last executing test programs: 3.032100775s ago: executing program 4 (id=710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xfffffffd, {0x0, 0x4, 0x0, 0x0, {0x4e22, 0x4e23, [0x0, 0x8005, 0x0, 0x4000000], [0x1], 0x0, [0x7]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) 2.613066341s ago: executing program 3 (id=718): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/177, 0xb1, 0xb2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 2.354655411s ago: executing program 3 (id=719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001060500"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x9a, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x18204, 0x0, 0x3, 0x6, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xc) 2.174593257s ago: executing program 3 (id=720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1.870683849s ago: executing program 0 (id=723): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1.753122244s ago: executing program 0 (id=725): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.690490256s ago: executing program 3 (id=726): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_secret(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x64247000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.57858352s ago: executing program 1 (id=728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.506573533s ago: executing program 1 (id=729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000000)={0x800000, 0xeffffffe, 0x6, 0x0, 0x6, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000500)={0x800000, 0x10000, 0x2, 0xf55, 0x2, 0x55a}) close_range(r1, 0xffffffffffffffff, 0x0) 1.496393773s ago: executing program 1 (id=730): socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008"], 0x15) ptrace(0x10, 0x0) ptrace$poke(0x1, 0x0, &(0x7f0000000080), 0x20000000) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) msgget(0x0, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 1.481926034s ago: executing program 4 (id=731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2040600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 1.442935916s ago: executing program 4 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000", @ANYBLOB='\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.440548926s ago: executing program 1 (id=733): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x20000000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.388754557s ago: executing program 1 (id=734): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 1.343853779s ago: executing program 4 (id=735): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000240)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x0, 0x0) 1.289215731s ago: executing program 4 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1f0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0xff, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1f0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1976f82701f3edc7, 0x0, 'syz0\x00'}}, @common=@unspec=@state={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x4, 0x0, 0x0, 0xb, 0x2], 0x1, 0x7}, {0x1, [0x4f266c3099a50bf8, 0x4, 0x1, 0x0, 0x6, 0x4], 0x1, 0x4}}}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000000)='l', 0x1, 0x4094, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.288603221s ago: executing program 1 (id=746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x64, 0xa1, 0x1b, 0x20, 0xb49, 0x64f, 0xd789, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x1d, 0x88, 0x8, [{{0x9, 0x4, 0xb1, 0x6, 0x0, 0x15, 0x3, 0x22, 0x7}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x80002, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.144086626s ago: executing program 2 (id=737): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lstat(&(0x7f0000000580)='./file0\x00', 0x0) 1.098727828s ago: executing program 2 (id=738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001060500"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x9a, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x18204, 0x0, 0x3, 0x6, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xc) 849.018648ms ago: executing program 2 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xfe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 795.54928ms ago: executing program 0 (id=740): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r2, 0x401) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 777.31357ms ago: executing program 2 (id=741): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 576.790218ms ago: executing program 0 (id=742): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)="e4527747608465fa60cde21c9714405ebd47a0cfc30736c742fdbb654bcd2fb5136b2d792cbb26f112c16f413c8d3015a341b5e2a24b5b3a3998a9601b2e3c8c23936ff1b5e86030d1d17192d655f1da1bc61f7e"}, 0x20) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 441.947154ms ago: executing program 2 (id=743): connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x318a054d}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114dc05002f0600ac141430e0000003808a8972bd0b72e4108296a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 391.716715ms ago: executing program 2 (id=744): syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ee0000/0x3000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 377.197986ms ago: executing program 4 (id=745): socket$inet(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x1) 225.357062ms ago: executing program 0 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000", @ANYBLOB='\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 170.665753ms ago: executing program 3 (id=748): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/17]}, 0x89) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) 83.782047ms ago: executing program 3 (id=749): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f00000004c0)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fadvise64(0xffffffffffffffff, 0xa4, 0x1, 0x5) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfffc, 0x8}, {0x6}}}, 0x24}}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 0s ago: executing program 0 (id=750): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x3) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) kernel console output (not intermixed with test programs): : type=1400 audit(1745872536.104:84): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.645317][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.651669][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.782077][ T29] audit: type=1400 audit(1745872536.394:85): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.805808][ T29] audit: type=1400 audit(1745872536.394:86): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.826376][ T29] audit: type=1400 audit(1745872536.394:87): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.846918][ T29] audit: type=1400 audit(1745872536.394:88): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.867360][ T29] audit: type=1400 audit(1745872536.414:89): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.873328][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.892413][ T29] audit: type=1400 audit(1745872536.414:90): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.935663][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.066245][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.107689][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.163446][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.170725][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.178121][ T3305] bridge_slave_0: entered allmulticast mode [ 35.184745][ T3305] bridge_slave_0: entered promiscuous mode [ 35.191520][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.198669][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.205977][ T3305] bridge_slave_1: entered allmulticast mode [ 35.212432][ T3305] bridge_slave_1: entered promiscuous mode [ 35.228545][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.267215][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.294681][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.339297][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.346494][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.353736][ T3313] bridge_slave_0: entered allmulticast mode [ 35.361290][ T3313] bridge_slave_0: entered promiscuous mode [ 35.368466][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.384164][ T3305] team0: Port device team_slave_0 added [ 35.392030][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.399273][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.407769][ T3313] bridge_slave_1: entered allmulticast mode [ 35.414290][ T3313] bridge_slave_1: entered promiscuous mode [ 35.434375][ T3305] team0: Port device team_slave_1 added [ 35.451008][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.460967][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.486521][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.510153][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.517470][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.544169][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.562565][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.569813][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.577047][ T3315] bridge_slave_0: entered allmulticast mode [ 35.583552][ T3315] bridge_slave_0: entered promiscuous mode [ 35.595328][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.602475][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.628593][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.645781][ T3313] team0: Port device team_slave_0 added [ 35.656664][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.663919][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.671220][ T3315] bridge_slave_1: entered allmulticast mode [ 35.677942][ T3315] bridge_slave_1: entered promiscuous mode [ 35.702259][ T3313] team0: Port device team_slave_1 added [ 35.726216][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.753017][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.760215][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.767446][ T3306] bridge_slave_0: entered allmulticast mode [ 35.773991][ T3306] bridge_slave_0: entered promiscuous mode [ 35.781263][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.788446][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.795681][ T3306] bridge_slave_1: entered allmulticast mode [ 35.802239][ T3306] bridge_slave_1: entered promiscuous mode [ 35.809559][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.857528][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.864552][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.890826][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.902429][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.909814][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.938352][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.956081][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.967633][ T3305] hsr_slave_0: entered promiscuous mode [ 35.973733][ T3305] hsr_slave_1: entered promiscuous mode [ 35.980729][ T3315] team0: Port device team_slave_0 added [ 35.987523][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.994748][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.002030][ T3312] bridge_slave_0: entered allmulticast mode [ 36.009372][ T3312] bridge_slave_0: entered promiscuous mode [ 36.016214][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.023281][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.030786][ T3312] bridge_slave_1: entered allmulticast mode [ 36.037204][ T3312] bridge_slave_1: entered promiscuous mode [ 36.047329][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.057955][ T3315] team0: Port device team_slave_1 added [ 36.099363][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.125469][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.132483][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.158561][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.176048][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.185991][ T3306] team0: Port device team_slave_0 added [ 36.196879][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.203943][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.230439][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.251432][ T3306] team0: Port device team_slave_1 added [ 36.259819][ T3313] hsr_slave_0: entered promiscuous mode [ 36.266137][ T3313] hsr_slave_1: entered promiscuous mode [ 36.272440][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.280916][ T3313] Cannot create hsr debugfs directory [ 36.312256][ T3312] team0: Port device team_slave_0 added [ 36.335898][ T3312] team0: Port device team_slave_1 added [ 36.344757][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.351995][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.378374][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.407918][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.415283][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.441589][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.453086][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.460500][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.486693][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.499704][ T3315] hsr_slave_0: entered promiscuous mode [ 36.505950][ T3315] hsr_slave_1: entered promiscuous mode [ 36.511849][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.519569][ T3315] Cannot create hsr debugfs directory [ 36.532239][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.539378][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.566874][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.616895][ T3312] hsr_slave_0: entered promiscuous mode [ 36.623081][ T3312] hsr_slave_1: entered promiscuous mode [ 36.629020][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.636833][ T3312] Cannot create hsr debugfs directory [ 36.652048][ T3306] hsr_slave_0: entered promiscuous mode [ 36.658492][ T3306] hsr_slave_1: entered promiscuous mode [ 36.665409][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.673276][ T3306] Cannot create hsr debugfs directory [ 36.796032][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.804792][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.825764][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.835703][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.888398][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.898255][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.907553][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.918363][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.953045][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.962939][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.971907][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.991325][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.029635][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.038942][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.055084][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.062116][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.071707][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.111775][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.124024][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.140514][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.149459][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.159875][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.171277][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.183108][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.190273][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.206093][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.216105][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.233796][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.242321][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.249440][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.259519][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.266697][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.280464][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.287670][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.298389][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.305480][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.327087][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.334162][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.368942][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.379462][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.404011][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.420202][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.430646][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.486931][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.498864][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.507071][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.514156][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.528291][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.535412][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.549368][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.566877][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.579235][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.586324][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.601415][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.608631][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.633541][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.651734][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.692000][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.733320][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.768606][ T3305] veth0_vlan: entered promiscuous mode [ 37.788550][ T3305] veth1_vlan: entered promiscuous mode [ 37.803864][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.835741][ T3313] veth0_vlan: entered promiscuous mode [ 37.862684][ T3313] veth1_vlan: entered promiscuous mode [ 37.877220][ T3305] veth0_macvtap: entered promiscuous mode [ 37.886595][ T3312] veth0_vlan: entered promiscuous mode [ 37.896730][ T3305] veth1_macvtap: entered promiscuous mode [ 37.909247][ T3312] veth1_vlan: entered promiscuous mode [ 37.928706][ T3313] veth0_macvtap: entered promiscuous mode [ 37.954383][ T3306] veth0_vlan: entered promiscuous mode [ 37.960529][ T3313] veth1_macvtap: entered promiscuous mode [ 37.976620][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.987921][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.998904][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.009683][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.026214][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.035732][ T3312] veth0_macvtap: entered promiscuous mode [ 38.042203][ T3306] veth1_vlan: entered promiscuous mode [ 38.048711][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.059194][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.069943][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.078911][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.087874][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.096641][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.105483][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.125269][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.134273][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.143333][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.152325][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.168374][ T3312] veth1_macvtap: entered promiscuous mode [ 38.190101][ T3306] veth0_macvtap: entered promiscuous mode [ 38.205781][ T3315] veth0_vlan: entered promiscuous mode [ 38.220352][ T3306] veth1_macvtap: entered promiscuous mode [ 38.232384][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.242560][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.258041][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.267928][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.278457][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.289149][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.306556][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.317128][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.327075][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.337641][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.357037][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.365010][ T3315] veth1_vlan: entered promiscuous mode [ 38.378375][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.379049][ T3447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.387234][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.404690][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.413566][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.428688][ T3447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.443533][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.454116][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.464244][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.474712][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.484651][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.495245][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.509551][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.527759][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.538682][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.548680][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.559156][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.569080][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.579660][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.596226][ T3452] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 38.599975][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 38.599996][ T29] audit: type=1400 audit(1745872541.214:129): avc: denied { create } for pid=3451 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.604128][ T3452] netlink: 'syz.2.6': attribute type 2 has an invalid length. [ 38.610222][ T29] audit: type=1400 audit(1745872541.214:130): avc: denied { write } for pid=3451 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.632285][ T3452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 38.644166][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.684504][ T3315] veth0_macvtap: entered promiscuous mode [ 38.702431][ T3315] veth1_macvtap: entered promiscuous mode [ 38.713928][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.714429][ T29] audit: type=1400 audit(1745872541.324:131): avc: denied { open } for pid=3454 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.725060][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.744163][ T29] audit: type=1400 audit(1745872541.324:132): avc: denied { kernel } for pid=3454 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.754137][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.784187][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.794872][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.805520][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.815438][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.826082][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.847570][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.864415][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.869464][ T29] audit: type=1400 audit(1745872541.464:133): avc: denied { create } for pid=3459 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.873361][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.892510][ T29] audit: type=1400 audit(1745872541.464:134): avc: denied { bind } for pid=3459 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.901347][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.920212][ T29] audit: type=1400 audit(1745872541.464:135): avc: denied { write } for pid=3459 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.929156][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.957850][ T29] audit: type=1400 audit(1745872541.464:136): avc: denied { create } for pid=3459 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.976951][ T29] audit: type=1400 audit(1745872541.474:137): avc: denied { bind } for pid=3459 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.004510][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.015199][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.025593][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.036225][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.046145][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.056665][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.066499][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.077375][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.089075][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.147296][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.156218][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.165122][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.174013][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.186305][ T29] audit: type=1400 audit(1745872541.804:138): avc: denied { create } for pid=3464 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.214316][ C1] hrtimer: interrupt took 38648 ns [ 39.246466][ T3469] loop7: detected capacity change from 0 to 16384 [ 39.378652][ T3458] syz.0.1 (3458) used greatest stack depth: 10816 bytes left [ 39.423729][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 39.433116][ T3469] I/O error, dev loop7, sector 7464 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 39.448858][ T3469] I/O error, dev loop7, sector 7720 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 39.455566][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.465989][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.481439][ T3474] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 39.491565][ T3474] Buffer I/O error on dev loop7, logical block 384, lost async page write [ 39.497300][ T3469] I/O error, dev loop7, sector 7464 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.500251][ T3474] Buffer I/O error on dev loop7, logical block 385, lost async page write [ 39.509647][ T3469] Buffer I/O error on dev loop7, logical block 933, async page read [ 39.518925][ T3474] Buffer I/O error on dev loop7, logical block 386, lost async page write [ 39.536532][ T3474] Buffer I/O error on dev loop7, logical block 387, lost async page write [ 39.545198][ T3474] Buffer I/O error on dev loop7, logical block 388, lost async page write [ 39.552006][ T3469] I/O error, dev loop7, sector 7464 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.553720][ T3474] Buffer I/O error on dev loop7, logical block 389, lost async page write [ 39.563304][ T3469] Buffer I/O error on dev loop7, logical block 933, async page read [ 39.571937][ T3474] Buffer I/O error on dev loop7, logical block 390, lost async page write [ 39.583841][ T3492] 9pnet_fd: Insufficient options for proto=fd [ 39.588573][ T3474] Buffer I/O error on dev loop7, logical block 391, lost async page write [ 39.628311][ T3469] I/O error, dev loop7, sector 7464 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.641769][ T3474] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 39.662867][ T3474] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 39.704901][ T3474] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 39.705173][ T3499] pim6reg1: entered promiscuous mode [ 39.720508][ T3499] pim6reg1: entered allmulticast mode [ 39.797783][ T3474] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.867597][ T3518] loop0: detected capacity change from 0 to 128 [ 39.895206][ T3474] loop7: unable to read partition table [ 39.905958][ T3474] loop_reread_partitions: partition scan of loop7 ((Aiׯ@ p.[vc5Gת~_;o) failed (rc=-5) [ 39.919735][ T3518] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 39.947554][ T3518] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.145101][ T3531] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm +}[@: bg 0: bad block bitmap checksum [ 40.482452][ T3535] syz.3.25 (3535) used greatest stack depth: 10344 bytes left [ 40.543854][ T3541] loop1: detected capacity change from 0 to 1024 [ 40.589052][ T3541] ======================================================= [ 40.589052][ T3541] WARNING: The mand mount option has been deprecated and [ 40.589052][ T3541] and is ignored by this kernel. Remove the mand [ 40.589052][ T3541] option from the mount to silence this warning. [ 40.589052][ T3541] ======================================================= [ 40.636885][ T3541] EXT4-fs: Ignoring removed i_version option [ 40.660868][ T3541] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.677294][ T3541] EXT4-fs: Ignoring removed nobh option [ 40.683189][ T3541] EXT4-fs: Ignoring removed bh option [ 40.711212][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.857358][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.881065][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.934714][ T3549] netlink: 108 bytes leftover after parsing attributes in process `syz.0.28'. [ 40.944106][ T3549] netlink: 108 bytes leftover after parsing attributes in process `syz.0.28'. [ 40.953200][ T3549] netlink: 108 bytes leftover after parsing attributes in process `syz.0.28'. [ 41.032513][ T3555] loop0: detected capacity change from 0 to 512 [ 41.042968][ T3555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.042987][ T3555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.059913][ T3555] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.060008][ T3555] EXT4-fs (loop0): 1 truncate cleaned up [ 41.060588][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.093566][ T3555] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.0.31: corrupted xattr block 33: invalid header [ 41.097843][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 41.107068][ T3555] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.31: corrupted xattr block 33: invalid header [ 41.194219][ T3555] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 41.316821][ T3563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 41.338109][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.569785][ T3578] sd 0:0:1:0: device reset [ 41.624119][ T3580] loop4: detected capacity change from 0 to 512 [ 41.634360][ T3580] EXT4-fs: Ignoring removed orlov option [ 41.665992][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.695014][ T3580] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.788992][ T3587] loop2: detected capacity change from 0 to 128 [ 41.795658][ T3580] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.876113][ T3587] syz.2.42: attempt to access beyond end of device [ 41.876113][ T3587] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 41.947941][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.298951][ T3608] Zero length message leads to an empty skb [ 42.313625][ T3606] pim6reg1: entered promiscuous mode [ 42.319313][ T3606] pim6reg1: entered allmulticast mode [ 42.327757][ T3608] atomic_op ffff8881190aa528 conn xmit_atomic 0000000000000000 [ 42.566659][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.579123][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.604658][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.624605][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.648799][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.671236][ T3578] syz.1.39 (3578) used greatest stack depth: 7128 bytes left [ 42.679031][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.708608][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.724414][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.737205][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 42.829260][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.2.54 [ 43.247165][ T3647] netlink: 'syz.4.66': attribute type 7 has an invalid length. [ 43.255036][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 43.351916][ T3653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.398131][ T3694] loop4: detected capacity change from 0 to 128 [ 43.433675][ T3653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.484366][ T3709] capability: warning: `syz.2.71' uses deprecated v2 capabilities in a way that may be insecure [ 43.518610][ T3653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.562247][ T3713] loop0: detected capacity change from 0 to 512 [ 43.562467][ T3714] loop2: detected capacity change from 0 to 512 [ 43.682346][ T3653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.701077][ T3713] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.72: Parent and EA inode have the same ino 15 [ 43.714941][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.729728][ T3714] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.749243][ T3653] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.762254][ T3653] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.775170][ T3653] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.780285][ T3713] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.72: Parent and EA inode have the same ino 15 [ 43.787857][ T3653] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.817854][ T3713] EXT4-fs (loop0): 1 orphan inode deleted [ 43.830350][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 43.830380][ T29] audit: type=1400 audit(1745872546.444:252): avc: denied { mounton } for pid=3712 comm="syz.2.73" path="/17/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.871039][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.915490][ T29] audit: type=1400 audit(1745872546.474:253): avc: denied { mount } for pid=3712 comm="syz.2.73" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.036614][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.142362][ T3726] loop0: detected capacity change from 0 to 128 [ 44.177230][ T3726] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.221637][ T3726] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.252137][ T29] audit: type=1400 audit(1745872546.864:254): avc: denied { read write open } for pid=3724 comm="syz.0.75" path="/17/bus/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.303638][ T29] audit: type=1400 audit(1745872546.894:255): avc: denied { setattr } for pid=3724 comm="syz.0.75" path="/17/bus/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.354607][ T3725] geneve0: entered allmulticast mode [ 44.476638][ T29] audit: type=1400 audit(1745872547.094:256): avc: denied { ioctl } for pid=3724 comm="syz.0.75" path="/17/bus/file1" dev="loop0" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.577998][ T2969] IPVS: starting estimator thread 0... [ 44.630598][ T3735] loop3: detected capacity change from 0 to 512 [ 44.636625][ T3714] Set syz1 is full, maxelem 65536 reached [ 44.671676][ T3735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.684565][ T3733] IPVS: using max 2400 ests per chain, 120000 per kthread [ 44.693235][ T3313] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.717268][ T29] audit: type=1400 audit(1745872547.304:257): avc: denied { rmdir } for pid=3313 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.740834][ T29] audit: type=1400 audit(1745872547.304:258): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.762494][ T3735] EXT4-fs (loop3): 1 truncate cleaned up [ 44.771816][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.781885][ T3735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.796803][ T3313] EXT4-fs (loop2): Remounting filesystem read-only [ 44.857711][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.864558][ T29] audit: type=1400 audit(1745872547.454:259): avc: denied { rename } for pid=3734 comm="syz.3.79" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.909258][ T29] audit: type=1400 audit(1745872547.524:260): avc: denied { rmdir } for pid=3313 comm="syz-executor" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 44.938128][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.002819][ T3748] netlink: 96 bytes leftover after parsing attributes in process `syz.1.84'. [ 45.024493][ T29] audit: type=1400 audit(1745872547.634:261): avc: denied { create } for pid=3743 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.119308][ T3760] netlink: 18 bytes leftover after parsing attributes in process `GPL'. [ 45.141129][ T10] IPVS: starting estimator thread 0... [ 45.234529][ T3762] IPVS: using max 2016 ests per chain, 100800 per kthread [ 45.252946][ T3771] loop1: detected capacity change from 0 to 128 [ 45.343530][ T3779] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 45.427735][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 45.613007][ T3803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 45.622615][ T3803] sch_tbf: burst 88 is lower than device veth1_macvtap mtu (1514) ! [ 45.764555][ T3810] tipc: Started in network mode [ 45.769814][ T3810] tipc: Node identity ac14140f, cluster identity 4711 [ 45.777017][ T3810] tipc: New replicast peer: 255.0.0.255 [ 45.783023][ T3810] tipc: Enabled bearer , priority 10 [ 45.894781][ T3817] bridge0: entered promiscuous mode [ 45.907595][ T3817] bridge0: port 3(macvlan2) entered blocking state [ 45.914250][ T3817] bridge0: port 3(macvlan2) entered disabled state [ 45.921036][ T3817] macvlan2: entered allmulticast mode [ 45.926749][ T3817] bridge0: entered allmulticast mode [ 45.932884][ T3817] macvlan2: left allmulticast mode [ 45.938144][ T3817] bridge0: left allmulticast mode [ 45.943518][ T3817] bridge0: left promiscuous mode [ 45.952087][ T3819] bridge: RTM_NEWNEIGH with invalid ether address [ 46.015414][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.114'. [ 46.049957][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.114'. [ 46.147318][ T3838] all: renamed from lo (while UP) [ 46.229884][ T3848] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 46.230609][ T3845] loop0: detected capacity change from 0 to 1024 [ 46.361843][ T3845] EXT4-fs: Ignoring removed orlov option [ 46.367639][ T3845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.400911][ T3852] loop3: detected capacity change from 0 to 512 [ 46.406818][ T3845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.420374][ T3852] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.495290][ T3852] EXT4-fs (loop3): 1 truncate cleaned up [ 46.501471][ T3852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.558668][ T3861] pim6reg1: entered promiscuous mode [ 46.564046][ T3861] pim6reg1: entered allmulticast mode [ 46.572814][ T3864] loop2: detected capacity change from 0 to 128 [ 46.611302][ T3864] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.645337][ T3864] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.666676][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.767528][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.790816][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.825415][ T3876] netlink: 'syz.3.134': attribute type 29 has an invalid length. [ 46.840574][ T3880] loop2: detected capacity change from 0 to 128 [ 46.847825][ T3880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.866114][ T3880] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.894506][ T9] tipc: Node number set to 2886997007 [ 46.918416][ T3696] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.079402][ T3895] process 'syz.2.143' launched './file0' with NULL argv: empty string added [ 47.108214][ T3898] bridge_slave_0: left allmulticast mode [ 47.113931][ T3898] bridge_slave_0: left promiscuous mode [ 47.119723][ T3898] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.149241][ T3898] bridge_slave_1: left allmulticast mode [ 47.154981][ T3898] bridge_slave_1: left promiscuous mode [ 47.160686][ T3898] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.196173][ T3898] bond0: (slave bond_slave_0): Releasing backup interface [ 47.209194][ T3903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.147'. [ 47.220538][ T3903] netlink: 'syz.2.147': attribute type 39 has an invalid length. [ 47.229570][ T3898] bond0: (slave bond_slave_1): Releasing backup interface [ 47.242999][ T3898] team0: Port device team_slave_0 removed [ 47.253739][ T3898] team0: Port device team_slave_1 removed [ 47.260990][ T3898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.268482][ T3898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.279690][ T3898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.287258][ T3898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.394234][ T3908] netlink: 'syz.4.149': attribute type 27 has an invalid length. [ 47.511285][ T3910] loop2: detected capacity change from 0 to 512 [ 47.523949][ T3910] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.558517][ T3910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.562884][ T3908] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.572013][ T3910] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.580075][ T3908] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.599533][ T3908] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.608616][ T3908] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.675996][ T3910] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.150: corrupted xattr block 32: bad e_name length [ 47.718289][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.744865][ T3910] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.150: corrupted xattr block 32: bad e_name length [ 47.760524][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.772690][ T3910] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.150: corrupted xattr block 32: bad e_name length [ 47.818593][ T3914] capability: warning: `syz.1.151' uses 32-bit capabilities (legacy support in use) [ 47.894210][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.966636][ T3923] xt_hashlimit: max too large, truncated to 1048576 [ 48.017175][ T3920] loop4: detected capacity change from 0 to 8192 [ 48.597369][ T3959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.613093][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 48.624135][ T3959] loop4: detected capacity change from 0 to 2048 [ 48.656690][ T3959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.859587][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.923259][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 48.923278][ T29] audit: type=1326 audit(1745872551.534:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 48.925765][ T3973] random: crng reseeded on system resumption [ 48.930210][ T29] audit: type=1326 audit(1745872551.534:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 48.982815][ T29] audit: type=1326 audit(1745872551.534:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 49.006165][ T29] audit: type=1326 audit(1745872551.534:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 49.022054][ T3971] syzkaller0: entered allmulticast mode [ 49.029579][ T29] audit: type=1326 audit(1745872551.534:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 49.042088][ T3971] syzkaller0: entered promiscuous mode [ 49.058557][ T29] audit: type=1326 audit(1745872551.534:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 49.087366][ T29] audit: type=1326 audit(1745872551.534:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 49.110870][ T29] audit: type=1326 audit(1745872551.544:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 49.129246][ T3973] loop3: detected capacity change from 0 to 512 [ 49.134282][ T29] audit: type=1400 audit(1745872551.544:395): avc: denied { append } for pid=3972 comm="syz.3.173" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 49.148791][ T3973] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.163517][ T29] audit: type=1400 audit(1745872551.544:396): avc: denied { open } for pid=3972 comm="syz.3.173" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 49.204570][ T3973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 49.212849][ T3973] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.219713][ T3973] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.173: attempt to clear invalid blocks 1024 len 1 [ 49.233106][ T3973] EXT4-fs (loop3): Remounting filesystem read-only [ 49.233842][ T3971] syzkaller0 (unregistering): left promiscuous mode [ 49.242728][ T3973] EXT4-fs (loop3): 1 truncate cleaned up [ 49.246502][ T3971] syzkaller0 (unregistering): left allmulticast mode [ 49.252703][ T3973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 49.271858][ T3973] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 49.315990][ T3977] pim6reg: entered allmulticast mode [ 49.316250][ T3979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.175'. [ 49.324758][ T3977] pim6reg: left allmulticast mode [ 49.404707][ T3979] infiniband syz!: set active [ 49.409470][ T3979] infiniband syz!: added team_slave_0 [ 49.431267][ T3979] RDS/IB: syz!: added [ 49.435521][ T3979] smc: adding ib device syz! with port count 1 [ 49.439390][ T3986] hsr0: entered promiscuous mode [ 49.441744][ T3979] smc: ib device syz! port 1 has pnetid [ 49.550159][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.559193][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.597861][ T4011] mmap: syz.1.183 (4011) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.809298][ T4021] random: crng reseeded on system resumption [ 49.933349][ T4021] loop0: detected capacity change from 0 to 512 [ 49.942668][ T4021] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.964616][ T4021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 49.974751][ T4021] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.993211][ T4021] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.188: attempt to clear invalid blocks 1024 len 1 [ 50.006985][ T4021] EXT4-fs (loop0): Remounting filesystem read-only [ 50.014018][ T4021] EXT4-fs (loop0): 1 truncate cleaned up [ 50.022590][ T4021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 50.036656][ T4021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 50.103209][ T4030] loop4: detected capacity change from 0 to 256 [ 50.127582][ T4030] FAT-fs (loop4): codepage cp857 not found [ 50.319507][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 50.352296][ T4046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.376333][ T4046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.391835][ T4046] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 50.404387][ T4046] bond1: (slave vti0): Error -95 calling set_mac_address [ 50.414383][ T4052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 50.424930][ T4052] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.426715][ T4053] bond1: (slave dummy0): Error -99 calling set_mac_address [ 50.477369][ T4057] vlan2: entered allmulticast mode [ 50.482647][ T4057] bond0: entered allmulticast mode [ 50.550026][ T4059] loop2: detected capacity change from 0 to 1024 [ 50.588146][ T4059] EXT4-fs: Ignoring removed orlov option [ 50.593962][ T4059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.621403][ T4065] pim6reg: entered allmulticast mode [ 50.638287][ T4065] pim6reg: left allmulticast mode [ 50.646099][ T4059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.661144][ T4070] loop4: detected capacity change from 0 to 128 [ 50.753307][ T4082] syz.4.205: attempt to access beyond end of device [ 50.753307][ T4082] loop4: rw=3, sector=145, nr_sectors = 7 limit=128 [ 50.795379][ T4082] syz.4.205: attempt to access beyond end of device [ 50.795379][ T4082] loop4: rw=2051, sector=152, nr_sectors = 889 limit=128 [ 50.817752][ T4059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.914917][ T4092] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.214'. [ 50.961258][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 51.050999][ T4100] netlink: 'syz.2.217': attribute type 4 has an invalid length. [ 51.066866][ T4100] netlink: 'syz.2.217': attribute type 4 has an invalid length. [ 51.185232][ T4107] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 51.321354][ T4121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.530715][ T4121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.588601][ T4121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.657080][ T4150] loop4: detected capacity change from 0 to 2048 [ 51.677905][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.692182][ T4121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.823975][ T4121] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.836510][ T4121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.851319][ T4121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.889206][ T4121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.953095][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 51.982407][ T4156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.005373][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 52.039182][ T4160] bond1 (unregistering): Released all slaves [ 52.419803][ T4188] loop3: detected capacity change from 0 to 1024 [ 52.462839][ T4188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.517977][ T4188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.531019][ T4192] tipc: Started in network mode [ 52.537565][ T4192] tipc: Node identity f6b6b5336c83, cluster identity 4711 [ 52.544828][ T4192] tipc: Enabled bearer , priority 0 [ 52.568152][ T4191] tipc: Resetting bearer [ 52.575656][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.588730][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.601620][ T4198] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 52.609522][ T4198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'. [ 52.609652][ T4191] tipc: Disabling bearer [ 52.663650][ T4198] team0: Port device geneve1 added [ 52.821458][ T4211] tipc: New replicast peer: 255.255.255.83 [ 52.828262][ T4211] tipc: Enabled bearer , priority 10 [ 52.971200][ T4217] syz.2.249 uses obsolete (PF_INET,SOCK_PACKET) [ 53.067959][ T4221] selinux_netlink_send: 55 callbacks suppressed [ 53.068032][ T4221] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4221 comm=syz.1.253 [ 53.205832][ T4222] syzkaller0: entered promiscuous mode [ 53.211460][ T4222] syzkaller0: entered allmulticast mode [ 53.283096][ T4234] loop2: detected capacity change from 0 to 1024 [ 53.291521][ T4231] vlan2: entered allmulticast mode [ 53.296805][ T4231] bond0: entered allmulticast mode [ 53.298823][ T4234] EXT4-fs: Ignoring removed orlov option [ 53.301926][ T4231] bond_slave_0: entered allmulticast mode [ 53.307630][ T4234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.320872][ T4231] bond_slave_1: entered allmulticast mode [ 53.331656][ T4231] bridge0: port 3(vlan2) entered blocking state [ 53.338320][ T4231] bridge0: port 3(vlan2) entered disabled state [ 53.341434][ T4234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.358310][ T4231] vlan2: entered promiscuous mode [ 53.363456][ T4231] bond0: entered promiscuous mode [ 53.368650][ T4231] bond_slave_0: entered promiscuous mode [ 53.374475][ T4231] bond_slave_1: entered promiscuous mode [ 53.381062][ T4231] bridge0: port 3(vlan2) entered blocking state [ 53.387499][ T4231] bridge0: port 3(vlan2) entered forwarding state [ 53.395719][ T4239] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 53.405898][ T4236] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 53.552644][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.666809][ T4251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.772173][ T4251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.848299][ T4251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.907919][ T4251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.944505][ T9] tipc: Node number set to 2587211059 [ 53.973678][ T4251] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.986438][ T4251] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.998607][ T4251] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.010805][ T4251] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.084858][ T4258] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.397271][ T4260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4260 comm=syz.3.265 [ 54.509882][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 54.509900][ T29] audit: type=1400 audit(1745872557.124:566): avc: denied { write } for pid=4261 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.538428][ T29] audit: type=1400 audit(1745872557.124:567): avc: denied { nlmsg_write } for pid=4261 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.697075][ T4272] loop4: detected capacity change from 0 to 1024 [ 54.707476][ T4272] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.723064][ T4272] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 54.772098][ T29] audit: type=1400 audit(1745872557.384:568): avc: denied { create } for pid=4276 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.794403][ T29] audit: type=1400 audit(1745872557.384:569): avc: denied { bind } for pid=4276 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.828460][ T29] audit: type=1400 audit(1745872557.444:570): avc: denied { listen } for pid=4276 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.898062][ T29] audit: type=1400 audit(1745872557.514:571): avc: denied { create } for pid=4282 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.935418][ T29] audit: type=1400 audit(1745872557.544:572): avc: denied { setopt } for pid=4282 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.948132][ T4281] tipc: Started in network mode [ 54.960255][ T4281] tipc: Node identity c6a50a98d869, cluster identity 4711 [ 54.967641][ T4281] tipc: Enabled bearer , priority 0 [ 54.982459][ T4280] tipc: Resetting bearer [ 54.994505][ T4280] tipc: Disabling bearer [ 55.007029][ T29] audit: type=1400 audit(1745872557.624:573): avc: denied { write } for pid=4284 comm="syz.3.277" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.033043][ T29] audit: type=1400 audit(1745872557.644:574): avc: denied { create } for pid=4286 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 55.055072][ T29] audit: type=1400 audit(1745872557.644:575): avc: denied { append } for pid=4286 comm="syz.2.278" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.061720][ T4285] hub 2-0:1.0: USB hub found [ 55.090946][ T4285] hub 2-0:1.0: 8 ports detected [ 55.107614][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 55.124779][ T4289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.142923][ T4289] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 55.172813][ T4296] loop7: detected capacity change from 0 to 16384 [ 55.184328][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 55.193225][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 55.260290][ T4302] loop2: detected capacity change from 0 to 512 [ 55.272983][ T4302] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.282231][ T4302] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 55.315365][ T4302] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 55.325046][ T4302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 55.333448][ T4302] System zones: 0-2, 18-18, 34-34 [ 55.335051][ T4300] loop7: detected capacity change from 16384 to 0 [ 55.346165][ T4302] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.348024][ C1] blk_print_req_error: 2 callbacks suppressed [ 55.348041][ C1] I/O error, dev loop7, sector 8376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.391203][ T4302] EXT4-fs (loop2): 1 truncate cleaned up [ 55.406267][ T4302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.499287][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.517266][ T4307] loop4: detected capacity change from 0 to 764 [ 55.839683][ T4317] netlink: 52 bytes leftover after parsing attributes in process `syz.2.290'. [ 55.903226][ T4323] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.939831][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 55.987216][ T4323] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.046399][ T4323] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.107573][ T4323] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.162068][ T4323] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.174085][ T4323] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.186216][ T4323] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.197651][ T4323] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.762198][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 56.764735][ T4358] loop0: detected capacity change from 0 to 512 [ 56.777816][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.781968][ T4358] ext4: Unknown parameter 'noacl' [ 56.786158][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.806408][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.813978][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.313570][ T4381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.361962][ T4384] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 57.369980][ T4384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'. [ 57.380624][ T4384] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 57.395103][ T4381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.467977][ T4381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.518824][ T4381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.573273][ T4381] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.585392][ T4381] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.597324][ T4381] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.609193][ T4381] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.767251][ T4394] tipc: Enabling of bearer rejected, failed to enable media [ 58.070917][ T4409] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 58.099295][ T4409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.122363][ T4409] bond1: (slave veth0_to_bond): making interface the new active one [ 58.132514][ T4409] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 58.157845][ T4409] vlan2: entered allmulticast mode [ 58.163050][ T4409] bond1: entered allmulticast mode [ 58.168230][ T4409] veth0_to_bond: entered allmulticast mode [ 58.176196][ T4409] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 58.762609][ T4432] loop3: detected capacity change from 0 to 512 [ 58.882118][ T4432] EXT4-fs (loop3): 1 orphan inode deleted [ 58.894590][ T3686] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 1 [ 58.918469][ T4432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.963568][ T4432] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.975415][ T4442] SELinux: ebitmap: truncated map [ 58.981073][ T4442] SELinux: failed to load policy [ 59.035625][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.084513][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 59.128450][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 59.132243][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 59.228445][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 59.342491][ T4462] vlan2: entered allmulticast mode [ 59.460768][ T4473] loop2: detected capacity change from 0 to 512 [ 59.479286][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 59.532840][ T4473] EXT4-fs (loop2): 1 orphan inode deleted [ 59.545229][ T3686] __quota_error: 352 callbacks suppressed [ 59.545245][ T3686] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.560810][ T3686] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 1 [ 59.585784][ T4473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.587041][ T4467] loop4: detected capacity change from 0 to 1024 [ 59.663858][ T4473] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.717150][ T4467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.866357][ T4488] Driver unsupported XDP return value 0 on prog (id 319) dev N/A, expect packet loss! [ 59.886788][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.945169][ T4490] ip6gretap0: entered promiscuous mode [ 59.985120][ T4492] loop2: detected capacity change from 0 to 1024 [ 60.050417][ T4492] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 60.059565][ T4492] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 60.069020][ T4492] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.359: Failed to acquire dquot type 0 [ 60.134631][ T4492] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 60.213849][ T4492] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.359: corrupted inode contents [ 60.230964][ T4492] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.359: mark_inode_dirty error [ 60.245918][ T29] audit: type=1400 audit(1745872562.864:927): avc: denied { cpu } for pid=4499 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.246254][ T4492] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.359: corrupted inode contents [ 60.278756][ T4501] ": renamed from bridge_slave_0 (while UP) [ 60.282376][ T4492] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.359: mark_inode_dirty error [ 60.286836][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.298603][ T4492] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.359: corrupted inode contents [ 60.323069][ T4492] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 60.332759][ T4492] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.359: corrupted inode contents [ 60.346302][ T4492] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.359: mark_inode_dirty error [ 60.358541][ T4492] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 60.391509][ T4492] EXT4-fs (loop2): 1 truncate cleaned up [ 60.397380][ T4505] tipc: Enabled bearer , priority 0 [ 60.400694][ T4492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.420530][ T3686] tipc: Resetting bearer [ 60.444674][ T4507] loop4: detected capacity change from 0 to 512 [ 60.487855][ T4507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.514669][ T4500] tipc: Resetting bearer [ 60.529521][ T4500] tipc: Disabling bearer [ 60.538053][ T4507] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.573323][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.573716][ T4492] EXT4-fs: Ignoring removed orlov option [ 60.588255][ T29] audit: type=1400 audit(1745872563.184:928): avc: denied { remount } for pid=4491 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.632963][ T29] audit: type=1400 audit(1745872563.244:929): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.652859][ T4492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.660546][ T4515] loop0: detected capacity change from 0 to 512 [ 60.674589][ T4492] EXT4-fs (loop2): can't enable nombcache during remount [ 60.710049][ T4515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 60.726668][ T4515] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.746647][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.773844][ T29] audit: type=1400 audit(1745872563.384:930): avc: denied { setattr } for pid=4514 comm="syz.0.370" path="/67/file1/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.808165][ T4526] loop4: detected capacity change from 0 to 512 [ 60.850979][ T4526] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.860125][ T4526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 60.872324][ T4526] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.374: corrupted in-inode xattr: e_value size too large [ 60.891572][ T4533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 60.901464][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 60.912100][ T29] audit: type=1400 audit(1745872563.524:931): avc: denied { ioctl } for pid=4514 comm="syz.0.370" path="/67/file1/file1" dev="loop0" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.912478][ T4515] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.370: corrupted inode contents [ 60.949203][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.374: couldn't read orphan inode 15 (err -117) [ 60.961666][ T4526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.974349][ T4515] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.370: mark_inode_dirty error [ 60.975740][ T4515] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.370: corrupted inode contents [ 61.010987][ T4515] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.370: mark_inode_dirty error [ 61.035746][ T4515] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.370: mark inode dirty (error -117) [ 61.089037][ T29] audit: type=1326 audit(1745872563.694:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 61.112485][ T29] audit: type=1326 audit(1745872563.704:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 61.164669][ T4515] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 61.227637][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.276824][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 61.321419][ T4545] loop0: detected capacity change from 0 to 1024 [ 61.562338][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 61.613982][ T3385] IPVS: starting estimator thread 0... [ 61.653869][ T4569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'. [ 61.681678][ T4569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4569 comm=syz.1.392 [ 61.704583][ T4565] IPVS: using max 2304 ests per chain, 115200 per kthread [ 61.721933][ T4574] loop4: detected capacity change from 0 to 512 [ 61.759261][ T4574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.799327][ T4574] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.839734][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.981602][ T4588] loop4: detected capacity change from 0 to 164 [ 62.000223][ T4588] Unsupported NM flag settings (8) [ 62.018670][ T4590] pim6reg1: entered promiscuous mode [ 62.024278][ T4590] pim6reg1: entered allmulticast mode [ 62.052301][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 62.139006][ T4602] loop4: detected capacity change from 0 to 2048 [ 62.182134][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.203089][ T4611] loop3: detected capacity change from 0 to 512 [ 62.258976][ T4611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.271744][ T4611] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.336215][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.369722][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.411612][ T4619] netem: change failed [ 62.471188][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 62.655369][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 62.672881][ T4641] bridge_slave_1 (unregistering): left allmulticast mode [ 62.681090][ T4641] bridge_slave_1 (unregistering): left promiscuous mode [ 62.689087][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.000679][ T4671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.061769][ T4675] syzkaller0: entered promiscuous mode [ 63.067510][ T4675] syzkaller0: entered allmulticast mode [ 63.082044][ T4677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.664402][ T4693] loop2: detected capacity change from 0 to 512 [ 63.672888][ T4693] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 63.681665][ T4693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 63.690722][ T4693] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.444: corrupted in-inode xattr: e_value size too large [ 63.705052][ T4693] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.444: couldn't read orphan inode 15 (err -117) [ 63.719175][ T4693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.788162][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 63.914879][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.958959][ T4709] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.996052][ T4709] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.086393][ T4709] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.133252][ T4717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.142273][ T4717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.151355][ T4717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.160850][ T4717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.171164][ T4717] geneve2: entered promiscuous mode [ 64.176446][ T4717] geneve2: entered allmulticast mode [ 64.199955][ T4717] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.208958][ T4717] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.217897][ T4717] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.227558][ T4717] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.242660][ T4709] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.263678][ T4721] pim6reg1: entered promiscuous mode [ 64.269090][ T4721] pim6reg1: entered allmulticast mode [ 64.341581][ T4709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.357704][ T4709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.369986][ T4709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.381644][ T4709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.556664][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 64.556684][ T29] audit: type=1326 audit(1745872567.174:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d7de95927 code=0x7ffc0000 [ 64.590413][ T4748] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 64.606101][ T29] audit: type=1326 audit(1745872567.174:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7de3ab39 code=0x7ffc0000 [ 64.629999][ T29] audit: type=1326 audit(1745872567.174:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4d7de9e969 code=0x7ffc0000 [ 64.633589][ T4748] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 64.653454][ T29] audit: type=1326 audit(1745872567.184:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d7de95927 code=0x7ffc0000 [ 64.653494][ T29] audit: type=1326 audit(1745872567.184:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7de3ab39 code=0x7ffc0000 [ 64.653521][ T29] audit: type=1326 audit(1745872567.184:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4d7de9e969 code=0x7ffc0000 [ 64.653553][ T29] audit: type=1326 audit(1745872567.204:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d7de95927 code=0x7ffc0000 [ 64.653581][ T29] audit: type=1326 audit(1745872567.204:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7de3ab39 code=0x7ffc0000 [ 64.653611][ T29] audit: type=1326 audit(1745872567.204:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d7de95927 code=0x7ffc0000 [ 64.653651][ T29] audit: type=1326 audit(1745872567.204:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7de3ab39 code=0x7ffc0000 [ 64.710712][ T4749] loop4: detected capacity change from 0 to 512 [ 64.851452][ T4751] pim6reg1: entered promiscuous mode [ 64.856910][ T4751] pim6reg1: entered allmulticast mode [ 64.891887][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 64.915894][ T4749] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.922162][ T4754] netlink: 'syz.2.467': attribute type 27 has an invalid length. [ 65.055191][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.465: corrupted inode contents [ 65.069107][ T4767] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #19: comm syz.4.465: mark_inode_dirty error [ 65.137524][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.465: corrupted inode contents [ 65.180469][ T4767] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.465: mark_inode_dirty error [ 65.248856][ T4768] loop0: detected capacity change from 0 to 1024 [ 65.267365][ T4767] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.465: mark inode dirty (error -117) [ 65.291885][ T4767] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 65.346060][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 65.435899][ T4778] netlink: 'syz.3.485': attribute type 4 has an invalid length. [ 65.661469][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.668774][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.753830][ T4754] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.762328][ T4754] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.771524][ T4754] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.779929][ T4754] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.022099][ T4807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 66.090832][ T4812] $H: renamed from bond0 (while UP) [ 66.098101][ T4812] $H: entered promiscuous mode [ 66.103219][ T4812] bond_slave_0: entered promiscuous mode [ 66.109176][ T4812] bond_slave_1: entered promiscuous mode [ 66.151316][ T4818] loop2: detected capacity change from 0 to 512 [ 66.164866][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.173705][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.183122][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.205928][ T4818] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.222794][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.231764][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.240867][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.281225][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.290871][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.304103][ T4821] hub 8-0:1.0: USB hub found [ 66.311938][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.313073][ T4821] hub 8-0:1.0: 8 ports detected [ 66.337344][ T4828] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.486: corrupted inode contents [ 66.350776][ T4828] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.486: mark_inode_dirty error [ 66.384673][ T4828] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.486: corrupted inode contents [ 66.414802][ T4828] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.486: mark_inode_dirty error [ 66.437412][ T4828] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.486: mark inode dirty (error -117) [ 66.450384][ T4828] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 66.468264][ T4832] loop4: detected capacity change from 0 to 512 [ 66.508633][ T4832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.524418][ T4834] loop3: detected capacity change from 0 to 512 [ 66.541340][ T4834] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 66.550753][ T4834] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 66.553537][ T4832] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.563730][ T4834] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 66.582887][ T4834] EXT4-fs (loop3): 1 truncate cleaned up [ 66.613749][ T4834] EXT4-fs (loop3): shut down requested (1) [ 66.626460][ T4832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.492: bg 0: block 304: padding at end of block bitmap is not set [ 66.643542][ T4832] EXT4-fs (loop4): Remounting filesystem read-only [ 66.718378][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.732377][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.870535][ T4862] loop3: detected capacity change from 0 to 8192 [ 66.880212][ T4862] vfat: Unknown parameter '�!T.yՄ * #' [ 66.893095][ T4865] loop4: detected capacity change from 0 to 512 [ 66.911037][ T4865] ext4 filesystem being mounted at /95/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 67.342236][ T4889] loop2: detected capacity change from 0 to 512 [ 67.360187][ T4889] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 67.368826][ T4889] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 67.379535][ T4889] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 67.391516][ T4889] EXT4-fs (loop2): 1 truncate cleaned up [ 67.399687][ T4889] EXT4-fs (loop2): shut down requested (1) [ 67.873558][ T4903] pim6reg1: entered promiscuous mode [ 67.879006][ T4903] pim6reg1: entered allmulticast mode [ 68.232087][ T4911] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 68.288526][ T4899] loop2: detected capacity change from 0 to 1024 [ 68.309929][ T4911] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 68.335924][ T4915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.357604][ T4917] loop3: detected capacity change from 0 to 512 [ 68.368919][ T4915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.416617][ T4917] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.431196][ T4915] bond0 (unregistering): Released all slaves [ 68.451222][ T4922] loop0: detected capacity change from 0 to 512 [ 68.504245][ T4922] EXT4-fs: Ignoring removed orlov option [ 68.548918][ T4922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.609468][ T4922] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 68.651541][ T4922] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.671108][ T4922] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.521: bg 0: block 248: padding at end of block bitmap is not set [ 68.687815][ T4922] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.521: Failed to acquire dquot type 1 [ 68.717421][ T4922] EXT4-fs (loop0): 1 truncate cleaned up [ 68.745158][ T4933] ip6gre1: entered allmulticast mode [ 68.799991][ T4937] netem: change failed [ 68.813821][ T4939] netlink: 'syz.0.528': attribute type 4 has an invalid length. [ 69.267301][ T4968] bridge0: port 3(vlan2) entered disabled state [ 69.276538][ T4968] vlan2 (unregistering): left promiscuous mode [ 69.282756][ T4968] bond0 (unregistering): left promiscuous mode [ 69.289726][ T4968] bond_slave_0: left promiscuous mode [ 69.295296][ T4968] bond_slave_1: left promiscuous mode [ 69.300760][ T4968] bridge0: port 3(vlan2) entered disabled state [ 69.309397][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.319369][ T4968] bond_slave_0: left allmulticast mode [ 69.326583][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.335559][ T4968] bond_slave_1: left allmulticast mode [ 69.342192][ T4968] bond0 (unregistering): Released all slaves [ 69.636601][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 69.636634][ T29] audit: type=1400 audit(1745872572.254:1860): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.719078][ T29] audit: type=1326 audit(1745872572.334:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.805285][ T29] audit: type=1326 audit(1745872572.334:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.828777][ T29] audit: type=1326 audit(1745872572.364:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.852243][ T29] audit: type=1326 audit(1745872572.364:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.875856][ T29] audit: type=1326 audit(1745872572.364:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.899230][ T29] audit: type=1326 audit(1745872572.364:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.922481][ T29] audit: type=1326 audit(1745872572.364:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.946530][ T29] audit: type=1326 audit(1745872572.364:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 69.970326][ T29] audit: type=1326 audit(1745872572.364:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 70.412533][ T5025] loop3: detected capacity change from 0 to 2048 [ 70.457419][ T5025] EXT4-fs mount: 18 callbacks suppressed [ 70.457441][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.608601][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.889296][ T5042] xt_hashlimit: invalid interval [ 71.171821][ T5051] hub 8-0:1.0: USB hub found [ 71.184847][ T5051] hub 8-0:1.0: 8 ports detected [ 71.230629][ T5055] __nla_validate_parse: 8 callbacks suppressed [ 71.230646][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 71.350092][ T5063] loop2: detected capacity change from 0 to 128 [ 71.398147][ T5063] syz.2.572: attempt to access beyond end of device [ 71.398147][ T5063] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 71.572779][ T5063] syz.2.572: attempt to access beyond end of device [ 71.572779][ T5063] loop2: rw=2049, sector=161, nr_sectors = 64 limit=128 [ 71.753312][ T51] kworker/u8:3: attempt to access beyond end of device [ 71.753312][ T51] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 71.947271][ T5096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42433 sclass=netlink_route_socket pid=5096 comm=syz.0.584 [ 71.968148][ T5092] hub 8-0:1.0: USB hub found [ 72.013364][ T5092] hub 8-0:1.0: 8 ports detected [ 72.354238][ T5115] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 72.436378][ T5118] tipc: New replicast peer: 255.255.255.255 [ 72.442583][ T5118] tipc: Enabled bearer , priority 10 [ 72.455575][ T5115] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 72.563205][ T5126] xt_hashlimit: invalid interval [ 72.632886][ T5130] loop0: detected capacity change from 0 to 8192 [ 72.647525][ T5132] netlink: 460 bytes leftover after parsing attributes in process `syz.4.595'. [ 72.794206][ T5138] loop3: detected capacity change from 0 to 2048 [ 72.828030][ T5138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.937184][ T5138] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.956828][ T5138] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 72.970818][ T5138] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.970818][ T5138] [ 72.984588][ T5138] EXT4-fs (loop3): Total free blocks count 0 [ 72.991259][ T5138] EXT4-fs (loop3): Free/Dirty block details [ 73.017837][ T5138] EXT4-fs (loop3): free_blocks=2415919104 [ 73.024677][ T5138] EXT4-fs (loop3): dirty_blocks=32 [ 73.030180][ T5138] EXT4-fs (loop3): Block reservation details [ 73.045839][ T5138] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 73.088858][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.136934][ T5150] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 73.147252][ T5150] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 73.188288][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.203095][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.293236][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.300602][ T5171] bridge0: port 1(") entered disabled state [ 73.313478][ T5171] bridge_slave_1: left allmulticast mode [ 73.319522][ T5171] bridge_slave_1: left promiscuous mode [ 73.325542][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.334577][ T5171] ": left allmulticast mode [ 73.339167][ T5171] ": left promiscuous mode [ 73.343839][ T5171] bridge0: port 1(") entered disabled state [ 74.056934][ T5242] loop0: detected capacity change from 0 to 512 [ 74.096707][ T5242] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.117501][ T5242] journal_path: Non-blockdev passed as 'qY3aK' [ 74.124217][ T5242] EXT4-fs: error: could not find journal device path [ 74.324208][ T5284] xt_recent: Unsupported userspace flags (000000c7) [ 74.342336][ T5284] netlink: 'syz.1.620': attribute type 30 has an invalid length. [ 74.353723][ T5284] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 74.363062][ T5284] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 74.428277][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 74.499640][ T5295] loop3: detected capacity change from 0 to 512 [ 74.508148][ T5298] syz.1.627 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.517909][ T5295] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 74.556771][ T5295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 74.571816][ T5302] veth0_vlan: entered allmulticast mode [ 74.594172][ T5295] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.625: corrupted in-inode xattr: e_value size too large [ 74.621011][ T5302] : renamed from vlan0 [ 74.638927][ T5295] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.625: couldn't read orphan inode 15 (err -117) [ 74.718884][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.763984][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 74.763998][ T29] audit: type=1400 audit(1745872577.374:2312): avc: denied { nlmsg_read } for pid=5310 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 74.794024][ T29] audit: type=1400 audit(1745872577.394:2313): avc: denied { mounton } for pid=5312 comm="syz.4.632" path="/110/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.829178][ T29] audit: type=1400 audit(1745872577.444:2314): avc: denied { watch watch_reads } for pid=5293 comm="syz.3.625" path="/134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.893195][ T29] audit: type=1400 audit(1745872577.494:2315): avc: denied { setattr } for pid=5293 comm="syz.3.625" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.898751][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.286250][ T5325] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 75.294597][ T5325] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 75.328078][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 75.385517][ T5331] xt_hashlimit: invalid interval [ 75.456915][ T5332] netlink: 460 bytes leftover after parsing attributes in process `syz.0.639'. [ 75.596671][ T5338] netlink: 87 bytes leftover after parsing attributes in process `syz.4.642'. [ 75.687767][ T5345] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.696220][ T5345] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.704470][ T5345] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.712671][ T5345] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.721212][ T5345] geneve2: entered promiscuous mode [ 75.803914][ T5348] netlink: 'syz.2.646': attribute type 27 has an invalid length. [ 75.890230][ T5348] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.899970][ T5348] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.909763][ T5348] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.919630][ T5348] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.936264][ T5352] loop4: detected capacity change from 0 to 2048 [ 76.052797][ T5352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.240017][ T5352] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 76.252417][ T5352] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.252417][ T5352] [ 76.262172][ T5352] EXT4-fs (loop4): Total free blocks count 0 [ 76.268271][ T5352] EXT4-fs (loop4): Free/Dirty block details [ 76.274267][ T5352] EXT4-fs (loop4): free_blocks=0 [ 76.279334][ T5352] EXT4-fs (loop4): dirty_blocks=0 [ 76.284376][ T5352] EXT4-fs (loop4): Block reservation details [ 76.290508][ T5352] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 76.334642][ T5348] geneve2: left promiscuous mode [ 76.356712][ T29] audit: type=1400 audit(1745872578.964:2316): avc: denied { create } for pid=5364 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.377647][ T29] audit: type=1400 audit(1745872578.964:2317): avc: denied { getopt } for pid=5364 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.398175][ T29] audit: type=1400 audit(1745872578.964:2318): avc: denied { watch watch_reads } for pid=5362 comm="syz.3.651" path="/138/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 76.424224][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.574067][ T29] audit: type=1326 audit(1745872579.184:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7de9e969 code=0x7ffc0000 [ 76.598411][ T29] audit: type=1326 audit(1745872579.184:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7de9e969 code=0x7ffc0000 [ 76.621777][ T29] audit: type=1326 audit(1745872579.184:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d7de9e969 code=0x7ffc0000 [ 76.685204][ T5383] syzkaller0: entered promiscuous mode [ 76.690889][ T5383] syzkaller0: entered allmulticast mode [ 76.754625][ T5385] pim6reg1: entered promiscuous mode [ 76.760018][ T5385] pim6reg1: entered allmulticast mode [ 76.813512][ T5390] loop4: detected capacity change from 0 to 512 [ 76.860350][ T5390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.905601][ T5393] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.929863][ T5390] EXT4-fs (loop4): 1 truncate cleaned up [ 76.936205][ T5390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.062538][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.102044][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 77.123165][ T5402] loop9: detected capacity change from 0 to 7 [ 77.140783][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 77.151376][ T3742] buffer_io_error: 544 callbacks suppressed [ 77.151391][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.165994][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.167672][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 77.173860][ T3742] loop9: unable to read partition table [ 77.189177][ T5402] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.199848][ T5399] team0 (unregistering): Port device geneve1 removed [ 77.219026][ T5402] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.227005][ T5402] loop9: unable to read partition table [ 77.233476][ T5402] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 77.233476][ T5402] U) failed (rc=-5) [ 77.264858][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.272863][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.283518][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.294619][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.302565][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.312096][ T3742] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.363084][ T5405] loop0: detected capacity change from 0 to 8192 [ 77.579873][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 77.771287][ T5422] loop4: detected capacity change from 0 to 512 [ 77.810764][ T5422] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 77.851955][ T5422] loop4: detected capacity change from 0 to 512 [ 77.859347][ T5422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.870580][ T5422] EXT4-fs (loop4): 1 truncate cleaned up [ 77.876729][ T5422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.892043][ T5422] EXT4-fs error (device loop4): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.4.672: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 77.916456][ T5422] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem [ 77.929113][ T5422] EXT4-fs warning (device loop4): ext4_rename_delete:3728: inode #2: comm syz.4.672: Deleting old file: nlink 5, error=-117 [ 77.981187][ T5429] loop3: detected capacity change from 0 to 1024 [ 78.006625][ T5429] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 78.017368][ T5429] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 78.036710][ T5429] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 78.048284][ T5429] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.677: unexpected bad inode w/o EXT4_IGET_BAD [ 78.074549][ T5429] EXT4-fs (loop3): no journal found [ 78.079888][ T5429] EXT4-fs (loop3): can't get journal size [ 78.095299][ T5429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.133961][ T3315] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 78.197248][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.225048][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.337175][ T5451] loop0: detected capacity change from 0 to 1024 [ 78.351059][ T5446] loop3: detected capacity change from 0 to 8192 [ 78.363502][ T5451] EXT4-fs: Ignoring removed orlov option [ 78.370567][ T5451] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 78.496044][ T5451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.513088][ T5451] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.683: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 78.582073][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.623021][ T5468] xt_hashlimit: invalid interval [ 78.687319][ T5474] loop4: detected capacity change from 0 to 512 [ 78.694280][ T5475] netlink: 460 bytes leftover after parsing attributes in process `syz.1.688'. [ 78.706291][ T5474] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 78.715408][ T5474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 78.724249][ T5474] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.690: corrupted in-inode xattr: e_value size too large [ 78.738640][ T5474] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.690: couldn't read orphan inode 15 (err -117) [ 78.753325][ T5474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.799046][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.823751][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 78.838842][ T5482] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 78.846786][ T5482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.692'. [ 78.906074][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 78.946322][ T5485] xt_hashlimit: max too large, truncated to 1048576 [ 79.228452][ T5531] loop0: detected capacity change from 0 to 1024 [ 79.249063][ T5531] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 79.258927][ T5531] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 79.288495][ T5531] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 79.319807][ T5531] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.705: unexpected bad inode w/o EXT4_IGET_BAD [ 79.344678][ T5531] EXT4-fs (loop0): no journal found [ 79.349959][ T5531] EXT4-fs (loop0): can't get journal size [ 79.358787][ T5531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.396324][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.433050][ T5563] netlink: 72 bytes leftover after parsing attributes in process `syz.0.696'. [ 79.442070][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 79.564947][ T5584] sd 0:0:1:0: device reset [ 79.656373][ T5602] loop0: detected capacity change from 0 to 512 [ 79.671782][ T5602] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 79.689399][ T5602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 79.746849][ T5602] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.703: corrupted in-inode xattr: e_value size too large [ 79.782576][ T5602] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.703: couldn't read orphan inode 15 (err -117) [ 79.807418][ T5602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.858259][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.875848][ T5632] loop4: detected capacity change from 0 to 1024 [ 79.901149][ T5632] EXT4-fs: Ignoring removed orlov option [ 79.910460][ T5632] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.921178][ T5635] loop9: detected capacity change from 0 to 7 [ 79.930639][ T3742] loop9: unable to read partition table [ 79.949676][ T5632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.962683][ T5635] loop9: unable to read partition table [ 79.967649][ T5632] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.708: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 79.988598][ T5635] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 79.988598][ T5635] U) failed (rc=-5) [ 80.006059][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.075300][ T5645] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 80.084050][ T5645] ref_ctr increment failed for inode: 0x3ca offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff88812cf1a680 [ 80.153828][ T5645] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 80.162273][ T5645] ref_ctr decrement failed for inode: 0x3ca offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88812cf1a680 [ 80.184514][ T5645] uprobe: syz.1.711:5645 failed to unregister, leaking uprobe [ 80.232866][ T5652] loop3: detected capacity change from 0 to 128 [ 80.275504][ T5652] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.307046][ T5652] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.402843][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.472249][ T5672] serio: Serial port ptm0 [ 80.529852][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 80.529952][ T29] audit: type=1326 audit(1745872583.144:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 80.565907][ T29] audit: type=1326 audit(1745872583.144:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 80.589506][ T29] audit: type=1326 audit(1745872583.144:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 80.612829][ T29] audit: type=1326 audit(1745872583.144:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 80.636380][ T29] audit: type=1326 audit(1745872583.144:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1029e969 code=0x7ffc0000 [ 80.841523][ T5706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 81.011685][ T5722] bridge0: entered allmulticast mode [ 81.018771][ T5719] tipc: Started in network mode [ 81.023807][ T5719] tipc: Node identity 7266e1073afa, cluster identity 4711 [ 81.031076][ T5719] tipc: Enabled bearer , priority 0 [ 81.058314][ T5722] bridge_slave_0: left promiscuous mode [ 81.064057][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.118158][ T5710] tipc: Resetting bearer [ 81.133619][ T5710] tipc: Disabling bearer [ 81.439845][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 81.642625][ T5820] vlan2: entered allmulticast mode [ 81.647923][ T5820] bridge_slave_0: entered allmulticast mode [ 81.740479][ T29] audit: type=1400 audit(1745872584.354:2466): avc: denied { read } for pid=5825 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.806434][ T5831] xt_recent: Unsupported userspace flags (000000c7) [ 81.814155][ T5831] netlink: 'syz.4.736': attribute type 30 has an invalid length. [ 81.822316][ T5831] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 81.832303][ T5831] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 82.183605][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 82.269066][ T5845] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 82.276938][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.740'. [ 82.326414][ T29] audit: type=1326 audit(1745872584.944:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 82.328520][ T5845] dummy0: entered promiscuous mode [ 82.351313][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 82.357277][ T5845] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 82.444475][ T29] audit: type=1326 audit(1745872584.964:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 82.469496][ T29] audit: type=1326 audit(1745872584.964:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 82.493090][ T29] audit: type=1326 audit(1745872584.964:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f288f4ae969 code=0x7ffc0000 [ 82.549930][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 82.617346][ T5849] team0 (unregistering): Port device team_slave_0 removed [ 82.655653][ T5849] team0 (unregistering): Port device team_slave_1 removed [ 82.706162][ T5856] loop4: detected capacity change from 0 to 128 [ 82.718558][ T1052] syz!: Port: 1 Link DOWN [ 82.930657][ T5860] SELinux: failed to load policy [ 82.944502][ T5862] vlan0: entered allmulticast mode [ 83.159908][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 83.269710][ T5856] ================================================================== [ 83.277857][ T5856] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 83.285079][ T5856] [ 83.287409][ T5856] write to 0xffff888117d22014 of 4 bytes by task 5857 on cpu 1: [ 83.295060][ T5856] __xa_set_mark+0x172/0x1a0 [ 83.299671][ T5856] __folio_mark_dirty+0x3af/0x4c0 [ 83.304744][ T5856] mark_buffer_dirty+0x11e/0x210 [ 83.309696][ T5856] block_write_end+0x12e/0x210 [ 83.314482][ T5856] generic_write_end+0x57/0x150 [ 83.319344][ T5856] fat_write_end+0x4f/0x160 [ 83.323853][ T5856] generic_perform_write+0x30f/0x490 [ 83.329157][ T5856] __generic_file_write_iter+0x9e/0x120 [ 83.334740][ T5856] generic_file_write_iter+0x8d/0x2f0 [ 83.340180][ T5856] iter_file_splice_write+0x5ef/0x970 [ 83.345588][ T5856] direct_splice_actor+0x153/0x2a0 [ 83.350712][ T5856] splice_direct_to_actor+0x30f/0x680 [ 83.356102][ T5856] do_splice_direct+0xda/0x150 [ 83.360876][ T5856] do_sendfile+0x380/0x640 [ 83.365313][ T5856] __x64_sys_sendfile64+0x105/0x150 [ 83.370624][ T5856] x64_sys_call+0xb39/0x2fb0 [ 83.375227][ T5856] do_syscall_64+0xd0/0x1a0 [ 83.379766][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.385679][ T5856] [ 83.388007][ T5856] read to 0xffff888117d22014 of 4 bytes by task 5856 on cpu 0: [ 83.395557][ T5856] xas_find_marked+0x5dc/0x620 [ 83.400335][ T5856] find_get_entry+0x5d/0x380 [ 83.404943][ T5856] filemap_get_folios_tag+0x92/0x210 [ 83.410246][ T5856] file_write_and_wait_range+0x1ea/0x2c0 [ 83.415901][ T5856] __generic_file_fsync+0x46/0x140 [ 83.421023][ T5856] fat_file_fsync+0x49/0x100 [ 83.426067][ T5856] vfs_fsync_range+0x10a/0x130 [ 83.430845][ T5856] generic_file_write_iter+0x1b8/0x2f0 [ 83.436322][ T5856] iter_file_splice_write+0x5ef/0x970 [ 83.441704][ T5856] direct_splice_actor+0x153/0x2a0 [ 83.446922][ T5856] splice_direct_to_actor+0x30f/0x680 [ 83.452342][ T5856] do_splice_direct+0xda/0x150 [ 83.457116][ T5856] do_sendfile+0x380/0x640 [ 83.461550][ T5856] __x64_sys_sendfile64+0x105/0x150 [ 83.466765][ T5856] x64_sys_call+0xb39/0x2fb0 [ 83.471366][ T5856] do_syscall_64+0xd0/0x1a0 [ 83.475880][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.481782][ T5856] [ 83.484116][ T5856] value changed: 0x04000021 -> 0x0e000021 [ 83.489836][ T5856] [ 83.492162][ T5856] Reported by Kernel Concurrency Sanitizer on: [ 83.498339][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.4.745 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 83.510688][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.520765][ T5856] ==================================================================