last executing test programs: 3.158787936s ago: executing program 0 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 3.133727308s ago: executing program 0 (id=791): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x8100, 0x0, 0x1, 0x7}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002100050100000000000000000200000000000000010001000c001400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) 3.076186603s ago: executing program 0 (id=794): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 3.022835987s ago: executing program 0 (id=795): r0 = socket$kcm(0x10, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.815968844s ago: executing program 0 (id=802): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc, 0x4000000000000, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 2.802005745s ago: executing program 0 (id=804): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r0, 0x16) 2.37129011s ago: executing program 3 (id=818): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 2.37068733s ago: executing program 3 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.949589323s ago: executing program 3 (id=827): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000008000"], 0x48) 1.834908233s ago: executing program 3 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="fb3e0021c551eb80c200000088a8"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pwrite64(r1, &(0x7f0000000040)="43572654b114b1a9e187499a3907", 0xe, 0x6) 1.665914896s ago: executing program 3 (id=841): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 852.357572ms ago: executing program 2 (id=854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 851.168722ms ago: executing program 4 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 791.718017ms ago: executing program 2 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 784.430617ms ago: executing program 4 (id=857): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x6e, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 743.371781ms ago: executing program 2 (id=858): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x105d4841153bae6d, 0x0) 671.237237ms ago: executing program 2 (id=859): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 664.497317ms ago: executing program 4 (id=860): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 627.38282ms ago: executing program 4 (id=861): ftruncate(0xffffffffffffffff, 0xc17a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 563.696865ms ago: executing program 3 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 543.285497ms ago: executing program 2 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21a5099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 524.540558ms ago: executing program 2 (id=865): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 475.244932ms ago: executing program 1 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) 457.849964ms ago: executing program 1 (id=868): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 412.802917ms ago: executing program 1 (id=869): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) 412.248117ms ago: executing program 1 (id=870): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 390.295989ms ago: executing program 1 (id=871): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) 259.97964ms ago: executing program 1 (id=872): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x106f, &(0x7f0000000000)="$eJzsz6FNBkEQBeDZHf7cnTuLujbogJBgkSgEhCY4EkqgCiQWj8DRAooScEs2d7QAiO8Tm53Je2KCPzXVMSLLyUM+RsZdxDz09dqfw56pZ0vEy9t5fLV2qOXyOiN/+sfz61L2f3uPo9Mceq98ti1Sbq/G6IGpD+vHTb3P56hbIS+efvlcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiXvgMAAP//6XISlw==") socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) 84.567234ms ago: executing program 4 (id=874): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 4 (id=875): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 35.790422][ T29] audit: type=1400 audit(1754775001.209:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.791729][ T3291] cgroup: Unknown subsys name 'net' [ 35.813541][ T29] audit: type=1400 audit(1754775001.209:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.841113][ T29] audit: type=1400 audit(1754775001.229:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.041024][ T3291] cgroup: Unknown subsys name 'cpuset' [ 36.047653][ T3291] cgroup: Unknown subsys name 'rlimit' [ 36.200336][ T29] audit: type=1400 audit(1754775001.619:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.223770][ T29] audit: type=1400 audit(1754775001.619:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.244894][ T29] audit: type=1400 audit(1754775001.619:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.265515][ T29] audit: type=1400 audit(1754775001.619:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.286546][ T29] audit: type=1400 audit(1754775001.639:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.302034][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.311688][ T29] audit: type=1400 audit(1754775001.639:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.344337][ T29] audit: type=1400 audit(1754775001.739:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.348899][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.113805][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 38.200306][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.207866][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.215378][ T3301] bridge_slave_0: entered allmulticast mode [ 38.222106][ T3301] bridge_slave_0: entered promiscuous mode [ 38.241692][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.249086][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.257394][ T3301] bridge_slave_1: entered allmulticast mode [ 38.264251][ T3301] bridge_slave_1: entered promiscuous mode [ 38.276523][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 38.294926][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.305501][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.346527][ T3301] team0: Port device team_slave_0 added [ 38.373620][ T3301] team0: Port device team_slave_1 added [ 38.419344][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.426724][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.453976][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.489173][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.496898][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.523230][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.534174][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.541429][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.548769][ T3313] bridge_slave_0: entered allmulticast mode [ 38.555216][ T3313] bridge_slave_0: entered promiscuous mode [ 38.561828][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 38.589763][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.597119][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.604442][ T3313] bridge_slave_1: entered allmulticast mode [ 38.610922][ T3313] bridge_slave_1: entered promiscuous mode [ 38.619211][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 38.646724][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 38.673163][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.696945][ T3301] hsr_slave_0: entered promiscuous mode [ 38.703014][ T3301] hsr_slave_1: entered promiscuous mode [ 38.718685][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.736786][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.744442][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.752104][ T3302] bridge_slave_0: entered allmulticast mode [ 38.758469][ T3302] bridge_slave_0: entered promiscuous mode [ 38.780281][ T3313] team0: Port device team_slave_0 added [ 38.787062][ T3313] team0: Port device team_slave_1 added [ 38.793006][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.800083][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.807272][ T3302] bridge_slave_1: entered allmulticast mode [ 38.813814][ T3302] bridge_slave_1: entered promiscuous mode [ 38.857687][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.864870][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.872193][ T3304] bridge_slave_0: entered allmulticast mode [ 38.878919][ T3304] bridge_slave_0: entered promiscuous mode [ 38.886080][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.893265][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.919446][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.936687][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.960598][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.967787][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.975218][ T3304] bridge_slave_1: entered allmulticast mode [ 38.981727][ T3304] bridge_slave_1: entered promiscuous mode [ 38.988477][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.995596][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.021635][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.036255][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.045548][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.052697][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.059946][ T3306] bridge_slave_0: entered allmulticast mode [ 39.066717][ T3306] bridge_slave_0: entered promiscuous mode [ 39.092951][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.100156][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.107647][ T3306] bridge_slave_1: entered allmulticast mode [ 39.114414][ T3306] bridge_slave_1: entered promiscuous mode [ 39.126631][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.137434][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.180123][ T3302] team0: Port device team_slave_0 added [ 39.189411][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.201854][ T3313] hsr_slave_0: entered promiscuous mode [ 39.207958][ T3313] hsr_slave_1: entered promiscuous mode [ 39.213977][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 39.219735][ T3313] Cannot create hsr debugfs directory [ 39.231465][ T3302] team0: Port device team_slave_1 added [ 39.246551][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.262915][ T3304] team0: Port device team_slave_0 added [ 39.277506][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.284549][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.310563][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.322438][ T3304] team0: Port device team_slave_1 added [ 39.334468][ T3306] team0: Port device team_slave_0 added [ 39.352277][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.359564][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.386251][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.402903][ T3306] team0: Port device team_slave_1 added [ 39.440247][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.447264][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.474617][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.494208][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.501222][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.527470][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.538752][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.546113][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.572536][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.600439][ T3302] hsr_slave_0: entered promiscuous mode [ 39.606504][ T3302] hsr_slave_1: entered promiscuous mode [ 39.612637][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 39.618444][ T3302] Cannot create hsr debugfs directory [ 39.624336][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.632318][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.658535][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.715319][ T3306] hsr_slave_0: entered promiscuous mode [ 39.721549][ T3306] hsr_slave_1: entered promiscuous mode [ 39.727824][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 39.733666][ T3306] Cannot create hsr debugfs directory [ 39.755563][ T3304] hsr_slave_0: entered promiscuous mode [ 39.761712][ T3304] hsr_slave_1: entered promiscuous mode [ 39.767625][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 39.773479][ T3304] Cannot create hsr debugfs directory [ 39.793873][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.818788][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.848966][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.877744][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.920144][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.940337][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.956259][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.978808][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.029473][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.042902][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.052681][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.064877][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.103029][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.119807][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.136145][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.146791][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.155650][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.186059][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.205616][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.216071][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.225270][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.232474][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.245010][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.254581][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.265613][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.275630][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.282850][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.301998][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.313220][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.329481][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.342044][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.349127][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.369835][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.380395][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.395568][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.402820][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.411896][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.419002][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.432999][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.440119][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.476962][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.487464][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.528650][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.541974][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.562107][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.583159][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.601744][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.623251][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.630517][ T1735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.639409][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.646513][ T1735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.674973][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.698442][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.709471][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.732607][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.740012][ T1735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.760367][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.767582][ T1735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.797068][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.805919][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.832419][ T3313] veth0_vlan: entered promiscuous mode [ 40.848063][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.858691][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.878697][ T3313] veth1_vlan: entered promiscuous mode [ 40.906138][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.919226][ T3313] veth0_macvtap: entered promiscuous mode [ 40.941863][ T3313] veth1_macvtap: entered promiscuous mode [ 40.963104][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.995818][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.026671][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.039460][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.048679][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 41.048696][ T29] audit: type=1400 audit(1754775006.449:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.VQJ96F/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.079210][ T29] audit: type=1400 audit(1754775006.459:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.096142][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.101287][ T29] audit: type=1400 audit(1754775006.459:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.VQJ96F/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.133231][ T29] audit: type=1400 audit(1754775006.459:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.155276][ T29] audit: type=1400 audit(1754775006.459:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.VQJ96F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.181921][ T29] audit: type=1400 audit(1754775006.459:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.VQJ96F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.209359][ T29] audit: type=1400 audit(1754775006.459:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.215994][ T3302] veth0_vlan: entered promiscuous mode [ 41.236598][ T29] audit: type=1400 audit(1754775006.459:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.259760][ T29] audit: type=1400 audit(1754775006.459:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.283798][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.299398][ T3301] veth0_vlan: entered promiscuous mode [ 41.308250][ T3301] veth1_vlan: entered promiscuous mode [ 41.315660][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.331020][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.352348][ T3302] veth1_vlan: entered promiscuous mode [ 41.360145][ T29] audit: type=1400 audit(1754775006.769:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.383900][ T3304] veth0_vlan: entered promiscuous mode [ 41.393557][ T3304] veth1_vlan: entered promiscuous mode [ 41.428879][ T3472] loop3: detected capacity change from 0 to 1024 [ 41.430995][ T3306] veth0_vlan: entered promiscuous mode [ 41.442975][ T3472] ======================================================= [ 41.442975][ T3472] WARNING: The mand mount option has been deprecated and [ 41.442975][ T3472] and is ignored by this kernel. Remove the mand [ 41.442975][ T3472] option from the mount to silence this warning. [ 41.442975][ T3472] ======================================================= [ 41.486311][ T3301] veth0_macvtap: entered promiscuous mode [ 41.499677][ T3306] veth1_vlan: entered promiscuous mode [ 41.506754][ T3304] veth0_macvtap: entered promiscuous mode [ 41.511219][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.514899][ T3302] veth0_macvtap: entered promiscuous mode [ 41.524871][ T3472] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.536888][ T3301] veth1_macvtap: entered promiscuous mode [ 41.549102][ T3302] veth1_macvtap: entered promiscuous mode [ 41.569643][ T3306] veth0_macvtap: entered promiscuous mode [ 41.570695][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.577419][ T3306] veth1_macvtap: entered promiscuous mode [ 41.593558][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.612914][ T3304] veth1_macvtap: entered promiscuous mode [ 41.625963][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.635179][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.636320][ T3477] loop3: detected capacity change from 0 to 1024 [ 41.651280][ T3477] EXT4-fs: Ignoring removed oldalloc option [ 41.661173][ T3477] EXT4-fs: Ignoring removed orlov option [ 41.663026][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.676265][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.685343][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.691901][ T3477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.695329][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.723295][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.735340][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.756632][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.769020][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.791679][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.835796][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.890217][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.899125][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.947665][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.961534][ T3492] loop3: detected capacity change from 0 to 1024 [ 41.976674][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.991417][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.000617][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.009510][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.018537][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.029484][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.040977][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.059745][ T3492] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 42.074107][ T3492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.087504][ T3492] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.112342][ T3496] syz.4.5 (3496) used greatest stack depth: 9648 bytes left [ 42.150633][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.158041][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.185910][ T3492] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 13) [ 42.211840][ T3492] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 42.224521][ T3492] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.224521][ T3492] [ 42.252174][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.261970][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.309149][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.349524][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.383189][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.401447][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.437172][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.467671][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.488238][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.608921][ T3526] netlink: 96 bytes leftover after parsing attributes in process `syz.0.21'. [ 42.641915][ T3528] SELinux: Context system_u:object is not valid (left unmapped). [ 42.657813][ T3528] SELinux: failed to load policy [ 42.686162][ T3533] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 42.835465][ T3539] IPv4: Oversized IP packet from 127.202.26.0 [ 43.285311][ T3548] loop2: detected capacity change from 0 to 512 [ 43.295091][ T3548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 43.305453][ T3548] System zones: 1-12 [ 43.310060][ T3548] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.31: error while reading EA inode 32 err=-116 [ 43.324274][ T3548] EXT4-fs (loop2): Remounting filesystem read-only [ 43.330899][ T3548] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.344588][ T3548] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 43.355923][ T3548] EXT4-fs (loop2): 1 orphan inode deleted [ 43.363480][ T3548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.446535][ T3554] loop0: detected capacity change from 0 to 8192 [ 43.545841][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881193b5800: rx timeout, send abort [ 43.554366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881193b5800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 43.569349][ C1] vcan0: j1939_tp_rxtimer: 0xffff888108f46200: rx timeout, send abort [ 43.579100][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888108f46200: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 43.676126][ T3572] Zero length message leads to an empty skb [ 43.768288][ T3578] loop4: detected capacity change from 0 to 2048 [ 43.802275][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.828229][ T3578] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.866029][ T3578] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.43: bit already cleared for inode 15 [ 43.925798][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.125311][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.203129][ T3626] syz.2.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.019786][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 45.212585][ T3691] loop3: detected capacity change from 0 to 128 [ 45.252539][ T3691] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.314435][ T3691] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.409104][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.956939][ T3717] Set syz1 is full, maxelem 65536 reached [ 46.112002][ T3721] SELinux: failed to load policy [ 46.184770][ T3730] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 46.220796][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 46.220815][ T29] audit: type=1400 audit(1754775011.639:299): avc: denied { write } for pid=3734 comm="syz.0.97" lport=52970 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 46.309045][ T3740] netlink: 'syz.4.98': attribute type 7 has an invalid length. [ 46.312722][ T3741] random: crng reseeded on system resumption [ 46.317001][ T3740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 46.344518][ T29] audit: type=1400 audit(1754775011.729:300): avc: denied { read append } for pid=3739 comm="syz.3.99" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.368477][ T29] audit: type=1400 audit(1754775011.729:301): avc: denied { ioctl open } for pid=3739 comm="syz.3.99" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.464507][ T29] audit: type=1400 audit(1754775011.879:302): avc: denied { setopt } for pid=3755 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.493496][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 46.493724][ T3752] loop2: detected capacity change from 0 to 2048 [ 46.502555][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 46.530744][ T3752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.569432][ T29] audit: type=1400 audit(1754775011.979:303): avc: denied { name_connect } for pid=3749 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 46.597487][ T29] audit: type=1326 audit(1754775012.009:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c702eebe9 code=0x7ffc0000 [ 46.627976][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.629104][ T29] audit: type=1400 audit(1754775012.039:305): avc: denied { name_bind } for pid=3765 comm="syz.3.109" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 46.648524][ T3769] capability: warning: `syz.0.111' uses 32-bit capabilities (legacy support in use) [ 46.659771][ T29] audit: type=1326 audit(1754775012.059:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c702eebe9 code=0x7ffc0000 [ 46.693003][ T29] audit: type=1326 audit(1754775012.059:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c702eebe9 code=0x7ffc0000 [ 46.716733][ T29] audit: type=1326 audit(1754775012.059:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c702eebe9 code=0x7ffc0000 [ 46.748280][ T3769] program syz.0.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.050648][ T3788] loop3: detected capacity change from 0 to 1024 [ 47.064301][ T3788] EXT4-fs: Ignoring removed orlov option [ 47.087608][ T3794] bond1: entered allmulticast mode [ 47.118841][ T3794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.132410][ T3788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.146949][ T3794] bridge0: port 3(bond1) entered blocking state [ 47.153454][ T3794] bridge0: port 3(bond1) entered disabled state [ 47.165597][ T3794] bond1: entered promiscuous mode [ 47.189695][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.333917][ T3810] loop0: detected capacity change from 0 to 8192 [ 47.448074][ T3820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3820 comm=syz.3.133 [ 47.469608][ T3821] bridge0: entered promiscuous mode [ 47.476817][ T3821] bridge0: port 3(macsec1) entered blocking state [ 47.483542][ T3821] bridge0: port 3(macsec1) entered disabled state [ 47.494251][ T3821] macsec1: entered allmulticast mode [ 47.499714][ T3821] bridge0: entered allmulticast mode [ 47.511745][ T3821] macsec1: left allmulticast mode [ 47.516946][ T3821] bridge0: left allmulticast mode [ 47.524514][ T3821] bridge0: left promiscuous mode [ 47.637960][ T3838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3838 comm=syz.3.140 [ 47.650747][ T3838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3838 comm=syz.3.140 [ 47.713522][ T3844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3844 comm=syz.3.144 [ 47.846494][ T3863] process 'syz.4.152' launched './file0' with NULL argv: empty string added [ 48.009944][ T3872] loop4: detected capacity change from 0 to 512 [ 48.042841][ T3872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.070546][ T3872] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.124048][ T3887] loop1: detected capacity change from 0 to 512 [ 48.134702][ T3887] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.145898][ T3889] loop3: detected capacity change from 0 to 128 [ 48.152083][ T3887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.161: bg 0: block 248: padding at end of block bitmap is not set [ 48.166999][ T3887] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.161: Failed to acquire dquot type 1 [ 48.188424][ T3887] EXT4-fs (loop1): 1 truncate cleaned up [ 48.205063][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.220451][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.244097][ T3892] loop3: detected capacity change from 0 to 512 [ 48.258402][ T3887] syz.1.161 (3887) used greatest stack depth: 9280 bytes left [ 48.275351][ T3892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.280698][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.288497][ T3892] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.319249][ T3892] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.164: Failed to acquire dquot type 0 [ 48.387134][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.554354][ T3925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.795241][ T3935] syz.3.178 uses obsolete (PF_INET,SOCK_PACKET) [ 48.891205][ T3938] syzkaller0: entered promiscuous mode [ 48.896826][ T3938] syzkaller0: entered allmulticast mode [ 49.093832][ T3943] syzkaller1: entered promiscuous mode [ 49.099418][ T3943] syzkaller1: entered allmulticast mode [ 49.620279][ T3960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.629309][ T3960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.638427][ T3960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.695113][ T3960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.704136][ T3960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.713482][ T3960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.775682][ T3960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.784738][ T3960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.793731][ T3960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.805002][ T3965] tipc: Started in network mode [ 49.810011][ T3965] tipc: Node identity 9e934b1ac7d7, cluster identity 4711 [ 49.817297][ T3965] tipc: Enabled bearer , priority 0 [ 49.824216][ T3966] IPVS: stopping master sync thread 3968 ... [ 49.840233][ T3968] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 49.882627][ T3965] tipc: Disabling bearer [ 49.952945][ T3974] loop2: detected capacity change from 0 to 512 [ 49.991471][ T3974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.999274][ T3974] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.193: Failed to acquire dquot type 1 [ 50.012910][ T3974] EXT4-fs (loop2): 1 truncate cleaned up [ 50.041027][ T3974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.073920][ T3974] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 50.082828][ T3985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.118499][ T3974] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 50.167398][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.241822][ T3995] loop1: detected capacity change from 0 to 1024 [ 50.265440][ T3995] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.299950][ T3995] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 50.323315][ T3995] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.333676][ T3995] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.203: Failed to acquire dquot type 0 [ 50.365933][ T3995] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.203: Failed to acquire dquot type 0 [ 50.379626][ T3995] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.203: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.402318][ T3995] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.203: Failed to acquire dquot type 0 [ 50.425896][ T3995] EXT4-fs (loop1): 1 orphan inode deleted [ 50.447840][ T3995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.477752][ T3985] Set syz1 is full, maxelem 65536 reached [ 50.552894][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.553321][ T4011] netlink: 'syz.2.207': attribute type 6 has an invalid length. [ 50.595773][ T4013] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 50.624121][ T4015] ALSA: seq fatal error: cannot create timer (-16) [ 50.642168][ T4017] loop9: detected capacity change from 0 to 7 [ 50.656023][ T4017] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.676501][ T4017] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.684422][ T4017] loop9: unable to read partition table [ 50.694428][ T4021] loop0: detected capacity change from 0 to 1024 [ 50.698370][ T4019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.209'. [ 50.710307][ T4017] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 50.710307][ T4017] ) failed (rc=-5) [ 50.715105][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119ea0c00: rx timeout, send abort [ 50.725355][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.740274][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119ea0c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 50.750555][ T4021] EXT4-fs: Ignoring removed orlov option [ 50.770740][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.788669][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.817007][ T4021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.826206][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.847279][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.876074][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.885334][ T4026] loop4: detected capacity change from 0 to 512 [ 50.965427][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.009894][ T4026] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.023201][ T4026] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.215: corrupted inode contents [ 51.045239][ T4026] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.215: mark_inode_dirty error [ 51.071475][ T4026] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.215: corrupted inode contents [ 51.085769][ T4058] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 51.133011][ T4061] loop1: detected capacity change from 0 to 1024 [ 51.161796][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.172141][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.287073][ T4081] loop2: detected capacity change from 0 to 764 [ 51.296181][ T4061] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.229: Allocating blocks 449-513 which overlap fs metadata [ 51.327343][ T4060] EXT4-fs (loop1): pa ffff888106ebb150: logic 48, phys. 177, len 21 [ 51.335450][ T4060] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 51.345652][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 51.345694][ T29] audit: type=1400 audit(1754775016.749:460): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.372335][ T29] audit: type=1400 audit(1754775016.759:461): avc: denied { mount } for pid=4080 comm="syz.2.238" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 51.395114][ T4081] Symlink component flag not implemented [ 51.401068][ T4081] Symlink component flag not implemented [ 51.408719][ T4081] Symlink component flag not implemented (129) [ 51.415062][ T4081] Symlink component flag not implemented (6) [ 51.435684][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.481937][ T29] audit: type=1400 audit(1754775016.879:462): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 51.558458][ T29] audit: type=1326 audit(1754775016.949:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026269ebe9 code=0x7ffc0000 [ 51.582305][ T29] audit: type=1326 audit(1754775016.949:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026269ebe9 code=0x7ffc0000 [ 51.605787][ T29] audit: type=1326 audit(1754775016.959:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f026269ebe9 code=0x7ffc0000 [ 51.605816][ T29] audit: type=1326 audit(1754775016.959:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026269ebe9 code=0x7ffc0000 [ 51.605876][ T29] audit: type=1326 audit(1754775016.959:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026269ebe9 code=0x7ffc0000 [ 51.702632][ T29] audit: type=1326 audit(1754775017.119:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 51.702690][ T29] audit: type=1326 audit(1754775017.119:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 51.858242][ T4108] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 52.206575][ T4143] loop2: detected capacity change from 0 to 1024 [ 52.220893][ T4143] EXT4-fs: Ignoring removed orlov option [ 52.264628][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.353315][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.356548][ C0] hrtimer: interrupt took 36055 ns [ 52.493486][ T4170] loop1: detected capacity change from 0 to 512 [ 52.509089][ T4170] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.601965][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.276: corrupted inode contents [ 52.651871][ T4170] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.276: mark_inode_dirty error [ 52.690261][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.276: corrupted inode contents [ 52.705361][ T4174] loop2: detected capacity change from 0 to 8192 [ 52.712030][ T4170] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.276: mark_inode_dirty error [ 52.723873][ T4174] msdos: Unknown parameter 'A' [ 52.729157][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.276: corrupted inode contents [ 52.756152][ T4170] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 52.801002][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.276: corrupted inode contents [ 52.841179][ T4170] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.276: mark_inode_dirty error [ 52.895258][ T4170] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 52.958447][ T4170] EXT4-fs (loop1): 1 truncate cleaned up [ 52.975029][ T3413] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 52.993658][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.028071][ T4170] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.040994][ T4200] syzkaller0: entered promiscuous mode [ 53.046650][ T4200] syzkaller0: entered allmulticast mode [ 53.070995][ T4170] 0{X: renamed from gretap0 (while UP) [ 53.093568][ T4170] 0{X: entered allmulticast mode [ 53.111831][ T4170] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 53.286534][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.918424][ T4233] tipc: Started in network mode [ 53.923449][ T4233] tipc: Node identity ac1414aa, cluster identity 4711 [ 53.968198][ T4233] tipc: Enabled bearer , priority 10 [ 54.408593][ T4269] loop2: detected capacity change from 0 to 512 [ 54.530479][ T4269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.604220][ T4269] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.976274][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.080534][ T938] tipc: Node number set to 2886997162 [ 55.232092][ T4235] serio: Serial port ptm0 [ 55.271996][ T4297] tipc: Started in network mode [ 55.276979][ T4297] tipc: Node identity a2e6b51dfd27, cluster identity 4711 [ 55.284460][ T4297] tipc: Enabled bearer , priority 0 [ 55.362848][ T4298] tipc: Disabling bearer [ 56.173085][ T4359] __nla_validate_parse: 7 callbacks suppressed [ 56.173101][ T4359] netlink: 96 bytes leftover after parsing attributes in process `syz.4.346'. [ 56.200263][ T4357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.235513][ T4361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 56.244536][ T4361] netlink: 212 bytes leftover after parsing attributes in process `syz.0.348'. [ 56.325457][ T4370] netlink: 'syz.0.352': attribute type 3 has an invalid length. [ 56.344215][ T4371] netlink: 32 bytes leftover after parsing attributes in process `syz.4.351'. [ 56.370022][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 56.370040][ T29] audit: type=1400 audit(1754775021.779:628): avc: denied { create } for pid=4372 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.415504][ T29] audit: type=1400 audit(1754775021.809:629): avc: denied { map } for pid=4372 comm="syz.0.353" path="socket:[8222]" dev="sockfs" ino=8222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.438567][ T29] audit: type=1400 audit(1754775021.809:630): avc: denied { read accept } for pid=4372 comm="syz.0.353" path="socket:[8222]" dev="sockfs" ino=8222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.462889][ T29] audit: type=1400 audit(1754775021.859:631): avc: denied { name_bind } for pid=4375 comm="syz.0.355" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.503217][ T4376] SELinux: Context is not valid (left unmapped). [ 56.510129][ T29] audit: type=1400 audit(1754775021.919:632): avc: denied { mac_admin } for pid=4374 comm="syz.2.354" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.580928][ T4379] loop4: detected capacity change from 0 to 1024 [ 56.598775][ T29] audit: type=1400 audit(1754775022.009:633): avc: denied { bind } for pid=4381 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.647747][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.656025][ T4379] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.657258][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.675170][ T29] audit: type=1400 audit(1754775022.039:634): avc: denied { setopt } for pid=4381 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.696278][ T29] audit: type=1400 audit(1754775022.039:635): avc: denied { ioctl } for pid=4381 comm="syz.3.357" path="socket:[8241]" dev="sockfs" ino=8241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.703652][ T4379] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.356: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.722015][ T29] audit: type=1400 audit(1754775022.069:636): avc: denied { getopt } for pid=4384 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.737633][ T4379] Quota error (device loop4): write_blk: dquota write failed [ 56.765602][ T4379] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.356: Failed to acquire dquot type 0 [ 56.796236][ T4379] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.356: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.815452][ T4379] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.356: Invalid inode bitmap blk 0 in block_group 0 [ 56.828387][ T4379] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 56.839000][ T4379] EXT4-fs (loop4): 1 orphan inode deleted [ 56.848820][ T4379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.867100][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.904010][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 57.013778][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.065247][ T4404] netlink: zone id is out of range [ 57.070815][ T4404] netlink: zone id is out of range [ 57.076324][ T4404] netlink: zone id is out of range [ 57.081748][ T4404] netlink: zone id is out of range [ 57.086956][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.367'. [ 57.087272][ T4404] netlink: zone id is out of range [ 57.104358][ T4404] netlink: zone id is out of range [ 57.109619][ T4404] netlink: zone id is out of range [ 57.117053][ T4404] netlink: zone id is out of range [ 57.122388][ T4404] netlink: zone id is out of range [ 57.189025][ T4416] loop3: detected capacity change from 0 to 512 [ 57.233664][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.275629][ T4429] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 57.286963][ T4416] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.329552][ T4429] team0: Port device dummy0 added [ 57.345090][ T4434] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 57.345363][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.370134][ T4434] team0: Port device dummy0 removed [ 57.378483][ T4434] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.417554][ T4436] IPVS: stopping master sync thread 4437 ... [ 57.423784][ T4437] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 57.590274][ T4453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 57.747675][ T4464] loop1: detected capacity change from 0 to 164 [ 57.755057][ T4464] Unable to read rock-ridge attributes [ 57.765544][ T4464] Unable to read rock-ridge attributes [ 57.883297][ T3403] Process accounting resumed [ 57.956608][ T4481] loop1: detected capacity change from 0 to 256 [ 58.006710][ T4481] FAT-fs (loop1): IO charset cp863 not found [ 58.112257][ T4490] loop1: detected capacity change from 0 to 1024 [ 58.150978][ T4490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.186843][ T4501] wg2: entered promiscuous mode [ 58.191897][ T4501] wg2: entered allmulticast mode [ 58.205422][ T4480] loop3: detected capacity change from 0 to 8192 [ 58.298786][ T4490] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 58.374316][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.374778][ T4508] loop3: detected capacity change from 0 to 2048 [ 58.421801][ T4508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.565138][ T3313] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 58.612221][ T3313] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 58.635059][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.672055][ T4526] loop1: detected capacity change from 0 to 128 [ 58.679275][ T4526] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.725335][ T4526] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.818240][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.983739][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4556 comm=syz.2.432 [ 59.171800][ T4573] syzkaller1: entered promiscuous mode [ 59.177354][ T4573] syzkaller1: entered allmulticast mode [ 59.183625][ T4577] loop3: detected capacity change from 0 to 512 [ 59.197861][ T4577] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.205602][ T4577] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.442: Failed to acquire dquot type 1 [ 59.218729][ T4577] EXT4-fs (loop3): 1 truncate cleaned up [ 59.225762][ T4577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.259272][ T4577] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 59.298049][ T4584] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 59.304700][ T4584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.312368][ T4584] vhci_hcd vhci_hcd.0: Device attached [ 59.321860][ T4577] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 59.357458][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.369992][ T4585] vhci_hcd: connection closed [ 59.370240][ T37] vhci_hcd: stop threads [ 59.379338][ T37] vhci_hcd: release socket [ 59.383839][ T37] vhci_hcd: disconnect device [ 59.574831][ T4609] loop2: detected capacity change from 0 to 2048 [ 59.592883][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.628699][ T3306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 59.644747][ T3306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 59.657709][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.682275][ T4615] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 59.698268][ T4617] tipc: Enabling of bearer rejected, already enabled [ 59.748279][ T4623] tipc: Enabled bearer , priority 0 [ 59.756616][ T4623] tipc: Disabling bearer [ 59.958819][ T10] Process accounting resumed [ 60.004930][ T4656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 60.149162][ T4661] loop4: detected capacity change from 0 to 1024 [ 60.157025][ T4661] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.169831][ T4661] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.178122][ T4661] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.178121][ T4663] loop1: detected capacity change from 0 to 1024 [ 60.192467][ T4661] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.478: Failed to acquire dquot type 0 [ 60.204182][ T4661] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.478: Failed to acquire dquot type 0 [ 60.205534][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.217178][ T4661] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.478: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.228566][ T4663] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.241534][ T4661] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.478: Failed to acquire dquot type 0 [ 60.280274][ T4661] EXT4-fs (loop4): 1 orphan inode deleted [ 60.290814][ T4661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.361722][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.681706][ T37] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 60.696733][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 60.709152][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.709152][ T37] [ 60.724366][ T37] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 60.741200][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 60.753774][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.753774][ T37] [ 60.791647][ T37] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 60.807112][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 60.820089][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.820089][ T37] [ 60.829848][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 60.836013][ T37] EXT4-fs (loop1): Free/Dirty block details [ 60.837630][ T4688] tipc: Started in network mode [ 60.842032][ T37] EXT4-fs (loop1): free_blocks=4293918720 [ 60.847014][ T4688] tipc: Node identity ac14140f, cluster identity 4711 [ 60.860414][ T4688] tipc: New replicast peer: 255.255.255.255 [ 60.866889][ T4688] tipc: Enabled bearer , priority 10 [ 60.881538][ T4686] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 61.030630][ T4698] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 61.085529][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.124481][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.158180][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'. [ 61.277983][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.301095][ T4716] serio: Serial port ptm0 [ 61.353622][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.436194][ T31] bridge_slave_1: left allmulticast mode [ 61.442109][ T31] bridge_slave_1: left promiscuous mode [ 61.448120][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.455684][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 61.455752][ T29] audit: type=1400 audit(1754775026.859:819): avc: denied { mount } for pid=4729 comm="syz.3.506" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.484154][ T29] audit: type=1400 audit(1754775026.879:820): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.507066][ T31] bridge_slave_0: left allmulticast mode [ 61.512883][ T31] bridge_slave_0: left promiscuous mode [ 61.518645][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.642822][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.653083][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.663684][ T31] bond0 (unregistering): Released all slaves [ 61.718732][ T29] audit: type=1400 audit(1754775027.129:821): avc: denied { create } for pid=4745 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.739334][ T4710] chnl_net:caif_netlink_parms(): no params data found [ 61.765005][ T29] audit: type=1400 audit(1754775027.129:822): avc: denied { connect } for pid=4745 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.785316][ T29] audit: type=1400 audit(1754775027.169:823): avc: denied { write } for pid=4745 comm="syz.3.512" path="socket:[8939]" dev="sockfs" ino=8939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.836060][ T31] tipc: Left network mode [ 61.845371][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.852693][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.860266][ T4710] bridge_slave_0: entered allmulticast mode [ 61.866964][ T4710] bridge_slave_0: entered promiscuous mode [ 61.874468][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.881649][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.889228][ T4710] bridge_slave_1: entered allmulticast mode [ 61.896274][ T4710] bridge_slave_1: entered promiscuous mode [ 61.907776][ T31] hsr_slave_0: left promiscuous mode [ 61.913711][ T31] hsr_slave_1: left promiscuous mode [ 61.919639][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.927158][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.935006][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.942512][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.953425][ T31] veth1_macvtap: left promiscuous mode [ 61.959000][ T31] veth0_macvtap: left promiscuous mode [ 61.964990][ T31] veth1_vlan: left promiscuous mode [ 61.970371][ T31] veth0_vlan: left promiscuous mode [ 61.980332][ T938] tipc: Node number set to 2886997007 [ 62.018637][ T4757] loop1: detected capacity change from 0 to 512 [ 62.036154][ T4757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.049048][ T4757] EXT4-fs (loop1): 1 truncate cleaned up [ 62.056135][ T4757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.073663][ T29] audit: type=1400 audit(1754775027.489:824): avc: denied { read } for pid=4756 comm="syz.1.515" path="/76/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.096290][ T31] team0 (unregistering): Port device team_slave_1 removed [ 62.108052][ T31] team0 (unregistering): Port device team_slave_0 removed [ 62.258953][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.269805][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.314892][ T4710] team0: Port device team_slave_0 added [ 62.327690][ T29] audit: type=1400 audit(1754775027.739:825): avc: denied { read } for pid=4764 comm="syz.3.519" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.351933][ T29] audit: type=1400 audit(1754775027.739:826): avc: denied { open } for pid=4764 comm="syz.3.519" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.382857][ T29] audit: type=1400 audit(1754775027.789:827): avc: denied { ioctl } for pid=4764 comm="syz.3.519" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.409609][ T4710] team0: Port device team_slave_1 added [ 62.445756][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.452825][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.478993][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.501625][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.508637][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.534705][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.580530][ T4710] hsr_slave_0: entered promiscuous mode [ 62.586855][ T4710] hsr_slave_1: entered promiscuous mode [ 62.594410][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 62.596152][ T29] audit: type=1400 audit(1754775028.009:828): avc: denied { create } for pid=4773 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.600428][ T4710] Cannot create hsr debugfs directory [ 63.038164][ T4781] net_ratelimit: 3 callbacks suppressed [ 63.038185][ T4781] Set syz1 is full, maxelem 65536 reached [ 63.099819][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.110070][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.136414][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.147296][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.158550][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.237300][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.255849][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.267840][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.275049][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.292992][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.300190][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.323321][ T4809] loop9: detected capacity change from 0 to 7 [ 63.329695][ T4809] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.337957][ T4809] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.345901][ T4809] loop9: unable to read partition table [ 63.350134][ T4811] loop3: detected capacity change from 0 to 1024 [ 63.353409][ T4809] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 63.353409][ T4809] ) failed (rc=-5) [ 63.372818][ T4811] ext4: Unknown parameter 'nouser_xattr' [ 63.379517][ T4814] loop1: detected capacity change from 0 to 512 [ 63.407272][ T4814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.416368][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.430350][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.449922][ T4814] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.507124][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.518838][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.575047][ T4833] loop3: detected capacity change from 0 to 512 [ 63.599832][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.613983][ T4833] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.627285][ T4833] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.543: corrupted inode contents [ 63.641011][ T4833] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.543: mark_inode_dirty error [ 63.655196][ T4833] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.543: corrupted inode contents [ 63.670152][ T4833] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.543: corrupted inode contents [ 63.725770][ T4833] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.543: mark_inode_dirty error [ 63.738228][ T4833] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.543: corrupted inode contents [ 63.753363][ T4833] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.543: mark_inode_dirty error [ 63.764920][ T4833] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.543: corrupted inode contents [ 63.777484][ T4833] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.543: mark_inode_dirty error [ 63.793878][ T4847] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.543: corrupted inode contents [ 63.807487][ T4710] veth0_vlan: entered promiscuous mode [ 63.817355][ T4710] veth1_vlan: entered promiscuous mode [ 63.848851][ T4710] veth0_macvtap: entered promiscuous mode [ 63.858162][ T4710] veth1_macvtap: entered promiscuous mode [ 63.872695][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.885545][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.897922][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.909068][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.912966][ T4829] Set syz1 is full, maxelem 65536 reached [ 63.921749][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.938488][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.966377][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.443703][ T4890] loop1: detected capacity change from 0 to 764 [ 64.498189][ T4890] Symlink component flag not implemented [ 64.503927][ T4890] Symlink component flag not implemented [ 64.509844][ T4890] Symlink component flag not implemented (129) [ 64.516095][ T4890] Symlink component flag not implemented (6) [ 64.729286][ T4914] netlink: 'syz.4.576': attribute type 4 has an invalid length. [ 64.737094][ T4914] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.576'. [ 64.748129][ T4915] loop1: detected capacity change from 0 to 512 [ 64.751026][ T4884] Set syz1 is full, maxelem 65536 reached [ 64.778018][ T4915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.792940][ T4915] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.922053][ T4929] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.575: corrupted inode contents [ 64.936721][ T4929] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.575: mark_inode_dirty error [ 64.937067][ T4936] loop4: detected capacity change from 0 to 1024 [ 64.957105][ T4929] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.575: corrupted inode contents [ 64.959539][ T4934] netlink: 'syz.0.582': attribute type 3 has an invalid length. [ 64.969346][ T4929] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.575: mark_inode_dirty error [ 64.993566][ T4929] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.575: mark inode dirty (error -117) [ 65.007306][ T4929] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 65.025936][ T4942] netlink: 96 bytes leftover after parsing attributes in process `syz.0.585'. [ 65.054368][ T4948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32528 sclass=netlink_audit_socket pid=4948 comm=syz.0.588 [ 65.067144][ T4948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4948 comm=syz.0.588 [ 65.084188][ T4936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.109989][ T4936] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.126174][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.378460][ T4962] loop1: detected capacity change from 0 to 512 [ 65.688760][ T31] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 65.721655][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 65.734250][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.734250][ T31] [ 65.754261][ T3413] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 65.782980][ T3413] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 65.795525][ T3413] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.795525][ T3413] [ 65.881044][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.072184][ T4996] wg2: entered promiscuous mode [ 66.077098][ T4996] wg2: entered allmulticast mode [ 66.124823][ T4999] tipc: Enabled bearer , priority 0 [ 66.147141][ T4999] tipc: Disabling bearer [ 66.263342][ T5062] SELinux: ebitmap: truncated map [ 66.294922][ T5062] SELinux: failed to load policy [ 66.607780][ T5079] bond1: entered allmulticast mode [ 66.613400][ T5079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.622310][ T5079] bridge0: port 3(bond1) entered blocking state [ 66.628725][ T5079] bridge0: port 3(bond1) entered disabled state [ 66.694392][ T5079] bond1: entered promiscuous mode [ 66.723473][ T5079] bridge0: port 3(bond1) entered blocking state [ 66.729992][ T5079] bridge0: port 3(bond1) entered forwarding state [ 66.746936][ T5047] bridge0: port 3(bond1) entered disabled state [ 66.919164][ T5093] bond1: entered allmulticast mode [ 66.926843][ T5093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.935132][ T5093] bridge0: port 3(bond1) entered blocking state [ 66.941593][ T5093] bridge0: port 3(bond1) entered disabled state [ 66.950251][ T5093] bond1: entered promiscuous mode [ 66.955568][ T5093] bridge0: port 3(bond1) entered blocking state [ 66.962063][ T5093] bridge0: port 3(bond1) entered forwarding state [ 67.043535][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 67.043553][ T29] audit: type=1400 audit(1754775032.459:944): avc: denied { block_suspend } for pid=5099 comm="syz.4.626" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.088365][ T5106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.109709][ T29] audit: type=1400 audit(1754775032.489:945): avc: denied { bind } for pid=5105 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.129934][ T29] audit: type=1400 audit(1754775032.489:946): avc: denied { setopt } for pid=5105 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.178041][ T29] audit: type=1400 audit(1754775032.589:947): avc: denied { kexec_image_load } for pid=5110 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 67.207587][ T29] audit: type=1400 audit(1754775032.619:948): avc: denied { create } for pid=5115 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.227868][ T29] audit: type=1400 audit(1754775032.619:949): avc: denied { write } for pid=5115 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.261402][ T5106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.280838][ T5117] lo speed is unknown, defaulting to 1000 [ 67.286797][ T5117] lo speed is unknown, defaulting to 1000 [ 67.294195][ T5117] lo speed is unknown, defaulting to 1000 [ 67.302074][ T5117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.309999][ T5117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.333771][ T5106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.362399][ T5117] lo speed is unknown, defaulting to 1000 [ 67.368628][ T5117] lo speed is unknown, defaulting to 1000 [ 67.376359][ T5117] lo speed is unknown, defaulting to 1000 [ 67.382901][ T5117] lo speed is unknown, defaulting to 1000 [ 67.389012][ T5117] lo speed is unknown, defaulting to 1000 [ 67.407514][ T5106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.511386][ T5013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519640][ T5013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.540965][ T5013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.555926][ T5013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.616982][ T5129] loop3: detected capacity change from 0 to 512 [ 67.651921][ T5129] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.678940][ T29] audit: type=1400 audit(1754775033.089:950): avc: denied { bind } for pid=5133 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.783326][ T5058] bridge0: port 3(bond1) entered disabled state [ 67.900317][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.048646][ T5147] siw: device registration error -23 [ 68.056091][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.3.645 [ 68.068675][ T5148] loop4: detected capacity change from 0 to 164 [ 68.076535][ T5148] Unable to read rock-ridge attributes [ 68.083374][ T5148] Unable to read rock-ridge attributes [ 68.104263][ T5151] tipc: Started in network mode [ 68.109223][ T5151] tipc: Node identity 9e17773447da, cluster identity 4711 [ 68.116583][ T5151] tipc: Enabled bearer , priority 0 [ 68.132140][ T5151] tipc: Disabling bearer [ 68.169898][ T29] audit: type=1326 audit(1754775033.579:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c702eebe9 code=0x7ffc0000 [ 68.193323][ T29] audit: type=1326 audit(1754775033.579:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c702eebe9 code=0x7ffc0000 [ 68.217724][ T29] audit: type=1326 audit(1754775033.579:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c702ee7eb code=0x7ffc0000 [ 68.847805][ T5168] loop4: detected capacity change from 0 to 8192 [ 68.863348][ T5168] msdos: Unknown parameter '' [ 68.988475][ T5229] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 69.020934][ T5229] SELinux: failed to load policy [ 69.075286][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 69.084384][ T5234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 69.093382][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 69.114361][ T5234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 69.123402][ T5234] netlink: 'syz.3.677': attribute type 6 has an invalid length. [ 69.218252][ T5247] tipc: Enabled bearer , priority 0 [ 69.227028][ T5247] tipc: Disabling bearer [ 69.248333][ T5251] loop3: detected capacity change from 0 to 1024 [ 69.257189][ T5251] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.286334][ T5251] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.685: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.310076][ T5251] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.685: Failed to acquire dquot type 0 [ 69.325959][ T5251] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.685: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.339851][ T5251] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.685: Invalid inode bitmap blk 0 in block_group 0 [ 69.352717][ T5058] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.355577][ T5251] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 69.375980][ T5251] EXT4-fs (loop3): 1 orphan inode deleted [ 69.392566][ T5058] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0 [ 69.425948][ T5265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5265 comm=syz.2.691 [ 69.438524][ T5265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5265 comm=syz.2.691 [ 69.475593][ T5267] siw: device registration error -23 [ 69.529593][ T5279] netlink: 'syz.1.696': attribute type 3 has an invalid length. [ 69.577319][ T5284] wg2: left promiscuous mode [ 69.582036][ T5284] wg2: left allmulticast mode [ 69.601615][ T5284] wg2: entered promiscuous mode [ 69.606718][ T5284] wg2: entered allmulticast mode [ 70.138803][ T5319] loop2: detected capacity change from 0 to 512 [ 70.201677][ T5319] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.398176][ T5340] ref_ctr increment failed for inode: 0xdd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888100059700 [ 70.486496][ T5344] netlink: zone id is out of range [ 70.492611][ T5344] netlink: zone id is out of range [ 70.497879][ T5344] netlink: zone id is out of range [ 70.542430][ T5346] siw: device registration error -23 [ 70.595507][ T5358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 70.602113][ T5358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.609797][ T5358] vhci_hcd vhci_hcd.0: Device attached [ 70.646594][ T5359] vhci_hcd: connection closed [ 70.646803][ T5028] vhci_hcd: stop threads [ 70.655921][ T5028] vhci_hcd: release socket [ 70.660477][ T5028] vhci_hcd: disconnect device [ 71.397686][ T5398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.435850][ T5397] loop2: detected capacity change from 0 to 1024 [ 71.450034][ T5397] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.466598][ T5398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.491173][ T5397] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.749: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.514521][ T5397] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.749: Failed to acquire dquot type 0 [ 71.554558][ T5398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.582270][ T5397] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.749: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.596794][ T5397] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.749: Invalid inode bitmap blk 0 in block_group 0 [ 71.636505][ T5397] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 71.646739][ T5397] EXT4-fs (loop2): 1 orphan inode deleted [ 71.653620][ T5397] EXT4-fs mount: 6 callbacks suppressed [ 71.653638][ T5397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.694206][ T5409] mmap: syz.4.755 (5409) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.792347][ T5013] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.806758][ T5013] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 71.820581][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.832165][ T5398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.890863][ T5013] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.907566][ T5013] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934676][ T5013] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.956477][ T5013] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.978582][ T5426] loop2: detected capacity change from 0 to 512 [ 71.987813][ T5426] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.001111][ T5426] EXT4-fs (loop2): 1 truncate cleaned up [ 72.007755][ T5426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.165680][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 72.165752][ T29] audit: type=1400 audit(1754775037.579:1125): avc: denied { mounton } for pid=5435 comm="syz.3.765" path="/165/file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.266550][ T29] audit: type=1326 audit(1754775037.679:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.290306][ T29] audit: type=1326 audit(1754775037.679:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.336967][ T29] audit: type=1326 audit(1754775037.729:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.360398][ T29] audit: type=1326 audit(1754775037.729:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.383916][ T29] audit: type=1326 audit(1754775037.729:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.407397][ T29] audit: type=1326 audit(1754775037.729:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.430987][ T29] audit: type=1326 audit(1754775037.729:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.454524][ T29] audit: type=1326 audit(1754775037.729:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 72.478003][ T29] audit: type=1326 audit(1754775037.729:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f041472ebe9 code=0x7ffc0000 [ 73.027552][ T5484] sd 0:0:1:0: device reset [ 73.034100][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.121411][ T5495] veth0: entered promiscuous mode [ 73.130751][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 73.258133][ T5506] netlink: 'syz.0.795': attribute type 39 has an invalid length. [ 73.280613][ T5509] syzkaller0: entered allmulticast mode [ 73.317523][ T5508] syzkaller0: left allmulticast mode [ 73.415080][ T5517] can0: slcan on ttyS3. [ 73.480433][ T5517] can0 (unregistered): slcan off ttyS3. [ 73.495277][ T5517] Falling back ldisc for ttyS3. [ 73.682131][ T5543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.757705][ T5543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.793953][ T5543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.834283][ T5543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.889880][ T5029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.903635][ T5029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926726][ T5029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.947449][ T5029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.961787][ T5563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5563 comm=syz.4.821 [ 74.002649][ T5565] netlink: 'syz.4.822': attribute type 4 has an invalid length. [ 74.010398][ T5565] netlink: 17 bytes leftover after parsing attributes in process `syz.4.822'. [ 74.203933][ T5575] loop4: detected capacity change from 0 to 164 [ 74.221724][ T5575] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.278084][ T5574] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.287884][ T5574] Symlink component flag not implemented [ 74.293748][ T5574] Symlink component flag not implemented [ 74.302028][ T5574] Symlink component flag not implemented (7) [ 74.308594][ T5574] Symlink component flag not implemented (116) [ 74.336136][ T5577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5577 comm=syz.2.837 [ 74.364940][ T5581] syzkaller0: entered allmulticast mode [ 74.401490][ T5579] syzkaller0: left allmulticast mode [ 74.454220][ T5592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.572431][ T5604] syzkaller1: entered promiscuous mode [ 74.577984][ T5604] syzkaller1: entered allmulticast mode [ 74.667593][ T5614] netlink: 376 bytes leftover after parsing attributes in process `syz.4.844'. [ 74.826780][ T5619] veth3: entered promiscuous mode [ 74.934652][ T5628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.985050][ T5628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.067402][ T5628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.123644][ T5628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.191486][ T5058] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.207811][ T5058] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.221459][ T5058] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.231652][ T5058] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.496612][ T5645] can0: slcan on ttyS3. [ 75.561775][ T5645] can0 (unregistered): slcan off ttyS3. [ 75.567712][ T5645] Falling back ldisc for ttyS3. [ 75.834061][ T5671] netlink: 204 bytes leftover after parsing attributes in process `syz.1.869'. [ 76.227711][ T5682] loop4: detected capacity change from 0 to 512 [ 76.235814][ T5682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.247491][ T5682] EXT4-fs (loop4): 1 truncate cleaned up [ 76.253818][ T5682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.399520][ T5682] ================================================================== [ 76.407662][ T5682] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 76.414826][ T5682] [ 76.417173][ T5682] write to 0xffff88811a04a9a4 of 4 bytes by task 5685 on cpu 0: [ 76.424828][ T5682] xas_set_mark+0x12b/0x140 [ 76.429381][ T5682] __folio_start_writeback+0x1dd/0x440 [ 76.434890][ T5682] ext4_bio_write_folio+0x5ad/0x9f0 [ 76.440174][ T5682] mpage_process_page_bufs+0x4a1/0x620 [ 76.445674][ T5682] mpage_prepare_extent_to_map+0x786/0xc00 [ 76.451522][ T5682] ext4_do_writepages+0xa05/0x2750 [ 76.456779][ T5682] ext4_writepages+0x176/0x300 [ 76.461575][ T5682] do_writepages+0x1c6/0x310 [ 76.466199][ T5682] filemap_write_and_wait_range+0x144/0x340 [ 76.472122][ T5682] filemap_invalidate_pages+0xa4/0x1a0 [ 76.477592][ T5682] kiocb_invalidate_pages+0x6e/0x80 [ 76.482866][ T5682] __iomap_dio_rw+0x5d4/0x1250 [ 76.487647][ T5682] iomap_dio_rw+0x40/0x90 [ 76.491992][ T5682] ext4_file_write_iter+0xad9/0xf00 [ 76.497210][ T5682] iter_file_splice_write+0x666/0x9e0 [ 76.502627][ T5682] direct_splice_actor+0x153/0x2a0 [ 76.507748][ T5682] splice_direct_to_actor+0x30f/0x680 [ 76.513127][ T5682] do_splice_direct+0xda/0x150 [ 76.517899][ T5682] do_sendfile+0x380/0x650 [ 76.522421][ T5682] __x64_sys_sendfile64+0x105/0x150 [ 76.527658][ T5682] x64_sys_call+0x2bb0/0x2ff0 [ 76.532353][ T5682] do_syscall_64+0xd2/0x200 [ 76.536908][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.542816][ T5682] [ 76.545183][ T5682] read to 0xffff88811a04a9a4 of 4 bytes by task 5682 on cpu 1: [ 76.552729][ T5682] xas_find_marked+0x5dc/0x620 [ 76.557609][ T5682] find_get_entry+0x5d/0x380 [ 76.562241][ T5682] filemap_get_folios_tag+0x92/0x210 [ 76.567809][ T5682] mpage_prepare_extent_to_map+0x320/0xc00 [ 76.573639][ T5682] ext4_do_writepages+0xa05/0x2750 [ 76.578770][ T5682] ext4_writepages+0x176/0x300 [ 76.583543][ T5682] do_writepages+0x1c6/0x310 [ 76.588148][ T5682] file_write_and_wait_range+0x156/0x2c0 [ 76.593816][ T5682] generic_buffers_fsync_noflush+0x45/0x120 [ 76.599772][ T5682] ext4_sync_file+0x1ab/0x690 [ 76.604579][ T5682] vfs_fsync_range+0x10d/0x130 [ 76.609365][ T5682] ext4_buffered_write_iter+0x34f/0x3c0 [ 76.614938][ T5682] ext4_file_write_iter+0xdbf/0xf00 [ 76.620175][ T5682] iter_file_splice_write+0x666/0x9e0 [ 76.625692][ T5682] direct_splice_actor+0x153/0x2a0 [ 76.630815][ T5682] splice_direct_to_actor+0x30f/0x680 [ 76.636294][ T5682] do_splice_direct+0xda/0x150 [ 76.641162][ T5682] do_sendfile+0x380/0x650 [ 76.645597][ T5682] __x64_sys_sendfile64+0x105/0x150 [ 76.650824][ T5682] x64_sys_call+0x2bb0/0x2ff0 [ 76.655517][ T5682] do_syscall_64+0xd2/0x200 [ 76.660050][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.666040][ T5682] [ 76.668371][ T5682] value changed: 0x0a000021 -> 0x04000021 [ 76.674202][ T5682] [ 76.676537][ T5682] Reported by Kernel Concurrency Sanitizer on: [ 76.682704][ T5682] CPU: 1 UID: 0 PID: 5682 Comm: syz.4.875 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 76.694778][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.704841][ T5682] ================================================================== [ 76.909461][ T5682] ================================================================== [ 76.917596][ T5682] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 76.924904][ T5682] [ 76.927243][ T5682] write to 0xffff88811a04a9a4 of 4 bytes by task 5685 on cpu 1: [ 76.934884][ T5682] xas_clear_mark+0x16b/0x180 [ 76.939582][ T5682] __folio_start_writeback+0x2ce/0x440 [ 76.945126][ T5682] ext4_bio_write_folio+0x5ad/0x9f0 [ 76.950424][ T5682] mpage_process_page_bufs+0x4a1/0x620 [ 76.955923][ T5682] mpage_prepare_extent_to_map+0x786/0xc00 [ 76.961860][ T5682] ext4_do_writepages+0xa05/0x2750 [ 76.966996][ T5682] ext4_writepages+0x176/0x300 [ 76.971789][ T5682] do_writepages+0x1c6/0x310 [ 76.976420][ T5682] file_write_and_wait_range+0x156/0x2c0 [ 76.982073][ T5682] generic_buffers_fsync_noflush+0x45/0x120 [ 76.987983][ T5682] ext4_sync_file+0x1ab/0x690 [ 76.992709][ T5682] vfs_fsync_range+0x10d/0x130 [ 76.997489][ T5682] ext4_buffered_write_iter+0x34f/0x3c0 [ 77.003051][ T5682] ext4_file_write_iter+0xdbf/0xf00 [ 77.008305][ T5682] iter_file_splice_write+0x666/0x9e0 [ 77.013694][ T5682] direct_splice_actor+0x153/0x2a0 [ 77.018824][ T5682] splice_direct_to_actor+0x30f/0x680 [ 77.024216][ T5682] do_splice_direct+0xda/0x150 [ 77.029254][ T5682] do_sendfile+0x380/0x650 [ 77.033692][ T5682] __x64_sys_sendfile64+0x105/0x150 [ 77.038912][ T5682] x64_sys_call+0x2bb0/0x2ff0 [ 77.043597][ T5682] do_syscall_64+0xd2/0x200 [ 77.048133][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.054039][ T5682] [ 77.056478][ T5682] read to 0xffff88811a04a9a4 of 4 bytes by task 5682 on cpu 0: [ 77.064077][ T5682] xas_find_marked+0x5dc/0x620 [ 77.068893][ T5682] find_get_entry+0x5d/0x380 [ 77.073629][ T5682] filemap_get_folios_tag+0x92/0x210 [ 77.078964][ T5682] mpage_prepare_extent_to_map+0x320/0xc00 [ 77.084813][ T5682] ext4_do_writepages+0x708/0x2750 [ 77.089989][ T5682] ext4_writepages+0x176/0x300 [ 77.094875][ T5682] do_writepages+0x1c6/0x310 [ 77.099520][ T5682] filemap_write_and_wait_range+0x144/0x340 [ 77.105464][ T5682] filemap_invalidate_pages+0xa4/0x1a0 [ 77.110964][ T5682] kiocb_invalidate_pages+0x6e/0x80 [ 77.116203][ T5682] __iomap_dio_rw+0x5d4/0x1250 [ 77.121014][ T5682] iomap_dio_rw+0x40/0x90 [ 77.125728][ T5682] ext4_file_write_iter+0xad9/0xf00 [ 77.130985][ T5682] iter_file_splice_write+0x666/0x9e0 [ 77.136395][ T5682] direct_splice_actor+0x153/0x2a0 [ 77.141544][ T5682] splice_direct_to_actor+0x30f/0x680 [ 77.147065][ T5682] do_splice_direct+0xda/0x150 [ 77.151868][ T5682] do_sendfile+0x380/0x650 [ 77.156317][ T5682] __x64_sys_sendfile64+0x105/0x150 [ 77.161539][ T5682] x64_sys_call+0x2bb0/0x2ff0 [ 77.166261][ T5682] do_syscall_64+0xd2/0x200 [ 77.170968][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.176884][ T5682] [ 77.179260][ T5682] value changed: 0x0e000021 -> 0x04000021 [ 77.184988][ T5682] [ 77.187313][ T5682] Reported by Kernel Concurrency Sanitizer on: [ 77.193607][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: syz.4.875 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 77.205722][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.215790][ T5682] ================================================================== [ 77.251603][ T5682] syz.4.875 (5682) used greatest stack depth: 8616 bytes left [ 77.260084][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.603023][ T5058] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.661977][ T5058] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.711702][ T5058] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.771659][ T5058] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.825294][ T5058] bridge_slave_1: left allmulticast mode [ 78.831153][ T5058] bridge_slave_1: left promiscuous mode [ 78.836840][ T5058] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.844926][ T5058] bridge_slave_0: left allmulticast mode [ 78.850613][ T5058] bridge_slave_0: left promiscuous mode [ 78.856430][ T5058] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.982714][ T5058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.993232][ T5058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.002833][ T5058] bond0 (unregistering): Released all slaves [ 79.065026][ T5058] hsr_slave_0: left promiscuous mode [ 79.070879][ T5058] hsr_slave_1: left promiscuous mode [ 79.076417][ T5058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.083971][ T5058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.091596][ T5058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.099280][ T5058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.109934][ T5058] veth1_macvtap: left promiscuous mode [ 79.115568][ T5058] veth0_macvtap: left promiscuous mode [ 79.121245][ T5058] veth1_vlan: left promiscuous mode [ 79.126483][ T5058] veth0_vlan: left promiscuous mode [ 79.193176][ T5058] team0 (unregistering): Port device team_slave_1 removed [ 79.203039][ T5058] team0 (unregistering): Port device team_slave_0 removed [ 79.233288][ T10] lo speed is unknown, defaulting to 1000 [ 79.239230][ T10] infiniband syz2: ib_query_port failed (-19)