last executing test programs: 1.817661105s ago: executing program 3 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.764938559s ago: executing program 0 (id=745): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeee}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.764599789s ago: executing program 0 (id=746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x50) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1.764231889s ago: executing program 3 (id=747): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b7", 0x23) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.74715429s ago: executing program 0 (id=748): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) r2 = gettid() poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x12) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.180691686s ago: executing program 4 (id=757): r0 = syz_create_resource$binfmt(&(0x7f0000000c80)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) pwritev(r1, 0x0, 0x0, 0x6, 0x0) 846.396003ms ago: executing program 0 (id=761): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0xc) splice(r2, 0x0, r5, 0x0, 0x80, 0x7) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 801.149476ms ago: executing program 3 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) fchdir(0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x13220c28) 741.692161ms ago: executing program 2 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) 712.357963ms ago: executing program 2 (id=768): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x7}, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 702.443434ms ago: executing program 3 (id=769): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0x2}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x408c014) close_range(r0, 0xffffffffffffffff, 0x0) 701.406234ms ago: executing program 1 (id=770): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0xb, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffe44}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r3, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 640.862679ms ago: executing program 2 (id=771): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc00"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) 640.607499ms ago: executing program 1 (id=772): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 607.752352ms ago: executing program 4 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) read$usbfs(r3, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) 578.085454ms ago: executing program 3 (id=774): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 512.951579ms ago: executing program 3 (id=775): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b7", 0x23) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 512.553979ms ago: executing program 1 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "d524c18c21e24872", "c6a71e72e7ff122a782a7f00", "e471e97b", "6168e4a7e349a0d4"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 511.449749ms ago: executing program 4 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 486.159571ms ago: executing program 1 (id=778): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 465.727343ms ago: executing program 2 (id=779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 451.293754ms ago: executing program 4 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) fchdir(0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x13220c28) 393.020939ms ago: executing program 1 (id=781): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) 392.242909ms ago: executing program 2 (id=782): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) kexec_load(0x3e00, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c250000000007000000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 391.653749ms ago: executing program 1 (id=783): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 336.039803ms ago: executing program 4 (id=784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) 221.135213ms ago: executing program 4 (id=785): chroot(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 168.945437ms ago: executing program 2 (id=786): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 24.289439ms ago: executing program 0 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 0s ago: executing program 0 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) read$usbfs(r3, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) kernel console output (not intermixed with test programs): =process permissive=1 [ 27.427015][ T29] audit: type=1400 audit(1755374650.709:61): avc: denied { siginh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 35.645278][ T29] audit: type=1400 audit(1755374659.019:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.646548][ T3294] cgroup: Unknown subsys name 'net' [ 35.668066][ T29] audit: type=1400 audit(1755374659.019:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.695488][ T29] audit: type=1400 audit(1755374659.039:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.836129][ T3294] cgroup: Unknown subsys name 'cpuset' [ 35.842584][ T3294] cgroup: Unknown subsys name 'rlimit' [ 35.994615][ T29] audit: type=1400 audit(1755374659.359:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.022313][ T29] audit: type=1400 audit(1755374659.359:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.042904][ T29] audit: type=1400 audit(1755374659.359:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.063278][ T29] audit: type=1400 audit(1755374659.359:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.083667][ T29] audit: type=1400 audit(1755374659.359:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.092897][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.108516][ T29] audit: type=1400 audit(1755374659.359:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.140477][ T29] audit: type=1400 audit(1755374659.489:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.198457][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.393642][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 37.440951][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 37.469853][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 37.504134][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.512920][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.520034][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.527359][ T3305] bridge_slave_0: entered allmulticast mode [ 37.533841][ T3305] bridge_slave_0: entered promiscuous mode [ 37.563070][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.570243][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.577445][ T3305] bridge_slave_1: entered allmulticast mode [ 37.583818][ T3305] bridge_slave_1: entered promiscuous mode [ 37.592456][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 37.621470][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.628613][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.635952][ T3304] bridge_slave_0: entered allmulticast mode [ 37.642430][ T3304] bridge_slave_0: entered promiscuous mode [ 37.666968][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.674047][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.681366][ T3304] bridge_slave_1: entered allmulticast mode [ 37.687961][ T3304] bridge_slave_1: entered promiscuous mode [ 37.697954][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.723818][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.740392][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.747563][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.754695][ T3310] bridge_slave_0: entered allmulticast mode [ 37.761086][ T3310] bridge_slave_0: entered promiscuous mode [ 37.787269][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.794337][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.801601][ T3310] bridge_slave_1: entered allmulticast mode [ 37.808144][ T3310] bridge_slave_1: entered promiscuous mode [ 37.815604][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.830429][ T3305] team0: Port device team_slave_0 added [ 37.856827][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.870703][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.878014][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.885387][ T3311] bridge_slave_0: entered allmulticast mode [ 37.891916][ T3311] bridge_slave_0: entered promiscuous mode [ 37.899276][ T3305] team0: Port device team_slave_1 added [ 37.904980][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.912157][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.919325][ T3311] bridge_slave_1: entered allmulticast mode [ 37.925938][ T3311] bridge_slave_1: entered promiscuous mode [ 37.932242][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.939357][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.946540][ T3309] bridge_slave_0: entered allmulticast mode [ 37.953076][ T3309] bridge_slave_0: entered promiscuous mode [ 37.960618][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.969803][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.976984][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.984186][ T3309] bridge_slave_1: entered allmulticast mode [ 37.990657][ T3309] bridge_slave_1: entered promiscuous mode [ 38.002403][ T3304] team0: Port device team_slave_0 added [ 38.019377][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.034320][ T3304] team0: Port device team_slave_1 added [ 38.056692][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.077347][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.091669][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.098705][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.124627][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.135816][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.142820][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.168825][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.180599][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.199635][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.209653][ T3310] team0: Port device team_slave_0 added [ 38.215671][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.222680][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.248637][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.272465][ T3310] team0: Port device team_slave_1 added [ 38.278627][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.285631][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.311643][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.323845][ T3311] team0: Port device team_slave_0 added [ 38.330664][ T3311] team0: Port device team_slave_1 added [ 38.354854][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.361848][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.387879][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.409362][ T3309] team0: Port device team_slave_0 added [ 38.415622][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.422588][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.448559][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.478758][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.485762][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.511690][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.523150][ T3309] team0: Port device team_slave_1 added [ 38.530245][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.537320][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.563275][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.576931][ T3305] hsr_slave_0: entered promiscuous mode [ 38.582979][ T3305] hsr_slave_1: entered promiscuous mode [ 38.617359][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.624360][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.650423][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.682690][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.689774][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.715723][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.728539][ T3304] hsr_slave_0: entered promiscuous mode [ 38.734744][ T3304] hsr_slave_1: entered promiscuous mode [ 38.740723][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 38.746499][ T3304] Cannot create hsr debugfs directory [ 38.759057][ T3310] hsr_slave_0: entered promiscuous mode [ 38.765030][ T3310] hsr_slave_1: entered promiscuous mode [ 38.770995][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 38.776769][ T3310] Cannot create hsr debugfs directory [ 38.815086][ T3311] hsr_slave_0: entered promiscuous mode [ 38.821274][ T3311] hsr_slave_1: entered promiscuous mode [ 38.828454][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 38.834237][ T3311] Cannot create hsr debugfs directory [ 38.861823][ T3309] hsr_slave_0: entered promiscuous mode [ 38.868061][ T3309] hsr_slave_1: entered promiscuous mode [ 38.873911][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 38.879820][ T3309] Cannot create hsr debugfs directory [ 39.054204][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.063464][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.072512][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.084183][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.108275][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.118344][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.127931][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.136990][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.169088][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.178800][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.188600][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.204710][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.237659][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.246836][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.264217][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.273110][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.310766][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.320371][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.330719][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.340300][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.352671][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.378061][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.390371][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.409931][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.423121][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.430261][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.444391][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.451504][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.473838][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.480923][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.490194][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.497284][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.522701][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.551596][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.563336][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.581300][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.600420][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.607524][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.619046][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.626154][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.641076][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.663872][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.684814][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.702238][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.709341][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.722464][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.729592][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.757298][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.764390][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.780166][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.787248][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.804284][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.827944][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.840157][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.948797][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.972216][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.999924][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.053558][ T3304] veth0_vlan: entered promiscuous mode [ 40.077057][ T3305] veth0_vlan: entered promiscuous mode [ 40.087719][ T3304] veth1_vlan: entered promiscuous mode [ 40.099579][ T3305] veth1_vlan: entered promiscuous mode [ 40.122776][ T3304] veth0_macvtap: entered promiscuous mode [ 40.132296][ T3304] veth1_macvtap: entered promiscuous mode [ 40.167238][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.177430][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.185297][ T3310] veth0_vlan: entered promiscuous mode [ 40.204498][ T3310] veth1_vlan: entered promiscuous mode [ 40.210963][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.235595][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.250987][ T3310] veth0_macvtap: entered promiscuous mode [ 40.260287][ T3309] veth0_vlan: entered promiscuous mode [ 40.267043][ T3305] veth0_macvtap: entered promiscuous mode [ 40.273710][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.288391][ T3310] veth1_macvtap: entered promiscuous mode [ 40.296533][ T3305] veth1_macvtap: entered promiscuous mode [ 40.308465][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.325684][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.338786][ T3309] veth1_vlan: entered promiscuous mode [ 40.348013][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.360207][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.372091][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.377382][ T3311] veth0_vlan: entered promiscuous mode [ 40.398288][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.414857][ T3309] veth0_macvtap: entered promiscuous mode [ 40.425964][ T3309] veth1_macvtap: entered promiscuous mode [ 40.442156][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.456201][ T3311] veth1_vlan: entered promiscuous mode [ 40.462732][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.482584][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.494000][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.509623][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.525463][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.539764][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.561550][ T3311] veth0_macvtap: entered promiscuous mode [ 40.576258][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.597325][ T3311] veth1_macvtap: entered promiscuous mode [ 40.608293][ T3474] $Hÿ: renamed from bond0 (while UP) [ 40.617395][ T3474] $Hÿ: entered promiscuous mode [ 40.622474][ T3474] bond_slave_0: entered promiscuous mode [ 40.629088][ T3474] bond_slave_1: entered promiscuous mode [ 40.658416][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.673327][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.696169][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.705507][ C1] hrtimer: interrupt took 27556 ns [ 40.717222][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.729474][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.758230][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 40.758248][ T29] audit: type=1400 audit(1755374664.129:107): avc: denied { create } for pid=3480 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.790530][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.799558][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.809660][ T29] audit: type=1400 audit(1755374664.179:108): avc: denied { setopt } for pid=3480 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.829055][ T29] audit: type=1400 audit(1755374664.179:109): avc: denied { write } for pid=3480 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.858241][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.890752][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.937078][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.973599][ T29] audit: type=1400 audit(1755374664.339:110): avc: denied { create } for pid=3487 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.974994][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.060317][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.073219][ T29] audit: type=1400 audit(1755374664.369:111): avc: denied { shutdown } for pid=3487 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.092736][ T29] audit: type=1400 audit(1755374664.369:112): avc: denied { getopt } for pid=3487 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.112105][ T29] audit: type=1400 audit(1755374664.369:113): avc: denied { connect } for pid=3487 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.131454][ T29] audit: type=1400 audit(1755374664.369:114): avc: denied { name_connect } for pid=3487 comm="syz.4.5" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 41.153357][ T29] audit: type=1400 audit(1755374664.369:115): avc: denied { write } for pid=3487 comm="syz.4.5" lport=48844 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 41.177175][ T29] audit: type=1400 audit(1755374664.369:116): avc: denied { create } for pid=3489 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.295026][ T3507] loop4: detected capacity change from 0 to 128 [ 41.302711][ T3507] EXT4-fs: Ignoring removed nobh option [ 41.310658][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 41.330488][ T3506] team1: entered promiscuous mode [ 41.335808][ T3506] team1: entered allmulticast mode [ 41.343633][ T3507] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.375359][ T3506] Zero length message leads to an empty skb [ 41.389236][ T3507] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.436114][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.481913][ T3516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 41.620065][ T3535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24'. [ 41.634488][ T3534] loop3: detected capacity change from 0 to 1024 [ 41.655314][ T3534] ======================================================= [ 41.655314][ T3534] WARNING: The mand mount option has been deprecated and [ 41.655314][ T3534] and is ignored by this kernel. Remove the mand [ 41.655314][ T3534] option from the mount to silence this warning. [ 41.655314][ T3534] ======================================================= [ 41.742190][ T3534] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 41.896125][ T3557] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 41.961528][ T3557] caif0: entered promiscuous mode [ 41.966775][ T3557] caif0: entered allmulticast mode [ 42.080968][ T3557] syz.0.32 (3557) used greatest stack depth: 10824 bytes left [ 42.389626][ T3565] loop3: detected capacity change from 0 to 32768 [ 42.490205][ T3584] mmap: syz.3.43 (3584) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.546328][ T3587] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 42.553943][ T3587] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 42.561606][ T3587] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.40'. [ 42.571537][ T3587] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 42.579202][ T3587] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 42.586841][ T3587] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.40'. [ 42.676319][ T3592] loop0: detected capacity change from 0 to 256 [ 42.711556][ T3598] netlink: 'syz.1.47': attribute type 13 has an invalid length. [ 42.800045][ T3598] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 42.820718][ T3598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.904730][ T3601] syz.3.49 (3601) used greatest stack depth: 10176 bytes left [ 42.982774][ T3618] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 43.064447][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 43.073644][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.081406][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.090258][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.097814][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.613291][ T3651] loop4: detected capacity change from 0 to 2368 [ 43.769738][ T3669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 44.097557][ T3700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 44.316474][ T3706] loop1: detected capacity change from 0 to 512 [ 44.327434][ T3706] EXT4-fs (loop1): too many log groups per flexible block group [ 44.335316][ T3706] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 44.342609][ T3706] EXT4-fs (loop1): mount failed [ 44.520126][ T3721] tmpfs: Unsupported parameter 'huge' [ 44.695600][ T3725] SELinux: failed to load policy [ 44.989119][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 45.067345][ T3772] loop4: detected capacity change from 0 to 1024 [ 45.079092][ T3772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.093877][ T3772] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.127544][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.197677][ T3783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 45.493584][ T3819] vlan2: entered allmulticast mode [ 45.573427][ T3822] loop0: detected capacity change from 0 to 2048 [ 45.588102][ T3822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.686329][ T3310] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 45.724530][ T3310] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.736719][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 45.749399][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.749399][ T37] [ 45.759184][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 45.765197][ T37] EXT4-fs (loop0): Free/Dirty block details [ 45.771102][ T37] EXT4-fs (loop0): free_blocks=0 [ 45.776156][ T37] EXT4-fs (loop0): dirty_blocks=656 [ 45.781410][ T37] EXT4-fs (loop0): Block reservation details [ 45.786856][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 45.786874][ T29] audit: type=1400 audit(1755374669.159:305): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.787424][ T37] EXT4-fs (loop0): i_reserved_data_blocks=41 [ 45.793569][ T29] audit: type=1400 audit(1755374669.159:306): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.871225][ T29] audit: type=1400 audit(1755374669.219:307): avc: denied { bind } for pid=3828 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.890630][ T29] audit: type=1400 audit(1755374669.219:308): avc: denied { listen } for pid=3828 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.910314][ T29] audit: type=1400 audit(1755374669.219:309): avc: denied { connect } for pid=3828 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.922401][ T3825] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 640 with error 28 [ 45.930211][ T29] audit: type=1326 audit(1755374669.219:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 45.965621][ T29] audit: type=1326 audit(1755374669.219:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 45.988997][ T29] audit: type=1326 audit(1755374669.219:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 46.012588][ T29] audit: type=1326 audit(1755374669.219:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 46.036166][ T29] audit: type=1326 audit(1755374669.219:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 46.083086][ T3835] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 46.171558][ T3845] loop0: detected capacity change from 0 to 512 [ 46.180885][ T3845] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.189088][ T3845] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.202342][ T3845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.220044][ T3845] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.235076][ T3845] EXT4-fs (loop0): 1 truncate cleaned up [ 46.241729][ T3845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.302095][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.334796][ T3855] loop4: detected capacity change from 0 to 512 [ 46.347754][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.360456][ T3855] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.373551][ T3855] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.399871][ T3862] loop2: detected capacity change from 0 to 512 [ 46.412096][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.423609][ T3862] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.439277][ T3862] EXT4-fs (loop2): mount failed [ 46.741044][ T3900] syz.4.161 uses obsolete (PF_INET,SOCK_PACKET) [ 46.773857][ T3897] ÿ: renamed from bond_slave_0 (while UP) [ 46.788147][ T3880] __nla_validate_parse: 4 callbacks suppressed [ 46.788161][ T3880] netlink: 29 bytes leftover after parsing attributes in process `syz.2.153'. [ 46.888770][ T3906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=3906 comm=syz.3.163 [ 47.004704][ T3918] syz.1.169 (3918) used greatest stack depth: 10080 bytes left [ 47.082526][ T3928] netlink: 3 bytes leftover after parsing attributes in process `syz.2.174'. [ 47.094750][ T3928] 0ªX¹¦À: renamed from caif0 [ 47.103914][ T3928] 0ªX¹¦À: entered allmulticast mode [ 47.109337][ T3928] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 47.128766][ T3930] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 47.195481][ T3930] hsr_slave_0: left promiscuous mode [ 47.211943][ T3930] hsr_slave_1: left promiscuous mode [ 47.286747][ T3946] loop4: detected capacity change from 0 to 1024 [ 47.297034][ T3946] EXT4-fs: Ignoring removed bh option [ 47.302849][ T3946] EXT4-fs: inline encryption not supported [ 47.341646][ T3946] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.381361][ T3950] C: renamed from team_slave_0 (while UP) [ 47.406890][ T3946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.448861][ T3946] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.182: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.473522][ T3946] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.182: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.490104][ T3946] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.182: Failed to acquire dquot type 0 [ 47.501880][ T3946] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 47.513331][ T3957] wireguard0: entered promiscuous mode [ 47.518903][ T3957] wireguard0: entered allmulticast mode [ 47.528825][ T3946] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.182: mark_inode_dirty error [ 47.540335][ T3946] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.555490][ T3946] EXT4-fs (loop4): 1 orphan inode deleted [ 47.565562][ T3946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.598686][ T56] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.617350][ T3964] loop1: detected capacity change from 0 to 512 [ 47.624388][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 47.638652][ T3964] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.646580][ T3964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.657843][ T3964] EXT4-fs (loop1): 1 truncate cleaned up [ 47.663974][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.710869][ T3960] bond1: entered promiscuous mode [ 47.716041][ T3960] bond1: entered allmulticast mode [ 47.721481][ T3960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.727176][ T3945] Set syz1 is full, maxelem 65536 reached [ 47.736405][ T3960] bond1 (unregistering): Released all slaves [ 48.060409][ T3980] loop0: detected capacity change from 0 to 512 [ 48.078443][ T3980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.091919][ T3980] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.132306][ T3980] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.194: Failed to acquire dquot type 0 [ 48.158481][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.214790][ T3984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.271865][ T3984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.351326][ T3984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.420125][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.449069][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.459216][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.459761][ T3984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.508877][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.554291][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.585252][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 48.607470][ T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.620269][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 48.650794][ T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.659194][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.693819][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.203478][ T4021] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.238107][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.245402][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.253028][ T4023] bridge0: entered allmulticast mode [ 49.263088][ T4023] bridge_slave_1: left allmulticast mode [ 49.268934][ T4023] bridge_slave_1: left promiscuous mode [ 49.274739][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.282877][ T4023] bridge_slave_0: left allmulticast mode [ 49.288611][ T4023] bridge_slave_0: left promiscuous mode [ 49.294327][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.442082][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 49.761246][ T4063] bond_slave_1: entered promiscuous mode [ 49.767900][ T4063] bond_slave_1: left promiscuous mode [ 49.962829][ T4081] $Hÿ: renamed from bond0 (while UP) [ 50.000786][ T4081] $Hÿ: entered promiscuous mode [ 50.005933][ T4081] bond_slave_0: entered promiscuous mode [ 50.011786][ T4081] bond_slave_1: entered promiscuous mode [ 50.067395][ T4085] netlink: 96 bytes leftover after parsing attributes in process `syz.3.238'. [ 50.110773][ T4092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'. [ 50.195132][ T4098] syz_tun: entered allmulticast mode [ 50.221098][ T4102] loop1: detected capacity change from 0 to 164 [ 50.233217][ T4098] dvmrp1: entered allmulticast mode [ 50.245138][ T4106] syz_tun: entered allmulticast mode [ 50.260491][ T4102] process 'wÞ¡ÿ' launched '/dev/fd/6' with NULL argv: empty string added [ 50.291174][ T4104] netlink: 92 bytes leftover after parsing attributes in process `syz.2.246'. [ 50.291842][ T4102] wÞ¡ÿ: attempt to access beyond end of device [ 50.291842][ T4102] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.300244][ T4104] netem: unknown loss type 0 [ 50.320181][ T4104] netem: change failed [ 50.331755][ T4097] syz_tun: left allmulticast mode [ 50.361277][ T4102] wÞ¡ÿ: attempt to access beyond end of device [ 50.361277][ T4102] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.423275][ T4117] loop3: detected capacity change from 0 to 1024 [ 50.442754][ T4117] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.482006][ T4125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'. [ 50.501227][ T4117] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.250: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.516449][ T4117] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.250: Failed to acquire dquot type 0 [ 50.537280][ T4117] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.250: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.551800][ T4117] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.250: Invalid inode bitmap blk 0 in block_group 0 [ 50.564521][ T269] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.582937][ T4117] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 50.585683][ T269] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 50.611180][ T4117] EXT4-fs (loop3): 1 orphan inode deleted [ 50.625748][ T4117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.703720][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.717223][ T4135] loop0: detected capacity change from 0 to 1024 [ 50.756876][ T4135] EXT4-fs: Ignoring removed bh option [ 50.767974][ T4135] EXT4-fs: inline encryption not supported [ 50.782351][ T4135] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.799934][ T4135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 50.810090][ T4135] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.260: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.833119][ T4145] syz_tun: entered allmulticast mode [ 50.839800][ T4135] __quota_error: 652 callbacks suppressed [ 50.839814][ T4135] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 50.865245][ T4135] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.260: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.880111][ T4135] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 50.889026][ T4135] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.260: Failed to acquire dquot type 0 [ 50.900953][ T4135] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.911328][ T4135] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.260: mark_inode_dirty error [ 50.925669][ T4149] syz_tun: entered allmulticast mode [ 50.933351][ T4135] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.936274][ T4149] dvmrp1: entered allmulticast mode [ 50.965140][ T4148] syz_tun: left allmulticast mode [ 50.999106][ T4152] loop2: detected capacity change from 0 to 164 [ 51.029269][ T4152] wÞ¡ÿ: attempt to access beyond end of device [ 51.029269][ T4152] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.051784][ T29] audit: type=1326 audit(1755374674.419:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 51.062240][ T4152] wÞ¡ÿ: attempt to access beyond end of device [ 51.062240][ T4152] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.075214][ T29] audit: type=1326 audit(1755374674.419:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 51.075253][ T29] audit: type=1326 audit(1755374674.419:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 51.090352][ T4135] EXT4-fs (loop0): 1 orphan inode deleted [ 51.111527][ T29] audit: type=1326 audit(1755374674.419:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 51.111566][ T29] audit: type=1326 audit(1755374674.419:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 51.187162][ T29] audit: type=1326 audit(1755374674.419:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 51.219361][ T269] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.272908][ T269] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 51.281486][ T269] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 51.322471][ T4135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.406986][ T29] audit: type=1400 audit(1755374674.779:964): avc: denied { ioctl } for pid=4134 comm="syz.0.260" path="socket:[7027]" dev="sockfs" ino=7027 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.446109][ T4135] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.260: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.494198][ T4166] loop2: detected capacity change from 0 to 1024 [ 51.509926][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.532140][ T4166] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.557557][ T4166] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.272: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.614291][ T4166] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.272: Failed to acquire dquot type 0 [ 51.634567][ T4166] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.272: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.649654][ T4166] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.272: Invalid inode bitmap blk 0 in block_group 0 [ 51.662606][ T4166] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 51.671494][ T4166] EXT4-fs (loop2): 1 orphan inode deleted [ 51.672343][ T56] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.677649][ T4166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.714731][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 51.761965][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.003266][ T4197] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.034643][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.041965][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.051394][ T4199] bridge0: entered allmulticast mode [ 52.063600][ T4199] bridge_slave_1: left allmulticast mode [ 52.069430][ T4199] bridge_slave_1: left promiscuous mode [ 52.075341][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.086731][ T4199] bridge_slave_0: left allmulticast mode [ 52.092484][ T4199] bridge_slave_0: left promiscuous mode [ 52.098243][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.144212][ T4207] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 52.203442][ T4214] syz_tun: entered allmulticast mode [ 52.214091][ T4214] dvmrp1: entered allmulticast mode [ 52.231339][ T4213] syz_tun: left allmulticast mode [ 52.334801][ T4227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 52.563169][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 52.572730][ T4235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 52.617202][ T4239] veth0_vlan: entered allmulticast mode [ 52.638542][ T4239] ªªªªªª: renamed from vlan0 [ 52.671136][ T4241] vlan0: entered allmulticast mode [ 52.676366][ T4241] dummy0: entered allmulticast mode [ 52.870578][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.878070][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.888513][ T4250] bridge0: entered allmulticast mode [ 52.898488][ T4250] bridge_slave_1: left allmulticast mode [ 52.904169][ T4250] bridge_slave_1: left promiscuous mode [ 52.910700][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.918760][ T4250] bridge_slave_0: left allmulticast mode [ 52.924429][ T4250] bridge_slave_0: left promiscuous mode [ 52.930192][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.223298][ T4258] ip6gre1: entered allmulticast mode [ 53.598258][ T4281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.647343][ T4281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.712395][ T4285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.721263][ T4285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.757171][ T4281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.817069][ T4281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.934647][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.951004][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.959492][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.974376][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.985301][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.992624][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.013257][ T4292] bridge0: entered allmulticast mode [ 54.024732][ T4292] bridge_slave_1: left allmulticast mode [ 54.030629][ T4292] bridge_slave_1: left promiscuous mode [ 54.036556][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.043845][ T4295] netlink: 72 bytes leftover after parsing attributes in process `syz.4.325'. [ 54.053696][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 54.062710][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 54.082260][ T4292] bridge_slave_0: left allmulticast mode [ 54.088004][ T4292] bridge_slave_0: left promiscuous mode [ 54.093772][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.214676][ T4311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.223695][ T4311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.776658][ T4325] wg2: entered promiscuous mode [ 54.781592][ T4325] wg2: entered allmulticast mode [ 55.062323][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.069740][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.077828][ T4342] bridge0: entered allmulticast mode [ 55.091349][ T4342] bridge_slave_1: left allmulticast mode [ 55.097280][ T4342] bridge_slave_1: left promiscuous mode [ 55.103141][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.125949][ T4342] bridge_slave_0: left promiscuous mode [ 55.131642][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.167498][ T4348] loop3: detected capacity change from 0 to 512 [ 55.179159][ T4348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.192864][ T4348] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.236011][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.318254][ T4361] SELinux: failed to load policy [ 55.487759][ T4375] loop4: detected capacity change from 0 to 512 [ 55.503243][ T4375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.519164][ T4375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.531812][ T4375] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.544178][ T4375] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.356: corrupted xattr block 19: overlapping e_value [ 55.560777][ T4375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.570079][ T4375] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.356: corrupted xattr block 19: overlapping e_value [ 55.585663][ T4375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.594902][ T4375] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.356: corrupted xattr block 19: overlapping e_value [ 55.620858][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.995034][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 55.995115][ T29] audit: type=1326 audit(1755374679.359:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f07febe9 code=0x7fc00000 [ 56.048229][ T29] audit: type=1326 audit(1755374679.419:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f07febe9 code=0x7ffc0000 [ 56.071735][ T29] audit: type=1326 audit(1755374679.419:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f07febe9 code=0x7ffc0000 [ 56.104609][ T29] audit: type=1326 audit(1755374679.469:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff3f07febe9 code=0x7ffc0000 [ 56.128055][ T29] audit: type=1326 audit(1755374679.469:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f07febe9 code=0x7ffc0000 [ 56.151623][ T29] audit: type=1326 audit(1755374679.469:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f07febe9 code=0x7ffc0000 [ 56.223522][ T29] audit: type=1326 audit(1755374679.589:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 56.246989][ T29] audit: type=1326 audit(1755374679.589:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 56.278808][ T29] audit: type=1326 audit(1755374679.589:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 56.302108][ T29] audit: type=1326 audit(1755374679.589:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301e4ebe9 code=0x7ffc0000 [ 56.303185][ T4392] serio: Serial port ptm0 [ 56.408043][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 56.417841][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 56.482552][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 56.554881][ T4422] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.632999][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 56.693127][ T4434] loop4: detected capacity change from 0 to 128 [ 56.729424][ T4434] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.744409][ T4434] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.764644][ T4441] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.385' sets config #3 [ 56.812521][ T4445] batman_adv: batadv0: Adding interface: dummy0 [ 56.819061][ T4445] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.856637][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.863741][ T4445] batman_adv: batadv0: Interface activated: dummy0 [ 56.904100][ T4451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.911365][ T4451] IPv6: NLM_F_CREATE should be set when creating new route [ 57.048074][ T4465] wireguard0: entered promiscuous mode [ 57.053736][ T4465] wireguard0: entered allmulticast mode [ 57.353787][ T4483] loop2: detected capacity change from 0 to 128 [ 57.363805][ T4483] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 57.399566][ T4483] __nla_validate_parse: 1 callbacks suppressed [ 57.399584][ T4483] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.402'. [ 57.522439][ T4481] Set syz1 is full, maxelem 65536 reached [ 58.029151][ T4536] loop0: detected capacity change from 0 to 512 [ 58.087549][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.101426][ T4536] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.130746][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.472906][ T4579] syz.1.441 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.539443][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810411e200: rx timeout, send abort [ 58.547724][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810411e000: rx timeout, send abort [ 58.556333][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810411e200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.570667][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810411e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.729781][ T23] IPVS: starting estimator thread 0... [ 58.808961][ T4607] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.831277][ T4609] loop2: detected capacity change from 0 to 512 [ 58.838018][ T4601] IPVS: using max 2352 ests per chain, 117600 per kthread [ 58.862878][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.877079][ T4609] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.972596][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.011491][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 59.036312][ T4679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4679 comm=syz.2.458 [ 59.065630][ T4679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 59.522640][ T4700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'. [ 59.660093][ T4707] random: crng reseeded on system resumption [ 59.768295][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 59.978897][ T4734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'. [ 59.988055][ T4734] netlink: 108 bytes leftover after parsing attributes in process `syz.4.480'. [ 60.001085][ T4734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'. [ 60.004142][ T4736] openvswitch: netlink: Message has 6 unknown bytes. [ 60.010055][ T4734] netlink: 108 bytes leftover after parsing attributes in process `syz.4.480'. [ 60.025829][ T4734] netlink: 84 bytes leftover after parsing attributes in process `syz.4.480'. [ 60.157139][ T4745] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 60.269213][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 60.286846][ T4745] bond0: (slave batadv1): Enslaving as a backup interface with an up link [ 60.311508][ T4755] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 60.338185][ T4755] bond0 (unregistering): Released all slaves [ 60.413344][ T4764] loop0: detected capacity change from 0 to 2048 [ 60.429368][ T4766] loop2: detected capacity change from 0 to 164 [ 60.452537][ T4766] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.486209][ T4764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.517096][ T4764] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.529167][ T4766] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.551699][ T4766] Symlink component flag not implemented [ 60.557451][ T4766] Symlink component flag not implemented [ 60.574691][ T4766] Symlink component flag not implemented (7) [ 60.580776][ T4766] Symlink component flag not implemented (116) [ 60.622818][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.705706][ T4788] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 60.727939][ T4784] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.746563][ T4792] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 60.754420][ T4792] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 61.155855][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 61.155874][ T29] audit: type=1400 audit(1755374684.529:1812): avc: denied { nlmsg_read } for pid=4810 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.276797][ T29] audit: type=1400 audit(1755374684.649:1813): avc: denied { audit_write } for pid=4823 comm="syz.1.516" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.297937][ T29] audit: type=1107 audit(1755374684.649:1814): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ì­' [ 61.442685][ T29] audit: type=1326 audit(1755374684.779:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3f07f5ba7 code=0x7ffc0000 [ 61.466000][ T29] audit: type=1326 audit(1755374684.779:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3f079add9 code=0x7ffc0000 [ 61.489332][ T29] audit: type=1326 audit(1755374684.779:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f07febe9 code=0x7ffc0000 [ 61.497957][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.512677][ T29] audit: type=1326 audit(1755374684.779:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3f07f5ba7 code=0x7ffc0000 [ 61.546511][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.554598][ T4831] loop2: detected capacity change from 0 to 128 [ 61.579357][ T29] audit: type=1400 audit(1755374684.949:1819): avc: denied { mount } for pid=4828 comm="syz.2.519" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 62.060345][ T4854] sd 0:0:1:0: device reset [ 62.060505][ T29] audit: type=1400 audit(1755374685.429:1820): avc: denied { ioctl } for pid=4851 comm="syz.4.528" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.198019][ T4866] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.256595][ T4866] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.344724][ T4866] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.493948][ T4866] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.547075][ T29] audit: type=1400 audit(1755374685.699:1821): avc: denied { watch_reads } for pid=4875 comm="syz.3.539" path="/80/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.648662][ T4623] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.658565][ T4889] loop3: detected capacity change from 0 to 4096 [ 62.677166][ T4623] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.677475][ T4889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.694599][ T4623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.775224][ T4650] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969536][ T4914] __nla_validate_parse: 6 callbacks suppressed [ 62.969553][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 63.230029][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.867035][ T4980] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.886849][ T4982] loop3: detected capacity change from 0 to 512 [ 63.893795][ T4982] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.902198][ T4982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.913192][ T4982] EXT4-fs (loop3): 1 truncate cleaned up [ 63.920952][ T4982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.971875][ T4986] syz.0.580 (4986) used greatest stack depth: 10064 bytes left [ 65.017998][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.106403][ T4997] Set syz1 is full, maxelem 65536 reached [ 65.128484][ T5024] bridge: RTM_NEWNEIGH with invalid ether address [ 65.150096][ T4987] syz.0.580 (4987) used greatest stack depth: 7304 bytes left [ 65.230478][ T5039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.359231][ T5045] loop0: detected capacity change from 0 to 512 [ 65.367668][ T5045] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.603: Invalid inode bitmap blk 4 in block_group 0 [ 65.381075][ T5045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.445874][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.466690][ T5048] loop0: detected capacity change from 0 to 512 [ 65.473328][ T5048] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.480308][ T5048] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.491481][ T5048] EXT4-fs (loop0): 1 truncate cleaned up [ 65.497933][ T5048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.760500][ T5059] uprobe: syz.1.608:5059 failed to unregister, leaking uprobe [ 65.768236][ T5059] uprobe: syz.1.608:5059 failed to unregister, leaking uprobe [ 65.818623][ T5063] loop1: detected capacity change from 0 to 512 [ 65.874326][ T5063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.908692][ T5063] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.610: corrupted in-inode xattr: overlapping e_value [ 65.928572][ T5063] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.610: couldn't read orphan inode 15 (err -117) [ 65.942534][ T5063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.227433][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.388368][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.462798][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 66.462865][ T29] audit: type=1326 audit(1755374689.829:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.492762][ T29] audit: type=1326 audit(1755374689.829:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.516257][ T29] audit: type=1326 audit(1755374689.829:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.539662][ T29] audit: type=1326 audit(1755374689.829:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.563056][ T29] audit: type=1326 audit(1755374689.829:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.586355][ T29] audit: type=1326 audit(1755374689.839:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.609789][ T29] audit: type=1326 audit(1755374689.839:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 66.741097][ T29] audit: type=1400 audit(1755374690.109:1997): avc: denied { create } for pid=5107 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.762301][ T29] audit: type=1400 audit(1755374690.129:1998): avc: denied { read } for pid=5107 comm="syz.3.629" path="socket:[11791]" dev="sockfs" ino=11791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.842514][ T5114] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.918684][ T5121] netlink: 240 bytes leftover after parsing attributes in process `syz.3.629'. [ 66.925270][ T29] audit: type=1400 audit(1755374690.289:1999): avc: denied { write } for pid=5107 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.026042][ T5116] loop4: detected capacity change from 0 to 256 [ 67.032566][ T5116] vfat: Unknown parameter '?—÷æƒÁ[ÀJÌ /ͨ[ë³i`$ðå&¢u“¬î+ 8eUßéí7ùÍY· ÷v¯ U¥½ Ö›>å—^úÄÑ”&͘€g£x{3G醾:ÏMµåóoÍ4<9ß³D‹Æ¿±ž´ÿ"صaÃB©Õ.Óך‹Ç[ýÛíªM«äzÑSí%ø+as CâC8‹Ç«(â÷s×5ǺÉÑl°F„AÁ󗑬.¥ÂÐãa¢†žøpèt˜A¥™âX¿' [ 67.385275][ T5143] loop3: detected capacity change from 0 to 8192 [ 67.609080][ T5168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.656946][ T5175] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 67.676026][ T5168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.721650][ T5175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.733432][ T5179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.749327][ T5179] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 67.770898][ T5179] bond1: (slave vti0): Error -95 calling set_mac_address [ 67.837205][ T5168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.927824][ T5168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.967856][ T5192] loop3: detected capacity change from 0 to 512 [ 67.987135][ T5192] EXT4-fs (loop3): too many log groups per flexible block group [ 67.994897][ T5192] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 68.002233][ T5192] EXT4-fs (loop3): mount failed [ 68.017609][ T4648] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034205][ T4648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.063734][ T4648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.087689][ T4648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.347671][ T5219] loop4: detected capacity change from 0 to 512 [ 68.354310][ T5219] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.361618][ T5221] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 68.371969][ T5219] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.389774][ T5221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.399465][ T5219] EXT4-fs (loop4): 1 truncate cleaned up [ 68.410520][ T5219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.425731][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 68.434792][ T5221] bond2: (slave batadv1): making interface the new active one [ 68.443848][ T5221] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 68.479081][ T5225] netlink: 68 bytes leftover after parsing attributes in process `syz.2.673'. [ 68.600083][ T5235] loop3: detected capacity change from 0 to 512 [ 68.609600][ T5235] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.623954][ T5235] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #15: comm syz.3.677: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 68.696505][ T3305] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 68.736980][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 68.795819][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 68.814706][ T5252] IPVS: Error joining to the multicast group [ 68.889331][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 68.905741][ T5262] netlink: 256 bytes leftover after parsing attributes in process `syz.3.689'. [ 68.968144][ T5272] loop1: detected capacity change from 0 to 1024 [ 68.977870][ T5272] EXT4-fs: Ignoring removed orlov option [ 68.983816][ T5272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.997201][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 69.011874][ T5272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.021808][ T5275] bond1: entered promiscuous mode [ 69.029028][ T5275] bond1: entered allmulticast mode [ 69.034988][ T5275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.051483][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.062803][ T5275] bond1 (unregistering): Released all slaves [ 69.076920][ T5270] : renamed from bond0 (while UP) [ 69.099518][ T5280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.695'. [ 69.228371][ T5291] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 69.277725][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.321810][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.350380][ T5295] vlan2: entered allmulticast mode [ 69.355606][ T5295] batadv0: entered allmulticast mode [ 69.365426][ T5295] bond0: (slave vlan2): making interface the new active one [ 69.375353][ T5295] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 69.401909][ T5301] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 69.458152][ T5301] bond0: entered promiscuous mode [ 69.463275][ T5301] bond0: entered allmulticast mode [ 69.471710][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.493888][ T5301] bridge0: entered promiscuous mode [ 69.499366][ T5301] bridge0: entered allmulticast mode [ 69.507297][ T5301] bond0: (slave bridge0): Enslaving as a backup interface with an up link [ 69.565681][ T269] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 69.607633][ T5315] syz_tun: entered promiscuous mode [ 69.613236][ T5315] vlan2: entered promiscuous mode [ 69.669128][ T5314] delete_channel: no stack [ 69.674097][ T5319] loop4: detected capacity change from 0 to 512 [ 69.681475][ T5319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.685844][ T269] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 69.703512][ T5319] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.710: bg 0: block 4: invalid block bitmap [ 69.719350][ T5319] EXT4-fs (loop4): Remounting filesystem read-only [ 69.726703][ T5319] EXT4-fs (loop4): 1 truncate cleaned up [ 69.734011][ T5319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.748563][ T5319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.757952][ T5325] loop3: detected capacity change from 0 to 512 [ 69.764853][ T5325] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.773308][ T5325] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.789373][ T5325] EXT4-fs (loop3): 1 truncate cleaned up [ 69.796413][ T5325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.969594][ T5342] loop0: detected capacity change from 0 to 1024 [ 69.979213][ T5342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.013789][ T5347] sch_fq: defrate 0 ignored. [ 70.022104][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.074315][ T5351] loop1: detected capacity change from 0 to 1024 [ 70.097201][ T5351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.143525][ T5351] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.725: Allocating blocks 449-513 which overlap fs metadata [ 70.169591][ T5350] EXT4-fs (loop1): pa ffff888104497690: logic 48, phys. 177, len 21 [ 70.177678][ T5350] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 70.238296][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.423971][ T5381] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 70.528795][ T5381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.582887][ T5383] bond3: (slave gretap1): making interface the new active one [ 70.618788][ T5383] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 70.637338][ T5381] vlan3: entered allmulticast mode [ 70.642500][ T5381] bond3: entered allmulticast mode [ 70.647701][ T5381] gretap1: entered allmulticast mode [ 70.667638][ T5381] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 70.741557][ T5385] tipc: Started in network mode [ 70.746608][ T5385] tipc: Node identity 66094f340d5b, cluster identity 4711 [ 70.754073][ T5385] tipc: Enabled bearer , priority 0 [ 70.772553][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.792699][ T5384] tipc: Resetting bearer [ 70.812466][ T5384] tipc: Disabling bearer [ 70.872481][ T5395] loop3: detected capacity change from 0 to 512 [ 70.888314][ T5395] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.901986][ T5395] EXT4-fs (loop3): 1 truncate cleaned up [ 70.908082][ T5395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.971257][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.999796][ T5409] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 71.045825][ T5413] loop3: detected capacity change from 0 to 512 [ 71.052609][ T5413] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.072962][ T5413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.093544][ T5413] EXT4-fs (loop3): 1 truncate cleaned up [ 71.103877][ T5413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.283965][ T5419] loop4: detected capacity change from 0 to 32768 [ 71.316417][ T5419] loop4: p1 p2 p3 < p5 p6 > [ 71.326196][ T5419] loop4: p2 size 16775168 extends beyond EOD, truncated [ 71.379461][ T5419] loop4: p5 start 4294970168 is beyond EOD, truncated [ 71.623454][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 71.623469][ T29] audit: type=1326 audit(1755374694.989:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.677135][ T29] audit: type=1326 audit(1755374694.989:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.700625][ T29] audit: type=1326 audit(1755374694.989:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.724113][ T29] audit: type=1326 audit(1755374694.989:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.747852][ T29] audit: type=1326 audit(1755374694.989:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.771212][ T29] audit: type=1326 audit(1755374694.989:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.794581][ T29] audit: type=1326 audit(1755374694.989:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.818031][ T29] audit: type=1326 audit(1755374695.029:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea30f2ebe9 code=0x7ffc0000 [ 71.841369][ T29] audit: type=1400 audit(1755374695.039:2427): avc: denied { write } for pid=5438 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.876876][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'. [ 71.885901][ T5441] netlink: 108 bytes leftover after parsing attributes in process `syz.1.759'. [ 71.894870][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 71.956479][ T5447] ref_ctr increment failed for inode: 0x392 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881042c2e00 [ 71.980678][ T5446] uprobe: syz.1.762:5446 failed to unregister, leaking uprobe [ 71.993498][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.014952][ T29] audit: type=1326 audit(1755374695.379:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d1c3e5ba7 code=0x7ffc0000 [ 72.122151][ T5468] wireguard0: entered promiscuous mode [ 72.127721][ T5468] wireguard0: entered allmulticast mode [ 72.175856][ T5470] bond4: entered promiscuous mode [ 72.181009][ T5470] bond4: entered allmulticast mode [ 72.186933][ T5470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 72.198614][ T5470] bond4 (unregistering): Released all slaves [ 72.248858][ T5480] loop3: detected capacity change from 0 to 512 [ 72.257476][ T5480] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.266041][ T5480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.289703][ T5480] EXT4-fs (loop3): 1 truncate cleaned up [ 72.295850][ T5480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.417269][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.424744][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.442644][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.450207][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.472168][ T5499] bond0: (slave vlan2): Releasing active interface [ 72.796542][ T5480] ================================================================== [ 72.804682][ T5480] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 72.812525][ T5480] [ 72.814850][ T5480] write to 0xffffea0004acb1d8 of 8 bytes by task 5497 on cpu 0: [ 72.822484][ T5480] __filemap_remove_folio+0x1a5/0x2a0 [ 72.827875][ T5480] folio_unmap_invalidate+0x1dd/0x360 [ 72.833277][ T5480] invalidate_inode_pages2_range+0x27c/0x3d0 [ 72.839310][ T5480] filemap_invalidate_pages+0x16d/0x1a0 [ 72.844868][ T5480] kiocb_invalidate_pages+0x6e/0x80 [ 72.850083][ T5480] __iomap_dio_rw+0x5d4/0x1250 [ 72.854861][ T5480] iomap_dio_rw+0x40/0x90 [ 72.859192][ T5480] ext4_file_write_iter+0xad9/0xf00 [ 72.864403][ T5480] iter_file_splice_write+0x669/0x9e0 [ 72.869778][ T5480] direct_splice_actor+0x156/0x2a0 [ 72.874888][ T5480] splice_direct_to_actor+0x312/0x680 [ 72.880262][ T5480] do_splice_direct+0xda/0x150 [ 72.885031][ T5480] do_sendfile+0x380/0x650 [ 72.889464][ T5480] __x64_sys_sendfile64+0x105/0x150 [ 72.894698][ T5480] x64_sys_call+0x2bb0/0x2ff0 [ 72.899381][ T5480] do_syscall_64+0xd2/0x200 [ 72.903891][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.909806][ T5480] [ 72.912132][ T5480] read to 0xffffea0004acb1d8 of 8 bytes by task 5480 on cpu 1: [ 72.919688][ T5480] folio_mapping+0xa1/0x120 [ 72.924207][ T5480] lru_add+0x80/0x430 [ 72.928198][ T5480] folio_batch_move_lru+0x177/0x230 [ 72.933390][ T5480] lru_add_drain_cpu+0x77/0x250 [ 72.938237][ T5480] __folio_batch_release+0x44/0xb0 [ 72.943346][ T5480] filemap_splice_read+0x59e/0x740 [ 72.948456][ T5480] ext4_file_splice_read+0x8f/0xb0 [ 72.953594][ T5480] splice_direct_to_actor+0x26c/0x680 [ 72.958968][ T5480] do_splice_direct+0xda/0x150 [ 72.963742][ T5480] do_sendfile+0x380/0x650 [ 72.968180][ T5480] __x64_sys_sendfile64+0x105/0x150 [ 72.973390][ T5480] x64_sys_call+0x2bb0/0x2ff0 [ 72.978070][ T5480] do_syscall_64+0xd2/0x200 [ 72.982579][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.988475][ T5480] [ 72.990791][ T5480] value changed: 0xffff8881085360e8 -> 0x0000000000000000 [ 72.997888][ T5480] [ 73.000219][ T5480] Reported by Kernel Concurrency Sanitizer on: [ 73.006374][ T5480] CPU: 1 UID: 0 PID: 5480 Comm: +}[@ Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 73.018271][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.028330][ T5480] ================================================================== [ 73.192508][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.