last executing test programs: 24.471276156s ago: executing program 4 (id=262): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 24.336324049s ago: executing program 4 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) 24.28085336s ago: executing program 4 (id=272): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 24.174881802s ago: executing program 4 (id=275): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 24.105292013s ago: executing program 4 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 20.254182155s ago: executing program 4 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 20.206092486s ago: executing program 32 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 18.156617163s ago: executing program 2 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18.132486103s ago: executing program 2 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 17.996286256s ago: executing program 2 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 17.955563327s ago: executing program 2 (id=395): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") mremap(&(0x7f000030f000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffc000/0x3000)=nil) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 17.305581829s ago: executing program 2 (id=404): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 16.869076837s ago: executing program 2 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 16.864994927s ago: executing program 33 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 14.01105089s ago: executing program 5 (id=508): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000001300), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 13.984844051s ago: executing program 5 (id=510): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 13.947804311s ago: executing program 5 (id=513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 13.789405234s ago: executing program 5 (id=520): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") mremap(&(0x7f000030f000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffc000/0x3000)=nil) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 13.359041302s ago: executing program 5 (id=528): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181242, 0xd5c7b21faa1a110b) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000001680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 13.034083898s ago: executing program 5 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}]}, 0x44}}, 0x0) 13.018101409s ago: executing program 34 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}]}, 0x44}}, 0x0) 1.820622746s ago: executing program 1 (id=973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x849}, 0x0) 1.779478597s ago: executing program 1 (id=976): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x80000000, 0x6}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1.632503049s ago: executing program 1 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) 1.311869505s ago: executing program 1 (id=996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 1.05408397s ago: executing program 3 (id=1003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) r3 = dup3(r1, r2, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 1.05334456s ago: executing program 6 (id=1004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.012941891s ago: executing program 3 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 999.155081ms ago: executing program 6 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) 917.464713ms ago: executing program 3 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 842.817304ms ago: executing program 6 (id=1012): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 813.822805ms ago: executing program 6 (id=1014): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 753.019946ms ago: executing program 6 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 752.185796ms ago: executing program 6 (id=1025): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 424.295312ms ago: executing program 0 (id=1028): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a00000040", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 423.844292ms ago: executing program 7 (id=1029): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x80000000}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000002200)=[{}, {}], 0x0) 365.400453ms ago: executing program 1 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 365.003353ms ago: executing program 1 (id=1031): syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f36, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) 304.382484ms ago: executing program 7 (id=1032): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x566bf000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 302.741324ms ago: executing program 0 (id=1033): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x24, 0x6, 0x1101, 0x1}) 286.063524ms ago: executing program 0 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 262.079325ms ago: executing program 0 (id=1035): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) 169.432287ms ago: executing program 7 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 163.418326ms ago: executing program 0 (id=1037): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0xfffffffffffffd81, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 148.207237ms ago: executing program 0 (id=1038): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a", 0x2) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 140.788827ms ago: executing program 7 (id=1039): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 106.910268ms ago: executing program 3 (id=1040): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000380)={0x10202b, 0x3, 0x8}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) 85.128288ms ago: executing program 3 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 58.254939ms ago: executing program 3 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100, 0x0, 0x86}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) 46.308579ms ago: executing program 7 (id=1043): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=1044): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9001, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 21.316645][ T29] audit: type=1400 audit(1753558575.191:62): avc: denied { mounton } for pid=3277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.317511][ T3277] cgroup: Unknown subsys name 'net' [ 21.339364][ T29] audit: type=1400 audit(1753558575.191:63): avc: denied { mount } for pid=3277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.366717][ T29] audit: type=1400 audit(1753558575.221:64): avc: denied { unmount } for pid=3277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.519868][ T3277] cgroup: Unknown subsys name 'cpuset' [ 21.525923][ T3277] cgroup: Unknown subsys name 'rlimit' [ 21.694902][ T29] audit: type=1400 audit(1753558575.571:65): avc: denied { setattr } for pid=3277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.718207][ T29] audit: type=1400 audit(1753558575.571:66): avc: denied { create } for pid=3277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.738817][ T29] audit: type=1400 audit(1753558575.571:67): avc: denied { write } for pid=3277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.746323][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.759153][ T29] audit: type=1400 audit(1753558575.571:68): avc: denied { read } for pid=3277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.788119][ T29] audit: type=1400 audit(1753558575.581:69): avc: denied { mounton } for pid=3277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.801955][ T3277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.812954][ T29] audit: type=1400 audit(1753558575.581:70): avc: denied { mount } for pid=3277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.844943][ T29] audit: type=1400 audit(1753558575.641:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.518932][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 23.612734][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.619964][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.627194][ T3304] bridge_slave_0: entered allmulticast mode [ 23.633680][ T3304] bridge_slave_0: entered promiscuous mode [ 23.640206][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.647295][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.654561][ T3304] bridge_slave_1: entered allmulticast mode [ 23.660826][ T3304] bridge_slave_1: entered promiscuous mode [ 23.682122][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.696120][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 23.709805][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.742728][ T3304] team0: Port device team_slave_0 added [ 23.759137][ T3304] team0: Port device team_slave_1 added [ 23.797105][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.804182][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.830167][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.848664][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.855802][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.862963][ T3309] bridge_slave_0: entered allmulticast mode [ 23.869212][ T3309] bridge_slave_0: entered promiscuous mode [ 23.875699][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.882743][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.908711][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.919419][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 23.940817][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.948023][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.955245][ T3309] bridge_slave_1: entered allmulticast mode [ 23.961932][ T3309] bridge_slave_1: entered promiscuous mode [ 23.991416][ T3304] hsr_slave_0: entered promiscuous mode [ 23.997473][ T3304] hsr_slave_1: entered promiscuous mode [ 24.003512][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.027074][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.040082][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.080746][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.087828][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.094992][ T3319] bridge_slave_0: entered allmulticast mode [ 24.101500][ T3319] bridge_slave_0: entered promiscuous mode [ 24.121749][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.128819][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.136102][ T3319] bridge_slave_1: entered allmulticast mode [ 24.142543][ T3319] bridge_slave_1: entered promiscuous mode [ 24.153457][ T3309] team0: Port device team_slave_0 added [ 24.173985][ T3309] team0: Port device team_slave_1 added [ 24.179692][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.193862][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.224867][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.247590][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.254584][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.280586][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.301327][ T3319] team0: Port device team_slave_0 added [ 24.307041][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.314100][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.321338][ T3314] bridge_slave_0: entered allmulticast mode [ 24.327638][ T3314] bridge_slave_0: entered promiscuous mode [ 24.334130][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.341164][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.367128][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.387311][ T3319] team0: Port device team_slave_1 added [ 24.393749][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400831][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.407994][ T3314] bridge_slave_1: entered allmulticast mode [ 24.414273][ T3314] bridge_slave_1: entered promiscuous mode [ 24.445246][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.462167][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.469115][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.495138][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.506233][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.513301][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.539212][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.550857][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.573487][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.580603][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.587769][ T3313] bridge_slave_0: entered allmulticast mode [ 24.594064][ T3313] bridge_slave_0: entered promiscuous mode [ 24.602873][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.609945][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.617067][ T3313] bridge_slave_1: entered allmulticast mode [ 24.623559][ T3313] bridge_slave_1: entered promiscuous mode [ 24.638660][ T3314] team0: Port device team_slave_0 added [ 24.646235][ T3309] hsr_slave_0: entered promiscuous mode [ 24.652389][ T3309] hsr_slave_1: entered promiscuous mode [ 24.658078][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.665641][ T3309] Cannot create hsr debugfs directory [ 24.678795][ T3314] team0: Port device team_slave_1 added [ 24.694910][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.719537][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.726497][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.752452][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.769397][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.781427][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.788452][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.814437][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.849798][ T3319] hsr_slave_0: entered promiscuous mode [ 24.855717][ T3319] hsr_slave_1: entered promiscuous mode [ 24.861595][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.869151][ T3319] Cannot create hsr debugfs directory [ 24.874815][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.895754][ T3314] hsr_slave_0: entered promiscuous mode [ 24.901747][ T3314] hsr_slave_1: entered promiscuous mode [ 24.907524][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.915106][ T3314] Cannot create hsr debugfs directory [ 24.921233][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.930187][ T3313] team0: Port device team_slave_0 added [ 24.938759][ T3313] team0: Port device team_slave_1 added [ 24.949194][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.969993][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.001734][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.008675][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.034767][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.047992][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.054974][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.080913][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.150196][ T3313] hsr_slave_0: entered promiscuous mode [ 25.156099][ T3313] hsr_slave_1: entered promiscuous mode [ 25.161974][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.169548][ T3313] Cannot create hsr debugfs directory [ 25.229156][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.237717][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.248273][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.257589][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.301139][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.314333][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.321365][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.330491][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.338917][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.365561][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.389957][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.397020][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.405991][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.413038][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.424460][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.434346][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.443509][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.453796][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.491272][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.504161][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.517417][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.532407][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.540888][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.551099][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.568234][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.575466][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.585654][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.601845][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.609082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.621415][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.636190][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.643250][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.663905][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.670982][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.686153][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.720468][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.729171][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.754722][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.765247][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.783318][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.797655][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.821967][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.829047][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.846185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.853295][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.876216][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.885933][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.901343][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.908453][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.920180][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.938925][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.945984][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.954822][ T3304] veth0_vlan: entered promiscuous mode [ 25.990075][ T3304] veth1_vlan: entered promiscuous mode [ 26.025741][ T3304] veth0_macvtap: entered promiscuous mode [ 26.041726][ T3304] veth1_macvtap: entered promiscuous mode [ 26.085729][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.100855][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.122508][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.133849][ T3309] veth0_vlan: entered promiscuous mode [ 26.142645][ T3314] veth0_vlan: entered promiscuous mode [ 26.150049][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.158898][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.167713][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.176484][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.190490][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.200271][ T3309] veth1_vlan: entered promiscuous mode [ 26.207221][ T3314] veth1_vlan: entered promiscuous mode [ 26.255612][ T3314] veth0_macvtap: entered promiscuous mode [ 26.268002][ T3314] veth1_macvtap: entered promiscuous mode [ 26.289061][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.296363][ T3309] veth0_macvtap: entered promiscuous mode [ 26.321195][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.339503][ T3309] veth1_macvtap: entered promiscuous mode [ 26.347033][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.357053][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.365867][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.374772][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.383521][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.394366][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 26.394377][ T29] audit: type=1400 audit(1753558580.271:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.424552][ T29] audit: type=1400 audit(1753558580.271:91): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.448535][ T29] audit: type=1400 audit(1753558580.271:92): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.479818][ T29] audit: type=1400 audit(1753558580.271:93): avc: denied { map_create } for pid=3471 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.483805][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.498574][ T29] audit: type=1400 audit(1753558580.271:94): avc: denied { perfmon } for pid=3471 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.498599][ T29] audit: type=1400 audit(1753558580.271:95): avc: denied { map_read map_write } for pid=3471 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.510669][ T3313] veth0_vlan: entered promiscuous mode [ 26.526256][ T29] audit: type=1400 audit(1753558580.271:96): avc: denied { prog_load } for pid=3471 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.526278][ T29] audit: type=1400 audit(1753558580.271:97): avc: denied { bpf } for pid=3471 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.572265][ T3472] loop1: detected capacity change from 0 to 2048 [ 26.589914][ T29] audit: type=1400 audit(1753558580.281:98): avc: denied { prog_run } for pid=3471 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.599673][ T3319] veth0_vlan: entered promiscuous mode [ 26.630817][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.640969][ T3294] loop1: p1 < > p4 [ 26.646075][ T3294] loop1: p4 size 8388608 extends beyond EOD, truncated [ 26.654121][ T3313] veth1_vlan: entered promiscuous mode [ 26.662411][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.662726][ T3472] loop1: p1 < > p4 [ 26.671258][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.683946][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.692884][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.702692][ T3472] loop1: p4 size 8388608 extends beyond EOD, truncated [ 26.706058][ T3319] veth1_vlan: entered promiscuous mode [ 26.716082][ T2996] loop1: p1 < > p4 [ 26.723097][ T2996] loop1: p4 size 8388608 extends beyond EOD, [ 26.723105][ T3313] veth0_macvtap: entered promiscuous mode [ 26.723113][ T2996] truncated [ 26.724304][ T3313] veth1_macvtap: entered promiscuous mode [ 26.788487][ T3319] veth0_macvtap: entered promiscuous mode [ 26.798543][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 26.811227][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 26.837383][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.850188][ T3319] veth1_macvtap: entered promiscuous mode [ 26.870926][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.878868][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.896151][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.920450][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.929483][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.938187][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.938545][ T29] audit: type=1400 audit(1753558580.811:99): avc: denied { create } for pid=3479 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.947096][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.997772][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.006532][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.015317][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.024032][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.102977][ T3493] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 27.197424][ T3512] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 27.205360][ T3512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'. [ 27.214945][ T3512] dummy0: entered promiscuous mode [ 27.222193][ T3512] bridge0: port 3(dummy0) entered blocking state [ 27.228624][ T3512] bridge0: port 3(dummy0) entered disabled state [ 27.235900][ T3512] dummy0: entered allmulticast mode [ 27.242566][ T3512] bridge0: port 3(dummy0) entered blocking state [ 27.248973][ T3512] bridge0: port 3(dummy0) entered forwarding state [ 27.451558][ T3540] bridge0: entered promiscuous mode [ 27.457992][ T3540] bridge0: port 3(macsec1) entered blocking state [ 27.464577][ T3540] bridge0: port 3(macsec1) entered disabled state [ 27.472498][ T3540] macsec1: entered allmulticast mode [ 27.477818][ T3540] bridge0: entered allmulticast mode [ 27.484118][ T3540] macsec1: left allmulticast mode [ 27.489303][ T3540] bridge0: left allmulticast mode [ 27.494799][ T3540] bridge0: left promiscuous mode [ 27.743919][ T3566] process 'syz.3.31' launched './file0' with NULL argv: empty string added [ 28.028972][ T3592] netlink: 'syz.3.43': attribute type 6 has an invalid length. [ 28.596312][ T3620] loop4: detected capacity change from 0 to 2048 [ 28.612570][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.635383][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.695103][ T3627] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 28.736434][ T3631] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 28.885322][ T3644] netlink: 264 bytes leftover after parsing attributes in process `syz.1.64'. [ 28.894277][ T3644] netlink: 56 bytes leftover after parsing attributes in process `syz.1.64'. [ 29.080811][ T3668] netlink: 108 bytes leftover after parsing attributes in process `syz.4.74'. [ 29.104964][ T3672] bridge: RTM_NEWNEIGH with invalid ether address [ 29.171531][ T3680] loop4: detected capacity change from 0 to 512 [ 29.191847][ T3680] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.205011][ T3680] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 29.214058][ T3680] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.81: attempt to clear invalid blocks 2 len 1 [ 29.228700][ T3680] EXT4-fs (loop4): Remounting filesystem read-only [ 29.235723][ T3680] EXT4-fs (loop4): 1 truncate cleaned up [ 29.242193][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.273298][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.483232][ T3710] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.499938][ T3701] Falling back ldisc for ttyS3. [ 29.499938][ T3710] ip6gre1: entered promiscuous mode [ 29.499953][ T3710] ip6gre1: entered allmulticast mode [ 29.587227][ T3719] netlink: 'syz.3.93': attribute type 13 has an invalid length. [ 29.715776][ T3741] netlink: 'syz.4.98': attribute type 10 has an invalid length. [ 29.723494][ T3741] netlink: 40 bytes leftover after parsing attributes in process `syz.4.98'. [ 29.751943][ T3741] batman_adv: batadv0: Adding interface: macvlan0 [ 29.758502][ T3741] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.794324][ T3735] infiniband syz1: set active [ 29.799028][ T3735] infiniband syz1: added syz_tun [ 29.804833][ T3741] batman_adv: batadv0: Interface activated: macvlan0 [ 29.846458][ T3735] RDS/IB: syz1: added [ 29.855035][ T3735] smc: adding ib device syz1 with port count 1 [ 29.861987][ T3735] smc: ib device syz1 port 1 has pnetid [ 29.907981][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 29.980603][ T3759] bond1: entered promiscuous mode [ 29.985684][ T3759] bond1: entered allmulticast mode [ 30.019209][ T3759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 30.127087][ T3777] loop4: detected capacity change from 0 to 128 [ 30.171769][ T3777] SELinux: security_context_str_to_sid (…ÊýsÅ\^(mÏÍð`dÞRÿ‰%ú‚]Ýv;óhó¤àfäŠeÀ°ãPiízÙò׺âíø+8È×xÖ‰?=MSâg¤%×VDXî Ú¶}þY_ágW¯žêà¯T~áÌÎÃÄÈÞÖÂôLfþ00000000000000000000000ÁÑBÜßxÞ‰3Í!/½Ú¾5;Y$åì]V„1±{Àȉj¬+™¥4bÐÒRžÄö}$‘º½ÿõPª˜Zhú [ 30.171769][ T3777] þšÈ~Ðæ™~½¼¾= TÀ¥Ý¦ÒƒI»–ûUJ3bÎf§A«¦Øc–@ ¬uæ+÷ÍI·üÔäNŽT±T[ØM|z³k@IQŠ1>dÑSÇ IN'…ùÌ=Y^»_Gí^1M÷ê@`•a°«È¥ýqxà¸ì½ÌYï±Ìä_¬uµ\ [ 30.171769][ T3777] ª†×¬ìÊ [ 30.171769][ T3777] ©y´ÒŸ¬vðy®®ÃýhBŽ/–Ê –P^À…i/òÜÙÞŠö [ 30.171769][ T3777] ûDú‡ÜÍôl¦Ú°’¨{ôþ™8ÄÀAOú™IÁ›ÚA„†:¿ð?vœ¸0¶î‘ŽË'‘û!ŸÓœÏB8kpÙ«]Š ^Š6H7Ú6É$è+ŽNÍJ·U¿ý#/Jmÿ]UGòꦴwM`Z°Ë¶Ìçù^J’*Pq«UdáãP}ïK—¥öÚ5\ðÀÁµaý×4ÂÆû4 ”f»ÿˆòî9ݳ¯è –~ø-¤÷Væˆì”ÿ—ÿÿ) failed with errno=-22 [ 30.246519][ T3735] syz.3.97 (3735) used greatest stack depth: 10616 bytes left [ 30.380019][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.387506][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.394971][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 30.402538][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.409980][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.437883][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.445462][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.450418][ T3803] loop0: detected capacity change from 0 to 256 [ 30.452883][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.466471][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.473944][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.481549][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.488939][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.496353][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.503767][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.511224][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.518621][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.526169][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.526363][ T3803] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 30.533612][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.541283][ T3803] netlink: 224 bytes leftover after parsing attributes in process `syz.0.123'. [ 30.548616][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.565066][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.572485][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.579893][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 30.587334][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.594743][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.602297][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.609777][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.617206][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.624807][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.632231][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.639788][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.647169][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.654694][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.662182][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.669594][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.677129][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.684567][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.701331][ T3399] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 30.727080][ T3812] smc: net device bond0 applied user defined pnetid SYZ2 [ 30.734870][ T3812] smc: net device bond0 erased user defined pnetid SYZ2 [ 30.768623][ T3814] netlink: 'syz.4.128': attribute type 5 has an invalid length. [ 30.776346][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 30.927897][ T3822] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 31.054570][ T3835] loop3: detected capacity change from 0 to 512 [ 31.063230][ T3839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.081076][ T3835] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.095995][ T3837] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 31.110867][ T3835] EXT4-fs (loop3): mount failed [ 31.133271][ T3839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.158345][ T3844] loop1: detected capacity change from 0 to 128 [ 31.182101][ T3848] netlink: 'syz.3.141': attribute type 4 has an invalid length. [ 31.189866][ T3848] netlink: 17 bytes leftover after parsing attributes in process `syz.3.141'. [ 31.201487][ T3844] EXT4-fs: Ignoring removed nobh option [ 31.212049][ T3839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.265380][ T3844] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.281088][ T3844] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.293683][ T3839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.406589][ T3839] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.417727][ T3839] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.429625][ T3839] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.450629][ T3839] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.524592][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 31.538269][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.573359][ T3865] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.582211][ T3865] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.591066][ T3865] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.600329][ T3865] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.628223][ T3865] vxlan0: entered promiscuous mode [ 31.631513][ T3870] loop1: detected capacity change from 0 to 512 [ 31.645695][ T3870] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.658807][ T3870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.694031][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 31.694045][ T29] audit: type=1326 audit(1753558585.571:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.723543][ T29] audit: type=1326 audit(1753558585.571:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bfa2008c7 code=0x7ffc0000 [ 31.746778][ T29] audit: type=1326 audit(1753558585.571:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.772144][ T3870] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.781256][ T29] audit: type=1326 audit(1753558585.641:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.808345][ T29] audit: type=1326 audit(1753558585.651:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.831495][ T29] audit: type=1326 audit(1753558585.651:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.855115][ T29] audit: type=1326 audit(1753558585.651:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.878540][ T29] audit: type=1326 audit(1753558585.651:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfa1fe9a9 code=0x7ffc0000 [ 31.905416][ T3870] EXT4-fs (loop1): 1 truncate cleaned up [ 31.911472][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.934574][ T3877] loop2: detected capacity change from 0 to 1024 [ 31.956461][ T3877] ======================================================= [ 31.956461][ T3877] WARNING: The mand mount option has been deprecated and [ 31.956461][ T3877] and is ignored by this kernel. Remove the mand [ 31.956461][ T3877] option from the mount to silence this warning. [ 31.956461][ T3877] ======================================================= [ 31.992031][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.003154][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.035099][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.120538][ T3890] loop1: detected capacity change from 0 to 1024 [ 32.127901][ T3890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.135244][ T29] audit: type=1326 audit(1753558585.991:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d880e9a9 code=0x7ffc0000 [ 32.158503][ T29] audit: type=1326 audit(1753558585.991:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d880e9a9 code=0x7ffc0000 [ 32.205926][ T3894] loop2: detected capacity change from 0 to 128 [ 32.207897][ T3890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.259627][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.307501][ T3865] syz.0.148 (3865) used greatest stack depth: 10360 bytes left [ 32.454152][ T3922] loop4: detected capacity change from 0 to 512 [ 32.522117][ T3922] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.170: Failed to acquire dquot type 1 [ 32.563908][ T3922] EXT4-fs (loop4): 1 truncate cleaned up [ 32.573816][ T3922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.586573][ T3922] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.642070][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.793249][ T3968] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 32.831056][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 32.834959][ T3968] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 33.009194][ T3995] ref_ctr increment failed for inode: 0xf2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888109a86300 [ 33.054712][ T3993] uprobe: syz.4.187:3993 failed to unregister, leaking uprobe [ 33.298481][ T4035] loop4: detected capacity change from 0 to 128 [ 33.313447][ T4035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.329310][ T4035] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.372229][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.545529][ T4074] loop0: detected capacity change from 0 to 512 [ 33.575376][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.588998][ T4074] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.601070][ T4087] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 33.611014][ T4074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.203'. [ 33.619998][ T4074] 0ªX¹¦D: renamed from gretap0 (while UP) [ 33.627619][ T4074] 0ªX¹¦D: entered allmulticast mode [ 33.633754][ T4074] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 33.668063][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.882652][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 33.897210][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 34.063028][ T4149] loop0: detected capacity change from 0 to 8192 [ 34.457202][ T4197] loop1: detected capacity change from 0 to 256 [ 34.515798][ T4197] FAT-fs (loop1): Directory bread(block 64) failed [ 34.538471][ T4197] FAT-fs (loop1): Directory bread(block 65) failed [ 34.545686][ T4197] FAT-fs (loop1): Directory bread(block 66) failed [ 34.552333][ T4197] FAT-fs (loop1): Directory bread(block 67) failed [ 34.559081][ T4197] FAT-fs (loop1): Directory bread(block 68) failed [ 34.565922][ T4197] FAT-fs (loop1): Directory bread(block 69) failed [ 34.572577][ T4197] FAT-fs (loop1): Directory bread(block 70) failed [ 34.579152][ T4197] FAT-fs (loop1): Directory bread(block 71) failed [ 34.586160][ T4197] FAT-fs (loop1): Directory bread(block 72) failed [ 34.593410][ T4197] FAT-fs (loop1): Directory bread(block 73) failed [ 34.638001][ T4206] netlink: 'syz.4.234': attribute type 3 has an invalid length. [ 34.858190][ T4216] loop2: detected capacity change from 0 to 128 [ 34.890748][ T4216] vfat: Unknown parameter 'ÿÿÿÿ' [ 35.018358][ T4222] loop2: detected capacity change from 0 to 128 [ 35.063953][ T4222] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 35.072364][ T4222] FAT-fs (loop2): Filesystem has been set read-only [ 35.084444][ T4228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 35.096102][ T4222] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 35.108834][ T4222] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 35.114482][ T4228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 35.177544][ T4236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.202664][ T4240] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 35.210378][ T4240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.251'. [ 35.213880][ T4238] loop0: detected capacity change from 0 to 1024 [ 35.262496][ T4236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.355328][ T4249] loop2: detected capacity change from 0 to 1024 [ 35.365227][ T4236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.392000][ T4249] EXT4-fs: inline encryption not supported [ 35.397941][ T4249] EXT4-fs: Ignoring removed i_version option [ 35.440498][ T4249] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.453046][ T4256] loop3: detected capacity change from 0 to 512 [ 35.486944][ T4236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.500761][ T4249] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.254: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.523260][ T4256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.537542][ T4249] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.254: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.559467][ T4256] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.571782][ T4262] Zero length message leads to an empty skb [ 35.577892][ T4249] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.254: Failed to acquire dquot type 0 [ 35.597873][ T4256] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 35.627010][ T4236] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.638964][ T4249] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 35.652715][ T4236] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.661937][ T4249] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.254: mark_inode_dirty error [ 35.663409][ T4256] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 35.674815][ T4249] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 35.685333][ T4256] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.685333][ T4256] [ 35.685351][ T4256] EXT4-fs (loop3): Total free blocks count 0 [ 35.697939][ T4236] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.705164][ T4256] EXT4-fs (loop3): Free/Dirty block details [ 35.713114][ T4249] EXT4-fs (loop2): 1 orphan inode deleted [ 35.719274][ T4256] EXT4-fs (loop3): free_blocks=65280 [ 35.719287][ T4256] EXT4-fs (loop3): dirty_blocks=33 [ 35.728155][ T4236] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.730859][ T4256] EXT4-fs (loop3): Block reservation details [ 35.730872][ T4256] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 35.762206][ T51] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.763607][ T4249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.778449][ T4267] loop0: detected capacity change from 0 to 128 [ 35.807780][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 35.838025][ T4267] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 35.846586][ T4267] FAT-fs (loop0): Filesystem has been set read-only [ 35.859492][ T4267] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 35.868739][ T4256] syz.3.257 (4256) used greatest stack depth: 10152 bytes left [ 35.880183][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.889600][ T4269] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 35.906977][ T3314] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 35.913155][ T4212] syz.1.237 (4212) used greatest stack depth: 6784 bytes left [ 35.931797][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.941544][ T3314] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 35.958801][ T4274] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 35.967364][ T3314] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 36.057181][ T4287] loop7: detected capacity change from 0 to 16384 [ 36.131660][ T4302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.213069][ T4302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.323589][ T4302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.447530][ T4302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.535691][ T4302] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.549677][ T4302] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.573321][ T4302] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.586663][ T4302] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.694507][ T4336] sctp: [Deprecated]: syz.3.279 (pid 4336) Use of int in maxseg socket option. [ 36.694507][ T4336] Use struct sctp_assoc_value instead [ 36.773162][ T4342] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.830644][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 36.830659][ T29] audit: type=1400 audit(1753558590.711:442): avc: denied { append } for pid=4344 comm="syz.1.282" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.859999][ T29] audit: type=1400 audit(1753558590.711:443): avc: denied { open } for pid=4344 comm="syz.1.282" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.869381][ T4345] random: crng reseeded on system resumption [ 37.040081][ T29] audit: type=1400 audit(1753558590.791:444): avc: denied { read } for pid=4349 comm="syz.3.283" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.063536][ T29] audit: type=1400 audit(1753558590.791:445): avc: denied { open } for pid=4349 comm="syz.3.283" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.087282][ T29] audit: type=1400 audit(1753558590.791:446): avc: denied { ioctl } for pid=4349 comm="syz.3.283" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.112727][ T29] audit: type=1326 audit(1753558590.881:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 37.135931][ T29] audit: type=1326 audit(1753558590.891:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 37.159181][ T29] audit: type=1326 audit(1753558590.891:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 37.182544][ T29] audit: type=1326 audit(1753558590.891:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 37.205819][ T29] audit: type=1326 audit(1753558590.891:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 37.276230][ T4361] loop2: detected capacity change from 0 to 2048 [ 37.309627][ T4361] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.330261][ T4361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.287: bg 0: block 120: padding at end of block bitmap is not set [ 37.354885][ T3314] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 37.413823][ T4375] infiniband syz2: set down [ 37.418376][ T4375] infiniband syz2: added syzkaller0 [ 37.428191][ T4375] RDS/IB: syz2: added [ 37.432311][ T4375] smc: adding ib device syz2 with port count 1 [ 37.438445][ T4375] smc: ib device syz2 port 1 has pnetid [ 37.483113][ T4379] loop0: detected capacity change from 0 to 4096 [ 37.494155][ T4379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.628242][ T52] smc: removing ib device syz2 [ 37.705644][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.264423][ T4410] loop1: detected capacity change from 0 to 512 [ 38.283321][ T4410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.296938][ T4410] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.313955][ T4410] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 38.321873][ T4412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 38.330704][ T4410] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 38.349550][ T4410] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.349550][ T4410] [ 38.359157][ T4410] EXT4-fs (loop1): Total free blocks count 0 [ 38.365149][ T4410] EXT4-fs (loop1): Free/Dirty block details [ 38.371113][ T4410] EXT4-fs (loop1): free_blocks=65280 [ 38.376376][ T4410] EXT4-fs (loop1): dirty_blocks=33 [ 38.381575][ T4410] EXT4-fs (loop1): Block reservation details [ 38.387545][ T4410] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 38.414889][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.504438][ T4423] hub 2-0:1.0: USB hub found [ 38.509111][ T4423] hub 2-0:1.0: 8 ports detected [ 38.607518][ T4431] loop3: detected capacity change from 0 to 1024 [ 38.707974][ T4439] loop3: detected capacity change from 0 to 128 [ 38.723841][ T4439] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.731775][ T4439] FAT-fs (loop3): Filesystem has been set read-only [ 38.740295][ T4439] syz.3.315: attempt to access beyond end of device [ 38.740295][ T4439] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 38.802839][ T4439] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.810814][ T4439] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.851924][ T4447] syz.3.315: attempt to access beyond end of device [ 38.851924][ T4447] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 38.865136][ T4447] Buffer I/O error on dev loop3, logical block 2065, async page read [ 38.903294][ T4447] syz.3.315: attempt to access beyond end of device [ 38.903294][ T4447] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 38.916575][ T4447] Buffer I/O error on dev loop3, logical block 2066, async page read [ 38.936406][ T4447] syz.3.315: attempt to access beyond end of device [ 38.936406][ T4447] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 38.949659][ T4447] Buffer I/O error on dev loop3, logical block 2067, async page read [ 38.960007][ T4447] syz.3.315: attempt to access beyond end of device [ 38.960007][ T4447] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 38.973280][ T4447] Buffer I/O error on dev loop3, logical block 2068, async page read [ 38.985848][ T4447] syz.3.315: attempt to access beyond end of device [ 38.985848][ T4447] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 38.998989][ T4447] Buffer I/O error on dev loop3, logical block 2069, async page read [ 39.022357][ T4447] syz.3.315: attempt to access beyond end of device [ 39.022357][ T4447] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 39.035536][ T4447] Buffer I/O error on dev loop3, logical block 2070, async page read [ 39.057276][ T4447] syz.3.315: attempt to access beyond end of device [ 39.057276][ T4447] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 39.070442][ T4447] Buffer I/O error on dev loop3, logical block 2071, async page read [ 39.128601][ T4447] syz.3.315: attempt to access beyond end of device [ 39.128601][ T4447] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 39.141803][ T4447] Buffer I/O error on dev loop3, logical block 2072, async page read [ 39.151462][ T4447] syz.3.315: attempt to access beyond end of device [ 39.151462][ T4447] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 39.154262][ T4453] pimreg: entered allmulticast mode [ 39.164629][ T4447] Buffer I/O error on dev loop3, logical block 2065, async page read [ 39.179289][ T4447] Buffer I/O error on dev loop3, logical block 2066, async page read [ 39.224142][ T4453] pimreg: left allmulticast mode [ 39.236589][ T4457] sctp: [Deprecated]: syz.0.324 (pid 4457) Use of int in maxseg socket option. [ 39.236589][ T4457] Use struct sctp_assoc_value instead [ 39.631776][ T4488] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 39.722983][ T4498] random: crng reseeded on system resumption [ 39.764949][ T4509] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 39.785371][ T4511] loop3: detected capacity change from 0 to 512 [ 39.794552][ T4511] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 39.803988][ T4511] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.347: invalid indirect mapped block 2683928664 (level 1) [ 39.818078][ T4511] EXT4-fs (loop3): Remounting filesystem read-only [ 39.825822][ T4511] EXT4-fs (loop3): 1 truncate cleaned up [ 39.832206][ T4511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.861441][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.091674][ T41] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.151192][ T41] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.222604][ T41] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.291021][ T41] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.518270][ T4576] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 40.518665][ T41] bridge_slave_1: left allmulticast mode [ 40.534745][ T41] bridge_slave_1: left promiscuous mode [ 40.540545][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.558875][ T41] bridge_slave_0: left allmulticast mode [ 40.564607][ T41] bridge_slave_0: left promiscuous mode [ 40.570356][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.658796][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.674579][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.698900][ T41] bond0 (unregistering): Released all slaves [ 40.883704][ T41] hsr_slave_0: left promiscuous mode [ 40.895753][ T41] hsr_slave_1: left promiscuous mode [ 40.909985][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.917420][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.124229][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.131718][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.161285][ T41] batman_adv: batadv0: Interface deactivated: macvlan0 [ 41.168548][ T41] batman_adv: batadv0: Removing interface: macvlan0 [ 41.198118][ T41] veth1_macvtap: left promiscuous mode [ 41.209697][ T41] veth0_macvtap: left promiscuous mode [ 41.215218][ T41] veth1_vlan: left promiscuous mode [ 41.226237][ T41] veth0_vlan: left promiscuous mode [ 41.356177][ T4647] loop2: detected capacity change from 0 to 128 [ 41.467182][ T41] team0 (unregistering): Port device team_slave_1 removed [ 41.495419][ T41] team0 (unregistering): Port device team_slave_0 removed [ 41.608343][ T4538] chnl_net:caif_netlink_parms(): no params data found [ 41.701803][ T4697] loop2: detected capacity change from 0 to 2048 [ 41.735632][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.742882][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.755982][ T4538] bridge_slave_0: entered allmulticast mode [ 41.766530][ T3294] loop2: p1 < > p4 [ 41.767291][ T4538] bridge_slave_0: entered promiscuous mode [ 41.778275][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 41.787980][ T3294] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.797656][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.804767][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.815212][ T4538] bridge_slave_1: entered allmulticast mode [ 41.815927][ T4697] loop2: p1 < > p4 [ 41.821805][ T4538] bridge_slave_1: entered promiscuous mode [ 41.833449][ T4697] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.845752][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 41.857175][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 41.857213][ T29] audit: type=1400 audit(1753558595.731:527): avc: denied { read write } for pid=4696 comm="syz.2.383" name="loop2p4" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.857687][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 41.863381][ T29] audit: type=1400 audit(1753558595.731:528): avc: denied { open } for pid=4696 comm="syz.2.383" path="/dev/loop2p4" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.886752][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 41.928910][ T4538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.941483][ T4538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.992259][ T4538] team0: Port device team_slave_0 added [ 42.001529][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.002257][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.012537][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 42.025776][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.029945][ T4709] netlink: 'syz.0.388': attribute type 18 has an invalid length. [ 42.040866][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.049746][ T4538] team0: Port device team_slave_1 added [ 42.065069][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 42.074126][ T4709] netlink: 'syz.0.388': attribute type 18 has an invalid length. [ 42.092717][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.099716][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.125801][ T4538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.159218][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.166230][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.192253][ T4538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.254924][ T4538] hsr_slave_0: entered promiscuous mode [ 42.261080][ T4538] hsr_slave_1: entered promiscuous mode [ 42.267119][ T4538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.276099][ T4538] Cannot create hsr debugfs directory [ 42.428348][ T4726] loop2: detected capacity change from 0 to 2048 [ 42.432049][ T4538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.453088][ T4726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.472787][ T4538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.491239][ T29] audit: type=1400 audit(1753558596.361:529): avc: denied { read write open } for pid=4725 comm="syz.2.395" path="/81/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.514607][ T29] audit: type=1400 audit(1753558596.361:530): avc: denied { mounton } for pid=4725 comm="syz.2.395" path="/81/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.543251][ T4538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.553445][ T4538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.559596][ T4726] loop2: detected capacity change from 2048 to 0 [ 42.566666][ T4732] EXT4-fs error (device loop2): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.2.395: unable to read itable block [ 42.579874][ C0] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.639490][ T4732] EXT4-fs (loop2): I/O error while writing superblock [ 42.648865][ T4732] EXT4-fs error (device loop2): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.2.395: unable to read itable block [ 42.707400][ T4732] EXT4-fs (loop2): I/O error while writing superblock [ 42.714235][ T4732] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: IO failure [ 42.727862][ T4732] EXT4-fs (loop2): I/O error while writing superblock [ 42.734790][ T4732] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.395: mark_inode_dirty error [ 42.750227][ T29] audit: type=1326 audit(1753558596.601:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 42.773510][ T29] audit: type=1326 audit(1753558596.601:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 42.796797][ T29] audit: type=1326 audit(1753558596.601:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f6d5a6ee9a9 code=0x7ffc0000 [ 42.819954][ T29] audit: type=1326 audit(1753558596.631:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d880e9a9 code=0x7ffc0000 [ 42.843243][ T29] audit: type=1326 audit(1753558596.631:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d880e9a9 code=0x7ffc0000 [ 42.866508][ T29] audit: type=1326 audit(1753558596.631:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc5d880e9a9 code=0x7ffc0000 [ 42.929510][ T4732] EXT4-fs (loop2): I/O error while writing superblock [ 42.936545][ T4732] EXT4-fs error (device loop2): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.2.395: unable to read itable block [ 42.952859][ T4732] EXT4-fs (loop2): I/O error while writing superblock [ 43.000469][ T4538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.012442][ T4538] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.023546][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.030678][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.063151][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.067936][ T3314] EXT4-fs error (device loop2): ext4_get_inode_loc:4930: inode #2: block 4: comm syz-executor: unable to read itable block [ 43.070238][ T4606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.094290][ T4751] hub 6-0:1.0: USB hub found [ 43.100808][ T4751] hub 6-0:1.0: 8 ports detected [ 43.109201][ T3314] EXT4-fs (loop2): I/O error while writing superblock [ 43.113735][ T4753] tipc: Failed to remove unknown binding: 66,1,1/0:2622713018/2622713020 [ 43.116081][ T3314] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: IO failure [ 43.124512][ T4753] tipc: Failed to remove unknown binding: 66,1,1/0:2622713018/2622713020 [ 43.133628][ T3314] EXT4-fs (loop2): I/O error while writing superblock [ 43.148507][ T3314] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 43.182498][ T3314] EXT4-fs (loop2): I/O error while writing superblock [ 43.220590][ T4676] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4915: inode #18: block 6: comm kworker/u8:60: unable to read itable block [ 43.226738][ T4538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.239437][ T4676] EXT4-fs (loop2): I/O error while writing superblock [ 43.250501][ T4676] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4915: inode #2: block 4: comm kworker/u8:60: unable to read itable block [ 43.277178][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 43.429954][ T4538] veth0_vlan: entered promiscuous mode [ 43.437230][ T4538] veth1_vlan: entered promiscuous mode [ 43.454205][ T4538] veth0_macvtap: entered promiscuous mode [ 43.463888][ T41] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.477456][ T4538] veth1_macvtap: entered promiscuous mode [ 43.493671][ T41] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.514159][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.531640][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.552784][ T4538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.561622][ T4538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.570386][ T4538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.579132][ T4538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.597434][ T41] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.632258][ T41] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.640379][ T4797] capability: warning: `syz.3.417' uses deprecated v2 capabilities in a way that may be insecure [ 43.727347][ T4813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.357'. [ 43.736347][ T4813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.357'. [ 43.773946][ T41] bridge_slave_1: left allmulticast mode [ 43.779717][ T41] bridge_slave_1: left promiscuous mode [ 43.785426][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.804193][ T41] bridge_slave_0: left allmulticast mode [ 43.809972][ T41] bridge_slave_0: left promiscuous mode [ 43.815759][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.931560][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 43.991712][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.001991][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.011478][ T41] bond0 (unregistering): Released all slaves [ 44.023566][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.031044][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.043780][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.051267][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.129284][ T41] hsr_slave_0: left promiscuous mode [ 44.149288][ T41] hsr_slave_1: left promiscuous mode [ 44.159005][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.166598][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.181045][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.188555][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.206132][ T41] veth1_macvtap: left promiscuous mode [ 44.212167][ T41] veth0_macvtap: left promiscuous mode [ 44.217763][ T41] veth1_vlan: left promiscuous mode [ 44.223306][ T41] veth0_vlan: left promiscuous mode [ 44.292490][ T4856] tipc: Failed to remove unknown binding: 66,1,1/0:53083858/53083860 [ 44.300680][ T4856] tipc: Failed to remove unknown binding: 66,1,1/0:53083858/53083860 [ 44.366966][ T41] team0 (unregistering): Port device team_slave_1 removed [ 44.382306][ T41] team0 (unregistering): Port device team_slave_0 removed [ 44.444806][ T4868] tipc: Started in network mode [ 44.449748][ T4868] tipc: Node identity f286e79c381c, cluster identity 4711 [ 44.457035][ T4868] tipc: Enabled bearer , priority 0 [ 44.458658][ T4872] x_tables: duplicate underflow at hook 3 [ 44.466268][ T4867] bridge0: entered promiscuous mode [ 44.475290][ T4867] macsec1: entered promiscuous mode [ 44.483639][ T4867] bridge0: port 3(macsec1) entered blocking state [ 44.490123][ T4867] bridge0: port 3(macsec1) entered disabled state [ 44.498328][ T4867] macsec1: entered allmulticast mode [ 44.503682][ T4867] bridge0: entered allmulticast mode [ 44.514003][ T4867] macsec1: left allmulticast mode [ 44.519046][ T4867] bridge0: left allmulticast mode [ 44.531463][ T4874] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 44.539803][ T4867] bridge0: left promiscuous mode [ 44.561006][ T4863] tipc: Disabling bearer [ 44.572641][ T4874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.672030][ T4798] chnl_net:caif_netlink_parms(): no params data found [ 44.700420][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.707465][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.714952][ T4798] bridge_slave_0: entered allmulticast mode [ 44.722797][ T4798] bridge_slave_0: entered promiscuous mode [ 44.731966][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.739105][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.747121][ T4798] bridge_slave_1: entered allmulticast mode [ 44.753591][ T4798] bridge_slave_1: entered promiscuous mode [ 44.790084][ T4893] sd 0:0:1:0: device reset [ 44.799837][ T4798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.816929][ T4798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.846720][ T4798] team0: Port device team_slave_0 added [ 44.856099][ T4798] team0: Port device team_slave_1 added [ 44.872728][ T4901] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 44.872728][ T4901] program syz.0.453 not setting count and/or reply_len properly [ 44.895779][ T4798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.902808][ T4798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.928743][ T4798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.967614][ T4798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.974641][ T4798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.000593][ T4798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.034751][ T4798] hsr_slave_0: entered promiscuous mode [ 45.044573][ T4798] hsr_slave_1: entered promiscuous mode [ 45.052909][ T4798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.065940][ T4798] Cannot create hsr debugfs directory [ 45.201878][ T4798] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 45.213126][ T4798] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 45.232882][ T4798] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 45.241492][ T4798] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 45.273000][ T4798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.284354][ T4798] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.293779][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.300875][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.312174][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.319231][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.350634][ T4933] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 45.365566][ T4933] SELinux: failed to load policy [ 45.409564][ T4942] ALSA: seq fatal error: cannot create timer (-22) [ 45.424763][ T4798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.559740][ T4960] loop1: detected capacity change from 0 to 8192 [ 45.644204][ T4798] veth0_vlan: entered promiscuous mode [ 45.652623][ T4798] veth1_vlan: entered promiscuous mode [ 45.670683][ T4798] veth0_macvtap: entered promiscuous mode [ 45.682306][ T4987] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 45.685667][ T4798] veth1_macvtap: entered promiscuous mode [ 45.698835][ T4987] SELinux: failed to load policy [ 45.711008][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.737442][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.745963][ T4992] smc: net device bond0 applied user defined pnetid SYZ2 [ 45.751703][ T4798] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.756734][ T4992] smc: net device bond0 erased user defined pnetid SYZ2 [ 45.761712][ T4798] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.777398][ T4798] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.786216][ T4798] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.883616][ T5004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.415'. [ 45.892667][ T5004] netlink: 28 bytes leftover after parsing attributes in process `syz.6.415'. [ 45.901608][ T5004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.415'. [ 45.911451][ T5004] netlink: 28 bytes leftover after parsing attributes in process `syz.6.415'. [ 45.920452][ T5004] netlink: 'syz.6.415': attribute type 6 has an invalid length. [ 46.207091][ T5037] futex_wake_op: syz.1.512 tries to shift op by -1; fix this program [ 46.260496][ T5045] bond_slave_0: entered promiscuous mode [ 46.266188][ T5045] bond_slave_1: entered promiscuous mode [ 46.273459][ T5045] bond_slave_0: left promiscuous mode [ 46.278862][ T5045] bond_slave_1: left promiscuous mode [ 46.279049][ T5041] loop5: detected capacity change from 0 to 8192 [ 46.330422][ T5048] netlink: 'syz.1.507': attribute type 13 has an invalid length. [ 46.349060][ T5048] gretap0: refused to change device tx_queue_len [ 46.358471][ T5048] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.556371][ T5078] loop5: detected capacity change from 0 to 2048 [ 46.573809][ T5074] loop6: detected capacity change from 0 to 8192 [ 46.583977][ T5078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.639649][ T5078] loop5: detected capacity change from 2048 to 0 [ 46.649624][ T5078] bio_check_eod: 15859 callbacks suppressed [ 46.649637][ T5078] syz.5.520: attempt to access beyond end of device [ 46.649637][ T5078] loop5: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 46.671743][ T5078] syz.5.520: attempt to access beyond end of device [ 46.671743][ T5078] loop5: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 46.685260][ T5078] syz.5.520: attempt to access beyond end of device [ 46.685260][ T5078] loop5: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 46.698896][ T5078] syz.5.520: attempt to access beyond end of device [ 46.698896][ T5078] loop5: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 46.714503][ T5078] syz.5.520: attempt to access beyond end of device [ 46.714503][ T5078] loop5: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 46.728003][ T5078] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.5.520: unable to read itable block [ 46.740827][ T5078] syz.5.520: attempt to access beyond end of device [ 46.740827][ T5078] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 46.754129][ T5078] buffer_io_error: 15826 callbacks suppressed [ 46.754140][ T5078] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 46.768971][ T5078] EXT4-fs (loop5): I/O error while writing superblock [ 46.775869][ T5078] syz.5.520: attempt to access beyond end of device [ 46.775869][ T5078] loop5: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 46.789589][ T5078] syz.5.520: attempt to access beyond end of device [ 46.789589][ T5078] loop5: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 46.803535][ T5078] syz.5.520: attempt to access beyond end of device [ 46.803535][ T5078] loop5: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 46.817218][ T5078] syz.5.520: attempt to access beyond end of device [ 46.817218][ T5078] loop5: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 46.830538][ T5078] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.5.520: unable to read itable block [ 46.850487][ T5078] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 46.858830][ T5078] EXT4-fs (loop5): I/O error while writing superblock [ 46.865640][ T5078] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 46.875423][ T5078] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 46.886010][ T5093] af_packet: tpacket_rcv: packet too big, clamped from 65253 to 4294967272. macoff=96 [ 46.886963][ T5078] EXT4-fs (loop5): I/O error while writing superblock [ 46.902436][ T5078] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.520: mark_inode_dirty error [ 46.915711][ T5078] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 46.924112][ T5078] EXT4-fs (loop5): I/O error while writing superblock [ 46.927009][ C1] hrtimer: interrupt took 37129 ns [ 46.931284][ T5078] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 6: comm syz.5.520: unable to read itable block [ 46.942190][ T5095] loop6: detected capacity change from 0 to 128 [ 46.948814][ T5078] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 46.963488][ T5078] EXT4-fs (loop5): I/O error while writing superblock [ 47.013492][ T4538] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #2: block 4: comm syz-executor: unable to read itable block [ 47.027009][ T4538] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 47.035763][ T4538] EXT4-fs (loop5): I/O error while writing superblock [ 47.042606][ T4538] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 47.051870][ T4538] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 47.060335][ T4538] EXT4-fs (loop5): I/O error while writing superblock [ 47.067111][ T4538] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 47.078689][ T4538] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 47.086965][ T4538] EXT4-fs (loop5): I/O error while writing superblock [ 47.101971][ T41] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4915: inode #18: block 6: comm kworker/u8:2: unable to read itable block [ 47.116759][ T41] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 47.125462][ T41] EXT4-fs (loop5): I/O error while writing superblock [ 47.132662][ T41] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4915: inode #2: block 4: comm kworker/u8:2: unable to read itable block [ 47.149039][ T41] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 47.188886][ T5106] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 47.225838][ T5112] netlink: 'syz.6.534': attribute type 1 has an invalid length. [ 47.346807][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 47.346820][ T29] audit: type=1400 audit(1753558601.221:650): avc: denied { mount } for pid=5119 comm="syz.6.538" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.427065][ T29] audit: type=1326 audit(1753558601.301:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6786e9a9 code=0x7ffc0000 [ 47.450412][ T29] audit: type=1326 audit(1753558601.301:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6786e9a9 code=0x7ffc0000 [ 47.473743][ T29] audit: type=1326 audit(1753558601.301:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c6786d310 code=0x7ffc0000 [ 47.496995][ T29] audit: type=1326 audit(1753558601.301:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c6786d310 code=0x7ffc0000 [ 47.520314][ T29] audit: type=1326 audit(1753558601.301:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6786e9a9 code=0x7ffc0000 [ 47.543538][ T29] audit: type=1326 audit(1753558601.301:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f0c6786e9a9 code=0x7ffc0000 [ 47.566860][ T29] audit: type=1326 audit(1753558601.301:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6786e9a9 code=0x7ffc0000 [ 47.720208][ T29] audit: type=1326 audit(1753558601.331:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6786e9a9 code=0x7ffc0000 [ 47.743640][ T29] audit: type=1326 audit(1753558601.471:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d880e9a9 code=0x7ffc0000 [ 47.894233][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 47.983216][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.990346][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.009070][ T5125] bridge_slave_0: entered allmulticast mode [ 48.016020][ T5125] bridge_slave_0: entered promiscuous mode [ 48.023054][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.030315][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.037770][ T5125] bridge_slave_1: entered allmulticast mode [ 48.044448][ T5125] bridge_slave_1: entered promiscuous mode [ 48.071099][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.087453][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.119023][ T5125] team0: Port device team_slave_0 added [ 48.126834][ T5125] team0: Port device team_slave_1 added [ 48.137701][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.567'. [ 48.146509][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.567'. [ 48.189546][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.196537][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.222668][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.266859][ T5210] random: crng reseeded on system resumption [ 48.266960][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.279898][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.305865][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.365579][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.392208][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.410728][ T5125] hsr_slave_0: entered promiscuous mode [ 48.418043][ T5125] hsr_slave_1: entered promiscuous mode [ 48.430343][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.445085][ T5125] Cannot create hsr debugfs directory [ 48.554750][ T5248] netlink: 'syz.3.586': attribute type 13 has an invalid length. [ 48.555910][ T5125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 48.580750][ T5125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 48.595798][ T5248] gretap0: refused to change device tx_queue_len [ 48.602987][ T5248] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.619745][ T5125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 48.628781][ T5125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 48.682959][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.700259][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.713216][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.720342][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.732810][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.739959][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.801118][ T5125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.866351][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.911397][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 48.945805][ T3392] kernel write not supported for file /269/loginuid (pid: 3392 comm: kworker/1:4) [ 49.032205][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 49.074925][ T5316] loop6: detected capacity change from 0 to 2048 [ 49.123052][ T5316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.129838][ T5125] veth0_vlan: entered promiscuous mode [ 49.147829][ T5125] veth1_vlan: entered promiscuous mode [ 49.163193][ T5125] veth0_macvtap: entered promiscuous mode [ 49.171558][ T5125] veth1_macvtap: entered promiscuous mode [ 49.172654][ T5327] hub 2-0:1.0: USB hub found [ 49.183551][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.192747][ T5327] hub 2-0:1.0: 8 ports detected [ 49.210633][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.228953][ T5125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.237696][ T5125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.246788][ T5125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.255580][ T5125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.406881][ T5350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5350 comm=syz.7.619 [ 49.420756][ T5353] syzkaller1: entered promiscuous mode [ 49.426254][ T5353] syzkaller1: entered allmulticast mode [ 49.458103][ T5358] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 49.458796][ T5357] loop7: detected capacity change from 0 to 1024 [ 49.483040][ T5357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.497501][ T5358] bond2: (slave gretap1): making interface the new active one [ 49.501498][ T5357] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.516615][ T5358] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 49.538160][ T5357] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: comm syz.7.624: lblock 0 mapped to illegal pblock 0 (length 5) [ 49.559508][ T5357] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 49.571875][ T5357] EXT4-fs (loop7): This should not happen!! Data will be lost [ 49.571875][ T5357] [ 49.582164][ T5366] loop3: detected capacity change from 0 to 2048 [ 49.600519][ T5366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.626138][ T5366] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.642116][ T5125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.675063][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.792923][ T5386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.800511][ T5386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.816013][ T5386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.823483][ T5386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.978588][ T4798] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.004338][ T5406] loop6: detected capacity change from 0 to 1024 [ 50.021361][ T5406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.045375][ T4798] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.101102][ T5419] syz.0.647 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.245840][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 50.408102][ T5455] loop1: detected capacity change from 0 to 512 [ 50.431971][ T5455] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 50.451511][ T5455] EXT4-fs: error: could not find journal device path [ 50.856491][ T5500] loop6: detected capacity change from 0 to 128 [ 50.871934][ T5500] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.885357][ T5500] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.951595][ T4798] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.167857][ T5517] rdma_op ffff88810333f580 conn xmit_rdma 0000000000000000 [ 51.216010][ T5523] tipc: Started in network mode [ 51.221022][ T5523] tipc: Node identity ac14140f, cluster identity 4711 [ 51.240713][ T5523] tipc: New replicast peer: 255.255.255.83 [ 51.246572][ T5523] tipc: Enabled bearer , priority 10 [ 51.334387][ T5533] loop7: detected capacity change from 0 to 128 [ 51.388735][ T5539] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 51.395281][ T5539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.402734][ T5539] vhci_hcd vhci_hcd.0: Device attached [ 51.406522][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 51.417163][ T5544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 51.426039][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 51.437334][ T5544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 51.446328][ T5544] netlink: 'syz.0.695': attribute type 6 has an invalid length. [ 51.455765][ T5541] vhci_hcd: connection closed [ 51.455872][ T41] vhci_hcd: stop threads [ 51.464914][ T41] vhci_hcd: release socket [ 51.469413][ T41] vhci_hcd: disconnect device [ 51.640998][ T5554] hub 9-0:1.0: USB hub found [ 51.645804][ T5554] hub 9-0:1.0: 8 ports detected [ 51.713870][ T5562] 9pnet_virtio: no channels available for device 127.0.0.1 [ 51.721980][ T5562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 51.931261][ T5600] loop1: detected capacity change from 0 to 1024 [ 51.955097][ T5600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.962810][ T5607] loop7: detected capacity change from 0 to 512 [ 51.998215][ T5600] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 52.009284][ T5600] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 52.032951][ T5607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.039303][ T5600] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.053218][ T5607] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.055621][ T5600] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.721: inode #1: comm syz.1.721: iget: illegal inode # [ 52.078934][ T5600] EXT4-fs (loop1): Remounting filesystem read-only [ 52.085610][ T5600] EXT4-fs (loop1): no journal found [ 52.107709][ T5607] EXT4-fs: Ignoring removed orlov option [ 52.146189][ T5607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.161100][ T5607] EXT4-fs (loop7): can't enable nombcache during remount [ 52.195313][ T5125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.269154][ T5634] ipvlan2: entered promiscuous mode [ 52.301992][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.308852][ T5634] bridge0: port 3(ipvlan2) entered blocking state [ 52.317123][ T5634] bridge0: port 3(ipvlan2) entered disabled state [ 52.332070][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.340721][ T5634] ipvlan2: entered allmulticast mode [ 52.346069][ T5634] bridge0: entered allmulticast mode [ 52.353067][ T5634] ipvlan2: left allmulticast mode [ 52.358114][ T5634] bridge0: left allmulticast mode [ 52.377298][ T3392] tipc: Node number set to 2886997007 [ 52.398980][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 52.408007][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 52.551409][ T5660] random: crng reseeded on system resumption [ 52.551441][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 52.551451][ T29] audit: type=1400 audit(1753558606.431:794): avc: denied { read } for pid=5659 comm="syz.1.747" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.586570][ T29] audit: type=1400 audit(1753558606.431:795): avc: denied { ioctl } for pid=5659 comm="syz.1.747" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.634835][ T29] audit: type=1400 audit(1753558606.511:796): avc: denied { ioctl } for pid=5663 comm="syz.3.749" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.802767][ T5680] netlink: 'syz.3.757': attribute type 21 has an invalid length. [ 52.816467][ T5682] binfmt_misc: register: failed to install interpreter file ./file0 [ 52.947797][ T5698] SELinux: failed to load policy [ 52.988092][ T5700] netlink: 'syz.3.767': attribute type 13 has an invalid length. [ 53.019884][ T29] audit: type=1326 audit(1753558606.891:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.043291][ T29] audit: type=1326 audit(1753558606.891:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.066531][ T29] audit: type=1326 audit(1753558606.891:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.089785][ T29] audit: type=1326 audit(1753558606.891:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.113101][ T29] audit: type=1326 audit(1753558606.891:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.136436][ T29] audit: type=1326 audit(1753558606.891:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.159791][ T29] audit: type=1326 audit(1753558606.891:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.7.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c78ae9a9 code=0x7ffc0000 [ 53.254496][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.261745][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.451599][ T5700] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.460744][ T5700] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.469734][ T5700] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.478684][ T5700] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.596328][ T1082] syz1: Port: 1 Link DOWN [ 53.789931][ T5741] loop3: detected capacity change from 0 to 8192 [ 53.956119][ T5760] __nla_validate_parse: 10 callbacks suppressed [ 53.956135][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.787'. [ 54.036455][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 54.046459][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 54.071124][ T5771] sd 0:0:1:0: device reset [ 54.246558][ T5794] loop1: detected capacity change from 0 to 2048 [ 54.270149][ T5785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.800'. [ 54.309727][ T5794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.334056][ T5808] sd 0:0:1:0: device reset [ 54.400720][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 54.413379][ T5816] bridge0: port 3(macvlan2) entered blocking state [ 54.420014][ T5816] bridge0: port 3(macvlan2) entered disabled state [ 54.429113][ T5816] macvlan2: entered allmulticast mode [ 54.434627][ T5816] bridge0: entered allmulticast mode [ 54.440702][ T5816] macvlan2: left allmulticast mode [ 54.445831][ T5816] bridge0: left allmulticast mode [ 54.487399][ T5820] bond1: entered promiscuous mode [ 54.492593][ T5820] bond1: entered allmulticast mode [ 54.509049][ T5822] loop6: detected capacity change from 0 to 512 [ 54.522137][ T5820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.556664][ T5822] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.572025][ T5822] EXT4-fs (loop6): mount failed [ 54.721685][ T5852] netlink: 'syz.7.827': attribute type 1 has an invalid length. [ 54.737144][ T5852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.750524][ T5855] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.766654][ T5852] bond2: (slave gretap1): making interface the new active one [ 54.775332][ T5852] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 54.878002][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.901312][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.965800][ T5880] loop7: detected capacity change from 0 to 256 [ 54.985473][ T5880] FAT-fs (loop7): Directory bread(block 64) failed [ 54.999611][ T5880] FAT-fs (loop7): Directory bread(block 65) failed [ 55.017417][ T5880] FAT-fs (loop7): Directory bread(block 66) failed [ 55.044462][ T5880] FAT-fs (loop7): Directory bread(block 67) failed [ 55.051285][ T5880] FAT-fs (loop7): Directory bread(block 68) failed [ 55.064814][ T5880] FAT-fs (loop7): Directory bread(block 69) failed [ 55.071544][ T5880] FAT-fs (loop7): Directory bread(block 70) failed [ 55.078274][ T5880] FAT-fs (loop7): Directory bread(block 71) failed [ 55.084964][ T5880] FAT-fs (loop7): Directory bread(block 72) failed [ 55.093299][ T5880] FAT-fs (loop7): Directory bread(block 73) failed [ 55.117978][ T5880] bio_check_eod: 37 callbacks suppressed [ 55.117992][ T5880] syz.7.841: attempt to access beyond end of device [ 55.117992][ T5880] loop7: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 55.310289][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.405699][ T5901] netlink: 332 bytes leftover after parsing attributes in process `syz.6.850'. [ 55.438810][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 55.440137][ T5900] SELinux: failed to load policy [ 55.575469][ T5917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5917 comm=syz.6.858 [ 55.587915][ T5917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5917 comm=syz.6.858 [ 55.602386][ T5910] loop3: detected capacity change from 0 to 8192 [ 55.649912][ T3294] loop3: p1 p2 p4 < > [ 55.654019][ T3294] loop3: partition table partially beyond EOD, truncated [ 55.667824][ T3294] loop3: p1 start 16777216 is beyond EOD, truncated [ 55.674547][ T3294] loop3: p2 size 515840 extends beyond EOD, truncated [ 55.711025][ T3294] loop3: p4 start 16777216 is beyond EOD, truncated [ 55.721876][ T5910] loop3: p1 p2 p4 < > [ 55.726093][ T5910] loop3: partition table partially beyond EOD, truncated [ 55.756110][ T5910] loop3: p1 start 16777216 is beyond EOD, truncated [ 55.762836][ T5910] loop3: p2 size 515840 extends beyond EOD, truncated [ 55.777052][ T5910] loop3: p4 start 16777216 is beyond EOD, truncated [ 55.854445][ T5933] vlan2: entered allmulticast mode [ 55.862150][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.870271][ T5933] dummy0: entered allmulticast mode [ 55.877419][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 55.899595][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.998968][ T5952] serio: Serial port ptm0 [ 56.199209][ T5959] veth3: entered allmulticast mode [ 56.201577][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.223871][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.349638][ T5998] 9pnet: p9_errstr2errno: server reported unknown error [ 56.396211][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.6.898'. [ 56.411641][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 56.424282][ T6008] bridge0: entered promiscuous mode [ 56.430728][ T6008] bridge0: port 3(macvlan2) entered blocking state [ 56.437338][ T6008] bridge0: port 3(macvlan2) entered disabled state [ 56.444109][ T6008] macvlan2: entered allmulticast mode [ 56.449559][ T6008] bridge0: entered allmulticast mode [ 56.455538][ T6008] macvlan2: left allmulticast mode [ 56.460768][ T6008] bridge0: left allmulticast mode [ 56.466182][ T6008] bridge0: left promiscuous mode [ 56.477107][ T6010] bridge0: port 3(macvlan2) entered blocking state [ 56.483771][ T6010] bridge0: port 3(macvlan2) entered disabled state [ 56.490554][ T6010] macvlan2: entered allmulticast mode [ 56.495946][ T6010] bridge0: entered allmulticast mode [ 56.501798][ T6010] macvlan2: left allmulticast mode [ 56.506923][ T6010] bridge0: left allmulticast mode [ 56.636431][ T6027] mmap: syz.0.909 (6027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.786698][ T6036] bridge0: port 3(macvlan2) entered blocking state [ 56.793321][ T6036] bridge0: port 3(macvlan2) entered disabled state [ 56.801762][ T6036] macvlan2: entered allmulticast mode [ 56.807217][ T6036] bridge0: entered allmulticast mode [ 56.814057][ T6036] macvlan2: left allmulticast mode [ 56.819181][ T6036] bridge0: left allmulticast mode [ 57.031080][ T6058] loop7: detected capacity change from 0 to 512 [ 57.038008][ T6058] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.051700][ T6058] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 57.067572][ T6058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 57.077164][ T6058] System zones: 1-12 [ 57.085005][ T6058] EXT4-fs (loop7): 1 truncate cleaned up [ 57.091858][ T6058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.127849][ T5125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.174669][ T6064] loop7: detected capacity change from 0 to 512 [ 57.193158][ T6064] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.926: corrupted in-inode xattr: invalid ea_ino [ 57.210160][ T6064] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.926: couldn't read orphan inode 15 (err -117) [ 57.222654][ T6064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.266723][ T6068] syzkaller0: entered promiscuous mode [ 57.272294][ T6068] syzkaller0: entered allmulticast mode [ 57.294423][ T6074] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 57.306825][ T5125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.454594][ T6093] loop1: detected capacity change from 0 to 764 [ 57.523226][ T6093] Symlink component flag not implemented [ 57.536222][ T6093] Symlink component flag not implemented (7) [ 57.560558][ T6101] loop6: detected capacity change from 0 to 512 [ 57.583018][ T6101] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.942: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 57.618789][ T6101] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.942: Bad quota inode: 3, type: 0 [ 57.620196][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 57.620208][ T29] audit: type=1400 audit(1753558611.491:1035): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 57.672354][ T6101] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.692317][ T29] audit: type=1400 audit(1753558611.531:1036): avc: denied { map_create } for pid=6110 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.711533][ T29] audit: type=1400 audit(1753558611.531:1037): avc: denied { map_read map_write } for pid=6110 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.731414][ T29] audit: type=1400 audit(1753558611.531:1038): avc: denied { prog_load } for pid=6110 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.732370][ T6101] EXT4-fs (loop6): mount failed [ 57.750565][ T29] audit: type=1400 audit(1753558611.531:1039): avc: denied { bpf } for pid=6110 comm="syz.0.946" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.775872][ T29] audit: type=1400 audit(1753558611.531:1040): avc: denied { perfmon } for pid=6110 comm="syz.0.946" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.796740][ T29] audit: type=1400 audit(1753558611.531:1041): avc: denied { prog_run } for pid=6110 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.815742][ T29] audit: type=1400 audit(1753558611.541:1042): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.840160][ T29] audit: type=1400 audit(1753558611.541:1043): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.864365][ T29] audit: type=1400 audit(1753558611.541:1044): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.147439][ T6128] loop7: detected capacity change from 0 to 512 [ 58.164391][ T6128] EXT4-fs: inline encryption not supported [ 58.193805][ T6128] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.375453][ T6141] netlink: 'syz.7.957': attribute type 39 has an invalid length. [ 58.457892][ T6144] syzkaller0: entered promiscuous mode [ 58.463544][ T6144] syzkaller0: entered allmulticast mode [ 58.537641][ T6164] loop6: detected capacity change from 0 to 512 [ 58.593803][ T6164] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.970: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 58.653583][ T6164] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.970: Bad quota inode: 3, type: 0 [ 58.666658][ T6164] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.682503][ T6164] EXT4-fs (loop6): mount failed [ 58.833613][ T6203] sd 0:0:1:0: device reset [ 59.071318][ T6220] loop3: detected capacity change from 0 to 512 [ 59.086480][ T6220] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.115421][ T6220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.127533][ T6220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 59.137081][ T6220] System zones: 1-12 [ 59.142305][ T6220] EXT4-fs (loop3): 1 truncate cleaned up [ 59.148470][ T6220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.193136][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.393817][ T6250] __nla_validate_parse: 4 callbacks suppressed [ 59.393835][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 59.429318][ T6246] syzkaller0: entered promiscuous mode [ 59.434833][ T6246] syzkaller0: entered allmulticast mode [ 59.580799][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 59.683736][ T6278] block device autoloading is deprecated and will be removed. [ 60.117163][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 60.126101][ T6311] netlink: 'syz.0.1035': attribute type 5 has an invalid length. [ 60.133899][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1035'. [ 60.145821][ T6311] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 60.154576][ T6311] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 60.163404][ T6311] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 60.172071][ T6311] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 60.181177][ T6311] geneve2: entered promiscuous mode [ 60.186461][ T6311] geneve2: entered allmulticast mode [ 60.208549][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1036'. [ 60.230972][ T6317] loop0: detected capacity change from 0 to 128 [ 60.237708][ T6317] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.302891][ T6319] SELinux: failed to load policy [ 60.410042][ T6324] ================================================================== [ 60.418149][ T6324] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 60.426054][ T6324] [ 60.428383][ T6324] write to 0xffff888106b72528 of 4 bytes by task 6317 on cpu 1: [ 60.436014][ T6324] __mark_inode_dirty+0x240/0x760 [ 60.441048][ T6324] fat_update_time+0x1ec/0x200 [ 60.445843][ T6324] file_update_time+0x1f9/0x2b0 [ 60.450702][ T6324] __generic_file_write_iter+0x4e/0x120 [ 60.456257][ T6324] generic_file_write_iter+0x8d/0x2f0 [ 60.461636][ T6324] iter_file_splice_write+0x5ef/0x970 [ 60.467021][ T6324] direct_splice_actor+0x153/0x2a0 [ 60.472142][ T6324] splice_direct_to_actor+0x30f/0x680 [ 60.477526][ T6324] do_splice_direct+0xda/0x150 [ 60.482309][ T6324] do_sendfile+0x380/0x650 [ 60.486744][ T6324] __x64_sys_sendfile64+0x105/0x150 [ 60.491947][ T6324] x64_sys_call+0xb39/0x2fb0 [ 60.496544][ T6324] do_syscall_64+0xd2/0x200 [ 60.501047][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.506945][ T6324] [ 60.509258][ T6324] read to 0xffff888106b72528 of 4 bytes by task 6324 on cpu 0: [ 60.516801][ T6324] __mark_inode_dirty+0x52/0x760 [ 60.521756][ T6324] fat_update_time+0x1ec/0x200 [ 60.526533][ T6324] touch_atime+0x148/0x340 [ 60.530951][ T6324] filemap_splice_read+0x629/0x6b0 [ 60.536078][ T6324] splice_direct_to_actor+0x26f/0x680 [ 60.541467][ T6324] do_splice_direct+0xda/0x150 [ 60.546250][ T6324] do_sendfile+0x380/0x650 [ 60.550671][ T6324] __x64_sys_sendfile64+0x105/0x150 [ 60.555881][ T6324] x64_sys_call+0xb39/0x2fb0 [ 60.560484][ T6324] do_syscall_64+0xd2/0x200 [ 60.565007][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.570900][ T6324] [ 60.573223][ T6324] value changed: 0x00000000 -> 0x00000038 [ 60.578932][ T6324] [ 60.581249][ T6324] Reported by Kernel Concurrency Sanitizer on: [ 60.587402][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.0.1038 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 60.599826][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.609880][ T6324] ==================================================================