f0000001240), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000380)) timer_getoverrun(0x0) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) dup(0xffffffffffffffff) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x4001}, {0x3, 0x8008}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) 1.34758562s ago: executing program 1 (id=796): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_pidfd_open(r1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x408, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 1.273120381s ago: executing program 2 (id=798): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x8000000000000000, 0x400840) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) 1.233027312s ago: executing program 2 (id=800): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffd93, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x5f, 0x2e, 0x61, 0x672608233d8dd4ac]}}, &(0x7f0000004580)=""/218, 0x2a, 0xda, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) 810.639698ms ago: executing program 3 (id=804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() syz_clone(0x2001000, 0x0, 0xfffffffffffffe30, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 706.0859ms ago: executing program 3 (id=805): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x1) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) tkill(r0, 0x13) 607.833271ms ago: executing program 3 (id=807): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYRES16, @ANYBLOB="01dfff"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 583.518411ms ago: executing program 0 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 516.166812ms ago: executing program 4 (id=809): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 478.339603ms ago: executing program 0 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000900)='./file0\x00', 0x1000410, &(0x7f0000000940)={[{@nodelalloc}, {@noblock_validity}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@data_ordered}]}, 0x4, 0x4f5, &(0x7f0000000c00)="$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") 293.156906ms ago: executing program 0 (id=811): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x8000000000000000, 0x400840) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) 292.600086ms ago: executing program 2 (id=812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 292.165356ms ago: executing program 1 (id=821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 274.000966ms ago: executing program 0 (id=813): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) 242.364887ms ago: executing program 2 (id=814): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) r2 = getpid() r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 223.935727ms ago: executing program 0 (id=815): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x10000000002}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 222.768057ms ago: executing program 1 (id=816): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb839b480930c1efc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 111.035739ms ago: executing program 2 (id=817): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@grpid}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@discard}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, 0x0, 0x0) 63.858609ms ago: executing program 0 (id=818): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fffffffffff}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) 831.84µs ago: executing program 2 (id=819): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0xfffff49b, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 0s ago: executing program 1 (id=830): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x24d417d6, 0x3, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 22.368221][ T29] audit: type=1400 audit(1747276181.198:65): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.368854][ T3300] cgroup: Unknown subsys name 'net' [ 22.390984][ T29] audit: type=1400 audit(1747276181.198:66): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.418538][ T29] audit: type=1400 audit(1747276181.228:67): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.612190][ T3300] cgroup: Unknown subsys name 'cpuset' [ 22.618353][ T3300] cgroup: Unknown subsys name 'rlimit' [ 22.786386][ T29] audit: type=1400 audit(1747276181.618:68): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.811648][ T29] audit: type=1400 audit(1747276181.618:69): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.820475][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.832116][ T29] audit: type=1400 audit(1747276181.618:70): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.861244][ T29] audit: type=1400 audit(1747276181.618:71): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.881675][ T29] audit: type=1400 audit(1747276181.628:72): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.906764][ T29] audit: type=1400 audit(1747276181.628:73): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.930850][ T29] audit: type=1400 audit(1747276181.668:74): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.966988][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.069816][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 24.100106][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.160409][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.199475][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.228488][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 24.242758][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.249982][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.257375][ T3320] bridge_slave_0: entered allmulticast mode [ 24.263804][ T3320] bridge_slave_0: entered promiscuous mode [ 24.270383][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.277521][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.284759][ T3320] bridge_slave_1: entered allmulticast mode [ 24.291024][ T3320] bridge_slave_1: entered promiscuous mode [ 24.303609][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.310752][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.317943][ T3313] bridge_slave_0: entered allmulticast mode [ 24.324257][ T3313] bridge_slave_0: entered promiscuous mode [ 24.352256][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.359429][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.366769][ T3313] bridge_slave_1: entered allmulticast mode [ 24.373202][ T3313] bridge_slave_1: entered promiscuous mode [ 24.385858][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.392972][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.400116][ T3314] bridge_slave_0: entered allmulticast mode [ 24.406542][ T3314] bridge_slave_0: entered promiscuous mode [ 24.413779][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.424025][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.448037][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.455163][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.462315][ T3314] bridge_slave_1: entered allmulticast mode [ 24.468691][ T3314] bridge_slave_1: entered promiscuous mode [ 24.484781][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.512307][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.528288][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.535437][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.542627][ T3319] bridge_slave_0: entered allmulticast mode [ 24.549006][ T3319] bridge_slave_0: entered promiscuous mode [ 24.556411][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.565533][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.572614][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.579906][ T3319] bridge_slave_1: entered allmulticast mode [ 24.586212][ T3319] bridge_slave_1: entered promiscuous mode [ 24.593272][ T3320] team0: Port device team_slave_0 added [ 24.618329][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.632674][ T3320] team0: Port device team_slave_1 added [ 24.643287][ T3313] team0: Port device team_slave_0 added [ 24.653801][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.660936][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.668072][ T3317] bridge_slave_0: entered allmulticast mode [ 24.674332][ T3317] bridge_slave_0: entered promiscuous mode [ 24.694625][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.704844][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.714531][ T3313] team0: Port device team_slave_1 added [ 24.720277][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.727488][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.734711][ T3317] bridge_slave_1: entered allmulticast mode [ 24.740924][ T3317] bridge_slave_1: entered promiscuous mode [ 24.751362][ T3314] team0: Port device team_slave_0 added [ 24.757990][ T3314] team0: Port device team_slave_1 added [ 24.764244][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.771271][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.797329][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.821866][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.828920][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.854928][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.874391][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.881449][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.907705][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.923490][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.930443][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.956725][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.968391][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.985113][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.992143][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.018092][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.030299][ T3319] team0: Port device team_slave_0 added [ 25.038947][ T3319] team0: Port device team_slave_1 added [ 25.046018][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.065982][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.072969][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.099095][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.127474][ T3317] team0: Port device team_slave_0 added [ 25.143856][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.150871][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.177328][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.193552][ T3317] team0: Port device team_slave_1 added [ 25.201167][ T3320] hsr_slave_0: entered promiscuous mode [ 25.207334][ T3320] hsr_slave_1: entered promiscuous mode [ 25.229681][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.238622][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.264668][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.281499][ T3314] hsr_slave_0: entered promiscuous mode [ 25.287410][ T3314] hsr_slave_1: entered promiscuous mode [ 25.293292][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.300838][ T3314] Cannot create hsr debugfs directory [ 25.307953][ T3313] hsr_slave_0: entered promiscuous mode [ 25.314007][ T3313] hsr_slave_1: entered promiscuous mode [ 25.319722][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.327328][ T3313] Cannot create hsr debugfs directory [ 25.352397][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.359474][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.385619][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.396865][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.403842][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.429945][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.479130][ T3319] hsr_slave_0: entered promiscuous mode [ 25.485176][ T3319] hsr_slave_1: entered promiscuous mode [ 25.491065][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.498629][ T3319] Cannot create hsr debugfs directory [ 25.539148][ T3317] hsr_slave_0: entered promiscuous mode [ 25.545812][ T3317] hsr_slave_1: entered promiscuous mode [ 25.551705][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.559253][ T3317] Cannot create hsr debugfs directory [ 25.687114][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.698570][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.707561][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.721482][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.744934][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.756818][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.766023][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.774669][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.793672][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.803509][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.812287][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.820942][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.872497][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.881265][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.889649][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.898874][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.926330][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.940062][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.951068][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.959488][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.971689][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.980300][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.998571][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.010103][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.040896][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.048021][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.057430][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.064468][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.073159][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.080256][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.099164][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.106324][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.128417][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.143042][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.162443][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.177586][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.189096][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.201778][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.208861][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.227633][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.234961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.246849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.253991][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.269015][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.288651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.295850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.317376][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.334806][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.345513][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.366714][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.373892][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.392681][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.402692][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.409781][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.432188][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.473904][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.539206][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.571493][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.630946][ T3319] veth0_vlan: entered promiscuous mode [ 26.654258][ T3313] veth0_vlan: entered promiscuous mode [ 26.665727][ T3319] veth1_vlan: entered promiscuous mode [ 26.675343][ T3313] veth1_vlan: entered promiscuous mode [ 26.695453][ T3320] veth0_vlan: entered promiscuous mode [ 26.709313][ T3313] veth0_macvtap: entered promiscuous mode [ 26.726055][ T3313] veth1_macvtap: entered promiscuous mode [ 26.736589][ T3320] veth1_vlan: entered promiscuous mode [ 26.749340][ T3319] veth0_macvtap: entered promiscuous mode [ 26.760122][ T3319] veth1_macvtap: entered promiscuous mode [ 26.778000][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.791409][ T3317] veth0_vlan: entered promiscuous mode [ 26.801154][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.811861][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.823273][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.834897][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.842561][ T3314] veth0_vlan: entered promiscuous mode [ 26.848418][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.859040][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.869913][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.884725][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.893584][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.902366][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.911067][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.923405][ T3314] veth1_vlan: entered promiscuous mode [ 26.930097][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.938875][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.947753][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.956582][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.966975][ T3317] veth1_vlan: entered promiscuous mode [ 26.974329][ T3320] veth0_macvtap: entered promiscuous mode [ 26.985540][ T3320] veth1_macvtap: entered promiscuous mode [ 27.004725][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.015282][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.025153][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.035609][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.046218][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.056135][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.066711][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.076788][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.087461][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.098071][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.127648][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.136473][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.145251][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.153998][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.166429][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.174349][ T3317] veth0_macvtap: entered promiscuous mode [ 27.194861][ T3317] veth1_macvtap: entered promiscuous mode [ 27.203792][ T3314] veth0_macvtap: entered promiscuous mode [ 27.211127][ T3314] veth1_macvtap: entered promiscuous mode [ 27.245518][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.256373][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.266236][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.276731][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.286675][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.297138][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.311008][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.325415][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.336041][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.345998][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.356712][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.366610][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.377345][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.387357][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.397922][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.408589][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.436454][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 27.436471][ T29] audit: type=1400 audit(1747276186.268:103): avc: denied { prog_run } for pid=3464 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.464103][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.474619][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.484507][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.494976][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.504833][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.515345][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.536801][ C0] hrtimer: interrupt took 76521 ns [ 27.557307][ T3471] random: crng reseeded on system resumption [ 27.563981][ T29] audit: type=1400 audit(1747276186.388:104): avc: denied { append } for pid=3470 comm="syz.1.8" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 27.578386][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.586915][ T29] audit: type=1400 audit(1747276186.388:105): avc: denied { open } for pid=3470 comm="syz.1.8" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 27.620942][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.631567][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.641466][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.652083][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.662283][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.673162][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.683114][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.693751][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.707601][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.759752][ T3477] mmap: syz.4.5 (3477) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.806280][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.815136][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.823981][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.832815][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.846351][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.855280][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.864021][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.872942][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.991332][ T29] audit: type=1400 audit(1747276186.818:106): avc: denied { tracepoint } for pid=3480 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.109019][ T3481] syz.3.4 (3481) used greatest stack depth: 10848 bytes left [ 28.170736][ T29] audit: type=1400 audit(1747276186.998:107): avc: denied { create } for pid=3490 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.211291][ T3491] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.260270][ T3494] loop0: detected capacity change from 0 to 1024 [ 28.271136][ T29] audit: type=1400 audit(1747276187.038:108): avc: denied { create } for pid=3490 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.281798][ T3494] EXT4-fs: Ignoring removed orlov option [ 28.296898][ T3494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.351475][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 28.354462][ T3494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.360268][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 28.380978][ T3502] netlink: 'syz.3.16': attribute type 11 has an invalid length. [ 28.389628][ T29] audit: type=1400 audit(1747276187.208:109): avc: denied { mount } for pid=3493 comm="syz.0.13" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.393947][ T3494] EXT4-fs (loop0): shut down requested (2) [ 28.437469][ T3504] loop3: detected capacity change from 0 to 512 [ 28.455508][ T29] audit: type=1400 audit(1747276187.248:110): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.477790][ T29] audit: type=1400 audit(1747276187.248:111): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.499601][ T29] audit: type=1400 audit(1747276187.248:112): avc: denied { write } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.531519][ T3504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.544905][ T3504] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 28.569559][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.613797][ T3510] 9pnet_fd: Insufficient options for proto=fd [ 28.751942][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 28.883873][ T3531] syzkaller0: entered promiscuous mode [ 28.889506][ T3531] syzkaller0: entered allmulticast mode [ 28.972395][ T3523] syz.1.25 (3523) used greatest stack depth: 10272 bytes left [ 29.316404][ T3549] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.35'. [ 29.488867][ T3551] can0: slcan on ttyS3. [ 29.605149][ T3551] can0 (unregistered): slcan off ttyS3. [ 29.640198][ T3557] can0: slcan on ttyS3. [ 29.720072][ T3561] netlink: 'syz.2.38': attribute type 13 has an invalid length. [ 29.792125][ T3551] can0 (unregistered): slcan off ttyS3. [ 29.886554][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.893907][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.017446][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.039900][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.099332][ T3561] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.108530][ T3561] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.117768][ T3561] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.127144][ T3561] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.177357][ T3616] syz.1.48 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.219451][ T3619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 30.226809][ T3619] IPv6: NLM_F_CREATE should be set when creating new route [ 30.443724][ T3631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3631 comm=syz.0.51 [ 30.667935][ T3639] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 30.928327][ T3652] syzkaller0: entered promiscuous mode [ 30.933987][ T3652] syzkaller0: entered allmulticast mode [ 31.218935][ T3658] loop2: detected capacity change from 0 to 1024 [ 31.249358][ T3658] EXT4-fs: Ignoring removed bh option [ 31.269112][ T3658] EXT4-fs: inline encryption not supported [ 31.277716][ T3658] EXT4-fs: Ignoring removed i_version option [ 31.300278][ T3658] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.366423][ T3658] EXT4-fs error (device loop2): ext4_map_blocks:709: inode #3: block 1: comm syz.2.63: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.392541][ T3658] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.63: Failed to acquire dquot type 0 [ 31.418192][ T3658] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.63: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.426603][ T3669] sd 0:0:1:0: device reset [ 31.444548][ T3658] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.63: Invalid inode bitmap blk 0 in block_group 0 [ 31.468143][ T41] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.483268][ T3658] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 31.484464][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 31.508553][ T3658] EXT4-fs (loop2): 1 orphan inode deleted [ 31.537021][ T3658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.570504][ T3676] syzkaller0: entered promiscuous mode [ 31.576124][ T3676] syzkaller0: entered allmulticast mode [ 31.637679][ T3658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.802936][ T3691] hsr0: entered promiscuous mode [ 31.817355][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 31.844223][ T3691] hsr_slave_0: left promiscuous mode [ 31.850143][ T3691] hsr_slave_1: left promiscuous mode [ 31.860144][ T3691] hsr0 (unregistering): left promiscuous mode [ 31.866797][ T3697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.875660][ T3697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.895503][ T3697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.929250][ T3697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.938192][ T3697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.966924][ T3704] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 32.000889][ T3712] loop3: detected capacity change from 0 to 128 [ 32.020193][ T3712] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 32.035305][ T3714] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 32.110581][ T3719] loop4: detected capacity change from 0 to 1024 [ 32.137937][ T3719] ======================================================= [ 32.137937][ T3719] WARNING: The mand mount option has been deprecated and [ 32.137937][ T3719] and is ignored by this kernel. Remove the mand [ 32.137937][ T3719] option from the mount to silence this warning. [ 32.137937][ T3719] ======================================================= [ 32.179286][ T1716] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 32.189694][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.189694][ T1716] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 32.203988][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.203988][ T1716] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 32.217719][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.217719][ T1716] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 32.232935][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.232935][ T1716] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 32.248144][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.248144][ T1716] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 32.262876][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.289456][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.289456][ T1716] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 32.304595][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.304595][ T1716] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 32.332132][ T3712] syz.3.87: attempt to access beyond end of device [ 32.332132][ T3712] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 32.345958][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.345958][ T1716] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 32.359374][ T1716] kworker/u8:6: attempt to access beyond end of device [ 32.359374][ T1716] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 32.375705][ T1716] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 32.393447][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.467343][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 32.467358][ T29] audit: type=1400 audit(1747276191.298:251): avc: denied { ioctl } for pid=3730 comm="syz.2.94" path="socket:[5279]" dev="sockfs" ino=5279 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.501971][ T29] audit: type=1400 audit(1747276191.328:252): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.502369][ T267] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 32.547574][ T3734] serio: Serial port ptm0 [ 32.560922][ T29] audit: type=1400 audit(1747276191.388:253): avc: denied { mount } for pid=3736 comm="syz.3.95" name="/" dev="configfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.584577][ T29] audit: type=1400 audit(1747276191.388:254): avc: denied { search } for pid=3736 comm="syz.3.95" name="/" dev="configfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.606829][ T29] audit: type=1400 audit(1747276191.388:255): avc: denied { read } for pid=3736 comm="syz.3.95" name="/" dev="configfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.628673][ T29] audit: type=1400 audit(1747276191.388:256): avc: denied { open } for pid=3736 comm="syz.3.95" path="/" dev="configfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.630386][ T3739] hub 9-0:1.0: USB hub found [ 32.664308][ T3739] hub 9-0:1.0: 8 ports detected [ 32.688444][ T29] audit: type=1400 audit(1747276191.518:257): avc: denied { create } for pid=3741 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.738520][ T29] audit: type=1400 audit(1747276191.548:258): avc: denied { bind } for pid=3741 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.757856][ T29] audit: type=1400 audit(1747276191.548:259): avc: denied { listen } for pid=3741 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.777676][ T29] audit: type=1400 audit(1747276191.558:260): avc: denied { write } for pid=3741 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.865562][ T3748] xt_hashlimit: size too large, truncated to 1048576 [ 32.920654][ T3755] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.946283][ T3757] loop1: detected capacity change from 0 to 164 [ 32.957623][ T3757] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 33.003921][ T3753] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 33.023716][ T3753] Symlink component flag not implemented [ 33.029426][ T3753] Symlink component flag not implemented [ 33.073533][ T3753] Symlink component flag not implemented (7) [ 33.079619][ T3753] Symlink component flag not implemented (116) [ 33.496346][ T3808] loop3: detected capacity change from 0 to 512 [ 33.526216][ T3808] ext4: Unknown parameter 'func' [ 33.533250][ T3810] __nla_validate_parse: 8 callbacks suppressed [ 33.533268][ T3810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.118'. [ 33.661347][ T10] IPVS: starting estimator thread 0... [ 33.751688][ T3852] IPVS: using max 2592 ests per chain, 129600 per kthread [ 34.359114][ T3892] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.368099][ T3892] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.377079][ T3892] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.386006][ T3892] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.489903][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 34.499198][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.507301][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.517556][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.525175][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.799799][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 34.845824][ T3924] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.854628][ T3924] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.863487][ T3924] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.872297][ T3924] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.954172][ T3924] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.963270][ T3924] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.972358][ T3924] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.981250][ T3924] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.061964][ T3924] Zero length message leads to an empty skb [ 35.194788][ T3944] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 35.206691][ T3948] loop3: detected capacity change from 0 to 4096 [ 35.230865][ T3948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.278062][ T3948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.290429][ T3955] vlan2: entered allmulticast mode [ 35.295712][ T3955] geneve1: entered allmulticast mode [ 35.299217][ T3948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.375756][ T3959] random: crng reseeded on system resumption [ 35.598877][ T3965] loop1: detected capacity change from 0 to 764 [ 35.618766][ T3965] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 35.636912][ T3968] ipvlan2: entered promiscuous mode [ 35.642734][ T3968] ipvlan2: entered allmulticast mode [ 35.648176][ T3968] macvlan0: entered allmulticast mode [ 35.653757][ T3968] veth1_vlan: entered allmulticast mode [ 35.685369][ T3971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.155'. [ 35.749857][ T3973] bridge0: entered promiscuous mode [ 35.759201][ T3973] macvlan2: entered promiscuous mode [ 35.776190][ T3973] bridge0: port 3(macvlan2) entered blocking state [ 35.785226][ T3973] bridge0: port 3(macvlan2) entered disabled state [ 35.813416][ T3973] macvlan2: entered allmulticast mode [ 35.819927][ T3973] bridge0: entered allmulticast mode [ 35.839148][ T3973] macvlan2: left allmulticast mode [ 35.846640][ T3973] bridge0: left allmulticast mode [ 35.863309][ T3973] bridge0: left promiscuous mode [ 35.879005][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.939322][ T3983] netlink: 256 bytes leftover after parsing attributes in process `syz.3.160'. [ 36.162702][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 36.177856][ T3999] sit0: entered promiscuous mode [ 36.216982][ T3999] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 36.224725][ T3999] netlink: 1 bytes leftover after parsing attributes in process `syz.4.166'. [ 36.236372][ T4001] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 36.253459][ T4004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.346631][ T4011] loop2: detected capacity change from 0 to 1024 [ 36.369215][ T4011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.430221][ T4011] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 36.465311][ T4022] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 36.480044][ T4022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.496412][ T4022] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 36.511518][ T4022] bond1 (unregistering): Released all slaves [ 36.519297][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.677872][ T4027] macvlan0: entered promiscuous mode [ 36.683610][ T4027] bridge0: entered promiscuous mode [ 36.694445][ T4027] bridge0: port 3(macvlan0) entered blocking state [ 36.702393][ T4027] bridge0: port 3(macvlan0) entered disabled state [ 36.710571][ T4027] macvlan0: entered allmulticast mode [ 36.716589][ T4027] bridge0: entered allmulticast mode [ 36.727088][ T4027] macvlan0: left allmulticast mode [ 36.733918][ T4027] bridge0: left allmulticast mode [ 36.746066][ T4027] bridge0: left promiscuous mode [ 36.886681][ T4040] loop3: detected capacity change from 0 to 512 [ 36.896713][ T4040] EXT4-fs: Ignoring removed nobh option [ 36.911824][ T4040] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.177: invalid indirect mapped block 256 (level 2) [ 36.925830][ T4040] EXT4-fs (loop3): 2 truncates cleaned up [ 36.933182][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.989698][ T4040] bridge_slave_0: left allmulticast mode [ 36.995594][ T4040] bridge_slave_0: left promiscuous mode [ 37.001387][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.035622][ T4046] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.177: bg 0: block 5: invalid block bitmap [ 37.050706][ T4040] bridge_slave_1: left allmulticast mode [ 37.056764][ T4040] bridge_slave_1: left promiscuous mode [ 37.062696][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.072382][ T4046] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.084677][ T4046] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.084677][ T4046] [ 37.094494][ T4046] EXT4-fs (loop3): Total free blocks count 0 [ 37.100509][ T4046] EXT4-fs (loop3): Free/Dirty block details [ 37.106505][ T4046] EXT4-fs (loop3): free_blocks=0 [ 37.111490][ T4046] EXT4-fs (loop3): dirty_blocks=66 [ 37.117453][ T4046] EXT4-fs (loop3): Block reservation details [ 37.123474][ T4046] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 37.132421][ T4040] bond0: (slave bond_slave_0): Releasing backup interface [ 37.143078][ T4040] bond0: (slave bond_slave_1): Releasing backup interface [ 37.156968][ T4040] team0: Port device team_slave_0 removed [ 37.166492][ T4040] team0: Port device team_slave_1 removed [ 37.174856][ T4040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.182375][ T4040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.191278][ T4040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.198860][ T4040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.247051][ T4046] syz.3.177 (4046) used greatest stack depth: 9976 bytes left [ 37.256621][ T3777] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 37.777137][ T4081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 37.901222][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 37.901238][ T29] audit: type=1400 audit(1747276196.728:394): avc: denied { create } for pid=4082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.936395][ T4083] lo speed is unknown, defaulting to 1000 [ 37.942293][ T4083] lo speed is unknown, defaulting to 1000 [ 37.948320][ T4083] lo speed is unknown, defaulting to 1000 [ 37.955512][ T4083] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.963771][ T4083] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 37.971687][ T29] audit: type=1400 audit(1747276196.768:395): avc: denied { write } for pid=4082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.975212][ T4083] lo speed is unknown, defaulting to 1000 [ 37.991740][ T29] audit: type=1400 audit(1747276196.768:396): avc: denied { nlmsg_read } for pid=4082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.991815][ T29] audit: type=1400 audit(1747276196.768:397): avc: denied { create } for pid=4082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.991836][ T29] audit: type=1400 audit(1747276196.768:398): avc: denied { write } for pid=4082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 38.042123][ T4083] lo speed is unknown, defaulting to 1000 [ 38.068539][ T4083] lo speed is unknown, defaulting to 1000 [ 38.076347][ T4083] lo speed is unknown, defaulting to 1000 [ 38.082900][ T4083] lo speed is unknown, defaulting to 1000 [ 38.293602][ T4096] loop3: detected capacity change from 0 to 128 [ 38.336713][ T29] audit: type=1400 audit(1747276197.168:399): avc: denied { tracepoint } for pid=4097 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.365807][ T29] audit: type=1400 audit(1747276197.188:400): avc: denied { create } for pid=4099 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.385123][ T29] audit: type=1400 audit(1747276197.188:401): avc: denied { listen } for pid=4099 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.458893][ T29] audit: type=1400 audit(1747276197.278:402): avc: denied { block_suspend } for pid=4104 comm="syz.3.201" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.542851][ T4113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4113 comm=syz.3.204 [ 38.649423][ T29] audit: type=1326 audit(1747276197.478:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f01d1e969 code=0x7ffc0000 [ 38.747022][ T4130] syz_tun: entered allmulticast mode [ 38.771449][ T4130] syz_tun: left allmulticast mode [ 38.800321][ T4132] sd 0:0:1:0: device reset [ 38.912451][ T4151] loop3: detected capacity change from 0 to 1024 [ 38.922675][ T4151] EXT4-fs: Ignoring removed nobh option [ 38.928639][ T4151] EXT4-fs: Ignoring removed bh option [ 38.940965][ T4152] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 38.958364][ T4152] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 38.969533][ T4156] capability: warning: `syz.4.223' uses deprecated v2 capabilities in a way that may be insecure [ 38.981885][ T4156] ALSA: seq fatal error: cannot create timer (-22) [ 38.988944][ T4151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.024687][ T4164] dummy0: entered promiscuous mode [ 39.030069][ T4164] dummy0: entered allmulticast mode [ 39.042453][ T4164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.069783][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.147363][ T4167] 9pnet_virtio: no channels available for device /dev/input/event# [ 39.492237][ T4198] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 39.618462][ T4209] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 39.626868][ T4209] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 39.637230][ T4209] !: renamed from dummy0 (while UP) [ 40.109033][ T4234] lo speed is unknown, defaulting to 1000 [ 40.159594][ T4236] ÿ: renamed from bond_slave_0 [ 40.338050][ T4250] loop3: detected capacity change from 0 to 1024 [ 40.390330][ T4252] serio: Serial port ptm0 [ 40.417320][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.442102][ T4250] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.257: Allocating blocks 497-513 which overlap fs metadata [ 40.457820][ T4250] EXT4-fs (loop3): pa ffff8881071b9150: logic 16, phys. 145, len 23 [ 40.465947][ T4250] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 40.488183][ T4250] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 40.500542][ T4250] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.500542][ T4250] [ 40.510267][ T4250] EXT4-fs (loop3): Total free blocks count 0 [ 40.516294][ T4250] EXT4-fs (loop3): Free/Dirty block details [ 40.522236][ T4250] EXT4-fs (loop3): free_blocks=16 [ 40.527279][ T4250] EXT4-fs (loop3): dirty_blocks=0 [ 40.532402][ T4250] EXT4-fs (loop3): Block reservation details [ 40.538417][ T4250] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 40.556870][ T4261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.571229][ T4261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.997193][ T4277] loop3: detected capacity change from 0 to 1024 [ 41.011939][ T4277] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 41.032206][ T4277] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.044124][ T4277] jbd2_journal_init_inode: Cannot locate journal superblock [ 41.051464][ T4277] EXT4-fs (loop3): Could not load journal inode [ 41.252678][ T4285] pim6reg1: entered promiscuous mode [ 41.253781][ T4287] loop3: detected capacity change from 0 to 128 [ 41.258180][ T4285] pim6reg1: entered allmulticast mode [ 41.404469][ T4292] __nla_validate_parse: 4 callbacks suppressed [ 41.404487][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 41.648081][ T4306] netlink: 104 bytes leftover after parsing attributes in process `syz.3.280'. [ 41.675264][ T4308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 41.675691][ T4306] 9pnet: p9_errstr2errno: server reported unknown error [ 41.684590][ T4308] netlink: 196 bytes leftover after parsing attributes in process `syz.4.281'. [ 41.711325][ T4308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 41.720347][ T4308] netlink: 196 bytes leftover after parsing attributes in process `syz.4.281'. [ 41.902676][ T4322] loop3: detected capacity change from 0 to 164 [ 41.956431][ T4322] process 'syz.3.287' launched '/dev/fd/10' with NULL argv: empty string added [ 41.972013][ T4320] loop4: detected capacity change from 0 to 512 [ 42.000429][ T4322] bio_check_eod: 104 callbacks suppressed [ 42.000471][ T4322] syz.3.287: attempt to access beyond end of device [ 42.000471][ T4322] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 42.028914][ T4320] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.071648][ T4322] syz.3.287: attempt to access beyond end of device [ 42.071648][ T4322] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.111375][ T4320] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.286: Failed to acquire dquot type 0 [ 42.158411][ T4320] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 42.175683][ T4320] EXT4-fs (loop4): 1 truncate cleaned up [ 42.182024][ T4320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.236745][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.355135][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 42.675860][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.683458][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.690934][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691465][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691494][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691519][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691666][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691699][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691733][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691752][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691775][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691798][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.691820][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.701618][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.784742][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.792197][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.799603][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.807191][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.815026][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.822498][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.829949][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.838218][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.845735][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.853273][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.860677][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.868354][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.875833][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.883268][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.891196][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.910111][ T4377] lo speed is unknown, defaulting to 1000 [ 42.949762][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 42.949781][ T29] audit: type=1400 audit(1747276201.778:522): avc: denied { view } for pid=4373 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 42.953247][ T4378] fido_id[4378]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.956370][ T4374] tmpfs: Unknown parameter '' [ 42.975360][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 43.026035][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 43.155922][ T4389] syz_tun: entered allmulticast mode [ 43.218823][ T29] audit: type=1400 audit(1747276202.048:523): avc: denied { read write } for pid=4392 comm="syz.3.314" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 43.251998][ T29] audit: type=1400 audit(1747276202.048:524): avc: denied { open } for pid=4392 comm="syz.3.314" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 43.349841][ T4399] loop4: detected capacity change from 0 to 512 [ 43.356569][ T4399] EXT4-fs: Ignoring removed orlov option [ 43.379715][ T4399] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.316: casefold flag without casefold feature [ 43.394627][ T4399] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.316: couldn't read orphan inode 15 (err -117) [ 43.407743][ T4399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.425353][ T29] audit: type=1400 audit(1747276202.258:525): avc: denied { append } for pid=4398 comm="syz.4.316" path="/61/file0/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.448887][ T29] audit: type=1400 audit(1747276202.258:526): avc: denied { read } for pid=4398 comm="syz.4.316" name="memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.492768][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.556777][ T4408] loop4: detected capacity change from 0 to 1024 [ 43.566202][ T4408] EXT4-fs: Ignoring removed orlov option [ 43.578354][ T4408] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.594150][ T4408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.622222][ T29] audit: type=1400 audit(1747276202.458:527): avc: denied { lock } for pid=4407 comm="syz.4.319" path="/63/file1/freezer.state" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.647759][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.726950][ T4421] pim6reg1: entered promiscuous mode [ 43.732536][ T4421] pim6reg1: entered allmulticast mode [ 43.786598][ T4424] loop1: detected capacity change from 0 to 2048 [ 43.827424][ T4424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.861349][ T29] audit: type=1400 audit(1747276202.678:528): avc: denied { bind } for pid=4427 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.866123][ T4423] siw: device registration error -23 [ 43.881582][ T29] audit: type=1400 audit(1747276202.678:529): avc: denied { setopt } for pid=4427 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.916166][ T29] audit: type=1400 audit(1747276202.748:530): avc: denied { map } for pid=4418 comm="syz.1.323" path="/69/file2/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.940317][ T29] audit: type=1400 audit(1747276202.748:531): avc: denied { execute } for pid=4418 comm="syz.1.323" path="/69/file2/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.949376][ T4424] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.991745][ T4424] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 44.004139][ T4424] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.004139][ T4424] [ 44.013910][ T4424] EXT4-fs (loop1): Total free blocks count 0 [ 44.019914][ T4424] EXT4-fs (loop1): Free/Dirty block details [ 44.026412][ T4424] EXT4-fs (loop1): free_blocks=2415919104 [ 44.032363][ T4424] EXT4-fs (loop1): dirty_blocks=48 [ 44.037521][ T4424] EXT4-fs (loop1): Block reservation details [ 44.043613][ T4424] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 44.093907][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.110289][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 44.189782][ T4448] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 44.213088][ T4450] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 44.314867][ T4436] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.325661][ T4436] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.335623][ T4436] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.346006][ T4436] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.382911][ T4436] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.394457][ T4436] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.404231][ T4436] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.413575][ T4436] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.458458][ T4448] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.472581][ T4450] bond1: entered promiscuous mode [ 44.477887][ T4450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.495489][ T4457] batadv0: entered promiscuous mode [ 44.500810][ T4457] batadv0: entered allmulticast mode [ 44.514391][ T4457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.523674][ T4457] bond1: (slave batadv0): making interface the new active one [ 44.533212][ T4457] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 44.676196][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.686018][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.075457][ T4490] 9pnet_fd: Insufficient options for proto=fd [ 45.117939][ T3822] syzkaller0: tun_net_xmit 76 [ 45.122889][ T3822] syzkaller0: tun_net_xmit 48 [ 45.141682][ T3390] syzkaller0: tun_net_xmit 76 [ 45.167198][ T4492] syzkaller0: tun_net_xmit 1280 [ 45.172189][ T4492] syzkaller0: create flow: hash 273522110 index 1 [ 45.181100][ T4491] syzkaller0: delete flow: hash 273522110 index 1 [ 45.337905][ T4509] Driver unsupported XDP return value 0 on prog (id 271) dev N/A, expect packet loss! [ 45.647266][ T4550] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 45.655367][ T4550] hsr_slave_0: left promiscuous mode [ 45.661256][ T4550] hsr_slave_1: left promiscuous mode [ 45.926250][ T4567] serio: Serial port ptm0 [ 45.942204][ T4570] loop4: detected capacity change from 0 to 164 [ 45.950994][ T4570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.969727][ T4570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.318058][ T4591] loop1: detected capacity change from 0 to 512 [ 46.325017][ T4591] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.372746][ T4591] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.381099][ T4591] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.436213][ T4591] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.501917][ T4591] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.528796][ T4591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.390: bg 0: block 40: padding at end of block bitmap is not set [ 46.583035][ T4591] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 46.592298][ T4591] EXT4-fs (loop1): 1 truncate cleaned up [ 46.598464][ T4591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.636095][ T4591] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.390: corrupted xattr block 31: invalid header [ 46.680678][ T4615] loop4: detected capacity change from 0 to 1024 [ 46.692496][ T4591] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 46.716557][ T4615] EXT4-fs: Ignoring removed orlov option [ 46.722416][ T4615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.741818][ T4591] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.390: corrupted xattr block 31: invalid header [ 46.833105][ T4591] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 46.845679][ T4615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.872013][ T4618] loop2: detected capacity change from 0 to 764 [ 46.889654][ T4591] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.390: bad symlink. [ 47.056389][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.240862][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.511875][ T4641] loop4: detected capacity change from 0 to 256 [ 47.636733][ T4647] pim6reg1: entered promiscuous mode [ 47.642200][ T4647] pim6reg1: entered allmulticast mode [ 48.075923][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 48.075942][ T29] audit: type=1400 audit(1747276206.848:710): avc: denied { mounton } for pid=4658 comm="syz.3.416" path="/97/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.178277][ T29] audit: type=1400 audit(1747276206.988:711): avc: denied { create } for pid=4665 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.197934][ T29] audit: type=1400 audit(1747276207.008:712): avc: denied { mount } for pid=4665 comm="syz.0.418" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.220060][ T29] audit: type=1400 audit(1747276207.008:713): avc: denied { connect } for pid=4665 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.239805][ T29] audit: type=1400 audit(1747276207.008:714): avc: denied { write } for pid=4665 comm="syz.0.418" path="socket:[7763]" dev="sockfs" ino=7763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.375646][ T29] audit: type=1400 audit(1747276207.198:715): avc: denied { create } for pid=4667 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.401423][ T4672] random: crng reseeded on system resumption [ 48.458697][ T29] audit: type=1400 audit(1747276207.208:716): avc: denied { write } for pid=4667 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.477991][ T29] audit: type=1326 audit(1747276207.228:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ee2e969 code=0x7ffc0000 [ 48.501326][ T29] audit: type=1326 audit(1747276207.228:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ee2e969 code=0x7ffc0000 [ 48.524619][ T29] audit: type=1400 audit(1747276207.228:719): avc: denied { create } for pid=4671 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.661293][ T4680] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.670175][ T4680] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.679007][ T4680] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.687808][ T4680] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.922442][ T4693] SELinux: failed to load policy [ 49.573405][ T4716] __nla_validate_parse: 2 callbacks suppressed [ 49.573484][ T4716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 49.801041][ T4618] syz.2.398 (4618) used greatest stack depth: 4968 bytes left [ 49.871959][ T4739] lo speed is unknown, defaulting to 1000 [ 50.035358][ T4757] blktrace: Concurrent blktraces are not allowed on loop0 [ 50.358858][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 50.394191][ T4769] loop3: detected capacity change from 0 to 1024 [ 50.409238][ T4769] EXT4-fs: Ignoring removed bh option [ 50.418637][ T4769] EXT4-fs: inline encryption not supported [ 50.427053][ T4769] EXT4-fs: Ignoring removed i_version option [ 50.447768][ T4769] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.553821][ T4769] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.458: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.575484][ T4769] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.458: Failed to acquire dquot type 0 [ 50.602888][ T4769] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.458: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.635017][ T4769] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.458: Invalid inode bitmap blk 0 in block_group 0 [ 50.662084][ T3790] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.679952][ T4769] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 50.706136][ T4769] EXT4-fs (loop3): 1 orphan inode deleted [ 50.716814][ T3790] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 0 [ 50.760784][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.846807][ T4769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.868447][ T4797] netlink: 'syz.4.468': attribute type 27 has an invalid length. [ 50.932379][ T4799] ref_ctr_offset mismatch. inode: 0x212 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x600000040 [ 50.961025][ T4797] sit0: left promiscuous mode [ 50.992064][ T4799] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 51.000529][ T4799] ref_ctr decrement failed for inode: 0x212 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005e300 [ 51.037830][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.045202][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.072692][ T4799] uprobe: syz.1.469:4799 failed to unregister, leaking uprobe [ 51.093096][ T4797] !: left promiscuous mode [ 51.097815][ T4797] !: left allmulticast mode [ 51.206610][ T4797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.252349][ T4797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.328487][ T4797] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.337676][ T4797] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.346926][ T4797] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.356082][ T4797] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.525663][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 51.607090][ T4814] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 51.638734][ T4819] loop4: detected capacity change from 0 to 512 [ 51.654850][ T4819] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.662168][ T4808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.667912][ T4819] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.475: bg 0: block 248: padding at end of block bitmap is not set [ 51.695043][ T4822] capability: warning: `syz.0.477' uses 32-bit capabilities (legacy support in use) [ 51.702607][ T4819] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.475: Failed to acquire dquot type 1 [ 51.716971][ T4819] EXT4-fs (loop4): 1 truncate cleaned up [ 51.724588][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.794780][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.953046][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 51.965937][ T4836] loop2: detected capacity change from 0 to 512 [ 51.981978][ T4836] EXT4-fs: Ignoring removed oldalloc option [ 51.987961][ T4836] EXT4-fs: inline encryption not supported [ 51.994101][ T4836] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.050503][ T4836] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.103226][ T4840] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 52.117622][ T4836] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 64: padding at end of block bitmap is not set [ 52.136068][ T4840] SELinux: failed to load policy [ 52.171648][ T4836] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 52.185185][ T4836] EXT4-fs (loop2): 1 truncate cleaned up [ 52.199078][ T4836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.241198][ T4847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 52.250495][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 52.288867][ T4853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 52.310148][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 52.310197][ T4851] netlink: 'syz.1.488': attribute type 39 has an invalid length. [ 52.359815][ T4857] pim6reg1: entered promiscuous mode [ 52.365365][ T4857] pim6reg1: entered allmulticast mode [ 52.413783][ T4859] syzkaller0: entered promiscuous mode [ 52.419306][ T4859] syzkaller0: entered allmulticast mode [ 52.450343][ T4865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.495'. [ 52.478957][ T4865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4865 comm=syz.0.495 [ 52.487215][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.554683][ T4871] tipc: Started in network mode [ 52.559611][ T4871] tipc: Node identity ac14140f, cluster identity 4711 [ 52.567722][ T4871] tipc: New replicast peer: 10.1.1.2 [ 52.573183][ T4871] tipc: Enabled bearer , priority 10 [ 52.754611][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.771061][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.775161][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.893262][ T4890] loop4: detected capacity change from 0 to 2048 [ 52.911147][ T4890] EXT4-fs (loop4): invalid inodes per group: 204800 [ 52.911147][ T4890] [ 53.015840][ T4906] can0: slcan on ttyS3. [ 53.088292][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 53.088309][ T29] audit: type=1326 audit(1747276211.918:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.101749][ T4906] can0 (unregistered): slcan off ttyS3. [ 53.177622][ T4912] can0: slcan on ttyS3. [ 53.183174][ T29] audit: type=1400 audit(1747276211.918:897): avc: denied { read } for pid=4913 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.206216][ T29] audit: type=1400 audit(1747276211.918:898): avc: denied { open } for pid=4913 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.231248][ T29] audit: type=1400 audit(1747276211.918:899): avc: denied { getattr } for pid=4913 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.256564][ T29] audit: type=1326 audit(1747276211.948:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.279962][ T29] audit: type=1326 audit(1747276211.948:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.303248][ T29] audit: type=1326 audit(1747276211.948:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.326636][ T29] audit: type=1326 audit(1747276211.958:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.349973][ T29] audit: type=1326 audit(1747276211.988:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.373417][ T29] audit: type=1326 audit(1747276211.988:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 53.461640][ T4906] can0 (unregistered): slcan off ttyS3. [ 53.603536][ T4953] lo speed is unknown, defaulting to 1000 [ 53.691585][ T3558] tipc: Node number set to 2886997007 [ 53.814893][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 53.917388][ T4979] loop2: detected capacity change from 0 to 1024 [ 53.925390][ T4979] ext4: Unknown parameter 'nouser_xattr' [ 54.698864][ T5008] loop4: detected capacity change from 0 to 512 [ 54.748378][ T5008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.762212][ T5008] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.037217][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.183435][ T5025] ALSA: seq fatal error: cannot create timer (-22) [ 55.358137][ T5020] bridge0: entered promiscuous mode [ 55.462359][ T5020] bridge0: port 3(macvlan2) entered blocking state [ 55.470978][ T5020] bridge0: port 3(macvlan2) entered disabled state [ 55.528418][ T5020] macvlan2: entered allmulticast mode [ 55.536187][ T5020] bridge0: entered allmulticast mode [ 55.585963][ T5020] macvlan2: left allmulticast mode [ 55.594055][ T5020] bridge0: left allmulticast mode [ 55.614260][ T5020] bridge0: left promiscuous mode [ 55.897776][ T5043] loop1: detected capacity change from 0 to 256 [ 55.989929][ T5046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.550'. [ 55.999655][ T5045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.550'. [ 56.278540][ T5058] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.753840][ T5077] loop2: detected capacity change from 0 to 1024 [ 56.771649][ T5077] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 56.784767][ T5077] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.796370][ T5077] jbd2_journal_init_inode: Cannot locate journal superblock [ 56.803779][ T5077] EXT4-fs (loop2): Could not load journal inode [ 57.108652][ T5096] serio: Serial port ptm0 [ 57.268560][ T5105] loop4: detected capacity change from 0 to 1024 [ 57.322101][ T5105] ext4: Unknown parameter 'nouser_xattr' [ 57.513578][ T5110] lo speed is unknown, defaulting to 1000 [ 57.713095][ T5114] loop3: detected capacity change from 0 to 512 [ 57.729548][ T5114] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.783148][ T5114] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.575: Failed to acquire dquot type 0 [ 57.795940][ T5114] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 57.901954][ T5114] EXT4-fs (loop3): 1 truncate cleaned up [ 57.908160][ T5114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.060570][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.248608][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 58.248623][ T29] audit: type=1400 audit(1747276217.078:1000): avc: denied { setopt } for pid=5136 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.277508][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 58.440693][ T29] audit: type=1400 audit(1747276217.108:1001): avc: denied { write } for pid=5136 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.568029][ T5142] loop1: detected capacity change from 0 to 1024 [ 58.575078][ T5142] ext4: Unknown parameter 'nouser_xattr' [ 58.668798][ T5146] lo speed is unknown, defaulting to 1000 [ 58.777955][ T5157] netlink: 104 bytes leftover after parsing attributes in process `syz.2.591'. [ 58.787147][ T29] audit: type=1400 audit(1747276217.608:1002): avc: denied { nlmsg_read } for pid=5156 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.818122][ T5157] 9pnet: p9_errstr2errno: server reported unknown error [ 58.873748][ T5162] serio: Serial port ptm0 [ 58.941129][ T5165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.593'. [ 58.950763][ T5160] netlink: 44 bytes leftover after parsing attributes in process `syz.1.593'. [ 59.015955][ T5169] loop2: detected capacity change from 0 to 512 [ 59.041409][ T5169] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.072307][ T5169] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.085461][ T5169] EXT4-fs (loop2): 1 truncate cleaned up [ 59.092612][ T5169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.123420][ T29] audit: type=1400 audit(1747276217.958:1003): avc: denied { setattr } for pid=5168 comm="syz.2.595" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.167084][ T5169] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 59.183188][ T5174] loop1: detected capacity change from 0 to 128 [ 59.191352][ T5174] FAT-fs (loop1): invalid media value (0x00) [ 59.197518][ T5174] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 59.206894][ T5174] FAT-fs (loop1): Can't find a valid FAT filesystem [ 59.219863][ T5169] EXT4-fs (loop2): Remounting filesystem read-only [ 59.226751][ T29] audit: type=1400 audit(1747276217.998:1004): avc: denied { remove_name } for pid=5168 comm="syz.2.595" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.249515][ T29] audit: type=1400 audit(1747276217.998:1005): avc: denied { unlink } for pid=5168 comm="syz.2.595" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.284998][ T5169] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -30) [ 59.320016][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 59.360512][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.424481][ T29] audit: type=1400 audit(1747276218.258:1006): avc: denied { read } for pid=5173 comm="syz.1.597" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.447659][ T29] audit: type=1400 audit(1747276218.258:1007): avc: denied { open } for pid=5173 comm="syz.1.597" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.523587][ T29] audit: type=1326 audit(1747276218.358:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 59.571564][ T29] audit: type=1326 audit(1747276218.378:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 59.748676][ T5197] futex_wake_op: syz.4.611 tries to shift op by -1; fix this program [ 60.525171][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.535264][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.118608][ T5235] loop1: detected capacity change from 0 to 1024 [ 61.127978][ T5235] EXT4-fs: Ignoring removed orlov option [ 61.141458][ T5235] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.175436][ T5237] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 61.185225][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.200526][ T5237] bond0: (slave 0!): Enslaving as an active interface with an up link [ 61.233513][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.466538][ T5247] loop1: detected capacity change from 0 to 256 [ 61.501660][ T5247] FAT-fs (loop1): Directory bread(block 64) failed [ 61.508336][ T5247] FAT-fs (loop1): Directory bread(block 65) failed [ 61.516021][ T5247] FAT-fs (loop1): Directory bread(block 66) failed [ 61.528509][ T5247] FAT-fs (loop1): Directory bread(block 67) failed [ 61.536411][ T5247] FAT-fs (loop1): Directory bread(block 68) failed [ 61.543236][ T5247] FAT-fs (loop1): Directory bread(block 69) failed [ 61.561847][ T5247] FAT-fs (loop1): Directory bread(block 70) failed [ 61.568683][ T5247] FAT-fs (loop1): Directory bread(block 71) failed [ 61.578467][ T5247] FAT-fs (loop1): Directory bread(block 72) failed [ 61.585294][ T5247] FAT-fs (loop1): Directory bread(block 73) failed [ 61.773402][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 61.957002][ T5274] loop3: detected capacity change from 0 to 512 [ 61.997628][ T5274] EXT4-fs error (device loop3): __ext4_iget:5025: inode #2: block 3: comm syz.3.629: invalid block [ 62.020080][ T5274] EXT4-fs (loop3): Remounting filesystem read-only [ 62.026925][ T5274] EXT4-fs (loop3): get root inode failed [ 62.032721][ T5274] EXT4-fs (loop3): mount failed [ 62.086718][ T5280] netlink: 'syz.2.631': attribute type 10 has an invalid length. [ 62.240663][ T5283] loop2: detected capacity change from 0 to 1024 [ 62.276565][ T5283] EXT4-fs: Ignoring removed orlov option [ 62.313997][ T5283] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.354035][ T5283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.439321][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.958108][ T5309] pim6reg1: entered promiscuous mode [ 62.963505][ T5309] pim6reg1: entered allmulticast mode [ 63.310292][ T5321] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.646'. [ 63.357553][ T5317] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.646'. [ 63.372179][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 63.372254][ T29] audit: type=1326 audit(1747276222.208:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.401960][ T29] audit: type=1326 audit(1747276222.208:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.426467][ T29] audit: type=1326 audit(1747276222.258:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.449946][ T29] audit: type=1326 audit(1747276222.258:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.473507][ T29] audit: type=1326 audit(1747276222.258:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.497008][ T29] audit: type=1326 audit(1747276222.258:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.622292][ T29] audit: type=1326 audit(1747276222.258:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.645756][ T29] audit: type=1326 audit(1747276222.348:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050997e969 code=0x7ffc0000 [ 63.688027][ T29] audit: type=1400 audit(1747276222.508:1145): avc: denied { read } for pid=5330 comm="syz.4.649" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.710938][ T29] audit: type=1400 audit(1747276222.508:1146): avc: denied { open } for pid=5330 comm="syz.4.649" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.918418][ T5344] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 63.962922][ T5349] lo speed is unknown, defaulting to 1000 [ 63.981741][ T5350] loop4: detected capacity change from 0 to 2048 [ 64.073977][ T5350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.114916][ T5350] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.139633][ T5350] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 64.152096][ T5350] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.152096][ T5350] [ 64.161906][ T5350] EXT4-fs (loop4): Total free blocks count 0 [ 64.167998][ T5350] EXT4-fs (loop4): Free/Dirty block details [ 64.174026][ T5350] EXT4-fs (loop4): free_blocks=2415919104 [ 64.179877][ T5350] EXT4-fs (loop4): dirty_blocks=48 [ 64.185063][ T5350] EXT4-fs (loop4): Block reservation details [ 64.191127][ T5350] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 64.206061][ T5358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.220745][ T5358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.267755][ T5367] loop2: detected capacity change from 0 to 512 [ 64.290862][ T5367] EXT4-fs: Ignoring removed orlov option [ 64.298520][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.311345][ T5367] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.663: casefold flag without casefold feature [ 64.360778][ T5367] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.663: couldn't read orphan inode 15 (err -117) [ 64.387828][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.489938][ T5379] tmpfs: Unknown parameter '' [ 64.521578][ T5358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.534200][ T5358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.549147][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.608160][ T5382] lo speed is unknown, defaulting to 1000 [ 64.660455][ T5394] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 64.700724][ T5358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.712024][ T5358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.919851][ T5358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.930642][ T5358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.984744][ T5404] loop3: detected capacity change from 0 to 512 [ 64.999265][ T5358] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.007597][ T5358] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.018894][ T5358] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.019340][ T5404] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.674: Failed to acquire dquot type 1 [ 65.027140][ T5358] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.039946][ T5404] EXT4-fs (loop3): 1 truncate cleaned up [ 65.055505][ T5404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.068355][ T5404] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.109425][ T5358] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.117820][ T5358] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.126367][ T5404] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.129672][ T5358] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.143051][ T5358] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.171441][ T5404] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 65.205513][ T5404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.674: bg 0: block 248: padding at end of block bitmap is not set [ 65.262780][ T5404] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.674: Failed to acquire dquot type 1 [ 65.275291][ T5404] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 65.300421][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.424640][ T5417] loop3: detected capacity change from 0 to 2048 [ 65.509440][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.763388][ T5417] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.794971][ T5417] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 65.807464][ T5417] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.807464][ T5417] [ 65.817375][ T5417] EXT4-fs (loop3): Total free blocks count 0 [ 65.823413][ T5417] EXT4-fs (loop3): Free/Dirty block details [ 65.829328][ T5417] EXT4-fs (loop3): free_blocks=2415919104 [ 65.835249][ T5417] EXT4-fs (loop3): dirty_blocks=48 [ 65.840398][ T5417] EXT4-fs (loop3): Block reservation details [ 65.846527][ T5417] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 65.871166][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.065331][ T5444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.077983][ T5444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.164381][ T5450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 66.173423][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 66.283059][ T5444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.310795][ T5444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.491030][ T5444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.505217][ T5444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.831798][ T5444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.842216][ T5444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.918537][ T5444] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.927012][ T5444] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.955006][ T5444] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.963466][ T5444] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.979894][ T5444] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.988173][ T5444] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.001545][ T5444] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.010216][ T5444] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101225][ T5501] netlink: 96 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.122037][ T5501] netlink: 'syz.1.704': attribute type 5 has an invalid length. [ 67.129836][ T5501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.919630][ T5535] pim6reg1: entered promiscuous mode [ 67.925186][ T5535] pim6reg1: entered allmulticast mode [ 69.428069][ T5573] loop2: detected capacity change from 0 to 1024 [ 69.435462][ T5573] EXT4-fs: Ignoring removed orlov option [ 69.441264][ T5573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.480046][ T5573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.522830][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.555555][ T5581] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.565515][ T5581] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.613814][ T5581] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.623731][ T5581] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.683855][ T5581] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.693992][ T5581] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.734215][ T5581] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.744058][ T5581] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.797732][ T5581] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.806162][ T5581] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.817565][ T5581] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.825864][ T5581] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.836993][ T5581] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.845359][ T5581] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.856759][ T5581] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.865098][ T5581] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.911052][ T5587] lo speed is unknown, defaulting to 1000 [ 69.922329][ T5585] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 69.930357][ T5585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.735'. [ 69.994977][ T5591] loop4: detected capacity change from 0 to 512 [ 70.030611][ T5591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.735: bg 0: block 393: padding at end of block bitmap is not set [ 70.046025][ T5591] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 70.055467][ T5591] EXT4-fs (loop4): 2 truncates cleaned up [ 70.062881][ T5591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.125388][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.137314][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 70.137331][ T29] audit: type=1326 audit(1747276228.968:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.176747][ T29] audit: type=1326 audit(1747276228.998:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.200831][ T29] audit: type=1326 audit(1747276228.998:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.224367][ T29] audit: type=1326 audit(1747276228.998:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.247928][ T29] audit: type=1326 audit(1747276228.998:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.271333][ T29] audit: type=1326 audit(1747276228.998:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.294775][ T29] audit: type=1326 audit(1747276228.998:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.318327][ T29] audit: type=1326 audit(1747276228.998:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.341793][ T29] audit: type=1326 audit(1747276228.998:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.365545][ T29] audit: type=1326 audit(1747276228.998:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f61df33e969 code=0x7ffc0000 [ 70.588089][ T5609] pim6reg1: entered promiscuous mode [ 70.593578][ T5609] pim6reg1: entered allmulticast mode [ 70.604821][ T3822] team0: Port device team_slave_0 removed [ 70.904364][ T5635] loop4: detected capacity change from 0 to 1024 [ 70.923450][ T5635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.947829][ T5635] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 71.042155][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.168919][ T5663] pim6reg1: entered promiscuous mode [ 71.174337][ T5663] pim6reg1: entered allmulticast mode [ 71.331061][ T5695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.757'. [ 71.567316][ T5720] pim6reg1: entered promiscuous mode [ 71.572802][ T5720] pim6reg1: entered allmulticast mode [ 71.582632][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 71.607072][ T5725] netlink: 'syz.0.769': attribute type 39 has an invalid length. [ 71.608819][ T5726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5726 comm=syz.1.770 [ 71.819638][ T5735] netlink: 44 bytes leftover after parsing attributes in process `syz.0.775'. [ 71.902547][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.305451][ T5767] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 72.313235][ T5767] netlink: 224 bytes leftover after parsing attributes in process `syz.3.795'. [ 72.326711][ T5767] loop3: detected capacity change from 0 to 512 [ 72.338597][ T5767] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.795: bg 0: block 393: padding at end of block bitmap is not set [ 72.358682][ T5767] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.368298][ T5767] EXT4-fs (loop3): 2 truncates cleaned up [ 72.374756][ T5767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.396680][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.860096][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 72.872524][ T5797] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.881602][ T5797] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.890339][ T5797] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.899231][ T5797] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.088375][ T5820] lo speed is unknown, defaulting to 1000 [ 73.561685][ T482] team0: Port device team_slave_0 removed [ 73.621728][ T5829] loop3: detected capacity change from 0 to 1024 [ 73.638713][ T5829] EXT4-fs: Ignoring removed orlov option [ 73.658239][ T5829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.934084][ T5852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.813'. [ 73.943252][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 74.106568][ T5860] loop2: detected capacity change from 0 to 1024 [ 74.117396][ T5860] EXT4-fs: Ignoring removed nobh option [ 74.123139][ T5860] EXT4-fs: Ignoring removed bh option [ 74.164746][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.203371][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.248958][ T5829] ================================================================== [ 74.258135][ T5829] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 74.265282][ T5829] [ 74.267622][ T5829] write to 0xffff88810b027374 of 4 bytes by task 5841 on cpu 0: [ 74.275281][ T5829] xas_set_mark+0x12b/0x140 [ 74.279815][ T5829] __folio_start_writeback+0x1dd/0x430 [ 74.285311][ T5829] ext4_bio_write_folio+0x590/0x9d0 [ 74.290543][ T5829] mpage_process_page_bufs+0x46c/0x5b0 [ 74.296026][ T5829] mpage_prepare_extent_to_map+0x775/0xb80 [ 74.301865][ T5829] ext4_do_writepages+0xa25/0x2270 [ 74.307019][ T5829] ext4_writepages+0x176/0x300 [ 74.311808][ T5829] do_writepages+0x1d5/0x480 [ 74.316452][ T5829] filemap_write_and_wait_range+0x144/0x340 [ 74.322517][ T5829] filemap_invalidate_pages+0xa4/0x1a0 [ 74.328000][ T5829] kiocb_invalidate_pages+0x6e/0x80 [ 74.333249][ T5829] __iomap_dio_rw+0x5d4/0x1250 [ 74.338225][ T5829] iomap_dio_rw+0x40/0x90 [ 74.342596][ T5829] ext4_file_write_iter+0xad9/0xf00 [ 74.347851][ T5829] iter_file_splice_write+0x5ef/0x970 [ 74.353276][ T5829] direct_splice_actor+0x156/0x2a0 [ 74.358428][ T5829] splice_direct_to_actor+0x312/0x680 [ 74.363839][ T5829] do_splice_direct+0xda/0x150 [ 74.368737][ T5829] do_sendfile+0x380/0x640 [ 74.373243][ T5829] __x64_sys_sendfile64+0x105/0x150 [ 74.378483][ T5829] x64_sys_call+0xb39/0x2fb0 [ 74.383100][ T5829] do_syscall_64+0xd0/0x1a0 [ 74.387653][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.393575][ T5829] [ 74.395919][ T5829] read to 0xffff88810b027374 of 4 bytes by task 5829 on cpu 1: [ 74.403572][ T5829] xas_find_marked+0x5dc/0x620 [ 74.408384][ T5829] find_get_entry+0x5d/0x380 [ 74.413010][ T5829] filemap_get_folios_tag+0x92/0x210 [ 74.418372][ T5829] mpage_prepare_extent_to_map+0x330/0xb80 [ 74.424308][ T5829] ext4_do_writepages+0xa25/0x2270 [ 74.429469][ T5829] ext4_writepages+0x176/0x300 [ 74.434263][ T5829] do_writepages+0x1d5/0x480 [ 74.438954][ T5829] file_write_and_wait_range+0x156/0x2c0 [ 74.444744][ T5829] generic_buffers_fsync_noflush+0x45/0x120 [ 74.450915][ T5829] ext4_sync_file+0x1ab/0x690 [ 74.455635][ T5829] vfs_fsync_range+0x10d/0x130 [ 74.460440][ T5829] ext4_buffered_write_iter+0x34f/0x3c0 [ 74.466108][ T5829] ext4_file_write_iter+0xdbf/0xf00 [ 74.471633][ T5829] iter_file_splice_write+0x5ef/0x970 [ 74.477325][ T5829] direct_splice_actor+0x156/0x2a0 [ 74.482492][ T5829] splice_direct_to_actor+0x312/0x680 [ 74.487907][ T5829] do_splice_direct+0xda/0x150 [ 74.493416][ T5829] do_sendfile+0x380/0x640 [ 74.497867][ T5829] __x64_sys_sendfile64+0x105/0x150 [ 74.503221][ T5829] x64_sys_call+0xb39/0x2fb0 [ 74.507848][ T5829] do_syscall_64+0xd0/0x1a0 [ 74.512398][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.518339][ T5829] [ 74.520686][ T5829] value changed: 0x0a000021 -> 0x04000021 [ 74.526441][ T5829] [ 74.528797][ T5829] Reported by Kernel Concurrency Sanitizer on: [ 74.534978][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz.3.807 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 74.547673][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 74.557752][ T5829] ================================================================== [ 74.643367][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.