last executing test programs: 23.942339508s ago: executing program 3 (id=110): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23.891685252s ago: executing program 3 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 23.853626975s ago: executing program 3 (id=115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 23.824385977s ago: executing program 3 (id=116): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 23.453940807s ago: executing program 3 (id=119): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x1300, 0x0) 23.018367573s ago: executing program 3 (id=123): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) 23.003010894s ago: executing program 32 (id=123): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) 1.23269794s ago: executing program 0 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.195886583s ago: executing program 0 (id=666): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) 1.159007826s ago: executing program 0 (id=668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 1.006855218s ago: executing program 5 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 903.643806ms ago: executing program 0 (id=674): recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, 0x20000}, 0x38, 0x10011) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 768.977187ms ago: executing program 5 (id=679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 676.777645ms ago: executing program 5 (id=684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r3, 0x141601) close_range(r2, 0xffffffffffffffff, 0x0) 649.468417ms ago: executing program 5 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_destroy(r3) 645.898647ms ago: executing program 4 (id=687): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c00009191ba4a9b6388d54828a3c3830c42987338a9190197eb172a21b7cfa7523e2b311d1f21fe773c1a557203941edefa8945730f6addf5d620d186e7a427df2c849c4743dde508a71789e24605df9a7108223b334f24b6ef3973fd06e3c8d4d12c"], 0x1, 0x1c8, &(0x7f0000000580)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r2}, 0x18) 612.25918ms ago: executing program 4 (id=689): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f0000ee040001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d1}, 0x4000010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) 565.676024ms ago: executing program 1 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000440)="6af937e6959788", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 536.611216ms ago: executing program 4 (id=693): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) 523.858237ms ago: executing program 2 (id=694): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 512.993828ms ago: executing program 1 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r2, 0xffffffffffffffff, 0x0) 512.485048ms ago: executing program 4 (id=695): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 495.90858ms ago: executing program 4 (id=696): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@barrier_val={'barrier', 0x3d, 0xb82}}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 495.383909ms ago: executing program 2 (id=707): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") r0 = socket(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 491.22274ms ago: executing program 5 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 459.583813ms ago: executing program 1 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) stat(0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 459.012742ms ago: executing program 2 (id=699): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) close(r1) 452.197083ms ago: executing program 1 (id=700): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000340), 0xffffff64) 423.491886ms ago: executing program 2 (id=701): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) setpgid(0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', 0x0) request_key(0x0, 0x0, 0x0, r1) 422.989556ms ago: executing program 5 (id=702): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 382.732039ms ago: executing program 1 (id=703): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 382.019199ms ago: executing program 4 (id=705): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 366.68067ms ago: executing program 2 (id=706): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 294.201626ms ago: executing program 2 (id=708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0xce27, 0x81, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x6}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={r3, 0x5, 0x3ca}, 0x8) 83.992613ms ago: executing program 1 (id=709): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) 15.666298ms ago: executing program 0 (id=710): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x1e000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000280)=0x4000, 0x4) 0s ago: executing program 0 (id=711): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="e5ffffff00000000000000000017", @ANYRES32=0x0], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 23.059170][ T29] audit: type=1400 audit(1755120821.125:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.060073][ T3290] cgroup: Unknown subsys name 'net' [ 23.081905][ T29] audit: type=1400 audit(1755120821.125:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.109211][ T29] audit: type=1400 audit(1755120821.155:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.360555][ T3290] cgroup: Unknown subsys name 'cpuset' [ 23.366652][ T3290] cgroup: Unknown subsys name 'rlimit' [ 23.495775][ T29] audit: type=1400 audit(1755120821.565:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.524450][ T29] audit: type=1400 audit(1755120821.565:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.544974][ T29] audit: type=1400 audit(1755120821.565:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.553750][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.565335][ T29] audit: type=1400 audit(1755120821.565:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.594517][ T29] audit: type=1400 audit(1755120821.585:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.619391][ T29] audit: type=1400 audit(1755120821.585:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.623613][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.642682][ T29] audit: type=1400 audit(1755120821.655:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.735476][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 24.764278][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.849433][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 24.858224][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.865320][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.872566][ T3301] bridge_slave_0: entered allmulticast mode [ 24.878873][ T3301] bridge_slave_0: entered promiscuous mode [ 24.885398][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 24.904963][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.912167][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.919336][ T3301] bridge_slave_1: entered allmulticast mode [ 24.925686][ T3301] bridge_slave_1: entered promiscuous mode [ 24.938559][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.945641][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.952807][ T3302] bridge_slave_0: entered allmulticast mode [ 24.959098][ T3302] bridge_slave_0: entered promiscuous mode [ 24.972607][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 24.985777][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.992893][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.000167][ T3302] bridge_slave_1: entered allmulticast mode [ 25.006566][ T3302] bridge_slave_1: entered promiscuous mode [ 25.033283][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.053913][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.070951][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.093475][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.120936][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.128075][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.136367][ T3299] bridge_slave_0: entered allmulticast mode [ 25.142790][ T3299] bridge_slave_0: entered promiscuous mode [ 25.153418][ T3301] team0: Port device team_slave_0 added [ 25.159105][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.166192][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.173430][ T3307] bridge_slave_0: entered allmulticast mode [ 25.179731][ T3307] bridge_slave_0: entered promiscuous mode [ 25.192493][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.199541][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.206746][ T3299] bridge_slave_1: entered allmulticast mode [ 25.213209][ T3299] bridge_slave_1: entered promiscuous mode [ 25.219863][ T3301] team0: Port device team_slave_1 added [ 25.230000][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.237214][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.245304][ T3307] bridge_slave_1: entered allmulticast mode [ 25.251602][ T3307] bridge_slave_1: entered promiscuous mode [ 25.262185][ T3302] team0: Port device team_slave_0 added [ 25.284684][ T3302] team0: Port device team_slave_1 added [ 25.290583][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.297619][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.304852][ T3300] bridge_slave_0: entered allmulticast mode [ 25.311924][ T3300] bridge_slave_0: entered promiscuous mode [ 25.323045][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.330052][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.355999][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.379175][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.386282][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.393625][ T3300] bridge_slave_1: entered allmulticast mode [ 25.400045][ T3300] bridge_slave_1: entered promiscuous mode [ 25.407335][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.416690][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.423656][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.449542][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.463534][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.472848][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.479817][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.505805][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.522246][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.537393][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.547355][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.554325][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.580257][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.610947][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.625090][ T3299] team0: Port device team_slave_0 added [ 25.635858][ T3307] team0: Port device team_slave_0 added [ 25.642787][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.653717][ T3301] hsr_slave_0: entered promiscuous mode [ 25.659661][ T3301] hsr_slave_1: entered promiscuous mode [ 25.666910][ T3299] team0: Port device team_slave_1 added [ 25.678272][ T3307] team0: Port device team_slave_1 added [ 25.709774][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.716758][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.742653][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.758001][ T3300] team0: Port device team_slave_0 added [ 25.764534][ T3300] team0: Port device team_slave_1 added [ 25.775454][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.782442][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.808375][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.825518][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.832519][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.858484][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.882804][ T3302] hsr_slave_0: entered promiscuous mode [ 25.888680][ T3302] hsr_slave_1: entered promiscuous mode [ 25.894567][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 25.900355][ T3302] Cannot create hsr debugfs directory [ 25.906078][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.913062][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.938944][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.959341][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.966336][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.992351][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.016971][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.024043][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.049998][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.087633][ T3299] hsr_slave_0: entered promiscuous mode [ 26.093644][ T3299] hsr_slave_1: entered promiscuous mode [ 26.099440][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 26.105204][ T3299] Cannot create hsr debugfs directory [ 26.114667][ T3307] hsr_slave_0: entered promiscuous mode [ 26.120697][ T3307] hsr_slave_1: entered promiscuous mode [ 26.126441][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.132193][ T3307] Cannot create hsr debugfs directory [ 26.201311][ T3300] hsr_slave_0: entered promiscuous mode [ 26.207251][ T3300] hsr_slave_1: entered promiscuous mode [ 26.213104][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 26.218816][ T3300] Cannot create hsr debugfs directory [ 26.322494][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.340536][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.351529][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.362112][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.377286][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.386182][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.398729][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.411539][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.432361][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.447686][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.456313][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.466313][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.499920][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.511054][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.522544][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.538711][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.567506][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.576183][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.585449][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.595368][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.608518][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.643851][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.660601][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.675558][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.691449][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.700756][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.707929][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.716396][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.723493][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.743333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.750423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.759091][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.766238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.801881][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.814966][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.833318][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.848924][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.856060][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.866966][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.874064][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.885184][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.902285][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.909366][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.922633][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.935097][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.942243][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.959658][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.966793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.989448][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.996602][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.019484][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.030522][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.049840][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.168852][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.214555][ T3307] veth0_vlan: entered promiscuous mode [ 27.224143][ T3307] veth1_vlan: entered promiscuous mode [ 27.231305][ T3301] veth0_vlan: entered promiscuous mode [ 27.242268][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.263013][ T3307] veth0_macvtap: entered promiscuous mode [ 27.274570][ T3301] veth1_vlan: entered promiscuous mode [ 27.287619][ T3302] veth0_vlan: entered promiscuous mode [ 27.294863][ T3307] veth1_macvtap: entered promiscuous mode [ 27.313651][ T3302] veth1_vlan: entered promiscuous mode [ 27.325959][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.336544][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.361408][ T2311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370570][ T3301] veth0_macvtap: entered promiscuous mode [ 27.378712][ T3299] veth0_vlan: entered promiscuous mode [ 27.386715][ T2311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.398165][ T3299] veth1_vlan: entered promiscuous mode [ 27.413311][ T3302] veth0_macvtap: entered promiscuous mode [ 27.420422][ T3301] veth1_macvtap: entered promiscuous mode [ 27.432628][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.449188][ T3299] veth0_macvtap: entered promiscuous mode [ 27.460586][ T3299] veth1_macvtap: entered promiscuous mode [ 27.470832][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.482116][ T3302] veth1_macvtap: entered promiscuous mode [ 27.496736][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.505281][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.522750][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.531502][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.545457][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.559914][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.569430][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.579884][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.591896][ T3300] veth0_vlan: entered promiscuous mode [ 27.601189][ T2311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.615169][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.618426][ T3300] veth1_vlan: entered promiscuous mode [ 27.637101][ T2311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.659890][ T2311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.669275][ T2311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.687034][ T2311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.704244][ T3300] veth0_macvtap: entered promiscuous mode [ 27.713957][ T2311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.729922][ T3300] veth1_macvtap: entered promiscuous mode [ 27.749684][ T2311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.779925][ T2311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.788924][ T2311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.798505][ T2311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.844906][ T3479] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.851647][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.890998][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.898298][ T3483] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 27.909558][ T2311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.919445][ T2311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.933993][ T2311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.960324][ T2311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.074242][ T3500] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 28.081564][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 28.081641][ T29] audit: type=1400 audit(1755120826.155:129): avc: denied { create } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.109933][ T29] audit: type=1400 audit(1755120826.185:130): avc: denied { ioctl } for pid=3485 comm="syz.1.2" path="socket:[3931]" dev="sockfs" ino=3931 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.155942][ T29] audit: type=1400 audit(1755120826.225:131): avc: denied { ioctl } for pid=3485 comm="syz.1.2" path="socket:[4852]" dev="sockfs" ino=4852 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.249727][ T3504] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13'. [ 28.280331][ T29] audit: type=1400 audit(1755120826.345:132): avc: denied { create } for pid=3507 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.299685][ T29] audit: type=1400 audit(1755120826.345:133): avc: denied { write } for pid=3507 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.381605][ T29] audit: type=1400 audit(1755120826.405:134): avc: denied { create } for pid=3509 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.402013][ T29] audit: type=1400 audit(1755120826.405:135): avc: denied { write } for pid=3509 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.422427][ T29] audit: type=1326 audit(1755120826.455:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43b9ebe9 code=0x7ffc0000 [ 28.443031][ T3515] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 28.445759][ T29] audit: type=1326 audit(1755120826.455:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43b9ebe9 code=0x7ffc0000 [ 28.453403][ T3515] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.17'. [ 28.476501][ T29] audit: type=1326 audit(1755120826.455:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9f43b9ebe9 code=0x7ffc0000 [ 28.563133][ T3517] netlink: 'syz.4.19': attribute type 2 has an invalid length. [ 28.570797][ T3517] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 28.578433][ T3517] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.19'. [ 28.872665][ T3525] loop0: detected capacity change from 0 to 512 [ 28.933440][ T3525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.096075][ T3499] kexec: Could not allocate control_code_buffer [ 29.154137][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.192321][ T3539] loop0: detected capacity change from 0 to 128 [ 29.240210][ T3542] netlink: 'syz.3.30': attribute type 3 has an invalid length. [ 29.546751][ T3554] loop4: detected capacity change from 0 to 512 [ 29.595227][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.646123][ T3554] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.789640][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.817258][ T3567] syz.1.40 (3567) used greatest stack depth: 10944 bytes left [ 30.191889][ T3589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 30.303241][ T3594] loop2: detected capacity change from 0 to 1024 [ 30.312883][ T3594] ======================================================= [ 30.312883][ T3594] WARNING: The mand mount option has been deprecated and [ 30.312883][ T3594] and is ignored by this kernel. Remove the mand [ 30.312883][ T3594] option from the mount to silence this warning. [ 30.312883][ T3594] ======================================================= [ 30.353949][ T3594] EXT4-fs: Ignoring removed nobh option [ 30.354642][ T3600] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 30.382600][ T3597] geneve2: entered promiscuous mode [ 30.387840][ T3597] geneve2: entered allmulticast mode [ 30.396289][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.455798][ T3597] syz.4.54 (3597) used greatest stack depth: 10776 bytes left [ 30.570904][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.614084][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 30.624564][ T3618] loop4: detected capacity change from 0 to 1024 [ 30.629377][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 30.634290][ T3618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.652417][ T3618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.694963][ T3630] loop2: detected capacity change from 0 to 2048 [ 30.735299][ T3630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.747771][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.787591][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.819796][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 30.828915][ T3639] loop1: detected capacity change from 0 to 8192 [ 30.871077][ T3647] loop2: detected capacity change from 0 to 512 [ 30.876989][ T3643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 30.950016][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.989658][ T3647] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.076819][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.239750][ T3660] loop4: detected capacity change from 0 to 1764 [ 31.246418][ T3671] loop3: detected capacity change from 0 to 4096 [ 31.281936][ T3671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.371865][ T3680] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 31.459257][ T3682] syz.3.83 (3682) used greatest stack depth: 10432 bytes left [ 31.469834][ T3687] random: crng reseeded on system resumption [ 31.492672][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.553133][ T3692] C: renamed from team_slave_0 (while UP) [ 31.571850][ T3692] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 31.579452][ T3692] netlink: 152 bytes leftover after parsing attributes in process `syz.1.91'. [ 31.588500][ T3692] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 31.784536][ T3714] ref_ctr increment failed for inode: 0x7f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104b84500 [ 31.813888][ T3713] uprobe: syz.4.99:3713 failed to unregister, leaking uprobe [ 31.869660][ T3722] loop1: detected capacity change from 0 to 1024 [ 31.879415][ T3722] EXT4-fs: Ignoring removed orlov option [ 31.891547][ T3722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.109917][ T3736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.122682][ T3736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.159879][ T3736] pimreg: entered allmulticast mode [ 32.208965][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.222098][ T3747] loop4: detected capacity change from 0 to 128 [ 32.266642][ T3747] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 32.275021][ T3747] FAT-fs (loop4): Filesystem has been set read-only [ 32.286675][ T3754] loop3: detected capacity change from 0 to 1024 [ 32.288708][ T3747] syz.4.112: attempt to access beyond end of device [ 32.288708][ T3747] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 32.294650][ T3754] EXT4-fs: Ignoring removed oldalloc option [ 32.311595][ T3747] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 32.320445][ T3747] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 32.334395][ T3747] syz.4.112: attempt to access beyond end of device [ 32.334395][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.335365][ T3756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.347742][ T3747] syz.4.112: attempt to access beyond end of device [ 32.347742][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.371731][ T3747] syz.4.112: attempt to access beyond end of device [ 32.371731][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.376847][ T3754] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.386721][ T3747] syz.4.112: attempt to access beyond end of device [ 32.386721][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.402914][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.407937][ T3747] syz.4.112: attempt to access beyond end of device [ 32.407937][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.434110][ T3747] syz.4.112: attempt to access beyond end of device [ 32.434110][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.447475][ T3747] syz.4.112: attempt to access beyond end of device [ 32.447475][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.460745][ T3747] syz.4.112: attempt to access beyond end of device [ 32.460745][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.461494][ T3756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.473998][ T3747] syz.4.112: attempt to access beyond end of device [ 32.473998][ T3747] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.510023][ T3754] loop3: detected capacity change from 1024 to 64 [ 32.512737][ T3760] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.116: corrupted xattr entries [ 32.569848][ T3760] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:74: inode #15: comm syz.3.116: corrupt xattr in inline inode [ 32.603365][ T3760] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.116: corrupted xattr entries [ 32.647251][ T3307] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /30/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 32.687109][ T3756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.755125][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.768373][ T3764] loop0: detected capacity change from 0 to 164 [ 32.778611][ T3756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.813458][ T3764] process 'syz.0.120' launched '/dev/fd/3' with NULL argv: empty string added [ 32.837250][ T3757] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 32.878906][ T1379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.935084][ T1379] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.977582][ T1379] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.017733][ T1379] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.109420][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 33.109434][ T29] audit: type=1400 audit(1755120831.175:304): avc: denied { execmem } for pid=3769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 33.167935][ T29] audit: type=1400 audit(1755120831.235:305): avc: denied { allowed } for pid=3772 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.187151][ T29] audit: type=1400 audit(1755120831.235:306): avc: denied { create } for pid=3772 comm="syz.0.126" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.208328][ T29] audit: type=1400 audit(1755120831.235:307): avc: denied { create } for pid=3770 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.213377][ T3771] syzkaller0: entered promiscuous mode [ 33.227653][ T29] audit: type=1400 audit(1755120831.235:308): avc: denied { ioctl } for pid=3770 comm="syz.1.125" path="socket:[6163]" dev="sockfs" ino=6163 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.234775][ T29] audit: type=1400 audit(1755120831.265:309): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.257552][ T3771] syzkaller0: entered allmulticast mode [ 33.277447][ T29] audit: type=1400 audit(1755120831.305:310): avc: denied { read } for pid=3774 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.304220][ T29] audit: type=1400 audit(1755120831.305:311): avc: denied { open } for pid=3774 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.328004][ T29] audit: type=1400 audit(1755120831.305:312): avc: denied { mounton } for pid=3774 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 33.349410][ T29] audit: type=1400 audit(1755120831.305:313): avc: denied { module_request } for pid=3774 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 33.521454][ T3786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 33.564716][ T3791] loop1: detected capacity change from 0 to 128 [ 33.647833][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 33.682836][ T3796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 33.738933][ T3774] chnl_net:caif_netlink_parms(): no params data found [ 33.893046][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.900351][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.917872][ T3814] loop0: detected capacity change from 0 to 1024 [ 33.951589][ T3814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.970434][ T3774] bridge_slave_0: entered allmulticast mode [ 33.986289][ T3774] bridge_slave_0: entered promiscuous mode [ 34.007794][ T3814] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.138: Allocating blocks 449-513 which overlap fs metadata [ 34.052574][ T3820] veth3: entered promiscuous mode [ 34.057816][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.064904][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.109384][ T3809] EXT4-fs (loop0): pa ffff88810717f000: logic 48, phys. 177, len 21 [ 34.117489][ T3809] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 34.131659][ T3774] bridge_slave_1: entered allmulticast mode [ 34.152823][ T3774] bridge_slave_1: entered promiscuous mode [ 34.165381][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.221286][ T3774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.240545][ T3774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.275992][ T3774] team0: Port device team_slave_0 added [ 34.288778][ T3774] team0: Port device team_slave_1 added [ 34.327270][ T3774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.334370][ T3774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.360314][ T3774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.379624][ T3774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.386674][ T3774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.412614][ T3774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.620167][ T3774] hsr_slave_0: entered promiscuous mode [ 34.635111][ T3774] hsr_slave_1: entered promiscuous mode [ 34.641652][ T3774] debugfs: 'hsr0' already exists in 'hsr' [ 34.647462][ T3774] Cannot create hsr debugfs directory [ 34.731725][ T3774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.743971][ T3774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.754581][ T3774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.769771][ T3774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.849167][ T3774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.873307][ T3774] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.894762][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.899150][ T3881] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 34.901893][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.932487][ T3774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.942955][ T3774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.959721][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.966804][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.026177][ T3894] loop0: detected capacity change from 0 to 1024 [ 35.033209][ T3894] EXT4-fs: Ignoring removed oldalloc option [ 35.039483][ T3894] EXT4-fs: inline encryption not supported [ 35.066309][ T3894] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.080527][ T3774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.099095][ T3894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 35.118098][ T3894] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.165053][ T3894] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm +}[@: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.182551][ T3894] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 35.194825][ T3894] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 35.238190][ T3894] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm +}[@: mark_inode_dirty error [ 35.267519][ T3894] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 35.277968][ T3774] veth0_vlan: entered promiscuous mode [ 35.282668][ T3894] EXT4-fs (loop0): 1 orphan inode deleted [ 35.292166][ T3774] veth1_vlan: entered promiscuous mode [ 35.298025][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.307509][ T3774] veth0_macvtap: entered promiscuous mode [ 35.321316][ T3894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.323262][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 35.356567][ T3894] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.366182][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.383751][ T3774] veth1_macvtap: entered promiscuous mode [ 35.396421][ T3929] netlink: 830 bytes leftover after parsing attributes in process `syz.1.175'. [ 35.411201][ T3774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.422576][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.434729][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.448527][ T3774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.464792][ T2311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.482369][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.505163][ T2311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.525980][ T2311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.555206][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.571492][ T2311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.585317][ T3938] bond1: entered promiscuous mode [ 35.590405][ T3938] bond1: entered allmulticast mode [ 35.602314][ T3938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.667422][ T51] bridge_slave_1: left allmulticast mode [ 35.673203][ T51] bridge_slave_1: left promiscuous mode [ 35.678882][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.692652][ T51] bridge_slave_0: left allmulticast mode [ 35.698381][ T51] bridge_slave_0: left promiscuous mode [ 35.704259][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.818601][ T3961] loop1: detected capacity change from 0 to 1024 [ 35.872532][ T3961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.943453][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.980587][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.009213][ T3961] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 36.030561][ T3961] EXT4-fs (loop1): Remounting filesystem read-only [ 36.037897][ T51] bond0 (unregistering): Released all slaves [ 36.110910][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.160421][ T51] hsr_slave_0: left promiscuous mode [ 36.176025][ T51] hsr_slave_1: left promiscuous mode [ 36.195206][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.202629][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.217485][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.224985][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.276690][ T51] veth1_macvtap: left promiscuous mode [ 36.288832][ T51] veth0_macvtap: left promiscuous mode [ 36.301417][ T51] veth1_vlan: left promiscuous mode [ 36.306732][ T51] veth0_vlan: left promiscuous mode [ 36.389600][ T51] team0 (unregistering): Port device team_slave_1 removed [ 36.405016][ T51] team0 (unregistering): Port device team_slave_0 removed [ 36.477893][ T4007] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.198'. [ 36.495067][ T4005] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.198'. [ 36.682484][ T4034] loop5: detected capacity change from 0 to 512 [ 36.746544][ T4034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.807448][ T4034] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.880375][ T4052] vlan2: entered allmulticast mode [ 37.091084][ T4070] mmap: syz.5.204 (4070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.093319][ T4085] loop0: detected capacity change from 0 to 512 [ 37.116836][ T4089] netlink: 96 bytes leftover after parsing attributes in process `syz.1.218'. [ 37.217301][ T4085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.240474][ T4085] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.217: bad orphan inode 13 [ 37.242945][ T4099] vlan2: entered allmulticast mode [ 37.267345][ T4099] dummy0: entered allmulticast mode [ 37.281239][ T4085] ext4_test_bit(bit=12, block=18) = 1 [ 37.286724][ T4085] is_bad_inode(inode)=0 [ 37.290969][ T4085] NEXT_ORPHAN(inode)=2130706432 [ 37.295831][ T4085] max_ino=32 [ 37.299026][ T4085] i_nlink=1 [ 37.302980][ T3774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.303020][ T4085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.348525][ T4085] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.370356][ T4099] Zero length message leads to an empty skb [ 37.391137][ T4085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.217: bg 0: block 248: padding at end of block bitmap is not set [ 37.410607][ T4110] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.427735][ T4110] vhci_hcd: invalid port number 129 [ 37.433032][ T4110] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 37.441889][ T4085] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.217: Failed to acquire dquot type 1 [ 37.493457][ T4085] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.516362][ T4116] loop2: detected capacity change from 0 to 1024 [ 37.534506][ T4085] syz.0.217 (4085) used greatest stack depth: 9248 bytes left [ 37.568799][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.651631][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.697095][ T4116] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 37.728533][ T4145] loop0: detected capacity change from 0 to 128 [ 37.765247][ T4145] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.781348][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.801976][ T4149] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.230'. [ 37.802165][ T4145] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.823328][ T4143] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.230'. [ 37.913200][ T4145] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.992664][ T4164] loop2: detected capacity change from 0 to 512 [ 38.065293][ T4164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.077989][ T4164] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.137705][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 38.137719][ T29] audit: type=1400 audit(1755120836.205:527): avc: denied { create } for pid=4183 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.160730][ T4187] EXT4-fs (loop2): shut down requested (2) [ 38.180044][ T29] audit: type=1400 audit(1755120836.245:528): avc: denied { read } for pid=2973 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.202022][ T29] audit: type=1400 audit(1755120836.245:529): avc: denied { search } for pid=2973 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.223553][ T29] audit: type=1400 audit(1755120836.245:530): avc: denied { search } for pid=2973 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.245164][ T29] audit: type=1400 audit(1755120836.245:531): avc: denied { add_name } for pid=2973 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.266020][ T29] audit: type=1400 audit(1755120836.245:532): avc: denied { create } for pid=2973 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.286812][ T29] audit: type=1400 audit(1755120836.245:533): avc: denied { append open } for pid=2973 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.309914][ T29] audit: type=1400 audit(1755120836.245:534): avc: denied { getattr } for pid=2973 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.332686][ T29] audit: type=1400 audit(1755120836.245:535): avc: denied { write } for pid=4183 comm="syz.0.241" path="socket:[7700]" dev="sockfs" ino=7700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.371477][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.385713][ T4194] netlink: 'syz.4.243': attribute type 27 has an invalid length. [ 38.451658][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.458925][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.493157][ T29] audit: type=1400 audit(1755120836.555:536): avc: denied { write } for pid=4204 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.537073][ T4199] loop5: detected capacity change from 0 to 8192 [ 38.625866][ T4194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.682200][ T4194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.719808][ T4230] loop1: detected capacity change from 0 to 512 [ 38.750909][ T4230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.763626][ T4230] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.778594][ T4230] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 38.799841][ T4230] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 38.812378][ T4230] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.812378][ T4230] [ 38.822158][ T4230] EXT4-fs (loop1): Total free blocks count 0 [ 38.828132][ T4230] EXT4-fs (loop1): Free/Dirty block details [ 38.834086][ T4230] EXT4-fs (loop1): free_blocks=65280 [ 38.839435][ T4230] EXT4-fs (loop1): dirty_blocks=33 [ 38.844581][ T4230] EXT4-fs (loop1): Block reservation details [ 38.850679][ T4230] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 38.867680][ T4240] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 38.895997][ T4209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.905368][ T4209] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.918957][ T4242] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 38.926865][ T4242] netlink: 17 bytes leftover after parsing attributes in process `syz.2.256'. [ 38.935719][ T4209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.954760][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.987686][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.003350][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.012781][ T4237] Falling back ldisc for ttyS3. [ 39.039996][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.195550][ T4267] loop2: detected capacity change from 0 to 1024 [ 39.210546][ T4267] EXT4-fs: Ignoring removed orlov option [ 39.424556][ T4289] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.263'. [ 39.495170][ T4267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.692068][ T4303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.270'. [ 39.714182][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.856849][ T4316] loop1: detected capacity change from 0 to 128 [ 39.943845][ T4322] sctp: [Deprecated]: syz.2.278 (pid 4322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.943845][ T4322] Use struct sctp_sack_info instead [ 40.215922][ T4338] loop4: detected capacity change from 0 to 2368 [ 40.240951][ C0] hrtimer: interrupt took 64047 ns [ 40.324215][ T4347] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 40.331919][ T4347] netlink: 'syz.4.287': attribute type 4 has an invalid length. [ 40.339678][ T4347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.287'. [ 40.364754][ T4347] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 40.372554][ T4347] netlink: 'syz.4.287': attribute type 4 has an invalid length. [ 40.380210][ T4347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.287'. [ 40.396510][ T4352] can0: slcan on ttyS3. [ 40.490132][ T4352] can0 (unregistered): slcan off ttyS3. [ 40.785983][ T4388] loop5: detected capacity change from 0 to 1024 [ 40.810343][ T4388] EXT4-fs: Ignoring removed orlov option [ 40.824074][ T4388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.179912][ T4410] loop4: detected capacity change from 0 to 128 [ 41.210679][ T4410] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.218536][ T4410] FAT-fs (loop4): Filesystem has been set read-only [ 41.240043][ T4410] bio_check_eod: 19845 callbacks suppressed [ 41.240058][ T4410] syz.4.313: attempt to access beyond end of device [ 41.240058][ T4410] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 41.266819][ T4410] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.274811][ T4410] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.292205][ T4410] syz.4.313: attempt to access beyond end of device [ 41.292205][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.313566][ T4410] syz.4.313: attempt to access beyond end of device [ 41.313566][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.327573][ T4410] syz.4.313: attempt to access beyond end of device [ 41.327573][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.341281][ T3774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.358312][ T4410] syz.4.313: attempt to access beyond end of device [ 41.358312][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.383754][ T4410] syz.4.313: attempt to access beyond end of device [ 41.383754][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.403577][ T4430] syz.2.323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.404231][ T4410] syz.4.313: attempt to access beyond end of device [ 41.404231][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.427502][ T4410] syz.4.313: attempt to access beyond end of device [ 41.427502][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.442385][ T4410] syz.4.313: attempt to access beyond end of device [ 41.442385][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.502786][ T4410] syz.4.313: attempt to access beyond end of device [ 41.502786][ T4410] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.581994][ T4446] loop1: detected capacity change from 0 to 512 [ 41.666382][ T4449] loop2: detected capacity change from 0 to 1024 [ 41.682861][ T4449] EXT4-fs: Ignoring removed orlov option [ 41.890339][ T4446] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.903522][ T4446] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.984429][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.998505][ T4446] EXT4-fs (loop1): 1 truncate cleaned up [ 42.004935][ T4446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.078954][ T4465] cgroup: fork rejected by pids controller in /syz4 [ 42.275481][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.412912][ T3382] kernel write not supported for file [eventfd] (pid: 3382 comm: kworker/0:4) [ 42.554359][ T12] bridge_slave_1: left allmulticast mode [ 42.560228][ T12] bridge_slave_1: left promiscuous mode [ 42.565684][ T4502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.565914][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.600243][ T4502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.654953][ T12] bridge_slave_0: left allmulticast mode [ 42.660704][ T12] bridge_slave_0: left promiscuous mode [ 42.666372][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.680983][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.731394][ T4516] netlink: 64 bytes leftover after parsing attributes in process `syz.2.354'. [ 42.767318][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.778777][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.789454][ T12] bond0 (unregistering): Released all slaves [ 42.871220][ T12] hsr_slave_0: left promiscuous mode [ 42.880509][ T12] hsr_slave_1: left promiscuous mode [ 42.886295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.894202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.934222][ T12] team0 (unregistering): Port device team_slave_1 removed [ 42.943834][ T12] team0 (unregistering): Port device team_slave_0 removed [ 42.988198][ T4530] netlink: 'syz.2.358': attribute type 39 has an invalid length. [ 43.103183][ T4546] netlink: 'syz.0.360': attribute type 27 has an invalid length. [ 43.184172][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.191390][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.228605][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 43.245041][ T4559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.362'. [ 43.282216][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.293396][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.345229][ T4553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.379151][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 43.392003][ T4553] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.405083][ T4553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.436469][ T125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.455827][ T125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.484577][ T125] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.507025][ T125] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.531757][ T4573] loop1: detected capacity change from 0 to 8192 [ 43.571088][ T4582] bridge: RTM_NEWNEIGH with invalid ether address [ 43.588491][ T4493] chnl_net:caif_netlink_parms(): no params data found [ 43.594898][ T4585] capability: warning: `syz.5.372' uses deprecated v2 capabilities in a way that may be insecure [ 43.608077][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 43.608091][ T29] audit: type=1400 audit(1755120841.685:700): avc: denied { create } for pid=4584 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.657644][ T29] audit: type=1400 audit(1755120841.705:701): avc: denied { bind } for pid=4584 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.677285][ T29] audit: type=1400 audit(1755120841.705:702): avc: denied { write } for pid=4584 comm="syz.5.372" path="socket:[9402]" dev="sockfs" ino=9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.700782][ T29] audit: type=1400 audit(1755120841.705:703): avc: denied { create } for pid=4587 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 43.720533][ T29] audit: type=1400 audit(1755120841.705:704): avc: denied { sys_admin } for pid=4587 comm="syz.2.373" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 43.802988][ T4603] syz_tun: entered promiscuous mode [ 43.809861][ T4603] syz_tun: left promiscuous mode [ 43.839363][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.846678][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.884513][ T4493] bridge_slave_0: entered allmulticast mode [ 43.899336][ T4493] bridge_slave_0: entered promiscuous mode [ 43.924612][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.931786][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.940820][ T29] audit: type=1400 audit(1755120842.005:705): avc: denied { read } for pid=4608 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.963509][ T4493] bridge_slave_1: entered allmulticast mode [ 43.973249][ T4493] bridge_slave_1: entered promiscuous mode [ 44.013261][ T29] audit: type=1326 audit(1755120842.085:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 44.037092][ T29] audit: type=1326 audit(1755120842.085:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 44.094451][ T4493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.111356][ T4493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.125005][ T29] audit: type=1326 audit(1755120842.145:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 44.148362][ T29] audit: type=1326 audit(1755120842.145:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 44.217128][ T4493] team0: Port device team_slave_0 added [ 44.321662][ T4493] team0: Port device team_slave_1 added [ 44.374364][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.381386][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.407477][ T4493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.444885][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.451895][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.477826][ T4493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.488637][ T4664] loop1: detected capacity change from 0 to 1024 [ 44.505726][ T4664] EXT4-fs: Ignoring removed orlov option [ 44.532201][ T4664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.577245][ T4493] hsr_slave_0: entered promiscuous mode [ 44.589146][ T4493] hsr_slave_1: entered promiscuous mode [ 44.602359][ T4493] debugfs: 'hsr0' already exists in 'hsr' [ 44.608155][ T4493] Cannot create hsr debugfs directory [ 44.675076][ T4681] loop2: detected capacity change from 0 to 512 [ 44.717450][ T4687] loop5: detected capacity change from 0 to 512 [ 44.755698][ T4681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.774996][ T4681] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.813948][ T4687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.840270][ T4687] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.909750][ T3774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.029267][ T4493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.043238][ T4493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.062818][ T4493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.080729][ T4493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.120762][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.177600][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.235762][ T4735] loop5: detected capacity change from 0 to 512 [ 45.270312][ T4735] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 45.283406][ T4729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.326629][ T4493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.334928][ T4735] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.349177][ T4735] EXT4-fs (loop5): 1 truncate cleaned up [ 45.383364][ T4742] bridge0: port 3(batadv1) entered blocking state [ 45.390525][ T4742] bridge0: port 3(batadv1) entered disabled state [ 45.419249][ T4735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.439526][ T4742] batadv1: entered allmulticast mode [ 45.450271][ T4742] batadv1: entered promiscuous mode [ 45.477820][ T4493] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.527099][ T4753] loop2: detected capacity change from 0 to 2048 [ 45.545732][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.554108][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.583715][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.590824][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.597726][ T4735] EXT4-fs (loop5): shut down requested (0) [ 45.609854][ T4735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 45.612875][ T3560] loop2: p1 < > p4 [ 45.618941][ T4735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 45.634950][ T3560] loop2: p4 size 8388608 extends beyond EOD, truncated [ 45.635434][ T4735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 45.664864][ T4753] loop2: p1 < > p4 [ 45.671811][ T4753] loop2: p4 size 8388608 extends beyond EOD, truncated [ 45.698384][ T2991] loop2: p1 < > p4 [ 45.703648][ T2991] loop2: p4 size 8388608 extends beyond EOD, truncated [ 45.712950][ T3774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.765548][ T2991] loop2: p1 < > p4 [ 45.780473][ T2991] loop2: p4 size 8388608 extends beyond EOD, truncated [ 45.798727][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.816921][ T4493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.832844][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.844929][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 45.876111][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.878840][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.897084][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 45.906511][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 45.926168][ T4783] hsr_slave_1 (unregistering): left promiscuous mode [ 45.959652][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.962200][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 46.042032][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 46.044207][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 46.184422][ T4493] veth0_vlan: entered promiscuous mode [ 46.207221][ T3395] kernel write not supported for file [eventfd] (pid: 3395 comm: kworker/0:5) [ 46.209438][ T4493] veth1_vlan: entered promiscuous mode [ 46.238237][ T4825] loop2: detected capacity change from 0 to 1024 [ 46.255312][ T4493] veth0_macvtap: entered promiscuous mode [ 46.262939][ T4493] veth1_macvtap: entered promiscuous mode [ 46.279041][ T4825] EXT4-fs: Ignoring removed orlov option [ 46.303966][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.325605][ T4825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.344627][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.378565][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.403892][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.417518][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.439504][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.467061][ T4851] loop4: detected capacity change from 0 to 128 [ 46.480575][ T4851] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.494515][ T4851] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.602264][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.702438][ T4886] sch_fq: defrate 6 ignored. [ 46.756663][ T4894] loop0: detected capacity change from 0 to 128 [ 46.774836][ T4893] loop4: detected capacity change from 0 to 128 [ 46.784373][ T4894] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.792462][ T4894] FAT-fs (loop0): Filesystem has been set read-only [ 46.809573][ T4894] bio_check_eod: 15027 callbacks suppressed [ 46.809590][ T4894] syz.0.423: attempt to access beyond end of device [ 46.809590][ T4894] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.846849][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.856944][ T4894] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.864924][ T4894] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.873862][ T4893] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 46.876441][ T4894] syz.0.423: attempt to access beyond end of device [ 46.876441][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.882007][ T4893] FAT-fs (loop4): Filesystem has been set read-only [ 46.902267][ T4894] syz.0.423: attempt to access beyond end of device [ 46.902267][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.915883][ T4894] syz.0.423: attempt to access beyond end of device [ 46.915883][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.944562][ T4894] syz.0.423: attempt to access beyond end of device [ 46.944562][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.959154][ T4894] syz.0.423: attempt to access beyond end of device [ 46.959154][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.962171][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 46.974382][ T4894] syz.0.423: attempt to access beyond end of device [ 46.974382][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.028702][ T4894] syz.0.423: attempt to access beyond end of device [ 47.028702][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.063628][ T4894] syz.0.423: attempt to access beyond end of device [ 47.063628][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.079870][ T4894] syz.0.423: attempt to access beyond end of device [ 47.079870][ T4894] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.243547][ T4930] loop2: detected capacity change from 0 to 128 [ 47.287218][ T4930] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.336179][ T4930] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.417574][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.687243][ T4948] tipc: Started in network mode [ 47.692290][ T4948] tipc: Node identity ac14140f, cluster identity 4711 [ 47.706437][ T4948] tipc: New replicast peer: 255.255.255.83 [ 47.712507][ T4948] tipc: Enabled bearer , priority 10 [ 47.774515][ T4954] loop2: detected capacity change from 0 to 1024 [ 47.805056][ T4954] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.816001][ T4954] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.861886][ T4954] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 47.880740][ T4954] EXT4-fs (loop2): mount failed [ 47.902897][ T4954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'. [ 48.179138][ T4996] loop2: detected capacity change from 0 to 128 [ 48.186864][ T4996] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.242427][ T4996] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.250689][ T5003] loop5: detected capacity change from 0 to 128 [ 48.263181][ T5004] netlink: 172 bytes leftover after parsing attributes in process `syz.0.465'. [ 48.289154][ T5003] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.302520][ T5008] loop0: detected capacity change from 0 to 128 [ 48.318438][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 48.328132][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.339225][ T5003] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.339619][ T5008] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.372444][ T5008] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.412442][ T3774] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.456600][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.468584][ T5019] tipc: Started in network mode [ 48.473521][ T5019] tipc: Node identity ac14140f, cluster identity 4711 [ 48.482383][ T5019] tipc: New replicast peer: 255.255.255.83 [ 48.488267][ T5019] tipc: Enabled bearer , priority 10 [ 48.515118][ T5021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.474'. [ 48.548057][ T5021] team0 (unregistering): Port device team_slave_0 removed [ 48.562085][ T5021] team0 (unregistering): Port device team_slave_1 removed [ 48.647284][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 48.647297][ T29] audit: type=1400 audit(1755120846.715:904): avc: denied { create } for pid=5034 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.683118][ T29] audit: type=1400 audit(1755120846.755:905): avc: denied { write } for pid=5034 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.704467][ T29] audit: type=1400 audit(1755120846.755:906): avc: denied { nlmsg_write } for pid=5034 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.753396][ T29] audit: type=1400 audit(1755120846.825:907): avc: denied { write } for pid=5038 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.818441][ T5044] loop5: detected capacity change from 0 to 1024 [ 48.831265][ T5044] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.840228][ T3382] tipc: Node number set to 2886997007 [ 48.842282][ T5044] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.858767][ T5044] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 48.865466][ T5044] EXT4-fs (loop5): mount failed [ 48.895002][ T5044] netlink: 48 bytes leftover after parsing attributes in process `syz.5.483'. [ 49.044282][ T29] audit: type=1326 audit(1755120847.115:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34b2ebe9 code=0x7ffc0000 [ 49.067636][ T29] audit: type=1326 audit(1755120847.115:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34b2ebe9 code=0x7ffc0000 [ 49.090943][ T29] audit: type=1326 audit(1755120847.115:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9a34b2ebe9 code=0x7ffc0000 [ 49.117545][ T29] audit: type=1326 audit(1755120847.115:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34b2ebe9 code=0x7ffc0000 [ 49.140817][ T29] audit: type=1326 audit(1755120847.115:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34b2ebe9 code=0x7ffc0000 [ 49.164171][ T29] audit: type=1326 audit(1755120847.115:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a34b2ebe9 code=0x7ffc0000 [ 49.480093][ T3382] tipc: Node number set to 2886997007 [ 49.524520][ T5086] pim6reg1: entered promiscuous mode [ 49.529864][ T5086] pim6reg1: entered allmulticast mode [ 49.571498][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 49.709016][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.511'. [ 49.734758][ T5107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.775794][ T5111] loop2: detected capacity change from 0 to 512 [ 49.810917][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 49.849124][ T5115] team1: entered promiscuous mode [ 49.854416][ T5115] team1: entered allmulticast mode [ 49.891146][ T5123] loop0: detected capacity change from 0 to 1024 [ 49.898417][ T5123] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.909333][ T5123] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.935334][ T5123] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 49.944476][ T5123] EXT4-fs (loop0): mount failed [ 49.952991][ T5134] bridge0: port 3(batadv1) entered blocking state [ 49.959436][ T5134] bridge0: port 3(batadv1) entered disabled state [ 49.968963][ T5134] batadv1: entered allmulticast mode [ 49.975577][ T5134] batadv1: entered promiscuous mode [ 49.985496][ T5136] macvlan1: entered promiscuous mode [ 49.991968][ T5136] ipvlan0: entered promiscuous mode [ 50.003514][ T5136] ipvlan0: left promiscuous mode [ 50.008756][ T5136] macvlan1: left promiscuous mode [ 50.031781][ T5140] random: crng reseeded on system resumption [ 50.045089][ T5140] ÿÿÿÿÿÿ: renamed from vlan1 [ 50.057545][ T5148] loop2: detected capacity change from 0 to 512 [ 50.073692][ T5148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.092663][ T5148] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.112723][ T5148] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.252632][ T5185] loop2: detected capacity change from 0 to 128 [ 50.269220][ T5188] bridge: RTM_NEWNEIGH with invalid ether address [ 50.289071][ T5185] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 50.297003][ T5185] FAT-fs (loop2): Filesystem has been set read-only [ 50.324581][ T5185] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 50.332534][ T5185] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 50.470208][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 50.479491][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 50.541824][ T5223] loop1: detected capacity change from 0 to 512 [ 50.558516][ T5223] EXT4-fs: Ignoring removed bh option [ 50.614446][ T5209] loop0: detected capacity change from 0 to 8192 [ 50.792706][ T5223] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.801846][ T5223] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 50.853060][ T5223] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 50.882342][ T5223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 50.893545][ T5223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.928706][ T5256] netlink: 'syz.0.557': attribute type 30 has an invalid length. [ 50.955650][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.018003][ T5266] loop1: detected capacity change from 0 to 128 [ 51.055722][ T5264] bridge0: port 3(batadv1) entered blocking state [ 51.062226][ T5264] bridge0: port 3(batadv1) entered disabled state [ 51.081183][ T5264] batadv1: entered allmulticast mode [ 51.153303][ T5264] batadv1: entered promiscuous mode [ 51.314295][ T5302] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 51.314278][ T5305] loop2: detected capacity change from 0 to 128 [ 51.351704][ T3395] Process accounting resumed [ 51.356367][ T3395] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 51.363883][ T3395] FAT-fs (loop2): Filesystem has been set read-only [ 51.363893][ T5313] loop0: detected capacity change from 0 to 128 [ 51.397956][ T5312] __nla_validate_parse: 4 callbacks suppressed [ 51.397973][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 51.475620][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 51.560013][ T3443] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 51.569315][ T3443] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 51.618167][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 51.627137][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 51.638687][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 51.647753][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 51.736141][ T5362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 51.983861][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.991091][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.025401][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.035532][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.077120][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.098091][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.112274][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.122547][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.160045][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 52.162497][ T5416] tipc: Enabled bearer , priority 0 [ 52.190127][ T5420] netlink: 'syz.0.601': attribute type 7 has an invalid length. [ 52.197815][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 52.209223][ T5416] tipc: Disabling bearer [ 52.249634][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 52.269745][ T5426] loop0: detected capacity change from 0 to 128 [ 52.283791][ T5428] netlink: 'syz.4.605': attribute type 39 has an invalid length. [ 52.286558][ T5426] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.305221][ T5426] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.374542][ T5438] random: crng reseeded on system resumption [ 52.387085][ T5438] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 52.414170][ T5445] netlink: 'syz.5.613': attribute type 30 has an invalid length. [ 52.539476][ T5459] loop4: detected capacity change from 0 to 128 [ 52.546632][ T5459] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.595476][ T5459] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.681568][ T5465] loop5: detected capacity change from 0 to 512 [ 52.756874][ T5465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.773732][ T5474] loop1: detected capacity change from 0 to 128 [ 52.781181][ T5465] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.792701][ T5474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.795247][ T5465] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 52.805375][ T5474] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.820163][ T5465] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1029 with max blocks 1 with error 28 [ 52.842715][ T5465] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.842715][ T5465] [ 52.852553][ T5465] EXT4-fs (loop5): Total free blocks count 0 [ 52.858552][ T5465] EXT4-fs (loop5): Free/Dirty block details [ 52.864530][ T5465] EXT4-fs (loop5): free_blocks=65280 [ 52.869814][ T5465] EXT4-fs (loop5): dirty_blocks=1 [ 52.874873][ T5465] EXT4-fs (loop5): Block reservation details [ 52.880893][ T5465] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 52.922461][ T3774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.256297][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.265632][ T5505] loop0: detected capacity change from 0 to 2048 [ 53.303000][ T5505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.052989][ T5611] bond0: entered promiscuous mode [ 54.058091][ T5611] bond_slave_0: entered promiscuous mode [ 54.063902][ T5611] bond_slave_1: entered promiscuous mode [ 54.069653][ T5611] bond0: entered allmulticast mode [ 54.074932][ T5611] bond_slave_0: entered allmulticast mode [ 54.080702][ T5611] bond_slave_1: entered allmulticast mode [ 54.117936][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 54.135078][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.228149][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 54.228164][ T29] audit: type=1400 audit(2000000004.070:1253): avc: denied { read } for pid=5637 comm="syz.5.650" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.258899][ T29] audit: type=1400 audit(2000000004.070:1254): avc: denied { open } for pid=5637 comm="syz.5.650" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.384536][ T5661] loop1: detected capacity change from 0 to 128 [ 54.404948][ T5661] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.422841][ T5661] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.443949][ T5669] SELinux: Context @ is not valid (left unmapped). [ 54.450796][ T29] audit: type=1400 audit(2000000004.300:1255): avc: denied { relabelto } for pid=5655 comm="syz.2.652" name="cgroup.controllers" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 54.475811][ T29] audit: type=1400 audit(2000000004.300:1256): avc: denied { associate } for pid=5655 comm="syz.2.652" name="cgroup.controllers" dev="tmpfs" ino=668 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 54.531341][ T29] audit: type=1400 audit(2000000004.380:1257): avc: denied { write } for pid=5658 comm="syz.1.654" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.557375][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.563379][ T29] audit: type=1400 audit(2000000004.380:1258): avc: denied { open } for pid=5658 comm="syz.1.654" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.614691][ T5679] tipc: Started in network mode [ 54.619611][ T5679] tipc: Node identity ac14140f, cluster identity 4711 [ 54.626632][ T5679] tipc: New replicast peer: 255.255.255.83 [ 54.632570][ T5679] tipc: Enabled bearer , priority 10 [ 54.655988][ T29] audit: type=1326 audit(2000000004.500:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 54.693466][ T29] audit: type=1326 audit(2000000004.500:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 54.716844][ T29] audit: type=1326 audit(2000000004.500:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 54.740357][ T29] audit: type=1326 audit(2000000004.500:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa986febe9 code=0x7ffc0000 [ 54.832345][ T5705] capability: warning: `syz.0.661' uses 32-bit capabilities (legacy support in use) [ 54.956021][ T5721] loop0: detected capacity change from 0 to 512 [ 54.964261][ T5721] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.998190][ T5721] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.668: Failed to acquire dquot type 1 [ 55.007589][ T5730] loop4: detected capacity change from 0 to 512 [ 55.010301][ T5721] EXT4-fs (loop0): 1 truncate cleaned up [ 55.021692][ T5721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.043480][ T5721] 0·: renamed from hsr0 [ 55.045513][ T5730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.071543][ T5721] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.075903][ T5730] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.081958][ T5721] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.103353][ T5721] 0·: entered allmulticast mode [ 55.108238][ T5721] hsr_slave_0: entered allmulticast mode [ 55.114090][ T5721] hsr_slave_1: entered allmulticast mode [ 55.120582][ T5721] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 55.203499][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.224889][ T5740] loop1: detected capacity change from 0 to 128 [ 55.275865][ T4493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.339483][ T5755] pim6reg1: entered promiscuous mode [ 55.345124][ T5755] pim6reg1: entered allmulticast mode [ 55.374453][ T5758] macvlan1: entered promiscuous mode [ 55.380463][ T5758] ipvlan0: entered promiscuous mode [ 55.386188][ T5758] ipvlan0: left promiscuous mode [ 55.391390][ T5758] macvlan1: left promiscuous mode [ 55.458261][ T5774] loop4: detected capacity change from 0 to 256 [ 55.628235][ T5799] wg2: entered promiscuous mode [ 55.633200][ T5799] wg2: entered allmulticast mode [ 55.656637][ T5804] loop4: detected capacity change from 0 to 1024 [ 55.666131][ T5804] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.681935][ T5804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.722029][ T4493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.738650][ T5816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5816 comm=syz.2.706 [ 55.963166][ T36] tipc: Node number set to 2886997007 [ 56.020601][ T5827] loop1: detected capacity change from 0 to 1024 [ 56.027253][ T5827] EXT4-fs: Ignoring removed orlov option [ 56.037336][ T5827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.125335][ T5834] ================================================================== [ 56.133433][ T5834] BUG: KCSAN: data-race in filemap_read / filemap_read [ 56.140279][ T5834] [ 56.142601][ T5834] write to 0xffff88811851d2e8 of 8 bytes by task 5827 on cpu 0: [ 56.150223][ T5834] filemap_read+0x974/0xa00 [ 56.154723][ T5834] generic_file_read_iter+0x79/0x330 [ 56.160010][ T5834] ext4_file_read_iter+0x1cc/0x290 [ 56.165135][ T5834] copy_splice_read+0x43f/0x660 [ 56.169998][ T5834] splice_direct_to_actor+0x290/0x680 [ 56.175368][ T5834] do_splice_direct+0xda/0x150 [ 56.180133][ T5834] do_sendfile+0x380/0x650 [ 56.184559][ T5834] __x64_sys_sendfile64+0x105/0x150 [ 56.189763][ T5834] x64_sys_call+0x2bb0/0x2ff0 [ 56.194474][ T5834] do_syscall_64+0xd2/0x200 [ 56.198991][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.204881][ T5834] [ 56.207199][ T5834] read to 0xffff88811851d2e8 of 8 bytes by task 5834 on cpu 1: [ 56.214738][ T5834] filemap_read+0x6f/0xa00 [ 56.219151][ T5834] generic_file_read_iter+0x79/0x330 [ 56.224429][ T5834] ext4_file_read_iter+0x1cc/0x290 [ 56.229543][ T5834] copy_splice_read+0x43f/0x660 [ 56.234404][ T5834] splice_direct_to_actor+0x290/0x680 [ 56.239768][ T5834] do_splice_direct+0xda/0x150 [ 56.244533][ T5834] do_sendfile+0x380/0x650 [ 56.248947][ T5834] __x64_sys_sendfile64+0x105/0x150 [ 56.254155][ T5834] x64_sys_call+0x2bb0/0x2ff0 [ 56.258827][ T5834] do_syscall_64+0xd2/0x200 [ 56.263326][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.269220][ T5834] [ 56.271529][ T5834] value changed: 0x0000000000000133 -> 0x0000000000000134 [ 56.278629][ T5834] [ 56.280936][ T5834] Reported by Kernel Concurrency Sanitizer on: [ 56.287082][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.1.709 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 56.299390][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.309428][ T5834] ================================================================== [ 56.338733][ T12] ================================================================== [ 56.346840][ T12] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / ext4_write_inline_data [ 56.355865][ T12] [ 56.358182][ T12] write to 0xffff8881198ddbe0 of 2 bytes by task 5827 on cpu 1: [ 56.365795][ T12] ext4_write_inline_data+0x1d9/0x220 [ 56.371159][ T12] ext4_write_inline_data_end+0x1e0/0x5f0 [ 56.376864][ T12] ext4_write_end+0x3d7/0x720 [ 56.381553][ T12] generic_perform_write+0x30f/0x490 [ 56.386825][ T12] ext4_buffered_write_iter+0x1ee/0x3c0 [ 56.392367][ T12] ext4_file_write_iter+0x383/0xf00 [ 56.397566][ T12] iter_file_splice_write+0x669/0x9e0 [ 56.402921][ T12] direct_splice_actor+0x156/0x2a0 [ 56.408014][ T12] splice_direct_to_actor+0x312/0x680 [ 56.413370][ T12] do_splice_direct+0xda/0x150 [ 56.418118][ T12] do_sendfile+0x380/0x650 [ 56.422529][ T12] __x64_sys_sendfile64+0x105/0x150 [ 56.427715][ T12] x64_sys_call+0x2bb0/0x2ff0 [ 56.432378][ T12] do_syscall_64+0xd2/0x200 [ 56.436870][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.442746][ T12] [ 56.445058][ T12] read to 0xffff8881198dd800 of 1024 bytes by task 12 on cpu 0: [ 56.452674][ T12] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 56.458906][ T12] generic_perform_write+0x2c2/0x490 [ 56.464177][ T12] shmem_file_write_iter+0xc5/0xf0 [ 56.469274][ T12] lo_rw_aio+0x69d/0x760 [ 56.473511][ T12] loop_process_work+0x52d/0xa60 [ 56.478439][ T12] loop_workfn+0x31/0x40 [ 56.482682][ T12] process_scheduled_works+0x4cb/0x9d0 [ 56.488129][ T12] worker_thread+0x582/0x770 [ 56.492709][ T12] kthread+0x489/0x510 [ 56.496761][ T12] ret_from_fork+0xda/0x150 [ 56.501247][ T12] ret_from_fork_asm+0x1a/0x30 [ 56.505999][ T12] [ 56.508301][ T12] Reported by Kernel Concurrency Sanitizer on: [ 56.514429][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 56.526824][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.536876][ T12] Workqueue: loop1 loop_workfn [ 56.541648][ T12] ================================================================== [ 56.691276][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.