last executing test programs: 1.233996287s ago: executing program 1 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="528b4856d55340f7296f40fef4cd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.066546504s ago: executing program 0 (id=189): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.013606106s ago: executing program 3 (id=190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) 945.225499ms ago: executing program 0 (id=192): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 843.681113ms ago: executing program 1 (id=193): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 841.523813ms ago: executing program 3 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x7, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0xd1) 466.88804ms ago: executing program 2 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, r2, 0xed5b4695bfed557f, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x24001000) 445.569001ms ago: executing program 4 (id=209): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="81b641f1f34e2c10b6", 0x9}, {&(0x7f0000001800)="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", 0x6f1}], 0x2}, 0x0) 400.693262ms ago: executing program 4 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 387.035973ms ago: executing program 2 (id=211): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000f00)=""/136) 368.891984ms ago: executing program 3 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 353.275495ms ago: executing program 4 (id=213): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0x0, 0x0, {0x1, 0x1}, {0x80, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 346.638635ms ago: executing program 1 (id=214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') 324.741076ms ago: executing program 2 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 314.776876ms ago: executing program 3 (id=216): recvmsg(0xffffffffffffffff, 0x0, 0x20) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 299.221307ms ago: executing program 4 (id=217): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@abort}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x490, &(0x7f0000000f00)="$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") creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 268.924599ms ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000000140)='./file0\x00') 246.996429ms ago: executing program 2 (id=219): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500"], 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 209.175801ms ago: executing program 2 (id=220): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 174.784642ms ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000c40)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '-Z\x00', 0x14, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 169.541653ms ago: executing program 3 (id=222): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) 137.550304ms ago: executing program 4 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ac70"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 19.959589ms ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) 13.2922ms ago: executing program 4 (id=225): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) 0s ago: executing program 1 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 34.171829][ T29] audit: type=1400 audit(1764826133.024:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.194889][ T29] audit: type=1400 audit(1764826133.044:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.195923][ T3307] cgroup: Unknown subsys name 'net' [ 34.222859][ T29] audit: type=1400 audit(1764826133.074:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.360793][ T3307] cgroup: Unknown subsys name 'cpuset' [ 34.367074][ T3307] cgroup: Unknown subsys name 'rlimit' [ 34.498645][ T29] audit: type=1400 audit(1764826133.344:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.528790][ T29] audit: type=1400 audit(1764826133.344:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.549332][ T29] audit: type=1400 audit(1764826133.354:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.569690][ T29] audit: type=1400 audit(1764826133.354:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.590100][ T29] audit: type=1400 audit(1764826133.364:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.597774][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.614990][ T29] audit: type=1400 audit(1764826133.364:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.646762][ T29] audit: type=1400 audit(1764826133.374:71): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.671361][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.730327][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.758612][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.792440][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.808182][ T3332] chnl_net:caif_netlink_parms(): no params data found [ 36.850177][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.910919][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.918075][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.925439][ T3317] bridge_slave_0: entered allmulticast mode [ 36.931902][ T3317] bridge_slave_0: entered promiscuous mode [ 36.952458][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.959536][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.966710][ T3317] bridge_slave_1: entered allmulticast mode [ 36.973098][ T3317] bridge_slave_1: entered promiscuous mode [ 36.981881][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.988952][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.996291][ T3318] bridge_slave_0: entered allmulticast mode [ 37.002870][ T3318] bridge_slave_0: entered promiscuous mode [ 37.014391][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.021498][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.028584][ T3327] bridge_slave_0: entered allmulticast mode [ 37.035159][ T3327] bridge_slave_0: entered promiscuous mode [ 37.048706][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.055890][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.063021][ T3318] bridge_slave_1: entered allmulticast mode [ 37.069513][ T3318] bridge_slave_1: entered promiscuous mode [ 37.080480][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.087641][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.094790][ T3327] bridge_slave_1: entered allmulticast mode [ 37.101391][ T3327] bridge_slave_1: entered promiscuous mode [ 37.127099][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.134200][ T3332] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.141493][ T3332] bridge_slave_0: entered allmulticast mode [ 37.147934][ T3332] bridge_slave_0: entered promiscuous mode [ 37.160496][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.180049][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.187173][ T3332] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.194926][ T3332] bridge_slave_1: entered allmulticast mode [ 37.201430][ T3332] bridge_slave_1: entered promiscuous mode [ 37.208756][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.218989][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.229298][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.238437][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.245759][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.252914][ T3321] bridge_slave_0: entered allmulticast mode [ 37.259249][ T3321] bridge_slave_0: entered promiscuous mode [ 37.267259][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.291621][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.299004][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.306458][ T3321] bridge_slave_1: entered allmulticast mode [ 37.312859][ T3321] bridge_slave_1: entered promiscuous mode [ 37.320245][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.356220][ T3332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.366271][ T3317] team0: Port device team_slave_0 added [ 37.372870][ T3327] team0: Port device team_slave_0 added [ 37.389067][ T3332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.399124][ T3317] team0: Port device team_slave_1 added [ 37.405500][ T3327] team0: Port device team_slave_1 added [ 37.412455][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.422599][ T3318] team0: Port device team_slave_0 added [ 37.444009][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.453969][ T3318] team0: Port device team_slave_1 added [ 37.485023][ T3332] team0: Port device team_slave_0 added [ 37.490943][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.497900][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.523923][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.535099][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.542098][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.568060][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.589253][ T3332] team0: Port device team_slave_1 added [ 37.595164][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.602139][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.628069][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.639106][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.646073][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.672030][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.683645][ T3321] team0: Port device team_slave_0 added [ 37.689550][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.696546][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.722483][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.744961][ T3321] team0: Port device team_slave_1 added [ 37.756412][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.763395][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.789417][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.806595][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.813652][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.839667][ T3332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.864391][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.871372][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.897384][ T3332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.914591][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.921617][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.947629][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.972183][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.979178][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.005103][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.023309][ T3317] hsr_slave_0: entered promiscuous mode [ 38.029229][ T3317] hsr_slave_1: entered promiscuous mode [ 38.045638][ T3327] hsr_slave_0: entered promiscuous mode [ 38.051669][ T3327] hsr_slave_1: entered promiscuous mode [ 38.057461][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 38.063225][ T3327] Cannot create hsr debugfs directory [ 38.083765][ T3318] hsr_slave_0: entered promiscuous mode [ 38.089802][ T3318] hsr_slave_1: entered promiscuous mode [ 38.095809][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.101578][ T3318] Cannot create hsr debugfs directory [ 38.131623][ T3332] hsr_slave_0: entered promiscuous mode [ 38.137745][ T3332] hsr_slave_1: entered promiscuous mode [ 38.143752][ T3332] debugfs: 'hsr0' already exists in 'hsr' [ 38.149489][ T3332] Cannot create hsr debugfs directory [ 38.178217][ T3321] hsr_slave_0: entered promiscuous mode [ 38.184538][ T3321] hsr_slave_1: entered promiscuous mode [ 38.190589][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.196323][ T3321] Cannot create hsr debugfs directory [ 38.385344][ T3327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.394656][ T3327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.412043][ T3327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.424268][ T3327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.433227][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.443197][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.455985][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.467530][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.490906][ T3332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.503217][ T3332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.516296][ T3332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.531101][ T3332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.563760][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.576238][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.587816][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.597316][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.631240][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.640758][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.649961][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.663276][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.692841][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.711618][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.733388][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.756238][ T1846] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.763327][ T1846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.772629][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.779737][ T1846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.789147][ T3332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.798061][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.813647][ T1846] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.820717][ T1846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.840319][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.847379][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.876363][ T3332] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.896348][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.906270][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.913495][ T886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.932097][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.939205][ T1846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.951233][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.967826][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.984662][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.009412][ T3332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.020231][ T3332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.045123][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.052633][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.065951][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.073162][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.085827][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.093373][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.102657][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.109822][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.134643][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.180463][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.200846][ T3332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.335569][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.367222][ T3327] veth0_vlan: entered promiscuous mode [ 39.373312][ T3318] veth0_vlan: entered promiscuous mode [ 39.387168][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.407840][ T3327] veth1_vlan: entered promiscuous mode [ 39.422131][ T3318] veth1_vlan: entered promiscuous mode [ 39.454789][ T3327] veth0_macvtap: entered promiscuous mode [ 39.470095][ T3327] veth1_macvtap: entered promiscuous mode [ 39.486822][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.498301][ T3318] veth0_macvtap: entered promiscuous mode [ 39.512240][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.530439][ T3318] veth1_macvtap: entered promiscuous mode [ 39.544524][ T1601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.554314][ T3317] veth0_vlan: entered promiscuous mode [ 39.566203][ T1601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.578657][ T1601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.596496][ T886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.607933][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.618028][ T3332] veth0_vlan: entered promiscuous mode [ 39.624777][ T3317] veth1_vlan: entered promiscuous mode [ 39.637818][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.652724][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 39.652737][ T29] audit: type=1400 audit(1764826138.504:85): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/root/syzkaller.5r9Pis/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.684405][ T29] audit: type=1400 audit(1764826138.504:86): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.686037][ T3321] veth0_vlan: entered promiscuous mode [ 39.706489][ T29] audit: type=1400 audit(1764826138.504:87): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/root/syzkaller.5r9Pis/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.729895][ T3317] veth0_macvtap: entered promiscuous mode [ 39.737000][ T29] audit: type=1400 audit(1764826138.504:88): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.764519][ T29] audit: type=1400 audit(1764826138.504:89): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/root/syzkaller.5r9Pis/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.791249][ T29] audit: type=1400 audit(1764826138.504:90): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/root/syzkaller.5r9Pis/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.818644][ T29] audit: type=1400 audit(1764826138.504:91): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.838277][ T29] audit: type=1400 audit(1764826138.544:92): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.863687][ T29] audit: type=1400 audit(1764826138.544:93): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="gadgetfs" ino=4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.867583][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.896919][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.907455][ T3327] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.922728][ T3332] veth1_vlan: entered promiscuous mode [ 39.929725][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.943470][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.952575][ T3317] veth1_macvtap: entered promiscuous mode [ 39.962064][ T3321] veth1_vlan: entered promiscuous mode [ 39.971767][ T29] audit: type=1400 audit(1764826138.824:94): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.978217][ T3332] veth0_macvtap: entered promiscuous mode [ 40.024966][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.036356][ T3332] veth1_macvtap: entered promiscuous mode [ 40.048693][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.072359][ T1846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088109][ T1846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.097870][ T3321] veth0_macvtap: entered promiscuous mode [ 40.110637][ T1846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.119397][ T1846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.140979][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.153029][ T3321] veth1_macvtap: entered promiscuous mode [ 40.169525][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.191576][ T1846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.206757][ T1846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.221752][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.237086][ T1846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.247835][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.261117][ T1601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.282434][ T1601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.318045][ T1601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.358163][ T1601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.402389][ T1601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.888818][ T3558] loop1: detected capacity change from 0 to 1024 [ 40.967040][ T3558] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 41.008955][ T3558] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.160371][ T3558] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.170634][ T3558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.177176][ T3558] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.23: Inode bitmap for bg 0 marked uninitialized [ 41.177356][ T3565] loop3: detected capacity change from 0 to 128 [ 41.191044][ T3558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.215411][ T3558] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 41.235785][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.449687][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.449687][ T1846] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 41.475011][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 41.488177][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.488177][ T1846] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 41.523072][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.523072][ T1846] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 41.570898][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.570898][ T1846] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 41.608660][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.608660][ T1846] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 41.640312][ T3593] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 41.652329][ T3592] loop0: detected capacity change from 0 to 2048 [ 41.658853][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.658853][ T1846] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 41.672841][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.672841][ T1846] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 41.692112][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.692112][ T1846] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 41.709939][ T3573] GPT:first_usable_lbas don't match. [ 41.715373][ T3573] GPT:34 != 290 [ 41.718912][ T3573] GPT: Use GNU Parted to correct GPT errors. [ 41.725125][ T3573] loop0: p1 p2 p3 [ 41.735070][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.735070][ T1846] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 41.770096][ T1846] kworker/u8:12: attempt to access beyond end of device [ 41.770096][ T1846] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 41.802710][ T3592] GPT:first_usable_lbas don't match. [ 41.808076][ T3592] GPT:34 != 290 [ 41.811626][ T3592] GPT: Use GNU Parted to correct GPT errors. [ 41.817877][ T3592] loop0: p1 p2 p3 [ 41.872503][ T3614] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 41.924863][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.928083][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 41.949255][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.017065][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.029421][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.040929][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.072063][ T3633] netlink: 92 bytes leftover after parsing attributes in process `syz.1.55'. [ 42.121251][ T3633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 42.274566][ T3650] loop3: detected capacity change from 0 to 256 [ 42.283934][ T3650] ======================================================= [ 42.283934][ T3650] WARNING: The mand mount option has been deprecated and [ 42.283934][ T3650] and is ignored by this kernel. Remove the mand [ 42.283934][ T3650] option from the mount to silence this warning. [ 42.283934][ T3650] ======================================================= [ 42.443399][ T3513] kernel write not supported for file /uhid (pid: 3513 comm: kworker/0:8) [ 42.635469][ T3678] loop3: detected capacity change from 0 to 8192 [ 42.780472][ T3688] loop0: detected capacity change from 0 to 8192 [ 42.794809][ T3699] netlink: 'syz.4.88': attribute type 29 has an invalid length. [ 42.826336][ T3699] netlink: 'syz.4.88': attribute type 29 has an invalid length. [ 42.876292][ T3699] netlink: 500 bytes leftover after parsing attributes in process `syz.4.88'. [ 42.887448][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 42.955679][ T3712] capability: warning: `syz.2.93' uses deprecated v2 capabilities in a way that may be insecure [ 42.973359][ T3716] unsupported nla_type 52263 [ 43.050240][ T3724] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 43.298816][ T3758] process 'syz.2.115' launched './file0' with NULL argv: empty string added [ 43.318547][ T3748] syz.3.110 (3748) used greatest stack depth: 10128 bytes left [ 43.355524][ T3760] syz.1.117 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.499002][ T3778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.125'. [ 43.559067][ T3785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 43.659084][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 43.696798][ T3804] loop4: detected capacity change from 0 to 512 [ 43.717971][ T3804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.727369][ T3810] loop1: detected capacity change from 0 to 1024 [ 43.740050][ T3809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.781287][ T3810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.794012][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.824971][ T3804] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.886405][ T3829] openvswitch: netlink: Missing key (keys=40, expected=80) [ 43.894441][ T3822] SELinux: failed to load policy [ 43.900124][ T3804] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.138: bg 0: block 18: invalid block bitmap [ 43.965780][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.971515][ T3836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 43.993141][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.026645][ T3841] loop1: detected capacity change from 0 to 128 [ 44.044553][ T3842] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 44.059426][ T3836] vlan2: entered allmulticast mode [ 44.069893][ T3841] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.083577][ T3841] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.137370][ T3841] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.1.152: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 44.159505][ T3841] EXT4-fs (loop1): Remounting filesystem read-only [ 44.181062][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.437256][ T3879] loop2: detected capacity change from 0 to 1024 [ 44.477140][ T3879] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.508436][ T3879] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.542089][ T3879] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.570829][ T3879] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.172: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.605425][ T3879] EXT4-fs (loop2): 1 orphan inode deleted [ 44.611825][ T3879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.640149][ T3896] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 44.647922][ T3896] ipvlan0: entered allmulticast mode [ 44.653608][ T3896] veth0_vlan: entered allmulticast mode [ 44.669726][ T3896] team0: Device ipvlan0 failed to register rx_handler [ 44.677917][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.721712][ T3904] loop4: detected capacity change from 0 to 512 [ 44.732666][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 44.732691][ T29] audit: type=1400 audit(1764826143.584:307): avc: denied { name_connect } for pid=3901 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 44.762151][ T3904] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.775418][ T3904] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.801787][ T3903] sctp: [Deprecated]: syz.2.183 (pid 3903) Use of int in maxseg socket option. [ 44.801787][ T3903] Use struct sctp_assoc_value instead [ 44.826423][ T29] audit: type=1400 audit(1764826143.654:308): avc: denied { shutdown } for pid=3901 comm="syz.2.183" lport=43468 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.861109][ T3904] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.184: inode has both inline data and extents flags [ 44.874643][ T3904] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.184: couldn't read orphan inode 15 (err -117) [ 44.889598][ T3904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.916311][ T29] audit: type=1400 audit(1764826143.764:309): avc: denied { setopt } for pid=3913 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.939018][ T3904] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.184: path /39/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 44.971575][ T29] audit: type=1400 audit(1764826143.794:310): avc: denied { setattr } for pid=3902 comm="syz.4.184" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.972570][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.021409][ T29] audit: type=1326 audit(1764826143.864:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cd97f749 code=0x7ffc0000 [ 45.044779][ T29] audit: type=1326 audit(1764826143.864:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cd97f749 code=0x7ffc0000 [ 45.068608][ T29] audit: type=1326 audit(1764826143.864:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21cd97f749 code=0x7ffc0000 [ 45.092642][ T29] audit: type=1326 audit(1764826143.864:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cd97f749 code=0x7ffc0000 [ 45.115999][ T29] audit: type=1326 audit(1764826143.864:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cd97f749 code=0x7ffc0000 [ 45.139728][ T29] audit: type=1326 audit(1764826143.864:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21cd97f749 code=0x7ffc0000 [ 45.276467][ T3933] syz.4.198 (3933) used greatest stack depth: 9960 bytes left [ 45.303128][ T3935] sd 0:0:1:0: device reset [ 45.361400][ T3942] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 45.682633][ T3972] loop4: detected capacity change from 0 to 512 [ 45.713630][ T3972] EXT4-fs: Ignoring removed orlov option [ 45.721386][ T3972] EXT4-fs error (device loop4): ext4_iget_extra_inode:5071: inode #15: comm syz.4.217: corrupted in-inode xattr: bad e_name length [ 45.736708][ T3970] SELinux: failed to load policy [ 45.776934][ T3972] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.217: couldn't read orphan inode 15 (err -117) [ 45.796310][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.828068][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.845026][ T3983] loop3: detected capacity change from 0 to 128 [ 45.868757][ T3983] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.887881][ T3983] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.940301][ T3618] ================================================================== [ 45.948427][ T3618] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 45.955129][ T3618] [ 45.957469][ T3618] write to 0xffff88811b07f610 of 8 bytes by task 3007 on cpu 1: [ 45.965120][ T3618] __dentry_kill+0x142/0x4b0 [ 45.969738][ T3618] dput+0x5e/0xd0 [ 45.973381][ T3618] lookup_one_qstr_excl+0x15a/0x250 [ 45.978594][ T3618] do_unlinkat+0x148/0x4b0 [ 45.983029][ T3618] __x64_sys_unlink+0x2e/0x40 [ 45.987725][ T3618] x64_sys_call+0x2f48/0x3000 [ 45.992413][ T3618] do_syscall_64+0xd8/0x2a0 [ 45.996934][ T3618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.002833][ T3618] [ 46.005160][ T3618] read to 0xffff88811b07f610 of 8 bytes by task 3618 on cpu 0: [ 46.012708][ T3618] fast_dput+0x5f/0x2c0 [ 46.016868][ T3618] dput+0x24/0xd0 [ 46.020506][ T3618] do_unlinkat+0x202/0x4b0 [ 46.024937][ T3618] __x64_sys_unlink+0x2e/0x40 [ 46.029632][ T3618] x64_sys_call+0x2f48/0x3000 [ 46.034323][ T3618] do_syscall_64+0xd8/0x2a0 [ 46.038836][ T3618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.044734][ T3618] [ 46.047059][ T3618] value changed: 0xffff8882374faf60 -> 0x0000000000000000 [ 46.054164][ T3618] [ 46.056496][ T3618] Reported by Kernel Concurrency Sanitizer on: [ 46.062659][ T3618] CPU: 0 UID: 0 PID: 3618 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.071982][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.082064][ T3618] ================================================================== [ 46.109703][ T3990] netlink: 3 bytes leftover after parsing attributes in process `syz.1.226'. [ 46.119318][ T3990] 0ªX¹¦À: renamed from caif0 [ 46.120543][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.145295][ T3990] 0ªX¹¦À: entered allmulticast mode [ 46.150657][ T3990] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check.