last executing test programs: 17.990513838s ago: executing program 2 (id=718): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xfffffff7, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)={{0x1}}) tkill(r0, 0x7) 17.792496117s ago: executing program 2 (id=724): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.738522029s ago: executing program 2 (id=726): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 17.632567543s ago: executing program 2 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$nfs4(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) 17.48493401s ago: executing program 2 (id=732): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 17.163374964s ago: executing program 2 (id=735): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x800000009) 17.162907024s ago: executing program 32 (id=735): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x800000009) 1.118519782s ago: executing program 3 (id=1281): bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.054080005s ago: executing program 3 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.047368205s ago: executing program 5 (id=1287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x340) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nolazytime}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") 997.338767ms ago: executing program 3 (id=1288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x29, 0x0, 0x0) 937.20847ms ago: executing program 1 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) acct(0x0) 912.497391ms ago: executing program 3 (id=1293): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='`', 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 905.649631ms ago: executing program 1 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a0000001400078005001500000000000800"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) 660.149172ms ago: executing program 1 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 659.867982ms ago: executing program 3 (id=1298): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 647.998952ms ago: executing program 4 (id=1299): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 605.071794ms ago: executing program 5 (id=1300): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 593.762584ms ago: executing program 4 (id=1301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 556.301186ms ago: executing program 0 (id=1302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 551.179827ms ago: executing program 1 (id=1303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000540)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000840)={0x0, 0xe55}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) 528.766877ms ago: executing program 5 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 523.103508ms ago: executing program 4 (id=1305): r0 = memfd_secret(0x80000) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) write$UHID_CREATE(r0, 0x0, 0x0) 469.58396ms ago: executing program 4 (id=1306): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 468.77506ms ago: executing program 0 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 409.498322ms ago: executing program 3 (id=1308): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 400.105872ms ago: executing program 0 (id=1309): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@lazytime}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 399.394033ms ago: executing program 4 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x34}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local}, {{0xc00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8"}}}}, 0x44) 371.029254ms ago: executing program 0 (id=1311): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x69, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 370.504354ms ago: executing program 1 (id=1312): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) 325.027836ms ago: executing program 5 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 278.792328ms ago: executing program 0 (id=1314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8003, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0xfffffffd, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x5, 0x0, 0x9, 0xfffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0xffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 278.494048ms ago: executing program 1 (id=1315): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 149.027223ms ago: executing program 4 (id=1316): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) 148.179474ms ago: executing program 5 (id=1326): r0 = syz_io_uring_setup(0x5d6b, &(0x7f0000000240)={0x0, 0x59fc, 0x10000, 0x3, 0xbd7f7fff}, &(0x7f0000000480)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10c, 0x0, 0x1}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x5535, 0x3acd, 0x22, 0x0, 0x0) 87.135106ms ago: executing program 0 (id=1317): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 0s ago: executing program 5 (id=1318): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 33.141815][ T29] audit: type=1400 audit(1764195486.591:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.164802][ T29] audit: type=1400 audit(1764195486.611:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.165685][ T3303] cgroup: Unknown subsys name 'net' [ 33.192516][ T29] audit: type=1400 audit(1764195486.641:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.348761][ T3303] cgroup: Unknown subsys name 'cpuset' [ 33.354989][ T3303] cgroup: Unknown subsys name 'rlimit' [ 33.506048][ T29] audit: type=1400 audit(1764195486.951:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.531843][ T29] audit: type=1400 audit(1764195486.951:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.552420][ T29] audit: type=1400 audit(1764195486.951:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.572800][ T29] audit: type=1400 audit(1764195486.951:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.593095][ T29] audit: type=1400 audit(1764195486.961:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.602255][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.617951][ T29] audit: type=1400 audit(1764195486.961:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.649746][ T29] audit: type=1400 audit(1764195487.081:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.677426][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.573563][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.582546][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.619888][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.628763][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.700632][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.707729][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.714913][ T3314] bridge_slave_0: entered allmulticast mode [ 35.721264][ T3314] bridge_slave_0: entered promiscuous mode [ 35.732130][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.747805][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.754886][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.761984][ T3314] bridge_slave_1: entered allmulticast mode [ 35.768439][ T3314] bridge_slave_1: entered promiscuous mode [ 35.805783][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.812909][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.820226][ T3315] bridge_slave_0: entered allmulticast mode [ 35.826529][ T3315] bridge_slave_0: entered promiscuous mode [ 35.842470][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.849592][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.856686][ T3317] bridge_slave_0: entered allmulticast mode [ 35.863146][ T3317] bridge_slave_0: entered promiscuous mode [ 35.873776][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.880902][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.888203][ T3315] bridge_slave_1: entered allmulticast mode [ 35.894699][ T3315] bridge_slave_1: entered promiscuous mode [ 35.900882][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.907954][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.915117][ T3312] bridge_slave_0: entered allmulticast mode [ 35.921626][ T3312] bridge_slave_0: entered promiscuous mode [ 35.929144][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.938265][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.945304][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.952458][ T3317] bridge_slave_1: entered allmulticast mode [ 35.958807][ T3317] bridge_slave_1: entered promiscuous mode [ 35.975131][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.982259][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.989362][ T3312] bridge_slave_1: entered allmulticast mode [ 35.995774][ T3312] bridge_slave_1: entered promiscuous mode [ 36.002878][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.043962][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.063695][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.079455][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.089364][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.099273][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.108595][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.115619][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.122746][ T3322] bridge_slave_0: entered allmulticast mode [ 36.129101][ T3322] bridge_slave_0: entered promiscuous mode [ 36.136490][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.146108][ T3314] team0: Port device team_slave_0 added [ 36.165251][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.172332][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.179517][ T3322] bridge_slave_1: entered allmulticast mode [ 36.185800][ T3322] bridge_slave_1: entered promiscuous mode [ 36.197025][ T3314] team0: Port device team_slave_1 added [ 36.207942][ T3317] team0: Port device team_slave_0 added [ 36.214430][ T3317] team0: Port device team_slave_1 added [ 36.235711][ T3312] team0: Port device team_slave_0 added [ 36.252171][ T3315] team0: Port device team_slave_0 added [ 36.259117][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.273431][ T3312] team0: Port device team_slave_1 added [ 36.285231][ T3315] team0: Port device team_slave_1 added [ 36.291988][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.306338][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.313346][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.339361][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.354619][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.361696][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.387668][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.408444][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.415466][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.441376][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.457045][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.464065][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.490027][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.505975][ T3322] team0: Port device team_slave_0 added [ 36.514685][ T3322] team0: Port device team_slave_1 added [ 36.520896][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.527834][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.553879][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.567352][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.574406][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.600353][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.611420][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.618591][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.644495][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.656032][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.663078][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.689014][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.742934][ T3317] hsr_slave_0: entered promiscuous mode [ 36.748992][ T3317] hsr_slave_1: entered promiscuous mode [ 36.758072][ T3314] hsr_slave_0: entered promiscuous mode [ 36.764156][ T3314] hsr_slave_1: entered promiscuous mode [ 36.770060][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.775796][ T3314] Cannot create hsr debugfs directory [ 36.781542][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.788526][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.814463][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.826497][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.833478][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.859451][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.901980][ T3315] hsr_slave_0: entered promiscuous mode [ 36.907967][ T3315] hsr_slave_1: entered promiscuous mode [ 36.913950][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.919714][ T3315] Cannot create hsr debugfs directory [ 36.927564][ T3312] hsr_slave_0: entered promiscuous mode [ 36.933680][ T3312] hsr_slave_1: entered promiscuous mode [ 36.939516][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.945228][ T3312] Cannot create hsr debugfs directory [ 36.992223][ T3322] hsr_slave_0: entered promiscuous mode [ 36.998375][ T3322] hsr_slave_1: entered promiscuous mode [ 37.004151][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.009922][ T3322] Cannot create hsr debugfs directory [ 37.175238][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.194759][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.208003][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.221386][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.247619][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.256367][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.265279][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.274725][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.312599][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.322401][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.337996][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.353779][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.376430][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.384950][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.399125][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.409723][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.428874][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.460944][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.469331][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.479249][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.491578][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.499656][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.511584][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.518658][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.531193][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.546559][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.553678][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.566497][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.586211][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.593446][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.602229][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.609365][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.651214][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.671643][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.686844][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.706381][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.728998][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.736237][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.751976][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.767546][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.774810][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.786601][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.793690][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.804534][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.819044][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.826089][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.844371][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.888545][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.901674][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.922993][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.930278][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.957298][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.964549][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.025283][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.045137][ T3314] veth0_vlan: entered promiscuous mode [ 38.066446][ T3314] veth1_vlan: entered promiscuous mode [ 38.086449][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.115805][ T3317] veth0_vlan: entered promiscuous mode [ 38.132852][ T3317] veth1_vlan: entered promiscuous mode [ 38.144282][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.155178][ T3314] veth0_macvtap: entered promiscuous mode [ 38.162699][ T3314] veth1_macvtap: entered promiscuous mode [ 38.187456][ T3315] veth0_vlan: entered promiscuous mode [ 38.195472][ T3315] veth1_vlan: entered promiscuous mode [ 38.208330][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.222790][ T3317] veth0_macvtap: entered promiscuous mode [ 38.239544][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.247105][ T3315] veth0_macvtap: entered promiscuous mode [ 38.263967][ T3317] veth1_macvtap: entered promiscuous mode [ 38.273378][ T3315] veth1_macvtap: entered promiscuous mode [ 38.291086][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.314324][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.323635][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.331546][ T3312] veth0_vlan: entered promiscuous mode [ 38.340437][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.355772][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.365433][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.375442][ T3312] veth1_vlan: entered promiscuous mode [ 38.383609][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398401][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.407093][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.407106][ T29] audit: type=1400 audit(1764195491.851:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QqvoeD/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.439454][ T29] audit: type=1400 audit(1764195491.851:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.447246][ T3312] veth0_macvtap: entered promiscuous mode [ 38.461549][ T29] audit: type=1400 audit(1764195491.861:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QqvoeD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.469476][ T3312] veth1_macvtap: entered promiscuous mode [ 38.492306][ T29] audit: type=1400 audit(1764195491.861:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.515076][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.519868][ T29] audit: type=1400 audit(1764195491.861:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QqvoeD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.519896][ T29] audit: type=1400 audit(1764195491.861:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QqvoeD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.530055][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.553670][ T29] audit: type=1400 audit(1764195491.861:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.581472][ T3322] veth0_vlan: entered promiscuous mode [ 38.614785][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.623731][ T29] audit: type=1400 audit(1764195492.061:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.646633][ T29] audit: type=1400 audit(1764195492.061:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.673305][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.694547][ T3322] veth1_vlan: entered promiscuous mode [ 38.700595][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.711657][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.726720][ T29] audit: type=1400 audit(1764195492.171:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.760813][ T3322] veth0_macvtap: entered promiscuous mode [ 38.768769][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.777532][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.786647][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.807633][ T3322] veth1_macvtap: entered promiscuous mode [ 38.831039][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.843146][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.857941][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.880104][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.887452][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.922856][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.926933][ T3494] mmap: syz.3.6 (3494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.947042][ T3496] loop0: detected capacity change from 0 to 256 [ 38.961936][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.983702][ T3496] ======================================================= [ 38.983702][ T3496] WARNING: The mand mount option has been deprecated and [ 38.983702][ T3496] and is ignored by this kernel. Remove the mand [ 38.983702][ T3496] option from the mount to silence this warning. [ 38.983702][ T3496] ======================================================= [ 39.037075][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046613][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.073071][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087275][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.128032][ T3496] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 39.128553][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.149806][ T3496] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 39.179732][ T3496] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 39.262780][ T3521] loop1: detected capacity change from 0 to 136 [ 39.287271][ T3523] loop4: detected capacity change from 0 to 512 [ 39.322354][ T3523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.335020][ T3531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.21'. [ 39.373074][ T3523] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.387620][ T3531] ipvlan2: entered promiscuous mode [ 39.397818][ T3531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.21'. [ 39.409992][ T3531] ipvlan3: entered promiscuous mode [ 39.415989][ T3531] Zero length message leads to an empty skb [ 39.441455][ T3541] netlink: 'syz.3.24': attribute type 29 has an invalid length. [ 39.450412][ T3541] netlink: 'syz.3.24': attribute type 29 has an invalid length. [ 39.458326][ T3523] capability: warning: `syz.4.19' uses deprecated v2 capabilities in a way that may be insecure [ 39.460486][ T3541] netlink: 500 bytes leftover after parsing attributes in process `syz.3.24'. [ 39.564451][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.583991][ T3555] loop3: detected capacity change from 0 to 128 [ 39.596726][ T3557] loop1: detected capacity change from 0 to 128 [ 39.611135][ T3557] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.637544][ T3557] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.793097][ T3579] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 39.821533][ T3581] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 39.884752][ T3586] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 40.030781][ T3603] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.042634][ T3603] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 40.119129][ T3611] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.219640][ T3623] netlink: 7 bytes leftover after parsing attributes in process `syz.4.63'. [ 40.231749][ T3623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.63'. [ 40.340220][ T3640] loop4: detected capacity change from 0 to 512 [ 40.361112][ T3640] EXT4-fs: Ignoring removed bh option [ 40.373605][ T3640] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 40.378163][ T3644] loop3: detected capacity change from 0 to 512 [ 40.399181][ T3640] EXT4-fs (loop4): 1 truncate cleaned up [ 40.424308][ T3644] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.73: bg 0: block 393: padding at end of block bitmap is not set [ 40.437143][ T3651] loop1: detected capacity change from 0 to 512 [ 40.438923][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.446918][ T3644] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 40.467807][ T3644] EXT4-fs (loop3): 2 truncates cleaned up [ 40.476359][ T3651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.476422][ T3644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.514431][ T3651] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.549546][ T3651] SELinux: Context @ is not valid (left unmapped). [ 40.555707][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.579291][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.595819][ T3656] team_slave_0: entered promiscuous mode [ 40.601517][ T3656] team_slave_1: entered promiscuous mode [ 40.608636][ T3656] team_slave_0: left promiscuous mode [ 40.614048][ T3656] team_slave_1: left promiscuous mode [ 40.701063][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.762776][ T3667] loop1: detected capacity change from 0 to 512 [ 40.794968][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.815527][ T3667] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.854247][ T3667] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #12: comm syz.1.80: Directory hole found for htree leaf block 0 [ 40.889817][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.921485][ T3681] loop3: detected capacity change from 0 to 764 [ 40.967779][ T3681] Symlink component flag not implemented [ 41.038299][ T3698] lo speed is unknown, defaulting to 1000 [ 41.055653][ T3698] lo speed is unknown, defaulting to 1000 [ 41.062451][ T3698] lo speed is unknown, defaulting to 1000 [ 41.069059][ T3698] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.089641][ T3698] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.116801][ T3375] Process accounting resumed [ 41.122141][ T3698] lo speed is unknown, defaulting to 1000 [ 41.131070][ T3698] lo speed is unknown, defaulting to 1000 [ 41.144357][ T3698] lo speed is unknown, defaulting to 1000 [ 41.150722][ T3698] lo speed is unknown, defaulting to 1000 [ 41.159114][ T3698] lo speed is unknown, defaulting to 1000 [ 41.600162][ T3745] loop1: detected capacity change from 0 to 512 [ 41.609877][ T3745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.646777][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.658951][ T3749] bridge0: port 3(macsec1) entered blocking state [ 41.665404][ T3749] bridge0: port 3(macsec1) entered disabled state [ 41.668803][ T3751] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.675819][ T3749] macsec1: entered allmulticast mode [ 41.690313][ T3749] macsec1: left allmulticast mode [ 41.815270][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.823828][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.077830][ T3772] loop3: detected capacity change from 0 to 256 [ 42.119402][ T3772] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 42.129680][ T3778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'. [ 42.263015][ T3790] Falling back ldisc for ttyS3. [ 42.304210][ T3793] loop3: detected capacity change from 0 to 2048 [ 42.325424][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.344322][ T3793] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.366263][ T3793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.135: bg 0: block 345: padding at end of block bitmap is not set [ 42.409398][ T3793] EXT4-fs (loop3): Remounting filesystem read-only [ 42.419076][ T3793] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1602: inode #18: comm syz.3.135: cleanup dec ref error -117 [ 42.445728][ T3793] syz.3.135 (3793) used greatest stack depth: 10096 bytes left [ 42.468690][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.552691][ T3819] loop1: detected capacity change from 0 to 2048 [ 42.579684][ T3825] loop4: detected capacity change from 0 to 512 [ 42.612678][ T3825] EXT4-fs: Ignoring removed oldalloc option [ 42.664354][ T3821] loop2: detected capacity change from 0 to 8192 [ 42.665194][ T3825] EXT4-fs (loop4): 1 truncate cleaned up [ 42.721033][ T3825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.784370][ T3844] SELinux: failed to load policy [ 42.854111][ T3852] loop0: detected capacity change from 0 to 512 [ 42.865983][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.889597][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.952723][ T3852] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.966489][ T3852] EXT4-fs (loop0): shut down requested (1) [ 42.983302][ T3852] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 43.014371][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.053272][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 43.093435][ T3859] lo speed is unknown, defaulting to 1000 [ 43.124487][ T3861] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 43.175924][ T3865] netlink: 76 bytes leftover after parsing attributes in process `syz.1.163'. [ 43.246508][ T3873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.166'. [ 43.276554][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.290075][ C1] hrtimer: interrupt took 38284 ns [ 43.306810][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.334408][ T3883] sd 0:0:1:0: device reset [ 43.340516][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.349761][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.410563][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 43.410581][ T29] audit: type=1400 audit(1764195496.861:350): avc: denied { create } for pid=3891 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.509535][ T29] audit: type=1400 audit(1764195496.861:351): avc: denied { bind } for pid=3891 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.517105][ T3901] loop4: detected capacity change from 0 to 1024 [ 43.528760][ T29] audit: type=1400 audit(1764195496.891:352): avc: denied { write } for pid=3891 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.583932][ T3902] netlink: 96 bytes leftover after parsing attributes in process `syz.0.179'. [ 43.601982][ T3901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.603533][ T29] audit: type=1326 audit(1764195497.011:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 43.637755][ T29] audit: type=1326 audit(1764195497.021:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 43.661138][ T29] audit: type=1326 audit(1764195497.021:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd69c35e1ff code=0x7ffc0000 [ 43.684309][ T29] audit: type=1326 audit(1764195497.021:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 43.707785][ T29] audit: type=1326 audit(1764195497.021:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 43.731111][ T29] audit: type=1326 audit(1764195497.021:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 43.754373][ T29] audit: type=1326 audit(1764195497.021:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 43.833483][ T3915] syz.0.186 uses obsolete (PF_INET,SOCK_PACKET) [ 44.086313][ T3933] loop3: detected capacity change from 0 to 1024 [ 44.119381][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.141661][ T3933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.207226][ T3933] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 44.207238][ T3941] team0 (unregistering): Port device team_slave_0 removed [ 44.227704][ T3933] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.194: bg 0: block 260: invalid block bitmap [ 44.242170][ T3941] team0 (unregistering): Port device team_slave_1 removed [ 44.256294][ T3933] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.194: bit already cleared for inode 15 [ 44.277201][ T3947] veth0: entered promiscuous mode [ 44.304722][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.325983][ T3949] netlink: 'syz.3.200': attribute type 12 has an invalid length. [ 44.629783][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 44.741217][ T3990] __nla_validate_parse: 4 callbacks suppressed [ 44.741308][ T3990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 44.756574][ T3990] unsupported nla_type 24929 [ 45.064814][ T4019] loop4: detected capacity change from 0 to 512 [ 45.110750][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.146707][ T4019] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.177716][ T4019] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.223: corrupted xattr block 33: bad e_name length [ 45.208530][ T4027] IPVS: stopping master sync thread 4030 ... [ 45.216237][ T4029] random: crng reseeded on system resumption [ 45.222585][ T4019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 45.248593][ T4019] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.223: corrupted xattr block 33: bad e_name length [ 45.316600][ T4019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 45.326629][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.223: corrupted inode contents [ 45.339718][ T4019] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #4: comm syz.4.223: mark_inode_dirty error [ 45.352687][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.223: corrupted inode contents [ 45.365303][ T4019] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.223: mark_inode_dirty error [ 45.379651][ T4019] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.223: Failed to acquire dquot type 1 [ 45.436006][ T4019] syz.4.223 (4019) used greatest stack depth: 9824 bytes left [ 45.452914][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.464611][ T4047] SELinux: failed to load policy [ 45.620237][ T4059] loop0: detected capacity change from 0 to 256 [ 45.735987][ T4067] loop3: detected capacity change from 0 to 512 [ 45.769514][ T4067] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.782622][ T4067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.804875][ T4042] loop2: detected capacity change from 0 to 32768 [ 45.823733][ T4067] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.243: invalid indirect mapped block 4294967295 (level 0) [ 45.854293][ T4067] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.243: invalid indirect mapped block 4294967295 (level 1) [ 45.870566][ T4067] EXT4-fs (loop3): 1 orphan inode deleted [ 45.876331][ T4067] EXT4-fs (loop3): 1 truncate cleaned up [ 45.883099][ T3299] loop2: p1 p3 < > [ 45.883471][ T4067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.919010][ T4042] loop2: p1 p3 < > [ 45.950101][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.066467][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 46.080558][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 46.101938][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 46.112388][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 46.297949][ T4103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'. [ 46.383360][ T4115] loop1: detected capacity change from 0 to 512 [ 46.400341][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.413589][ T4115] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.430377][ T4115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.265: corrupted inode contents [ 46.458382][ T4115] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.265: mark_inode_dirty error [ 46.470186][ T4115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.265: corrupted inode contents [ 46.506430][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669358][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 46.692088][ T4145] syz.4.279 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.874743][ T4171] netlink: 104 bytes leftover after parsing attributes in process `syz.1.291'. [ 46.933218][ T4178] SELinux: failed to load policy [ 46.952274][ T4181] loop4: detected capacity change from 0 to 128 [ 46.964161][ T4183] loop1: detected capacity change from 0 to 512 [ 46.972148][ T4183] EXT4-fs: Ignoring removed i_version option [ 46.978232][ T4183] EXT4-fs: Ignoring removed bh option [ 46.994945][ T3429] IPVS: starting estimator thread 0... [ 47.030341][ T4183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.053826][ T4183] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.076840][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.086748][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 47.108802][ T4186] IPVS: using max 2496 ests per chain, 124800 per kthread [ 47.235191][ T4219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.276132][ T4219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.356387][ T4224] loop1: detected capacity change from 0 to 164 [ 47.406719][ T4224] process 'syz.1.311' launched '/dev/fd/5' with NULL argv: empty string added [ 47.426881][ T4224] syz.1.311: attempt to access beyond end of device [ 47.426881][ T4224] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 47.453957][ T4224] syz.1.311: attempt to access beyond end of device [ 47.453957][ T4224] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 47.777190][ T4254] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 47.798571][ T4256] smc: net device bond0 applied user defined pnetid SYZ0 [ 47.840384][ T4256] smc: net device bond0 erased user defined pnetid SYZ0 [ 47.977518][ T4269] Dead loop on virtual device ipvlan1, fix it urgently! [ 47.995587][ T4273] loop4: detected capacity change from 0 to 128 [ 48.013702][ T4273] FAT-fs (loop4): Directory bread(block 414) failed [ 48.032630][ T4273] FAT-fs (loop4): Directory bread(block 415) failed [ 48.042719][ T4273] FAT-fs (loop4): Directory bread(block 416) failed [ 48.052860][ T4273] FAT-fs (loop4): Directory bread(block 417) failed [ 48.067489][ T4245] loop3: detected capacity change from 0 to 32768 [ 48.074630][ T4273] FAT-fs (loop4): Directory bread(block 418) failed [ 48.087967][ T4273] FAT-fs (loop4): Directory bread(block 419) failed [ 48.094694][ T4273] FAT-fs (loop4): Directory bread(block 420) failed [ 48.104129][ T4273] FAT-fs (loop4): Directory bread(block 421) failed [ 48.113924][ T4273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 48.158409][ T3299] loop3: p1 p3 < > [ 48.176361][ T4245] loop3: p1 p3 < > [ 48.180815][ T4285] atomic_op ffff88811b5a7d28 conn xmit_atomic 0000000000000000 [ 48.241614][ T4289] loop3: detected capacity change from 0 to 256 [ 48.257923][ T4293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 48.337729][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.348132][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.376619][ T4297] pim6reg: entered allmulticast mode [ 48.376685][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.384265][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.426270][ T4297] pim6reg: left allmulticast mode [ 48.574909][ T4309] loop4: detected capacity change from 0 to 164 [ 48.615387][ T4309] syz.4.350: attempt to access beyond end of device [ 48.615387][ T4309] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.637614][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 48.637630][ T29] audit: type=1326 audit(1764195502.081:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.638117][ T4309] syz.4.350: attempt to access beyond end of device [ 48.638117][ T4309] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.644634][ T29] audit: type=1326 audit(1764195502.081:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.703675][ T29] audit: type=1326 audit(1764195502.081:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.745800][ T29] audit: type=1326 audit(1764195502.131:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.802033][ T29] audit: type=1326 audit(1764195502.241:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.805327][ T4269] syz.1.330 (4269) used greatest stack depth: 2392 bytes left [ 48.825460][ T29] audit: type=1326 audit(1764195502.241:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.825492][ T29] audit: type=1326 audit(1764195502.241:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.842599][ T4326] netlink: 'syz.3.359': attribute type 6 has an invalid length. [ 48.856245][ T29] audit: type=1326 audit(1764195502.241:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.880700][ T4327] syz.4.355: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 48.887148][ T29] audit: type=1326 audit(1764195502.241:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 48.910396][ T4327] ,cpuset=/,mems_allowed=0 [ 48.950339][ T4327] CPU: 0 UID: 0 PID: 4327 Comm: syz.4.355 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.950375][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.950391][ T4327] Call Trace: [ 48.950400][ T4327] [ 48.950409][ T4327] __dump_stack+0x1d/0x30 [ 48.950438][ T4327] dump_stack_lvl+0xe8/0x140 [ 48.950491][ T4327] dump_stack+0x15/0x1b [ 48.950510][ T4327] warn_alloc+0x12b/0x1a0 [ 48.950662][ T4327] ? __rcu_read_unlock+0x4f/0x70 [ 48.950695][ T4327] __vmalloc_node_range_noprof+0x9d/0xed0 [ 48.950729][ T4327] ? __futex_wait+0x1fa/0x260 [ 48.950820][ T4327] ? __pfx_futex_wake_mark+0x10/0x10 [ 48.950840][ T4327] ? __rcu_read_unlock+0x4f/0x70 [ 48.950917][ T4327] ? avc_has_perm_noaudit+0x1b1/0x200 [ 48.950937][ T4327] ? should_fail_ex+0x30/0x280 [ 48.950954][ T4327] ? xskq_create+0x36/0xe0 [ 48.951046][ T4327] vmalloc_user_noprof+0x7d/0xb0 [ 48.951079][ T4327] ? xskq_create+0x80/0xe0 [ 48.951100][ T4327] xskq_create+0x80/0xe0 [ 48.951153][ T4327] xsk_init_queue+0x95/0xf0 [ 48.951181][ T4327] xsk_setsockopt+0x3f5/0x640 [ 48.951220][ T4327] ? __pfx_xsk_setsockopt+0x10/0x10 [ 48.951246][ T4327] __sys_setsockopt+0x184/0x200 [ 48.951297][ T4327] __x64_sys_setsockopt+0x64/0x80 [ 48.951387][ T4327] x64_sys_call+0x20ec/0x3000 [ 48.951414][ T4327] do_syscall_64+0xd2/0x200 [ 48.951438][ T4327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.951469][ T4327] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.951610][ T4327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.951629][ T4327] RIP: 0033:0x7f6a6bb0f749 [ 48.951643][ T4327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.951685][ T4327] RSP: 002b:00007f6a6a54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.951707][ T4327] RAX: ffffffffffffffda RBX: 00007f6a6bd66090 RCX: 00007f6a6bb0f749 [ 48.951803][ T4327] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 48.951816][ T4327] RBP: 00007f6a6bb93f91 R08: 0000000000000004 R09: 0000000000000000 [ 48.951827][ T4327] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.951838][ T4327] R13: 00007f6a6bd66128 R14: 00007f6a6bd66090 R15: 00007ffd5c8f3788 [ 48.951855][ T4327] [ 48.951865][ T4327] Mem-Info: [ 49.098869][ T29] audit: type=1400 audit(1764195502.551:520): avc: denied { listen } for pid=4336 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.101837][ T4327] active_anon:6840 inactive_anon:4 isolated_anon:0 [ 49.101837][ T4327] active_file:12029 inactive_file:2241 isolated_file:0 [ 49.101837][ T4327] unevictable:0 dirty:259 writeback:0 [ 49.101837][ T4327] slab_reclaimable:3147 slab_unreclaimable:14135 [ 49.101837][ T4327] mapped:29119 shmem:199 pagetables:1192 [ 49.101837][ T4327] sec_pagetables:0 bounce:0 [ 49.101837][ T4327] kernel_misc_reclaimable:0 [ 49.101837][ T4327] free:1893877 free_pcp:13305 free_cma:0 [ 49.244881][ T4327] Node 0 active_anon:27360kB inactive_anon:16kB active_file:48116kB inactive_file:8964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116476kB dirty:1036kB writeback:0kB shmem:796kB kernel_stack:3424kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 49.272117][ T4327] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 49.301755][ T4327] lowmem_reserve[]: 0 2881 7859 7859 [ 49.307135][ T4327] Node 0 DMA32 free:2946724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950252kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 49.338494][ T4327] lowmem_reserve[]: 0 0 4978 4978 [ 49.343573][ T4327] Node 0 Normal free:4613424kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27360kB inactive_anon:16kB active_file:48116kB inactive_file:8964kB unevictable:0kB writepending:1036kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:49504kB local_pcp:22320kB free_cma:0kB [ 49.376709][ T4327] lowmem_reserve[]: 0 0 0 0 [ 49.381310][ T4327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 49.394079][ T4327] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946724kB [ 49.410519][ T4327] Node 0 Normal: 128*4kB (U) 96*8kB (UM) 17*16kB (UM) 1*32kB (U) 2*64kB (ME) 5*128kB (UME) 2*256kB (UM) 1*512kB (U) 2*1024kB (UE) 0*2048kB 1125*4096kB (UM) = 4613424kB [ 49.427521][ T4327] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 49.436810][ T4327] 14474 total pagecache pages [ 49.441485][ T4327] 10 pages in swap cache [ 49.445727][ T4327] Free swap = 124952kB [ 49.449935][ T4327] Total swap = 124996kB [ 49.454099][ T4327] 2097051 pages RAM [ 49.457889][ T4327] 0 pages HighMem/MovableOnly [ 49.462564][ T4327] 81088 pages reserved [ 49.612119][ T4357] pim6reg: entered allmulticast mode [ 49.619610][ T4357] pim6reg: left allmulticast mode [ 49.718386][ T4353] netlink: 68 bytes leftover after parsing attributes in process `syz.4.372'. [ 49.795147][ T4373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.380'. [ 49.804493][ T4373] unsupported nlmsg_type 40 [ 49.830947][ T4378] loop0: detected capacity change from 0 to 512 [ 49.843973][ T4378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.854491][ T4380] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 49.891520][ T4378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.935142][ T4378] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.978142][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.993379][ T4385] loop2: detected capacity change from 0 to 2048 [ 50.048427][ T4385] Alternate GPT is invalid, using primary GPT. [ 50.054816][ T4385] loop2: p1 p2 p3 [ 50.058723][ T4385] loop2: partition table partially beyond EOD, truncated [ 50.099898][ T4408] batadv_slave_1: entered promiscuous mode [ 50.109130][ T4407] batadv_slave_1: left promiscuous mode [ 50.243436][ T4420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 50.252388][ T4420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.400'. [ 50.261588][ T4420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 50.284097][ T4418] netlink: 'syz.4.401': attribute type 3 has an invalid length. [ 50.284536][ T4420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.400'. [ 50.331718][ T4429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.404'. [ 50.340694][ T4429] netlink: 43 bytes leftover after parsing attributes in process `syz.2.404'. [ 50.349596][ T4429] netlink: 'syz.2.404': attribute type 6 has an invalid length. [ 50.357319][ T4429] netlink: 'syz.2.404': attribute type 5 has an invalid length. [ 50.365078][ T4429] netlink: 43 bytes leftover after parsing attributes in process `syz.2.404'. [ 50.401573][ T4434] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 50.427011][ T4438] loop1: detected capacity change from 0 to 164 [ 50.440969][ T4438] Unable to read rock-ridge attributes [ 50.630532][ T4454] program syz.0.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.783049][ T4468] loop0: detected capacity change from 0 to 2048 [ 50.808638][ T4468] EXT4-fs: Ignoring removed bh option [ 50.831090][ T4468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.911594][ T4468] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.944443][ T4488] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 50.981428][ T4468] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 50.989304][ T4491] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.994056][ T4468] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.994056][ T4468] [ 50.994075][ T4468] EXT4-fs (loop0): Total free blocks count 0 [ 50.994090][ T4468] EXT4-fs (loop0): Free/Dirty block details [ 50.994101][ T4468] EXT4-fs (loop0): free_blocks=2415919104 [ 50.994191][ T4468] EXT4-fs (loop0): dirty_blocks=48 [ 51.006415][ T4491] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.006415][ T4491] [ 51.016180][ T4468] EXT4-fs (loop0): Block reservation details [ 51.203218][ T4505] loop4: detected capacity change from 0 to 512 [ 51.229039][ T4505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.268732][ T4509] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.298860][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.311810][ T4505] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.327350][ T4509] bond1: entered promiscuous mode [ 51.384687][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.495242][ T4525] loop0: detected capacity change from 0 to 512 [ 51.557668][ T4525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.579777][ T4525] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.658949][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.668786][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 51.680650][ T4554] loop2: detected capacity change from 0 to 512 [ 51.704290][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.727099][ T4554] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.856557][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.872335][ T4578] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.080096][ T4605] loop4: detected capacity change from 0 to 512 [ 52.131924][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.149168][ T4613] loop1: detected capacity change from 0 to 164 [ 52.156770][ T4605] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.202032][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.211307][ T4613] rock: directory entry would overflow storage [ 52.217482][ T4613] rock: sig=0x66, size=4, remaining=3 [ 52.262941][ T4613] rock: directory entry would overflow storage [ 52.269196][ T4613] rock: sig=0x66, size=4, remaining=3 [ 52.288190][ T4613] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.363207][ T4637] sd 0:0:1:0: device reset [ 52.531343][ T4659] loop2: detected capacity change from 0 to 512 [ 52.604652][ T4659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.626154][ T4659] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.726905][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.881951][ T4693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 52.968567][ T4698] loop2: detected capacity change from 0 to 512 [ 53.060793][ T4698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.074973][ T4698] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.103194][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.372337][ T4725] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 53.400838][ T4725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.439006][ T4725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.446370][ T4725] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 53.463548][ T4725] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 53.505568][ T4734] loop2: detected capacity change from 0 to 512 [ 53.512446][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 53.559123][ T4734] EXT4-fs: Ignoring removed oldalloc option [ 53.578633][ T4734] EXT4-fs (loop2): 1 truncate cleaned up [ 53.594657][ T4734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.668091][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.728418][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 53.728431][ T29] audit: type=1326 audit(1764195507.181:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.774840][ T29] audit: type=1326 audit(1764195507.181:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.814780][ T4774] loop3: detected capacity change from 0 to 128 [ 53.843366][ T29] audit: type=1326 audit(1764195507.231:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.866677][ T29] audit: type=1326 audit(1764195507.231:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.890099][ T29] audit: type=1326 audit(1764195507.231:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.913393][ T29] audit: type=1326 audit(1764195507.231:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.936876][ T29] audit: type=1326 audit(1764195507.231:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.960125][ T29] audit: type=1326 audit(1764195507.231:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 53.983387][ T29] audit: type=1326 audit(1764195507.231:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 54.006950][ T29] audit: type=1326 audit(1764195507.231:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247220f749 code=0x7ffc0000 [ 54.059032][ T4782] netem: incorrect ge model size [ 54.064055][ T4782] netem: change failed [ 54.083171][ T4783] tipc: Started in network mode [ 54.088281][ T4783] tipc: Node identity ac14140f, cluster identity 4711 [ 54.107208][ T4783] tipc: New replicast peer: 255.255.255.83 [ 54.113390][ T4783] tipc: Enabled bearer , priority 10 [ 54.144581][ T4789] bridge0: port 3(bond0) entered blocking state [ 54.151084][ T4789] bridge0: port 3(bond0) entered disabled state [ 54.173949][ T4789] bond0: entered allmulticast mode [ 54.179254][ T4789] bond_slave_0: entered allmulticast mode [ 54.185034][ T4789] bond_slave_1: entered allmulticast mode [ 54.196991][ T4789] bond0: entered promiscuous mode [ 54.202172][ T4789] bond_slave_0: entered promiscuous mode [ 54.207951][ T4789] bond_slave_1: entered promiscuous mode [ 54.214043][ T4789] bridge0: port 3(bond0) entered blocking state [ 54.215617][ T4796] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 54.220423][ T4789] bridge0: port 3(bond0) entered forwarding state [ 54.220815][ T4795] bond0: left allmulticast mode [ 54.239614][ T4795] bond_slave_0: left allmulticast mode [ 54.245129][ T4795] bond_slave_1: left allmulticast mode [ 54.250664][ T4795] bond0: left promiscuous mode [ 54.255447][ T4795] bond_slave_0: left promiscuous mode [ 54.260945][ T4795] bond_slave_1: left promiscuous mode [ 54.266654][ T4795] bridge0: port 3(bond0) entered disabled state [ 54.415782][ T4823] siw: device registration error -23 [ 54.517204][ T3003] udevd[3003]: worker [3299] terminated by signal 33 (Unknown signal 33) [ 54.524240][ T4837] hub 9-0:1.0: USB hub found [ 54.535275][ T3003] udevd[3003]: worker [3299] failed while handling '/devices/virtual/block/loop4' [ 54.538463][ T4837] hub 9-0:1.0: 8 ports detected [ 54.606440][ T4847] SELinux: failed to load policy [ 54.818960][ T4872] __nla_validate_parse: 2 callbacks suppressed [ 54.818974][ T4872] netlink: 104 bytes leftover after parsing attributes in process `syz.4.593'. [ 54.859768][ T4870] loop3: detected capacity change from 0 to 8192 [ 54.867441][ T4870] vfat: Unknown parameter './file1' [ 54.978315][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 55.030337][ T4890] netlink: 'syz.0.597': attribute type 4 has an invalid length. [ 55.048871][ T36] lo speed is unknown, defaulting to 1000 [ 55.054662][ T36] syz2: Port: 1 Link DOWN [ 55.067955][ T4890] netlink: 'syz.0.597': attribute type 4 has an invalid length. [ 55.100293][ T36] lo speed is unknown, defaulting to 1000 [ 55.106154][ T36] syz2: Port: 1 Link ACTIVE [ 55.228520][ T3388] tipc: Node number set to 2886997007 [ 55.252873][ T4902] loop0: detected capacity change from 0 to 8192 [ 55.269730][ T4902] vfat: Unknown parameter './file1' [ 55.354293][ T4924] lo speed is unknown, defaulting to 1000 [ 55.435858][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 55.447689][ T4939] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.632430][ T4954] loop4: detected capacity change from 0 to 2048 [ 55.656001][ T4954] EXT4-fs: Ignoring removed bh option [ 55.681819][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.702801][ T4954] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.718163][ T4954] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 55.730623][ T4954] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.730623][ T4954] [ 55.740361][ T4954] EXT4-fs (loop4): Total free blocks count 0 [ 55.746465][ T4954] EXT4-fs (loop4): Free/Dirty block details [ 55.752416][ T4954] EXT4-fs (loop4): free_blocks=2415919104 [ 55.758166][ T4954] EXT4-fs (loop4): dirty_blocks=48 [ 55.763341][ T4954] EXT4-fs (loop4): Block reservation details [ 55.769362][ T4954] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 55.778494][ T4963] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.007856][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 56.276734][ T5003] bridge0: port 3(bond0) entered blocking state [ 56.283207][ T5003] bridge0: port 3(bond0) entered disabled state [ 56.291284][ T4999] loop3: detected capacity change from 0 to 2048 [ 56.298339][ T5003] bond0: entered allmulticast mode [ 56.303488][ T5003] bond_slave_0: entered allmulticast mode [ 56.309296][ T5003] bond_slave_1: entered allmulticast mode [ 56.337859][ T5003] bond0: left allmulticast mode [ 56.342804][ T5003] bond_slave_0: left allmulticast mode [ 56.345796][ T4999] EXT4-fs: Ignoring removed bh option [ 56.348296][ T5003] bond_slave_1: left allmulticast mode [ 56.403003][ T4999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.527362][ T5015] loop4: detected capacity change from 0 to 8192 [ 56.541388][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b31da00: rx timeout, send abort [ 56.549703][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b31da00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.566426][ T4999] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.570300][ T5015] vfat: Unknown parameter './file1' [ 56.598174][ T4999] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 56.610559][ T4999] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.610559][ T4999] [ 56.610575][ T5018] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.620231][ T4999] EXT4-fs (loop3): Total free blocks count 0 [ 56.620249][ T4999] EXT4-fs (loop3): Free/Dirty block details [ 56.632416][ T5018] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.632416][ T5018] [ 56.638417][ T4999] EXT4-fs (loop3): free_blocks=2415919104 [ 56.644299][ T5018] EXT4-fs (loop3): Total free blocks count 0 [ 56.653951][ T4999] EXT4-fs (loop3): dirty_blocks=48 [ 56.769648][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 56.778593][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 56.815144][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 56.824148][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 56.856476][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 56.865491][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 56.878707][ T5029] loop3: detected capacity change from 0 to 1024 [ 56.924962][ T5029] EXT4-fs: Ignoring removed orlov option [ 56.959111][ T5029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.142921][ T5048] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 57.222152][ T5057] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 57.229881][ T5057] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 57.278351][ T5061] xt_hashlimit: max too large, truncated to 1048576 [ 57.587158][ T5083] loop1: detected capacity change from 0 to 2048 [ 57.616500][ T5083] EXT4-fs: Ignoring removed bh option [ 57.704908][ T5083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.722175][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 57.810709][ T5083] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.886686][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.898417][ T5083] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 57.911061][ T5083] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.911061][ T5083] [ 57.920796][ T5083] EXT4-fs (loop1): Total free blocks count 0 [ 57.926788][ T5083] EXT4-fs (loop1): Free/Dirty block details [ 57.932738][ T5083] EXT4-fs (loop1): free_blocks=2415919104 [ 57.938525][ T5083] EXT4-fs (loop1): dirty_blocks=48 [ 57.943705][ T5083] EXT4-fs (loop1): Block reservation details [ 57.949722][ T5083] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 57.971590][ T5104] loop0: detected capacity change from 0 to 128 [ 57.998120][ T5104] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.031121][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.038666][ T5100] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 58.150303][ T5111] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 58.190567][ T5106] SELinux: ebitmap: truncated map [ 58.208981][ T5106] SELinux: failed to load policy [ 58.254288][ T5123] loop1: detected capacity change from 0 to 2048 [ 58.271377][ T5123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.309490][ T5123] EXT4-fs error (device loop1): __ext4_iget:5443: inode #12: block 2: comm syz.1.699: invalid block [ 58.340509][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.543713][ T5159] atomic_op ffff888101603528 conn xmit_atomic 0000000000000000 [ 58.799914][ T5191] loop3: detected capacity change from 0 to 512 [ 58.820618][ T5193] loop2: detected capacity change from 0 to 512 [ 58.830297][ T5191] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.725: couldn't read orphan inode 26 (err -116) [ 58.839586][ T5193] __quota_error: 174 callbacks suppressed [ 58.839604][ T5193] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 58.843143][ T5191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.851728][ T5193] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.858296][ T5191] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.877085][ T5193] EXT4-fs (loop2): mount failed [ 58.890196][ T5191] EXT4-fs (loop3): shut down requested (2) [ 58.916998][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.967331][ T29] audit: type=1326 audit(1764195512.411:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 58.991636][ T29] audit: type=1326 audit(1764195512.441:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.014932][ T29] audit: type=1326 audit(1764195512.441:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.038223][ T29] audit: type=1326 audit(1764195512.441:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.061487][ T29] audit: type=1326 audit(1764195512.441:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.086091][ T29] audit: type=1326 audit(1764195512.441:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.109552][ T29] audit: type=1326 audit(1764195512.441:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.132847][ T29] audit: type=1326 audit(1764195512.441:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.156081][ T29] audit: type=1326 audit(1764195512.441:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 59.375787][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.417983][ T5215] $Hÿ: renamed from bond0 (while UP) [ 59.426220][ T5215] $Hÿ: entered promiscuous mode [ 59.431388][ T5215] bond_slave_0: entered promiscuous mode [ 59.437235][ T5215] bond_slave_1: entered promiscuous mode [ 59.450355][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.512277][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.532896][ T5216] lo speed is unknown, defaulting to 1000 [ 59.552988][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.621229][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 59.702666][ T12] bridge_slave_1: left allmulticast mode [ 59.708387][ T12] bridge_slave_1: left promiscuous mode [ 59.714107][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.723632][ T12] bridge_slave_0: left allmulticast mode [ 59.729429][ T12] bridge_slave_0: left promiscuous mode [ 59.735127][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.861007][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.872634][ T5262] SELinux: ebitmap: truncated map [ 59.878684][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.887387][ T5262] SELinux: failed to load policy [ 59.893425][ T12] bond0 (unregistering): Released all slaves [ 59.939757][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.946845][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.954483][ T5216] bridge_slave_0: entered allmulticast mode [ 59.965576][ T5216] bridge_slave_0: entered promiscuous mode [ 59.974276][ T12] hsr_slave_0: left promiscuous mode [ 59.980055][ T12] hsr_slave_1: left promiscuous mode [ 59.985791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.993479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.007519][ T12] veth1_macvtap: left promiscuous mode [ 60.013262][ T12] veth0_macvtap: left promiscuous mode [ 60.019039][ T12] veth1_vlan: left promiscuous mode [ 60.024328][ T12] veth0_vlan: left promiscuous mode [ 60.119017][ T12] team0 (unregistering): Port device team_slave_1 removed [ 60.134230][ T12] team0 (unregistering): Port device team_slave_0 removed [ 60.169303][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.176481][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.183675][ T5216] bridge_slave_1: entered allmulticast mode [ 60.190459][ T5216] bridge_slave_1: entered promiscuous mode [ 60.214706][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.240931][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.285289][ T5216] team0: Port device team_slave_0 added [ 60.303692][ T5300] __nla_validate_parse: 20 callbacks suppressed [ 60.303706][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.763'. [ 60.324380][ T5216] team0: Port device team_slave_1 added [ 60.429144][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.436161][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.462258][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.516785][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.523941][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.549906][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.633917][ T5216] hsr_slave_0: entered promiscuous mode [ 60.646843][ T5216] hsr_slave_1: entered promiscuous mode [ 60.654869][ T5216] debugfs: 'hsr0' already exists in 'hsr' [ 60.660672][ T5216] Cannot create hsr debugfs directory [ 60.670843][ T12] IPVS: stop unused estimator thread 0... [ 60.818711][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.836511][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.863693][ T5216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.892100][ T5216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.911532][ T5216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.946191][ T5216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.034992][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.071608][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.082962][ T1993] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.090094][ T1993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.102214][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.109299][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.240731][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.415933][ T5446] netlink: 'syz.1.799': attribute type 22 has an invalid length. [ 61.423759][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 61.440524][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.445398][ T5446] netlink: 'syz.1.799': attribute type 22 has an invalid length. [ 61.457192][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 61.457206][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.487159][ T5216] veth0_vlan: entered promiscuous mode [ 61.494946][ T5216] veth1_vlan: entered promiscuous mode [ 61.534191][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.559772][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.572235][ T5216] veth0_macvtap: entered promiscuous mode [ 61.586581][ T5216] veth1_macvtap: entered promiscuous mode [ 61.633919][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.650509][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.662688][ T1993] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.693402][ T1993] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.719366][ T1993] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.732105][ T1993] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.790691][ T5480] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.810962][ T5485] loop4: detected capacity change from 0 to 1024 [ 61.818381][ T5480] vhci_hcd: invalid port number 96 [ 61.823539][ T5480] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 61.841722][ T5485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.911585][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.109598][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 62.256980][ T5548] bridge0: entered allmulticast mode [ 62.262611][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 62.265441][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 62.272820][ T5548] bridge_slave_1: left allmulticast mode [ 62.286189][ T5548] bridge_slave_1: left promiscuous mode [ 62.291877][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.299863][ T5548] bridge_slave_0: left allmulticast mode [ 62.305524][ T5548] bridge_slave_0: left promiscuous mode [ 62.311393][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.322253][ T5548] bridge0 (unregistering): left allmulticast mode [ 62.371473][ T5550] xfrm1: entered promiscuous mode [ 62.376552][ T5550] xfrm1: entered allmulticast mode [ 62.381905][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 63.048524][ T5610] loop5: detected capacity change from 0 to 512 [ 63.057900][ T5543] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 63.067906][ T5612] block device autoloading is deprecated and will be removed. [ 63.076609][ T5543] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 63.084820][ T5609] loop4: detected capacity change from 0 to 8192 [ 63.109777][ T5610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.122560][ T5610] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.142221][ T5610] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.870: corrupted inode contents [ 63.157321][ T5610] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.870: mark_inode_dirty error [ 63.171882][ T5610] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.870: corrupted inode contents [ 63.195562][ T5610] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.870: corrupted inode contents [ 63.210781][ T5610] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.870: mark_inode_dirty error [ 63.222923][ T5610] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.870: corrupted inode contents [ 63.245627][ T5610] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.870: mark_inode_dirty error [ 63.261332][ T5610] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.870: corrupted inode contents [ 63.273796][ T5610] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.870: mark_inode_dirty error [ 63.308688][ T5626] netlink: 'syz.4.875': attribute type 12 has an invalid length. [ 63.316559][ T5626] netlink: 'syz.4.875': attribute type 29 has an invalid length. [ 63.324405][ T5626] netlink: 148 bytes leftover after parsing attributes in process `syz.4.875'. [ 63.333410][ T5626] netlink: 43 bytes leftover after parsing attributes in process `syz.4.875'. [ 63.343875][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.454183][ T5647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 63.483341][ T5651] sd 0:0:1:0: device reset [ 63.515514][ T5658] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 63.551415][ T5663] ALSA: seq fatal error: cannot create timer (-16) [ 63.565415][ T5666] tipc: Enabling of bearer rejected, failed to enable media [ 63.593665][ T5670] sit1: entered allmulticast mode [ 63.634586][ T5674] xt_connbytes: Forcing CT accounting to be enabled [ 63.648117][ T5674] Cannot find set identified by id 0 to match [ 63.971484][ T5707] loop4: detected capacity change from 0 to 1024 [ 63.995660][ T5707] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.021819][ T5707] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.913: Freeing blocks not in datazone - block = 0, count = 16 [ 64.066112][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 64.087925][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.100423][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.100423][ T12] [ 64.110121][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 64.116235][ T12] EXT4-fs (loop4): Free/Dirty block details [ 64.122166][ T12] EXT4-fs (loop4): free_blocks=16 [ 64.127271][ T12] EXT4-fs (loop4): dirty_blocks=16 [ 64.132456][ T12] EXT4-fs (loop4): Block reservation details [ 64.138489][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 64.173014][ T5715] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.258915][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 64.258927][ T29] audit: type=1326 audit(1764195517.711:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.292494][ T29] audit: type=1326 audit(1764195517.741:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.316258][ T29] audit: type=1326 audit(1764195517.741:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.339633][ T29] audit: type=1326 audit(1764195517.741:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.363083][ T29] audit: type=1326 audit(1764195517.741:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.386447][ T29] audit: type=1326 audit(1764195517.741:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.409995][ T29] audit: type=1326 audit(1764195517.741:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.412198][ T5723] loop4: detected capacity change from 0 to 512 [ 64.433485][ T29] audit: type=1326 audit(1764195517.741:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.462953][ T29] audit: type=1326 audit(1764195517.741:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.486276][ T29] audit: type=1326 audit(1764195517.741:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc9b098f749 code=0x7ffc0000 [ 64.490618][ T5723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.550510][ T5723] EXT4-fs (loop4): 1 truncate cleaned up [ 64.608715][ T5734] tls_set_device_offload_rx: netdev not found [ 64.827341][ T5758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5758 comm=syz.0.936 [ 65.743292][ T5738] Set syz1 is full, maxelem 65536 reached [ 65.905583][ T5798] SELinux: failed to load policy [ 66.174504][ T5821] ALSA: seq fatal error: cannot create timer (-19) [ 66.354989][ T5833] hub 6-0:1.0: USB hub found [ 66.359885][ T5833] hub 6-0:1.0: 8 ports detected [ 66.712469][ T5885] __nla_validate_parse: 4 callbacks suppressed [ 66.712486][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 66.848115][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.773387][ T5950] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1021'. [ 67.826973][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 67.836521][ T5954] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 67.968219][ T5969] tipc: Started in network mode [ 67.973256][ T5969] tipc: Node identity ac14140f, cluster identity 4711 [ 67.992803][ T5969] tipc: New replicast peer: 255.255.255.255 [ 67.999377][ T5969] tipc: Enabled bearer , priority 10 [ 68.063853][ T5984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5984 comm=syz.0.1037 [ 68.076408][ T5984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5984 comm=syz.0.1037 [ 68.114588][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 68.123583][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 68.150489][ T55] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.175208][ T55] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.197578][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 68.206589][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 68.215710][ T55] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.224678][ T55] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.270023][ T6010] loop3: detected capacity change from 0 to 128 [ 68.340879][ T6014] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.348950][ T6014] vhci_hcd: invalid port number 96 [ 68.354095][ T6014] vhci_hcd: default hub control req: 0006 v000d i0060 l0 [ 68.474018][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 68.483780][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 68.517884][ T6037] sd 0:0:1:0: device reset [ 68.575809][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 68.778197][ T6061] syzkaller1: entered promiscuous mode [ 68.783737][ T6061] syzkaller1: entered allmulticast mode [ 68.868670][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.118193][ T10] tipc: Node number set to 2886997007 [ 69.889334][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 69.889348][ T29] audit: type=1400 audit(1764195523.341:1391): avc: denied { create } for pid=6127 comm="syz.3.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.915304][ T29] audit: type=1400 audit(1764195523.341:1392): avc: denied { connect } for pid=6127 comm="syz.3.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.018866][ T29] audit: type=1400 audit(1764195523.471:1393): avc: denied { write } for pid=6141 comm="syz.5.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.092611][ T29] audit: type=1400 audit(1764195523.541:1394): avc: denied { name_connect } for pid=6157 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 70.130337][ T29] audit: type=1400 audit(1764195523.581:1395): avc: denied { create } for pid=6160 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.157679][ T6163] syzkaller1: entered promiscuous mode [ 70.164748][ T6163] syzkaller1: entered allmulticast mode [ 70.174026][ T29] audit: type=1400 audit(1764195523.611:1396): avc: denied { read } for pid=6160 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.269622][ T29] audit: type=1326 audit(1764195523.721:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bb0f749 code=0x7ffc0000 [ 70.293168][ T29] audit: type=1326 audit(1764195523.721:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bb0f749 code=0x7ffc0000 [ 70.318722][ T29] audit: type=1326 audit(1764195523.731:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6bb0f749 code=0x7ffc0000 [ 70.342326][ T29] audit: type=1326 audit(1764195523.731:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bb0f749 code=0x7ffc0000 [ 70.409091][ T6184] sit1: entered allmulticast mode [ 70.531960][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.543015][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.561056][ T6201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.788747][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 70.823233][ T6222] xfrm1: entered promiscuous mode [ 70.828407][ T6222] xfrm1: entered allmulticast mode [ 70.882410][ T6224] sit1: entered allmulticast mode [ 70.904012][ T1993] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.914013][ T6228] syzkaller1: entered promiscuous mode [ 70.919617][ T6228] syzkaller1: entered allmulticast mode [ 71.478894][ T6301] loop5: detected capacity change from 0 to 8192 [ 71.680651][ T6316] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.688443][ T6316] vhci_hcd: invalid port number 96 [ 71.693567][ T6316] vhci_hcd: default hub control req: 0006 v000d i0060 l0 [ 71.716326][ T6320] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.724441][ T6320] vhci_hcd: invalid port number 96 [ 71.729633][ T6320] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.491738][ T6387] __nla_validate_parse: 15 callbacks suppressed [ 72.491752][ T6387] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1202'. [ 72.530976][ T6390] loop5: detected capacity change from 0 to 1024 [ 72.571088][ T6390] EXT4-fs mount: 4 callbacks suppressed [ 72.571108][ T6390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.589476][ T6390] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.606527][ T6390] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.1203: Freeing blocks not in datazone - block = 0, count = 16 [ 72.633950][ T52] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 72.649594][ T52] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 72.662089][ T52] EXT4-fs (loop5): This should not happen!! Data will be lost [ 72.662089][ T52] [ 72.672871][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.844620][ T6436] tipc: Enabling of bearer rejected, failed to enable media [ 72.859302][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 72.930170][ T6445] loop4: detected capacity change from 0 to 1024 [ 72.936887][ T6445] EXT4-fs: inline encryption not supported [ 72.948122][ T5905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.957169][ T6445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.008126][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.617591][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1237'. [ 73.855601][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 74.002737][ T6507] loop5: detected capacity change from 0 to 1024 [ 74.009738][ T6507] EXT4-fs: inline encryption not supported [ 74.019849][ T6507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.074351][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.265844][ T6522] netlink: 'syz.0.1249': attribute type 12 has an invalid length. [ 74.273771][ T6522] netlink: 'syz.0.1249': attribute type 29 has an invalid length. [ 74.281651][ T6522] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1249'. [ 74.290762][ T6522] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1249'. [ 74.292882][ T6483] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 74.318258][ T6483] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 74.407139][ T6547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6547 comm=syz.5.1259 [ 74.419731][ T6547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6547 comm=syz.5.1259 [ 74.584633][ T6564] SELinux: failed to load policy [ 74.701317][ T6575] random: crng reseeded on system resumption [ 74.767078][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1273'. [ 74.974552][ T6589] bridge0: entered allmulticast mode [ 74.986671][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 75.043704][ T6589] bridge_slave_1: left allmulticast mode [ 75.049509][ T6589] bridge_slave_1: left promiscuous mode [ 75.055267][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.230856][ T6557] Set syz1 is full, maxelem 65536 reached [ 75.240044][ T6589] bridge_slave_0: left allmulticast mode [ 75.245794][ T6589] bridge_slave_0: left promiscuous mode [ 75.251586][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.278753][ T6589] bridge0 (unregistering): left allmulticast mode [ 75.286504][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 75.286517][ T29] audit: type=1326 audit(1764195528.731:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 75.319246][ T29] audit: type=1326 audit(1764195528.771:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 75.352907][ T29] audit: type=1326 audit(1764195528.801:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 75.377324][ T29] audit: type=1326 audit(1764195528.801:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 75.400901][ T29] audit: type=1326 audit(1764195528.801:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69c35f749 code=0x7ffc0000 [ 75.494821][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 75.521494][ T29] audit: type=1400 audit(1764195528.971:1589): avc: denied { setopt } for pid=6604 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.550174][ T29] audit: type=1400 audit(1764195529.001:1590): avc: denied { connect } for pid=6604 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.590889][ T6609] loop5: detected capacity change from 0 to 512 [ 75.599158][ T29] audit: type=1400 audit(1764195529.041:1591): avc: denied { mounton } for pid=6608 comm="syz.5.1287" path="/124/file0" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.673570][ T6624] loop4: detected capacity change from 0 to 1024 [ 75.688765][ T6609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.689948][ T29] audit: type=1326 audit(1764195529.081:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bb0f749 code=0x7ffc0000 [ 75.701684][ T6609] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.724802][ T29] audit: type=1326 audit(1764195529.081:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6a6bb0f749 code=0x7ffc0000 [ 75.765186][ T6609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.781042][ T3429] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 75.788864][ T3429] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 75.799061][ T6624] EXT4-fs: Ignoring removed orlov option [ 75.810396][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.823027][ T3429] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 75.831136][ T3429] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.922659][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.116918][ T6657] ref_ctr_offset mismatch. inode: 0x94 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 76.203959][ T6666] syzkaller1: entered promiscuous mode [ 76.209595][ T6666] syzkaller1: entered allmulticast mode [ 76.308376][ T6675] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 76.961487][ T6676] ================================================================== [ 76.969613][ T6676] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 76.978224][ T6676] [ 76.980572][ T6676] write to 0xffff8881041169a8 of 8 bytes by task 6674 on cpu 1: [ 76.988209][ T6676] shmem_file_splice_read+0x470/0x600 [ 76.993600][ T6676] splice_direct_to_actor+0x26f/0x680 [ 76.998983][ T6676] do_splice_direct+0xda/0x150 [ 77.003777][ T6676] do_sendfile+0x380/0x650 [ 77.008232][ T6676] __x64_sys_sendfile64+0x105/0x150 [ 77.013452][ T6676] x64_sys_call+0x2bb4/0x3000 [ 77.018247][ T6676] do_syscall_64+0xd2/0x200 [ 77.022761][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.028660][ T6676] [ 77.030986][ T6676] write to 0xffff8881041169a8 of 8 bytes by task 6676 on cpu 0: [ 77.038620][ T6676] shmem_file_splice_read+0x470/0x600 [ 77.044002][ T6676] splice_direct_to_actor+0x26f/0x680 [ 77.049394][ T6676] do_splice_direct+0xda/0x150 [ 77.054172][ T6676] do_sendfile+0x380/0x650 [ 77.058615][ T6676] __x64_sys_sendfile64+0x105/0x150 [ 77.063843][ T6676] x64_sys_call+0x2bb4/0x3000 [ 77.068537][ T6676] do_syscall_64+0xd2/0x200 [ 77.073050][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.078950][ T6676] [ 77.081275][ T6676] value changed: 0x000000000000702f -> 0x0000000000007030 [ 77.088377][ T6676] [ 77.090698][ T6676] Reported by Kernel Concurrency Sanitizer on: [ 77.096854][ T6676] CPU: 0 UID: 0 PID: 6676 Comm: syz.1.1315 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.106590][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.116647][ T6676] ================================================================== [ 77.146387][ T6685] SELinux: failed to load policy