last executing test programs: 1.428982686s ago: executing program 1 (id=1161): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @remote, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x2, @remote, 'gre0\x00'}}, 0x1e) 1.33660297s ago: executing program 1 (id=1163): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1.33623854s ago: executing program 3 (id=1164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) close(r1) 1.33601088s ago: executing program 1 (id=1165): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4000000}, 0x1c) 1.33574791s ago: executing program 1 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0103feffffff0000000001"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x850) 1.311198331s ago: executing program 1 (id=1167): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000580)={{r1, r2/1000+10000}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1.292374112s ago: executing program 3 (id=1168): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x10080, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.052581833s ago: executing program 4 (id=1174): r0 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.024054344s ago: executing program 2 (id=1175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000040000180000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1.011334365s ago: executing program 4 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 952.652237ms ago: executing program 2 (id=1177): syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 952.361487ms ago: executing program 4 (id=1179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 935.646817ms ago: executing program 4 (id=1180): bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 848.648742ms ago: executing program 4 (id=1182): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}, {r0, 0x18}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, 0x0) socket$kcm(0x10, 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 736.650576ms ago: executing program 2 (id=1187): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) 646.897461ms ago: executing program 3 (id=1192): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 584.624923ms ago: executing program 3 (id=1193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 583.899964ms ago: executing program 0 (id=1196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r1, 0x0, 0x0) 570.641034ms ago: executing program 0 (id=1197): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 552.551185ms ago: executing program 0 (id=1198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xc}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 493.804727ms ago: executing program 2 (id=1199): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 493.481997ms ago: executing program 0 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) 493.213347ms ago: executing program 2 (id=1201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) 492.932037ms ago: executing program 0 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000002600)={&(0x7f0000002400)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_retopts={{0x10}}], 0x10}, 0x4080) 492.539007ms ago: executing program 2 (id=1203): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x10080, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 410.310691ms ago: executing program 0 (id=1204): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4) 409.961841ms ago: executing program 3 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 409.693041ms ago: executing program 1 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 393.270362ms ago: executing program 3 (id=1207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) close(r1) 0s ago: executing program 4 (id=1208): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 26.262147][ T29] audit: type=1400 audit(1763760840.796:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.285100][ T29] audit: type=1400 audit(1763760840.816:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.285806][ T3305] cgroup: Unknown subsys name 'net' [ 26.312781][ T29] audit: type=1400 audit(1763760840.846:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.470321][ T3305] cgroup: Unknown subsys name 'cpuset' [ 26.476437][ T3305] cgroup: Unknown subsys name 'rlimit' [ 26.585394][ T29] audit: type=1400 audit(1763760841.116:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.613328][ T29] audit: type=1400 audit(1763760841.116:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.633966][ T29] audit: type=1400 audit(1763760841.116:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.647070][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.654407][ T29] audit: type=1400 audit(1763760841.116:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.683155][ T29] audit: type=1400 audit(1763760841.136:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.693297][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.708008][ T29] audit: type=1400 audit(1763760841.146:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.740044][ T29] audit: type=1400 audit(1763760841.206:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.521580][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.597552][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.623273][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.638969][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.646132][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.653359][ T3315] bridge_slave_0: entered allmulticast mode [ 28.659710][ T3315] bridge_slave_0: entered promiscuous mode [ 28.686260][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.693384][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.700700][ T3315] bridge_slave_1: entered allmulticast mode [ 28.706962][ T3315] bridge_slave_1: entered promiscuous mode [ 28.727400][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.746154][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.764504][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 28.774176][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.812194][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.819402][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.826606][ T3321] bridge_slave_0: entered allmulticast mode [ 28.833075][ T3321] bridge_slave_0: entered promiscuous mode [ 28.847824][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.854937][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.862082][ T3318] bridge_slave_0: entered allmulticast mode [ 28.868520][ T3318] bridge_slave_0: entered promiscuous mode [ 28.877221][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.884298][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.891470][ T3321] bridge_slave_1: entered allmulticast mode [ 28.897759][ T3321] bridge_slave_1: entered promiscuous mode [ 28.908879][ T3315] team0: Port device team_slave_0 added [ 28.916694][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.923787][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.930938][ T3318] bridge_slave_1: entered allmulticast mode [ 28.937187][ T3318] bridge_slave_1: entered promiscuous mode [ 28.950656][ T3315] team0: Port device team_slave_1 added [ 28.976312][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.992799][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.006916][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.025284][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.042773][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.049879][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.075833][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.095481][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.102573][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.109846][ T3314] bridge_slave_0: entered allmulticast mode [ 29.116180][ T3314] bridge_slave_0: entered promiscuous mode [ 29.127134][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.134123][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.160020][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.173127][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.180281][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.187381][ T3323] bridge_slave_0: entered allmulticast mode [ 29.193821][ T3323] bridge_slave_0: entered promiscuous mode [ 29.205011][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.212124][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.219388][ T3314] bridge_slave_1: entered allmulticast mode [ 29.225819][ T3314] bridge_slave_1: entered promiscuous mode [ 29.232575][ T3321] team0: Port device team_slave_0 added [ 29.250258][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.259575][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.266752][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.273932][ T3323] bridge_slave_1: entered allmulticast mode [ 29.280457][ T3323] bridge_slave_1: entered promiscuous mode [ 29.292652][ T3318] team0: Port device team_slave_0 added [ 29.299093][ T3321] team0: Port device team_slave_1 added [ 29.311799][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.326716][ T3318] team0: Port device team_slave_1 added [ 29.347447][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.360877][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.367905][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.393854][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.415825][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.430076][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.437036][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.463057][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.476011][ T3315] hsr_slave_0: entered promiscuous mode [ 29.482144][ T3315] hsr_slave_1: entered promiscuous mode [ 29.488703][ T3314] team0: Port device team_slave_0 added [ 29.499205][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.506217][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.532192][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.552644][ T3314] team0: Port device team_slave_1 added [ 29.562974][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.569988][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.595957][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.626602][ T3323] team0: Port device team_slave_0 added [ 29.635487][ T3323] team0: Port device team_slave_1 added [ 29.650844][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.657805][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.683795][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.695244][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.702229][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.728320][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.745285][ T3321] hsr_slave_0: entered promiscuous mode [ 29.751295][ T3321] hsr_slave_1: entered promiscuous mode [ 29.757168][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 29.762915][ T3321] Cannot create hsr debugfs directory [ 29.790197][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.797153][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.823152][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.847172][ T3314] hsr_slave_0: entered promiscuous mode [ 29.853451][ T3314] hsr_slave_1: entered promiscuous mode [ 29.859280][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.865000][ T3314] Cannot create hsr debugfs directory [ 29.875790][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.882764][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.908658][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.923587][ T3318] hsr_slave_0: entered promiscuous mode [ 29.929566][ T3318] hsr_slave_1: entered promiscuous mode [ 29.935442][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 29.941164][ T3318] Cannot create hsr debugfs directory [ 30.030758][ T3323] hsr_slave_0: entered promiscuous mode [ 30.036631][ T3323] hsr_slave_1: entered promiscuous mode [ 30.042561][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 30.048277][ T3323] Cannot create hsr debugfs directory [ 30.146600][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.155291][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.174302][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.182960][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.204117][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.213306][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.225278][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.233732][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.259943][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.268561][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.279582][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.288647][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.320650][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.329430][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.338311][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.347838][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.379902][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.388568][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.398000][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.411842][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.443925][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.467841][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.478128][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.485196][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.499291][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.506379][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.526064][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.559471][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.570529][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.579036][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.589152][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.604550][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.615416][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.625883][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.633018][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.645281][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.655728][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.662880][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.671467][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.678543][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.687143][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.694207][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.709338][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.719754][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.745962][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.756417][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.774596][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.781686][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.790299][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.797332][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.810915][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.817962][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.842923][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.850048][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.874498][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.893916][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.904407][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.928821][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.952589][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.032060][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.060579][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.077000][ T3315] veth0_vlan: entered promiscuous mode [ 31.096818][ T3315] veth1_vlan: entered promiscuous mode [ 31.124684][ T3314] veth0_vlan: entered promiscuous mode [ 31.133859][ T3315] veth0_macvtap: entered promiscuous mode [ 31.142114][ T3315] veth1_macvtap: entered promiscuous mode [ 31.150403][ T3314] veth1_vlan: entered promiscuous mode [ 31.162601][ T3323] veth0_vlan: entered promiscuous mode [ 31.190782][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.201126][ T3323] veth1_vlan: entered promiscuous mode [ 31.213351][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.236553][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.245668][ T3314] veth0_macvtap: entered promiscuous mode [ 31.253718][ T3314] veth1_macvtap: entered promiscuous mode [ 31.264672][ T3318] veth0_vlan: entered promiscuous mode [ 31.270716][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.279482][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.288740][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.303616][ T3318] veth1_vlan: entered promiscuous mode [ 31.324233][ T3323] veth0_macvtap: entered promiscuous mode [ 31.333797][ T3323] veth1_macvtap: entered promiscuous mode [ 31.343113][ T3321] veth0_vlan: entered promiscuous mode [ 31.349529][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.362180][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.370822][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.383659][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.383669][ T29] audit: type=1400 audit(1763760845.916:81): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.mXU9NS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.388414][ T3321] veth1_vlan: entered promiscuous mode [ 31.399890][ T29] audit: type=1400 audit(1763760845.916:82): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.417438][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.419350][ T29] audit: type=1400 audit(1763760845.916:83): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.mXU9NS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.444774][ T3318] veth0_macvtap: entered promiscuous mode [ 31.448465][ T29] audit: type=1400 audit(1763760845.916:84): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.501016][ T29] audit: type=1400 audit(1763760845.916:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.mXU9NS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.527664][ T29] audit: type=1400 audit(1763760845.916:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.mXU9NS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.555191][ T29] audit: type=1400 audit(1763760845.916:87): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.575288][ T29] audit: type=1400 audit(1763760846.016:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.598035][ T29] audit: type=1400 audit(1763760846.016:89): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=5244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.622486][ T3318] veth1_macvtap: entered promiscuous mode [ 31.634379][ T263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.637109][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.661762][ T3321] veth0_macvtap: entered promiscuous mode [ 31.669043][ T3321] veth1_macvtap: entered promiscuous mode [ 31.680381][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.687896][ T263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.697237][ T263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.713163][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.721908][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.729833][ T263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.732188][ T29] audit: type=1400 audit(1763760846.256:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.781973][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.799119][ T263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.846977][ T263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.877802][ T263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.904018][ T263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943532][ T263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943573][ T263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943603][ T263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943690][ T263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943719][ T263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943745][ T263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943822][ T263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943872][ T263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.020574][ T3510] 9pnet_fd: Insufficient options for proto=fd [ 32.174850][ T3528] loop4: detected capacity change from 0 to 128 [ 32.190715][ T3528] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.233174][ T3528] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.316832][ T41] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.344339][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 32.362582][ T3535] Zero length message leads to an empty skb [ 32.401424][ T3539] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 32.409636][ T3539] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 32.442770][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 32.458577][ T3549] loop1: detected capacity change from 0 to 1024 [ 32.466689][ T3549] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.492682][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.551288][ T3559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26'. [ 32.568396][ T3549] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.608881][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.682165][ T3568] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 32.699040][ T3568] vhci_hcd: invalid port number 96 [ 32.704232][ T3568] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 32.764059][ T3579] Illegal XDP return value 4051453836 on prog (id 27) dev N/A, expect packet loss! [ 32.989465][ T3599] netlink: 'syz.2.44': attribute type 2 has an invalid length. [ 33.042233][ T3602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 33.060679][ T3602] IPVS: Error connecting to the multicast addr [ 33.098820][ T41] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 33.111631][ T41] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 33.124605][ T3609] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.159183][ T3616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3616 comm=syz.1.52 [ 33.184779][ T41] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 33.279752][ T3630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.304204][ T3635] syz.2.60 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.328502][ T3637] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.431769][ T3647] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.438173][ T263] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.502140][ T3661] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3661 comm=syz.2.70 [ 33.669335][ T3673] loop2: detected capacity change from 0 to 2048 [ 33.711028][ T3502] loop2: p1 < > p4 [ 33.715787][ T3502] loop2: p4 size 8388608 extends beyond EOD, truncated [ 33.725733][ T3673] loop2: p1 < > p4 [ 33.730374][ T3673] loop2: p4 size 8388608 extends beyond EOD, truncated [ 33.842493][ T3678] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.937930][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 33.947785][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 34.006644][ T3693] loop2: detected capacity change from 0 to 128 [ 34.016400][ T3693] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.029343][ T3693] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.085186][ T3700] loop3: detected capacity change from 0 to 128 [ 34.093153][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.110618][ T3700] FAT-fs (loop3): Directory bread(block 32) failed [ 34.117161][ T3700] FAT-fs (loop3): Directory bread(block 33) failed [ 34.124161][ T3700] FAT-fs (loop3): Directory bread(block 34) failed [ 34.130796][ T3700] FAT-fs (loop3): Directory bread(block 35) failed [ 34.137456][ T3700] FAT-fs (loop3): Directory bread(block 36) failed [ 34.144075][ T3700] FAT-fs (loop3): Directory bread(block 37) failed [ 34.150758][ T3700] FAT-fs (loop3): Directory bread(block 38) failed [ 34.157252][ T3700] FAT-fs (loop3): Directory bread(block 39) failed [ 34.163967][ T3700] FAT-fs (loop3): Directory bread(block 40) failed [ 34.170521][ T3700] FAT-fs (loop3): Directory bread(block 41) failed [ 34.218289][ T3700] syz.3.88: attempt to access beyond end of device [ 34.218289][ T3700] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 34.231672][ T3700] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 34.239831][ T3700] FAT-fs (loop3): Filesystem has been set read-only [ 34.326710][ T3707] loop2: detected capacity change from 0 to 256 [ 34.333445][ T3707] vfat: Unknown parameter ')՝"' [ 34.793011][ T3609] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.803382][ T3609] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 34.872341][ T3630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.912528][ T3609] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.922971][ T3609] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 34.966971][ T3630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.986010][ T3758] mmap: syz.2.113 (3758) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.019374][ T3609] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.029778][ T3609] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 35.114707][ T3630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.152016][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 35.160357][ T41] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 35.168711][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 35.177088][ T41] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 35.190692][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 35.198985][ T41] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 35.207288][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 35.215564][ T41] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 35.235025][ T3772] capability: warning: `syz.3.118' uses deprecated v2 capabilities in a way that may be insecure [ 35.248021][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.249848][ T3771] hub 5-0:1.0: USB hub found [ 35.260206][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.274250][ T1700] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.286347][ T1700] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.289844][ T3771] hub 5-0:1.0: 8 ports detected [ 35.439299][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.451076][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.470099][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 35.478916][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.516282][ T3787] serio: Serial port ptm0 [ 35.534470][ T3792] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 35.795632][ T3811] loop4: detected capacity change from 0 to 8192 [ 35.849816][ T3821] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 35.872278][ T3821] team0: Port device dummy0 added [ 35.892853][ T3821] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 35.913634][ T3821] team0: Port device dummy0 removed [ 35.924286][ T3821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.953700][ T3823] IPv6: Can't replace route, no match found [ 35.990882][ T3821] syz.2.136 (3821) used greatest stack depth: 10688 bytes left [ 36.114980][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 36.192734][ T3848] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.200834][ T3848] SELinux: failed to load policy [ 36.215604][ T3850] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 36.582859][ T3877] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 36.591979][ T3874] IPVS: stopping master sync thread 3877 ... [ 36.673378][ T3885] loop1: detected capacity change from 0 to 2048 [ 36.712327][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.729350][ T3885] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.729931][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 36.729943][ T29] audit: type=1400 audit(1763760851.256:288): avc: denied { ioctl } for pid=3884 comm="syz.1.165" path="/19/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.745320][ T3885] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.788030][ T3885] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.788030][ T3885] [ 36.797717][ T3885] EXT4-fs (loop1): Total free blocks count 0 [ 36.803933][ T3885] EXT4-fs (loop1): Free/Dirty block details [ 36.809913][ T3885] EXT4-fs (loop1): free_blocks=2415919504 [ 36.815740][ T3885] EXT4-fs (loop1): dirty_blocks=32 [ 36.820903][ T3885] EXT4-fs (loop1): Block reservation details [ 36.826878][ T3885] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 36.864740][ T29] audit: type=1400 audit(1763760851.396:289): avc: denied { relabelfrom } for pid=3898 comm="+}[@" name="NETLINK" dev="sockfs" ino=5935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.888824][ T29] audit: type=1400 audit(1763760851.396:290): avc: denied { relabelto } for pid=3898 comm="+}[@" name="NETLINK" dev="sockfs" ino=5935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 36.970464][ T29] audit: type=1326 audit(1763760851.506:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7754b8f749 code=0x7ffc0000 [ 36.994048][ T3903] loop3: detected capacity change from 0 to 1024 [ 36.996330][ T3903] ======================================================= [ 36.996330][ T3903] WARNING: The mand mount option has been deprecated and [ 36.996330][ T3903] and is ignored by this kernel. Remove the mand [ 36.996330][ T3903] option from the mount to silence this warning. [ 36.996330][ T3903] ======================================================= [ 37.001436][ T29] audit: type=1326 audit(1763760851.506:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7754b8f749 code=0x7ffc0000 [ 37.059440][ T29] audit: type=1326 audit(1763760851.506:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7754b8f749 code=0x7ffc0000 [ 37.087854][ T3903] EXT4-fs: Ignoring removed bh option [ 37.182229][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.247841][ T3903] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.171: Allocating blocks 385-513 which overlap fs metadata [ 37.262061][ T29] audit: type=1400 audit(1763760851.776:294): avc: denied { map } for pid=3902 comm="syz.3.171" path="/42/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.284853][ T29] audit: type=1400 audit(1763760851.776:295): avc: denied { execute } for pid=3902 comm="syz.3.171" path="/42/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.330954][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 37.339944][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 37.351853][ T3903] EXT4-fs (loop3): pa ffff88810719f070: logic 16, phys. 129, len 24 [ 37.354732][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 37.359897][ T3903] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 37.368649][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 37.407075][ T29] audit: type=1400 audit(1763760851.886:296): avc: denied { append } for pid=3902 comm="syz.3.171" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.517079][ T3903] syz.3.171 (3903) used greatest stack depth: 10328 bytes left [ 37.525634][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.555816][ T3885] syz.1.165 (3885) used greatest stack depth: 10296 bytes left [ 37.615895][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 37.624194][ T3933] process 'syz.2.185' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 37.634984][ T29] audit: type=1400 audit(1763760852.146:297): avc: denied { execute } for pid=3932 comm="syz.2.185" name="file1" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.657112][ T3931] netlink: 312 bytes leftover after parsing attributes in process `syz.0.183'. [ 37.657138][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 37.676778][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 38.043298][ T3971] syz.3.203 (3971) used greatest stack depth: 9488 bytes left [ 38.070710][ T3976] team_slave_0: entered promiscuous mode [ 38.076495][ T3976] team_slave_1: entered promiscuous mode [ 38.086771][ T3976] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 38.095497][ T3976] team0: Device macvtap1 is already an upper device of the team interface [ 38.105042][ T3976] team_slave_0: left promiscuous mode [ 38.110466][ T3976] team_slave_1: left promiscuous mode [ 38.125525][ T3980] : renamed from vlan0 (while UP) [ 38.221475][ T3993] xt_hashlimit: max too large, truncated to 1048576 [ 38.236596][ T3993] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 38.261409][ T3999] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 38.273853][ T3999] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 38.329622][ T4007] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.220'. [ 38.339209][ T4007] netlink: zone id is out of range [ 38.344447][ T4007] netlink: zone id is out of range [ 38.350255][ T4007] netlink: zone id is out of range [ 38.355468][ T4007] netlink: zone id is out of range [ 38.362504][ T4007] netlink: zone id is out of range [ 38.367831][ T4007] netlink: zone id is out of range [ 38.374805][ T4007] netlink: zone id is out of range [ 38.380384][ T4007] netlink: zone id is out of range [ 38.385499][ T4007] netlink: zone id is out of range [ 38.391467][ T4007] netlink: zone id is out of range [ 38.432255][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 38.759915][ T4113] hub 9-0:1.0: USB hub found [ 38.768834][ T4113] hub 9-0:1.0: 8 ports detected [ 39.137814][ C1] vcan0: j1939_tp_rxtimer: 0xffff888100154600: rx timeout, send abort [ 39.410519][ T2968] kernel write not supported for file bpf-map (pid: 2968 comm: kworker/1:2) [ 39.637851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104c2de00: rx timeout, send abort [ 39.646118][ C1] vcan0: j1939_tp_rxtimer: 0xffff888100154600: abort rx timeout. Force session deactivation [ 39.754554][ T4182] loop1: detected capacity change from 0 to 512 [ 39.789846][ T4182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.811941][ T4182] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.831122][ T4182] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.271: invalid size [ 39.854000][ T4178] loop2: detected capacity change from 0 to 8192 [ 39.859898][ T4182] EXT4-fs (loop1): Remounting filesystem read-only [ 39.896513][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.910533][ T4027] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.925834][ T4191] 9pnet_fd: Insufficient options for proto=fd [ 40.126106][ T4213] loop2: detected capacity change from 0 to 128 [ 40.146131][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104c2de00: abort rx timeout. Force session deactivation [ 40.188949][ T4220] loop2: detected capacity change from 0 to 764 [ 40.305044][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.312542][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.320009][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.327437][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.334918][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.342416][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.349977][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.357426][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.364872][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.372330][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.391021][ T36] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 40.420474][ T4242] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 40.455215][ T4242] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 40.479331][ T4243] fido_id[4243]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.506336][ T4249] lo speed is unknown, defaulting to 1000 [ 40.512385][ T4249] lo speed is unknown, defaulting to 1000 [ 40.521177][ T4249] lo speed is unknown, defaulting to 1000 [ 40.540167][ T4249] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.564389][ T4249] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 40.592079][ T4249] lo speed is unknown, defaulting to 1000 [ 40.612708][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 40.621653][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 40.638226][ T4249] lo speed is unknown, defaulting to 1000 [ 40.649624][ T4249] lo speed is unknown, defaulting to 1000 [ 40.656194][ T4249] lo speed is unknown, defaulting to 1000 [ 40.672981][ T4027] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.681565][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 40.692107][ T4266] loop0: detected capacity change from 0 to 128 [ 40.692601][ T4249] lo speed is unknown, defaulting to 1000 [ 40.698467][ T4027] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.710984][ T4266] EXT4-fs: Ignoring removed nobh option [ 40.718540][ T4027] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.728076][ T4027] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.743914][ T4266] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.775234][ T4266] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.838080][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.847400][ T4045] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.866344][ T4282] SELinux: failed to load policy [ 40.872846][ T4280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.909924][ T4045] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.928509][ T4045] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.995731][ T4299] loop1: detected capacity change from 0 to 512 [ 41.026851][ T4299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.063777][ T4299] ext4 filesystem being mounted at /66/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.090658][ T4299] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.325: corrupted inode contents [ 41.122569][ T4299] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.325: mark_inode_dirty error [ 41.141362][ T4307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.152013][ T4299] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.325: corrupted inode contents [ 41.165795][ T4299] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.325: mark_inode_dirty error [ 41.191990][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.204967][ T4307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.292969][ T4307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.357830][ T4307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.439001][ T4027] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457299][ T4027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.467154][ T4027] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.477914][ T4027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.680718][ T4327] loop3: detected capacity change from 0 to 2048 [ 41.723962][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.766983][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 41.767000][ T29] audit: type=1400 audit(1763760856.296:507): avc: denied { read write } for pid=4326 comm="syz.3.336" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.768262][ T4327] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 41.773400][ T29] audit: type=1400 audit(1763760856.296:508): avc: denied { open } for pid=4326 comm="syz.3.336" path="/82/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.795675][ T4327] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.796204][ T4327] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.804078][ T29] audit: type=1400 audit(1763760856.296:509): avc: denied { ioctl } for pid=4326 comm="syz.3.336" path="/82/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.871321][ T4347] loop0: detected capacity change from 0 to 128 [ 41.872636][ T4327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.872636][ T4327] [ 41.888264][ T4327] EXT4-fs (loop3): Total free blocks count 0 [ 41.894291][ T4327] EXT4-fs (loop3): Free/Dirty block details [ 41.900291][ T4327] EXT4-fs (loop3): free_blocks=2415919504 [ 41.906177][ T4327] EXT4-fs (loop3): dirty_blocks=32 [ 41.911361][ T4327] EXT4-fs (loop3): Block reservation details [ 41.911684][ T4347] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 41.917324][ T4327] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 41.991723][ T4347] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 42.007212][ T29] audit: type=1326 audit(1763760856.546:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.030489][ T29] audit: type=1326 audit(1763760856.546:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.054260][ T29] audit: type=1326 audit(1763760856.546:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.077509][ T29] audit: type=1326 audit(1763760856.546:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.100820][ T29] audit: type=1326 audit(1763760856.546:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.124200][ T29] audit: type=1326 audit(1763760856.546:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.147521][ T29] audit: type=1326 audit(1763760856.546:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 42.222986][ T4343] EXT4-fs (loop0): shut down requested (0) [ 42.293415][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.438755][ T4386] __nla_validate_parse: 1 callbacks suppressed [ 42.438772][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 42.453875][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 42.469770][ T4027] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.478272][ T4027] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.516918][ T4027] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.529621][ T4280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.529941][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 42.540072][ T4280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 42.548828][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 42.598192][ T4027] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.603509][ T4055] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 42.622897][ T4280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.633253][ T4280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 42.644915][ T4382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.664145][ T4382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.722763][ T4280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.733156][ T4280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 42.791724][ T4027] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 42.800132][ T4027] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.818131][ T4027] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 42.826497][ T4027] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.843854][ T4027] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 42.852296][ T4027] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.869848][ T4027] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 42.878131][ T4027] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.886775][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 42.895680][ T4400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 42.904578][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 42.913375][ T4400] netlink: 2 bytes leftover after parsing attributes in process `syz.2.369'. [ 42.923356][ T4400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 43.214642][ T4406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.372'. [ 43.481768][ T4418] netlink: 'syz.4.379': attribute type 12 has an invalid length. [ 43.489561][ T4418] netlink: 'syz.4.379': attribute type 29 has an invalid length. [ 43.497356][ T4418] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 43.806344][ T4456] sd 0:0:1:0: device reset [ 43.828636][ T4458] x_tables: unsorted underflow at hook 4 [ 43.852928][ T4458] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 43.866849][ T4458] bridge1: entered allmulticast mode [ 44.159675][ T4496] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 44.328478][ T4524] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.338390][ T4524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 44.348434][ T4524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 44.422113][ T4524] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.433403][ T4524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 44.444367][ T4524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 44.525529][ T4529] loop1: detected capacity change from 0 to 8192 [ 44.540974][ T4529] FAT-fs (loop1): bogus logical sector size 516 [ 44.547326][ T4529] FAT-fs (loop1): Can't find a valid FAT filesystem [ 44.555233][ T4524] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.565148][ T4524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 44.575107][ T4524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 44.681634][ T4524] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.691485][ T4524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 44.701429][ T4524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 44.756254][ T4055] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.764607][ T4055] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 44.773189][ T4055] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 44.784478][ T4055] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.792826][ T4055] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 44.801148][ T4055] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 44.812146][ T4055] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.820406][ T4055] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 44.828732][ T4055] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 44.840150][ T4045] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.848438][ T4045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 44.856776][ T4045] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 45.217791][ T4556] loop4: detected capacity change from 0 to 8192 [ 45.240146][ T3502] loop4: p1 p2 p3 p4 [ 45.244330][ T3502] loop4: p1 size 196608 extends beyond EOD, truncated [ 45.252029][ T3502] loop4: p2 start 164919041 is beyond EOD, truncated [ 45.258763][ T3502] loop4: p3 size 66846464 extends beyond EOD, truncated [ 45.273041][ T3502] loop4: p4 size 37048832 extends beyond EOD, truncated [ 45.284077][ T4556] loop4: p1 p2 p3 p4 [ 45.288189][ T4556] loop4: p1 size 196608 extends beyond EOD, truncated [ 45.295816][ T4556] loop4: p2 start 164919041 is beyond EOD, truncated [ 45.302610][ T4556] loop4: p3 size 66846464 extends beyond EOD, truncated [ 45.310701][ T4556] loop4: p4 size 37048832 extends beyond EOD, truncated [ 45.404712][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 45.421119][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 45.432716][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.479938][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 45.484130][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.490097][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 45.968905][ T4045] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.978189][ T4045] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.986894][ T4045] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.996583][ T4583] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.006591][ T4583] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.099906][ T4595] loop3: detected capacity change from 0 to 1024 [ 46.222126][ T4595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.235675][ T4595] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.292717][ T4608] netlink: 'syz.4.465': attribute type 27 has an invalid length. [ 46.314071][ T4595] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.460: lblock 0 mapped to illegal pblock 0 (length 6) [ 46.338468][ T4595] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 46.351190][ T4595] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.351190][ T4595] [ 46.362651][ T4595] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 7: comm syz.3.460: lblock 7 mapped to illegal pblock 7 (length 9) [ 46.376278][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.377752][ T4595] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 46.383837][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.395973][ T4595] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.395973][ T4595] [ 46.466732][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.477536][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.526131][ T4050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:34: bg 0: block 3: invalid block bitmap [ 46.539056][ T4050] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 46.551528][ T4050] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.551528][ T4050] [ 46.562347][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.575567][ T4055] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.584304][ T4055] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 46.592885][ T4055] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 46.601871][ T4055] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.610283][ T4055] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 46.618736][ T4055] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 46.638808][ T4055] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.647334][ T4055] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 46.655888][ T4055] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 46.664979][ T4055] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.673723][ T4055] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 46.682401][ T4055] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 46.777787][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 46.777802][ T29] audit: type=1400 audit(1763760861.306:663): avc: denied { mount } for pid=4634 comm="syz.0.477" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.813850][ T4623] loop3: detected capacity change from 0 to 8192 [ 46.839175][ T29] audit: type=1400 audit(1763760861.366:664): avc: denied { unmount } for pid=4634 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.894657][ T4642] loop4: detected capacity change from 0 to 1024 [ 46.910327][ T4642] EXT4-fs: Ignoring removed bh option [ 46.921442][ T4646] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.924954][ T4623] loop3: p1 p2 p3 p4 [ 46.943540][ T4623] loop3: p1 size 196608 extends beyond EOD, truncated [ 46.954240][ T4642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.971178][ T4623] loop3: p2 start 164919041 is beyond EOD, truncated [ 46.977911][ T4623] loop3: p3 size 66846464 extends beyond EOD, truncated [ 46.985809][ T4642] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.481: Allocating blocks 385-513 which overlap fs metadata [ 47.001267][ T29] audit: type=1326 audit(1763760861.536:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 47.002590][ T4642] EXT4-fs (loop4): pa ffff88810719f0e0: logic 16, phys. 129, len 24 [ 47.024634][ T29] audit: type=1326 audit(1763760861.536:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 47.032634][ T4642] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 47.056247][ T29] audit: type=1400 audit(1763760861.536:667): avc: denied { append } for pid=4641 comm="syz.4.481" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.088731][ T4623] loop3: p4 size 37048832 extends beyond EOD, truncated [ 47.095952][ T29] audit: type=1326 audit(1763760861.606:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 47.119230][ T29] audit: type=1326 audit(1763760861.606:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 47.142523][ T29] audit: type=1326 audit(1763760861.606:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 47.167844][ T3005] loop3: p1 p2 p3 p4 [ 47.169877][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.172060][ T3005] loop3: p1 size 196608 extends beyond EOD, truncated [ 47.189370][ T3005] loop3: p2 start 164919041 is beyond EOD, truncated [ 47.196191][ T3005] loop3: p3 size 66846464 extends beyond EOD, truncated [ 47.208850][ T3005] loop3: p4 size 37048832 extends beyond EOD, truncated [ 47.217696][ T29] audit: type=1400 audit(1763760861.746:671): avc: denied { create } for pid=4654 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.254980][ T29] audit: type=1400 audit(1763760861.786:672): avc: denied { sys_admin } for pid=4654 comm="syz.4.485" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.358377][ T4665] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 47.371532][ T4665] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 47.551495][ T4583] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.561320][ T4583] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.571109][ T4583] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.631823][ T4583] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.641622][ T4583] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.651399][ T4583] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.697461][ T4583] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.707339][ T4583] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.717130][ T4583] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.783974][ T4027] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.792344][ T4027] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 47.800666][ T4027] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 47.823160][ T4027] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.831466][ T4027] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 47.839861][ T4027] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 47.855837][ T4027] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.864153][ T4027] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 47.872534][ T4027] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 47.899097][ T4027] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.907419][ T4027] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 47.915826][ T4027] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 48.133290][ T4698] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 48.246708][ T4702] __nla_validate_parse: 2 callbacks suppressed [ 48.246725][ T4702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.503'. [ 48.292601][ T4702] netem: change failed [ 48.879397][ T4719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 48.983466][ T4729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.515'. [ 49.040337][ T4738] loop2: detected capacity change from 0 to 1024 [ 49.052560][ T4738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.071965][ T4738] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.092143][ T4738] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.520: lblock 0 mapped to illegal pblock 0 (length 6) [ 49.106337][ T4738] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 49.118664][ T4738] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.118664][ T4738] [ 49.130722][ T4738] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 7: comm syz.2.520: lblock 7 mapped to illegal pblock 7 (length 9) [ 49.147097][ T4738] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 49.159472][ T4738] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.159472][ T4738] [ 49.184944][ T4066] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:47: bg 0: block 112: padding at end of block bitmap is not set [ 49.201415][ T4066] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 49.213848][ T4066] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.213848][ T4066] [ 49.225043][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.274534][ T4744] loop3: detected capacity change from 0 to 732 [ 49.281832][ T4744] isofs_fill_super: get root inode failed [ 49.300327][ T4743] syz.3.521 (4743) used greatest stack depth: 9376 bytes left [ 49.316631][ T4748] loop1: detected capacity change from 0 to 1764 [ 49.323503][ T4748] iso9660: Unknown parameter 'de' [ 49.547469][ T4763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 49.721733][ T4776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 49.730724][ T4776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 49.789518][ T4779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4779 comm=syz.2.535 [ 49.873388][ T4783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 49.882754][ T4783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 50.416622][ T4817] bond1: Unable to set down delay as MII monitoring is disabled [ 50.426634][ T4817] bond1 (unregistering): Released all slaves [ 50.537804][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 50.618565][ T4842] loop1: detected capacity change from 0 to 128 [ 50.631279][ T4842] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.635186][ T4839] loop3: detected capacity change from 0 to 8192 [ 50.649395][ T4842] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.653045][ T4839] FAT-fs (loop3): bogus logical sector size 516 [ 50.687877][ T4839] FAT-fs (loop3): Can't find a valid FAT filesystem [ 50.724424][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.776793][ T3402] kernel write not supported for file bpf-map (pid: 3402 comm: kworker/1:3) [ 51.328199][ T4879] bridge0: entered allmulticast mode [ 51.337823][ T4879] pim6reg: entered allmulticast mode [ 51.831554][ T4907] loop0: detected capacity change from 0 to 8192 [ 51.841842][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 51.841856][ T29] audit: type=1400 audit(1763760866.376:797): avc: denied { setopt } for pid=4908 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.925031][ T29] audit: type=1400 audit(1763760866.416:798): avc: denied { mount } for pid=4906 comm="syz.0.594" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.969922][ T29] audit: type=1400 audit(1763760866.496:799): avc: denied { listen } for pid=4913 comm="syz.4.597" lport=50871 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.003187][ T4905] netlink: 332 bytes leftover after parsing attributes in process `syz.3.587'. [ 52.026938][ T29] audit: type=1400 audit(1763760866.536:800): avc: denied { accept } for pid=4913 comm="syz.4.597" lport=50871 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.049993][ T29] audit: type=1400 audit(1763760866.556:801): avc: denied { setopt } for pid=4913 comm="syz.4.597" lport=50871 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 52.073630][ T29] audit: type=1400 audit(1763760866.556:802): avc: denied { getopt } for pid=4913 comm="syz.4.597" lport=50871 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 52.097046][ T29] audit: type=1400 audit(1763760866.556:803): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.149675][ T29] audit: type=1400 audit(1763760866.676:804): avc: denied { append } for pid=4919 comm="syz.0.600" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.188302][ T4923] loop4: detected capacity change from 0 to 512 [ 52.209280][ T4923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.227305][ T29] audit: type=1326 audit(1763760866.756:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 52.250734][ T29] audit: type=1326 audit(1763760866.756:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1285caf749 code=0x7ffc0000 [ 52.251007][ T4923] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.347033][ T4923] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm gtp: corrupted inode contents [ 52.360788][ T4923] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm gtp: mark_inode_dirty error [ 52.372927][ T4923] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm gtp: corrupted inode contents [ 52.405470][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.437289][ T4939] tipc: Started in network mode [ 52.442294][ T4939] tipc: Node identity ac14140f, cluster identity 4711 [ 52.456129][ T4939] tipc: New replicast peer: 255.255.255.255 [ 52.462411][ T4939] tipc: Enabled bearer , priority 10 [ 52.510807][ T4066] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.812129][ T4985] loop1: detected capacity change from 0 to 512 [ 52.828656][ T4985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.851366][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.864308][ T4985] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.925607][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.940681][ T4997] loop0: detected capacity change from 0 to 512 [ 52.981218][ T5004] sd 0:0:1:0: device reset [ 52.986839][ T4997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.009044][ T4997] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.035559][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.074352][ T5012] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.086289][ T5012] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.321222][ T2968] hid_parser_main: 8 callbacks suppressed [ 53.321240][ T2968] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 53.334645][ T2968] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 53.343835][ T2968] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 53.352699][ T2968] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 53.400668][ T5056] __nla_validate_parse: 2 callbacks suppressed [ 53.400683][ T5056] netlink: 19 bytes leftover after parsing attributes in process `syz.1.658'. [ 53.408299][ T5051] fido_id[5051]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.579726][ T3423] tipc: Node number set to 2886997007 [ 53.594194][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 53.600935][ T5082] 9pnet: Could not find request transport: f [ 53.615213][ T5084] loop4: detected capacity change from 0 to 512 [ 53.629837][ T5084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.642991][ T5084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.648222][ T5088] sch_fq: defrate 4294967295 ignored. [ 53.659974][ T5084] EXT4-fs (loop4): 1 truncate cleaned up [ 53.666153][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.714023][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.737187][ T5093] loop2: detected capacity change from 0 to 512 [ 53.755292][ T5097] 9pnet: Could not find request transport: f [ 53.772517][ T5093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.787092][ T5093] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.795832][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 53.811522][ T5093] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm gtp: corrupted inode contents [ 53.811771][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 53.823163][ T5093] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm gtp: mark_inode_dirty error [ 53.832226][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 53.842500][ T5093] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm gtp: corrupted inode contents [ 53.851549][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 53.894972][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.048334][ T5119] loop2: detected capacity change from 0 to 256 [ 54.228036][ T5145] syz.2.696 uses obsolete (PF_INET,SOCK_PACKET) [ 54.258556][ T5149] loop0: detected capacity change from 0 to 256 [ 54.298361][ T5153] loop0: detected capacity change from 0 to 512 [ 54.305464][ T5153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.336499][ T5153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.352368][ T5153] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.388698][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.463044][ T5172] hub 2-0:1.0: USB hub found [ 54.467816][ T5172] hub 2-0:1.0: 8 ports detected [ 54.567699][ T5189] loop2: detected capacity change from 0 to 512 [ 54.579095][ T5189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.599820][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 54.605906][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.641485][ T5189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.647750][ T5193] SELinux: failed to load policy [ 54.667891][ T5189] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.715439][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.747835][ T5200] loop2: detected capacity change from 0 to 512 [ 54.762315][ T5200] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.781610][ T5200] EXT4-fs (loop2): invalid journal inode [ 54.792739][ T5200] EXT4-fs (loop2): can't get journal size [ 54.805616][ T5200] EXT4-fs (loop2): 1 truncate cleaned up [ 54.818475][ T5200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.843747][ T5200] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.881522][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.903366][ T5209] loop3: detected capacity change from 0 to 8192 [ 54.961818][ T5217] loop4: detected capacity change from 0 to 1024 [ 54.981444][ T5217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.017106][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.041061][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 55.073946][ T5229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.731'. [ 55.193578][ T5232] hub 2-0:1.0: USB hub found [ 55.198353][ T5232] hub 2-0:1.0: 8 ports detected [ 55.232473][ T5238] No such timeout policy "syz0" [ 55.307099][ T5248] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.739'. [ 55.517604][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 55.555732][ T5280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5280 comm=syz.0.751 [ 55.621253][ T5290] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 55.746127][ T5311] loop0: detected capacity change from 0 to 2048 [ 55.766967][ T5311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.791916][ T5323] binfmt_misc: register: failed to install interpreter file ./file2 [ 55.802463][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.822048][ T5327] net_ratelimit: 2 callbacks suppressed [ 55.822058][ T5327] IPv4: Oversized IP packet from 127.202.26.0 [ 56.138153][ T5364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 56.148169][ T5364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 56.195408][ T5364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 56.205372][ T5364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 56.262777][ T5364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 56.272808][ T5364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 56.311327][ T5364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 56.321301][ T5364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 56.404152][ T5384] loop4: detected capacity change from 0 to 8192 [ 56.409499][ T4073] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.418933][ T4073] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.432839][ T4073] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.441193][ T4073] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.453029][ T4073] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.461363][ T4073] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.472479][ T4073] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.480827][ T4073] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.768644][ T5414] loop1: detected capacity change from 0 to 8192 [ 56.910378][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 56.910395][ T29] audit: type=1326 audit(1763760871.436:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 56.940096][ T29] audit: type=1326 audit(1763760871.436:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 56.979272][ T29] audit: type=1326 audit(1763760871.446:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.002758][ T29] audit: type=1326 audit(1763760871.446:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.026242][ T29] audit: type=1326 audit(1763760871.446:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.049746][ T29] audit: type=1326 audit(1763760871.446:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.073072][ T29] audit: type=1326 audit(1763760871.446:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.096393][ T29] audit: type=1326 audit(1763760871.446:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.119632][ T29] audit: type=1326 audit(1763760871.446:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.142892][ T29] audit: type=1326 audit(1763760871.446:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0570caf749 code=0x7ffc0000 [ 57.224775][ T5457] loop0: detected capacity change from 0 to 512 [ 57.232488][ T5457] EXT4-fs: Ignoring removed i_version option [ 57.238529][ T5457] EXT4-fs: Ignoring removed bh option [ 57.282183][ T5457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.308605][ T5457] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.367649][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.521438][ T5506] SELinux: unknown common  [ 57.539894][ T5506] SELinux: failed to load policy [ 57.606204][ T5520] lo speed is unknown, defaulting to 1000 [ 57.852280][ T5534] loop2: detected capacity change from 0 to 512 [ 57.861181][ T5534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.875761][ T5534] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.889790][ T5534] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #12: comm syz.2.867: Directory hole found for htree leaf block 0 [ 57.913381][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.022776][ T5545] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 58.285130][ T5576] netlink: 'syz.2.886': attribute type 12 has an invalid length. [ 58.430774][ T5602] netlink: 'syz.1.899': attribute type 3 has an invalid length. [ 58.519845][ T5617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.596207][ T5633] netlink: 'syz.2.913': attribute type 2 has an invalid length. [ 58.604134][ T5633] __nla_validate_parse: 9 callbacks suppressed [ 58.604172][ T5633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.913'. [ 58.633743][ T5617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.667555][ T5640] loop1: detected capacity change from 0 to 512 [ 58.678670][ T5617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.697842][ T5640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.710472][ T5640] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.726248][ T5640] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #12: comm syz.1.916: Directory hole found for htree leaf block 0 [ 58.752347][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.795035][ T5617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.891730][ T4049] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.909935][ T4049] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.927506][ T4049] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.936082][ T4049] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.944404][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 59.137867][ T5699] netlink: 204 bytes leftover after parsing attributes in process `syz.4.945'. [ 59.144476][ T5696] loop0: detected capacity change from 0 to 1024 [ 59.164483][ T5696] EXT4-fs: Ignoring removed orlov option [ 59.172643][ T5696] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 59.200125][ T5696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.254733][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.264900][ T5714] loop2: detected capacity change from 0 to 128 [ 59.271631][ T5714] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.290148][ T5714] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.320685][ T4066] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.526634][ T5748] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.644037][ T5768] loop2: detected capacity change from 0 to 512 [ 59.653088][ T5768] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.971: ea_inode with extended attributes [ 59.666902][ T5768] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.971: error while reading EA inode 11 err=-117 [ 59.675167][ T5773] ip6gre1: entered allmulticast mode [ 59.680039][ T5768] EXT4-fs (loop2): 1 orphan inode deleted [ 59.690819][ T5768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.715871][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.762555][ T5786] netlink: 204 bytes leftover after parsing attributes in process `syz.0.978'. [ 60.268893][ T5836] serio: Serial port ttyS3 [ 60.278991][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 60.424140][ T5860] loop1: detected capacity change from 0 to 2048 [ 60.435268][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 60.452287][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.481099][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.650481][ T5888] loop2: detected capacity change from 0 to 8192 [ 60.723468][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 60.732459][ T5897] netlink: 'syz.4.1026': attribute type 15 has an invalid length. [ 60.740346][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 60.780451][ T4066] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.788833][ T4066] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.812327][ T4066] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.839867][ T4066] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.859932][ T5899] lo speed is unknown, defaulting to 1000 [ 61.251863][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 61.260953][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 61.430020][ T5934] lo speed is unknown, defaulting to 1000 [ 61.902396][ T5942] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 61.915862][ T5944] loop4: detected capacity change from 0 to 128 [ 61.930083][ T5944] EXT4-fs: Ignoring removed nobh option [ 61.944979][ T5944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.967877][ T5944] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.982275][ T5951] netlink: 'syz.2.1049': attribute type 6 has an invalid length. [ 61.997246][ T5951] bond1 (unregistering): Released all slaves [ 62.014121][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.029916][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 62.029931][ T29] audit: type=1400 audit(1763760876.566:1160): avc: denied { create } for pid=5953 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.059506][ T29] audit: type=1400 audit(1763760876.566:1161): avc: denied { write } for pid=5953 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.103576][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9b5600: rx timeout, send abort [ 62.111865][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9b5400: rx timeout, send abort [ 62.120185][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9b5600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.134483][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9b5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.151068][ T29] audit: type=1400 audit(1763760876.686:1162): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.173158][ T29] audit: type=1400 audit(1763760876.686:1163): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.173184][ T29] audit: type=1400 audit(1763760876.686:1164): avc: denied { append } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.173244][ T29] audit: type=1400 audit(1763760876.686:1165): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.173264][ T29] audit: type=1400 audit(1763760876.686:1166): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.319428][ T5980] netem: change failed [ 62.368896][ T29] audit: type=1400 audit(1763760876.896:1167): avc: denied { ioctl } for pid=5988 comm="syz.1.1066" path="socket:[13092]" dev="sockfs" ino=13092 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.429575][ T5992] loop0: detected capacity change from 0 to 512 [ 62.439721][ T5992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.448016][ T5992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.465999][ T5992] EXT4-fs (loop0): 1 truncate cleaned up [ 62.472545][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.492102][ T29] audit: type=1400 audit(1763760877.026:1168): avc: denied { create } for pid=5991 comm="syz.0.1067" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.512664][ T29] audit: type=1400 audit(1763760877.026:1169): avc: denied { add_name } for pid=5991 comm="syz.0.1067" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.569646][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.642893][ T6029] netlink: 'syz.2.1084': attribute type 3 has an invalid length. [ 62.882136][ T6064] loop2: detected capacity change from 0 to 1024 [ 62.893001][ T6060] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 62.893417][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.948623][ T6064] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.980178][ T6072] unsupported nla_type 52263 [ 63.025168][ T4073] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:53: lblock 0 mapped to illegal pblock 0 (length 4) [ 63.059656][ T4073] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 63.072238][ T4073] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.072238][ T4073] [ 63.084929][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.144997][ T6098] loop1: detected capacity change from 0 to 128 [ 63.152498][ T6098] EXT4-fs: Ignoring removed nobh option [ 63.161532][ T6098] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.178476][ T6098] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.230978][ T6109] netlink: zone id is out of range [ 63.236129][ T6109] netlink: zone id is out of range [ 63.241615][ T6109] netlink: zone id is out of range [ 63.246746][ T6109] netlink: zone id is out of range [ 63.261515][ T6109] netlink: set zone limit has 8 unknown bytes [ 63.262925][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.295198][ T6113] loop2: detected capacity change from 0 to 1024 [ 63.311989][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.370784][ T6130] loop3: detected capacity change from 0 to 512 [ 63.377172][ T6113] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.403410][ T6133] loop1: detected capacity change from 0 to 128 [ 63.427065][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.436626][ T6130] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.443075][ T6130] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 63.452050][ T6130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 63.466851][ T6130] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1128: attempt to clear invalid blocks 2 len 1 [ 63.481147][ T6130] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1128: invalid indirect mapped block 1819239214 (level 0) [ 63.496895][ T6130] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1128: invalid indirect mapped block 1819239214 (level 1) [ 63.521361][ T6130] EXT4-fs (loop3): 1 truncate cleaned up [ 63.547369][ T6130] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.1128: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 63.572532][ T6145] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.582466][ T6145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 63.592350][ T6145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 63.628923][ T6153] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 63.642178][ T6145] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.652048][ T6145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 63.661935][ T6145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 63.726372][ T6162] loop0: detected capacity change from 0 to 512 [ 63.741844][ T6145] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.751848][ T6145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 63.761779][ T6145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 63.773219][ T6162] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.791146][ T6162] EXT4-fs (loop0): mount failed [ 63.816058][ T6145] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.825966][ T6145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 63.835869][ T6145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 63.849086][ T6171] xt_l2tp: wrong L2TP version: 1 [ 63.917789][ T4049] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.926168][ T4049] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.934636][ T4049] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 63.943185][ T6185] __nla_validate_parse: 7 callbacks suppressed [ 63.943197][ T6185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1153'. [ 63.961681][ T4066] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.969995][ T4066] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.978329][ T4066] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 63.986577][ T6185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1153'. [ 63.999576][ T4066] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.007862][ T4066] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 64.016155][ T4066] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 64.027097][ T4066] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.035390][ T4066] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 64.043689][ T4066] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 64.052965][ T6189] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 64.060778][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 64.219257][ T6201] loop2: detected capacity change from 0 to 512 [ 64.226381][ T6201] EXT4-fs: Ignoring removed bh option [ 64.233011][ T6197] vhci_hcd: invalid port number 96 [ 64.238138][ T6197] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 64.258493][ T6201] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.354228][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'. [ 64.402760][ T6223] loop2: detected capacity change from 0 to 512 [ 64.410432][ T6223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.423822][ T6223] EXT4-fs (loop2): 1 truncate cleaned up [ 64.453558][ T6228] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.494231][ T6228] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.518224][ T6231] loop4: detected capacity change from 0 to 164 [ 64.529123][ T6233] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1172'. [ 64.539254][ T6231] syz.4.1171: attempt to access beyond end of device [ 64.539254][ T6231] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.566410][ T6231] syz.4.1171: attempt to access beyond end of device [ 64.566410][ T6231] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.630072][ T6228] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.691100][ T6228] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.723771][ T6243] loop2: detected capacity change from 0 to 2048 [ 64.780290][ T6243] loop2: p1 < > p4 [ 64.798267][ T6243] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.828954][ T4073] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.842386][ T4073] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.851825][ T6257] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 64.884464][ T4073] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.945898][ C1] hrtimer: interrupt took 37459 ns [ 64.970301][ T4073] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.015418][ T6272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6272 comm=syz.0.1191 [ 65.207533][ T6296] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.217519][ T6296] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 65.245788][ T6300] syz.0.1204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 65.260430][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.0.1204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.260461][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.260514][ T6300] Call Trace: [ 65.260522][ T6300] [ 65.260530][ T6300] __dump_stack+0x1d/0x30 [ 65.260555][ T6300] dump_stack_lvl+0xe8/0x140 [ 65.260613][ T6300] dump_stack+0x15/0x1b [ 65.260632][ T6300] warn_alloc+0x12b/0x1a0 [ 65.260664][ T6300] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 65.260715][ T6300] __vmalloc_node_range_noprof+0x9d/0xed0 [ 65.260745][ T6300] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 65.260777][ T6300] ? slow_avc_audit+0x104/0x140 [ 65.260871][ T6300] ? should_fail_ex+0x30/0x280 [ 65.260899][ T6300] ? xskq_create+0x36/0xe0 [ 65.260949][ T6300] vmalloc_user_noprof+0x7d/0xb0 [ 65.260977][ T6300] ? xskq_create+0x80/0xe0 [ 65.261019][ T6300] xskq_create+0x80/0xe0 [ 65.261050][ T6300] xsk_init_queue+0x95/0xf0 [ 65.261080][ T6300] xsk_setsockopt+0x477/0x640 [ 65.261105][ T6300] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.261134][ T6300] __sys_setsockopt+0x184/0x200 [ 65.261193][ T6300] __x64_sys_setsockopt+0x64/0x80 [ 65.261226][ T6300] x64_sys_call+0x20ec/0x3000 [ 65.261249][ T6300] do_syscall_64+0xd2/0x200 [ 65.261269][ T6300] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.261318][ T6300] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.261350][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.261374][ T6300] RIP: 0033:0x7f532edbf749 [ 65.261391][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.261415][ T6300] RSP: 002b:00007f532d81f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.261470][ T6300] RAX: ffffffffffffffda RBX: 00007f532f015fa0 RCX: 00007f532edbf749 [ 65.261568][ T6300] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 65.261581][ T6300] RBP: 00007f532ee43f91 R08: 0000000000000004 R09: 0000000000000000 [ 65.261623][ T6300] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 65.261635][ T6300] R13: 00007f532f016038 R14: 00007f532f015fa0 R15: 00007fffe4df7448 [ 65.261728][ T6300] [ 65.261742][ T6300] Mem-Info: [ 65.481078][ T6300] active_anon:3602 inactive_anon:3 isolated_anon:0 [ 65.481078][ T6300] active_file:8087 inactive_file:13008 isolated_file:0 [ 65.481078][ T6300] unevictable:0 dirty:293 writeback:0 [ 65.481078][ T6300] slab_reclaimable:3206 slab_unreclaimable:14770 [ 65.481078][ T6300] mapped:28894 shmem:200 pagetables:988 [ 65.481078][ T6300] sec_pagetables:0 bounce:0 [ 65.481078][ T6300] kernel_misc_reclaimable:0 [ 65.481078][ T6300] free:1891458 free_pcp:7970 free_cma:0 [ 65.525878][ T6300] Node 0 active_anon:14408kB inactive_anon:12kB active_file:32348kB inactive_file:52032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115576kB dirty:1172kB writeback:0kB shmem:800kB kernel_stack:4128kB pagetables:3952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 65.553295][ T6300] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.583192][ T6300] lowmem_reserve[]: 0 2881 7859 7859 [ 65.588499][ T6300] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 65.619718][ T6300] lowmem_reserve[]: 0 0 4978 4978 [ 65.624811][ T6300] Node 0 Normal free:4603848kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14408kB inactive_anon:12kB active_file:32348kB inactive_file:52032kB unevictable:0kB writepending:1172kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28248kB local_pcp:15008kB free_cma:0kB [ 65.658001][ T6300] lowmem_reserve[]: 0 0 0 0 [ 65.662591][ T6300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 65.675295][ T6300] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) [ 65.675496][ T2994] ================================================================== [ 65.675520][ T2994] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 65.685888][ T6300] 3*512kB [ 65.693865][ T2994] [ 65.693877][ T2994] write to 0xffffffff86877340 of 8 bytes by task 6300 on cpu 0: [ 65.693892][ T2994] prb_reserve_in_last+0xa96/0xba0 [ 65.693912][ T2994] vprintk_store+0x494/0x860 [ 65.701805][ T6300] (M) [ 65.704809][ T2994] vprintk_emit+0x10d/0x580 [ 65.707131][ T6300] 3*1024kB [ 65.714819][ T2994] vprintk_default+0x26/0x30 [ 65.714841][ T2994] vprintk+0x1d/0x30 [ 65.714863][ T2994] _printk+0x79/0xa0 [ 65.714885][ T2994] __show_mem+0x10b8/0x1460 [ 65.720153][ T6300] (M) [ 65.724633][ T2994] warn_alloc+0x189/0x1a0 [ 65.727292][ T6300] 2*2048kB [ 65.731766][ T2994] __vmalloc_node_range_noprof+0x9d/0xed0 [ 65.731797][ T2994] vmalloc_user_noprof+0x7d/0xb0 [ 65.731830][ T2994] xskq_create+0x80/0xe0 [ 65.734950][ T6300] (M) [ 65.739483][ T2994] xsk_init_queue+0x95/0xf0 [ 65.743388][ T6300] 717*4096kB [ 65.747230][ T2994] xsk_setsockopt+0x477/0x640 [ 65.751748][ T6300] (M) [ 65.754364][ T2994] __sys_setsockopt+0x184/0x200 [ 65.758664][ T6300] = 2946624kB [ 65.761750][ T2994] __x64_sys_setsockopt+0x64/0x80 [ 65.761777][ T2994] x64_sys_call+0x20ec/0x3000 [ 65.767479][ T6300] Node 0 Normal: [ 65.772388][ T2994] do_syscall_64+0xd2/0x200 [ 65.772409][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.772427][ T2994] [ 65.772432][ T2994] read to 0xffffffff86877338 of 16 bytes by task 2994 on cpu 1: [ 65.772446][ T2994] _prb_read_valid+0x1bc/0x920 [ 65.772461][ T2994] prb_read_valid+0x3c/0x60 [ 65.772476][ T2994] syslog_print+0xeb/0x540 [ 65.772493][ T2994] do_syslog+0x52b/0x7e0 [ 65.776721][ T6300] 541*4kB [ 65.779348][ T2994] __x64_sys_syslog+0x41/0x50 [ 65.783853][ T6300] (UME) [ 65.787089][ T2994] x64_sys_call+0x2f45/0x3000 [ 65.791754][ T6300] 290*8kB [ 65.794383][ T2994] do_syscall_64+0xd2/0x200 [ 65.799251][ T6300] (UME) 127*16kB [ 65.802508][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.802527][ T2994] [ 65.802531][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 65.802542][ T2994] CPU: 1 UID: 0 PID: 2994 Comm: klogd Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.807537][ T6300] (UME) 170*32kB [ 65.812185][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.812198][ T2994] ================================================================== [ 65.925672][ T6300] (UME) 108*64kB (UME) 66*128kB (UME) 49*256kB (UME) 32*512kB (UME) 23*1024kB (UME) 11*2048kB (UME) 1099*4096kB (UME) = 4603828kB [ 65.939185][ T6300] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 65.948560][ T6300] 21294 total pagecache pages [ 65.953414][ T6300] 3 pages in swap cache [ 65.957576][ T6300] Free swap = 124984kB [ 65.961754][ T6300] Total swap = 124996kB [ 65.966040][ T6300] 2097051 pages RAM [ 65.969847][ T6300] 0 pages HighMem/MovableOnly [ 65.974576][ T6300] 81087 pages reserved [ 66.021581][ T6296] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 66.031469][ T6296] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 66.081333][ T6296] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 66.091199][ T6296] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 66.131154][ T6296] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 66.140991][ T6296] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 66.174692][ T4032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.183033][ T4032] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 66.194093][ T4032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.202458][ T4032] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 66.213513][ T4032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.221793][ T4032] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 66.232649][ T4032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.241030][ T4032] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0