last executing test programs: 1.591991631s ago: executing program 4 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x5f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.519649747s ago: executing program 4 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.512535277s ago: executing program 3 (id=1031): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r2, 0x407, 0x6) 1.446961883s ago: executing program 3 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.443757563s ago: executing program 4 (id=1034): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) write$qrtrtun(r0, &(0x7f0000000180)="04546d752e3e", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1.411920745s ago: executing program 3 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 1.367996829s ago: executing program 3 (id=1040): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000100020603000000000000000000000000000c000300686173683a6970000900020073797a3000000000050004"], 0x50}}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001800800"], 0x80}}, 0x0) mlockall(0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.3628013s ago: executing program 4 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) 1.251426318s ago: executing program 4 (id=1043): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.034890166s ago: executing program 0 (id=1049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2070bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xffff}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffffffffffc6b, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x40044) 861.2195ms ago: executing program 0 (id=1053): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 821.209343ms ago: executing program 2 (id=1054): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 773.374967ms ago: executing program 2 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 723.831901ms ago: executing program 3 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x80, 0x0) 723.184971ms ago: executing program 0 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 717.826532ms ago: executing program 2 (id=1058): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 700.817303ms ago: executing program 3 (id=1059): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x709, 0xe) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write(r0, 0x0, 0x0) 645.692678ms ago: executing program 0 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000f1ffffff0000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 645.045788ms ago: executing program 0 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000066c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {0x10, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 602.873601ms ago: executing program 2 (id=1062): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 602.259151ms ago: executing program 2 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 582.496143ms ago: executing program 0 (id=1064): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d", 0x11) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000200)) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 582.325132ms ago: executing program 2 (id=1065): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) syz_open_dev$loop(0x0, 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 392.632938ms ago: executing program 4 (id=1071): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 296.447796ms ago: executing program 1 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 261.222479ms ago: executing program 1 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 236.347641ms ago: executing program 1 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000fedbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x20000000) 198.267764ms ago: executing program 1 (id=1077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x90) 572.94µs ago: executing program 1 (id=1078): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6=@local, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3c}}, 0xf0}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 0s ago: executing program 1 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 23.293605][ T29] audit: type=1400 audit(1755120511.591:62): avc: denied { mounton } for pid=3258 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.294484][ T3258] cgroup: Unknown subsys name 'net' [ 23.317115][ T29] audit: type=1400 audit(1755120511.591:63): avc: denied { mount } for pid=3258 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.345549][ T29] audit: type=1400 audit(1755120511.621:64): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.475603][ T3258] cgroup: Unknown subsys name 'cpuset' [ 23.481780][ T3258] cgroup: Unknown subsys name 'rlimit' [ 23.631381][ T29] audit: type=1400 audit(1755120511.931:65): avc: denied { setattr } for pid=3258 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.655591][ T29] audit: type=1400 audit(1755120511.931:66): avc: denied { create } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.670690][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.677381][ T29] audit: type=1400 audit(1755120511.931:67): avc: denied { write } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.707153][ T29] audit: type=1400 audit(1755120511.931:68): avc: denied { read } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.729113][ T29] audit: type=1400 audit(1755120511.941:69): avc: denied { mounton } for pid=3258 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.737233][ T3258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.754760][ T29] audit: type=1400 audit(1755120511.941:70): avc: denied { mount } for pid=3258 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.754787][ T29] audit: type=1400 audit(1755120511.991:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.523408][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 25.555046][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 25.628204][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.635992][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.643398][ T3300] bridge_slave_0: entered allmulticast mode [ 25.649909][ T3300] bridge_slave_0: entered promiscuous mode [ 25.659234][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.666829][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.674866][ T3300] bridge_slave_1: entered allmulticast mode [ 25.681557][ T3300] bridge_slave_1: entered promiscuous mode [ 25.688139][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.695367][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.702907][ T3299] bridge_slave_0: entered allmulticast mode [ 25.709500][ T3299] bridge_slave_0: entered promiscuous mode [ 25.717066][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.724513][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.732250][ T3299] bridge_slave_1: entered allmulticast mode [ 25.739427][ T3299] bridge_slave_1: entered promiscuous mode [ 25.766095][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.781924][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.806141][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.816745][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.852147][ T3299] team0: Port device team_slave_0 added [ 25.860704][ T3299] team0: Port device team_slave_1 added [ 25.876507][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 25.895363][ T3300] team0: Port device team_slave_0 added [ 25.903116][ T3300] team0: Port device team_slave_1 added [ 25.924821][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.931911][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.959062][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.982992][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.990267][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.018643][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.038753][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.046121][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.073701][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.087496][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.095101][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.121762][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.141501][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.168677][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.175781][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.183233][ T3303] bridge_slave_0: entered allmulticast mode [ 26.190064][ T3303] bridge_slave_0: entered promiscuous mode [ 26.199240][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.206504][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.213953][ T3303] bridge_slave_1: entered allmulticast mode [ 26.220859][ T3303] bridge_slave_1: entered promiscuous mode [ 26.234652][ T3299] hsr_slave_0: entered promiscuous mode [ 26.240940][ T3299] hsr_slave_1: entered promiscuous mode [ 26.260736][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.281758][ T3300] hsr_slave_0: entered promiscuous mode [ 26.288206][ T3300] hsr_slave_1: entered promiscuous mode [ 26.294300][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 26.300292][ T3300] Cannot create hsr debugfs directory [ 26.334115][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.358686][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.400832][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.408041][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.415667][ T3313] bridge_slave_0: entered allmulticast mode [ 26.422205][ T3313] bridge_slave_0: entered promiscuous mode [ 26.429300][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.436643][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.443888][ T3315] bridge_slave_0: entered allmulticast mode [ 26.450633][ T3315] bridge_slave_0: entered promiscuous mode [ 26.466219][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.473675][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.481150][ T3313] bridge_slave_1: entered allmulticast mode [ 26.488789][ T3313] bridge_slave_1: entered promiscuous mode [ 26.495719][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.503358][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.511695][ T3315] bridge_slave_1: entered allmulticast mode [ 26.518308][ T3315] bridge_slave_1: entered promiscuous mode [ 26.525363][ T3303] team0: Port device team_slave_0 added [ 26.554172][ T3303] team0: Port device team_slave_1 added [ 26.572897][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.583662][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.618752][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.633876][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.643942][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.651673][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.678645][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.710109][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.718019][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.745187][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.763841][ T3313] team0: Port device team_slave_0 added [ 26.771218][ T3313] team0: Port device team_slave_1 added [ 26.777940][ T3315] team0: Port device team_slave_0 added [ 26.786660][ T3315] team0: Port device team_slave_1 added [ 26.817572][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.824789][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.852159][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.863739][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.871254][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.898945][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.917912][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.925518][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.952690][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.965146][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.972106][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.000393][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.019697][ T3303] hsr_slave_0: entered promiscuous mode [ 27.026294][ T3303] hsr_slave_1: entered promiscuous mode [ 27.032832][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 27.039240][ T3303] Cannot create hsr debugfs directory [ 27.074855][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.098865][ T3313] hsr_slave_0: entered promiscuous mode [ 27.106423][ T3313] hsr_slave_1: entered promiscuous mode [ 27.112570][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.118491][ T3313] Cannot create hsr debugfs directory [ 27.124221][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.139862][ T3315] hsr_slave_0: entered promiscuous mode [ 27.146265][ T3315] hsr_slave_1: entered promiscuous mode [ 27.152421][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.158729][ T3315] Cannot create hsr debugfs directory [ 27.172708][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.195658][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.259401][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.269541][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.289032][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.312414][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.350339][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.360349][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.370511][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.388961][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.433229][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.448729][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.459946][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.470816][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.479839][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.488855][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.505268][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.514140][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.532876][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.547271][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.559606][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.567156][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.578445][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.588798][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.606720][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.613987][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.627780][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.635974][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.643406][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.673637][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.681088][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.698143][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.706440][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.713604][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.741625][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.763589][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.771072][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.787857][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.795129][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.814078][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.832886][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.864075][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.872724][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.880978][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.898399][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.906065][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.915688][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.923177][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.937863][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.950850][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.958088][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.970289][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.977498][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.100569][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.143191][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.162642][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.178703][ T3300] veth0_vlan: entered promiscuous mode [ 28.209437][ T3299] veth0_vlan: entered promiscuous mode [ 28.223305][ T3300] veth1_vlan: entered promiscuous mode [ 28.237593][ T3299] veth1_vlan: entered promiscuous mode [ 28.276332][ T3313] veth0_vlan: entered promiscuous mode [ 28.289811][ T3299] veth0_macvtap: entered promiscuous mode [ 28.299094][ T3313] veth1_vlan: entered promiscuous mode [ 28.305904][ T3300] veth0_macvtap: entered promiscuous mode [ 28.313666][ T3300] veth1_macvtap: entered promiscuous mode [ 28.324261][ T3299] veth1_macvtap: entered promiscuous mode [ 28.339999][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.354134][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.373367][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.392538][ T3315] veth0_vlan: entered promiscuous mode [ 28.400652][ T2007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.410465][ T2007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.421953][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.429679][ T3303] veth0_vlan: entered promiscuous mode [ 28.436510][ T3315] veth1_vlan: entered promiscuous mode [ 28.442864][ T2007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.452176][ T3313] veth0_macvtap: entered promiscuous mode [ 28.465819][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.465832][ T29] audit: type=1400 audit(1755120516.771:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.KV0eQr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.477599][ T3315] veth0_macvtap: entered promiscuous mode [ 28.503727][ T29] audit: type=1400 audit(1755120516.771:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.512841][ T2007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.527700][ T29] audit: type=1400 audit(1755120516.771:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.KV0eQr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.538754][ T3313] veth1_macvtap: entered promiscuous mode [ 28.562834][ T29] audit: type=1400 audit(1755120516.771:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.591159][ T29] audit: type=1400 audit(1755120516.771:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.KV0eQr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.618476][ T29] audit: type=1400 audit(1755120516.771:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.KV0eQr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.647211][ T29] audit: type=1400 audit(1755120516.771:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.667960][ T29] audit: type=1400 audit(1755120516.801:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.694123][ T29] audit: type=1400 audit(1755120516.801:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.705568][ T3303] veth1_vlan: entered promiscuous mode [ 28.724738][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.736095][ T2007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.755693][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.765995][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.774054][ T29] audit: type=1400 audit(1755120517.071:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.807910][ T3315] veth1_macvtap: entered promiscuous mode [ 28.815454][ T2007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.836036][ T2007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.865220][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.874552][ T2007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.884682][ T3303] veth0_macvtap: entered promiscuous mode [ 28.894818][ T2007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.912600][ T3303] veth1_macvtap: entered promiscuous mode [ 28.926105][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.945621][ T2007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.960150][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.979175][ T2007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.003753][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.013301][ T2007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.033072][ T2007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.067725][ T2007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.081096][ T2007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.118746][ T2007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.146798][ T2007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.164505][ T2007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.182359][ T2007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.192036][ T2007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.208812][ T3496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.410019][ T3524] vhci_hcd: invalid port number 96 [ 29.415698][ T3524] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 29.438367][ T3526] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 29.449149][ T3526] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 29.467753][ T3526] syz.1.23 (3526) used greatest stack depth: 10640 bytes left [ 29.478482][ T3528] loop1: detected capacity change from 0 to 512 [ 29.498569][ T3528] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 29.513861][ T3528] EXT4-fs (loop1): mount failed [ 29.540465][ T3533] 9pnet_fd: Insufficient options for proto=fd [ 29.898527][ T3566] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 30.022533][ T3569] batman_adv: batadv0: Adding interface: ipvlan2 [ 30.029365][ T3569] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.055495][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.066943][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.102862][ T3569] batman_adv: batadv0: Interface activated: ipvlan2 [ 30.181741][ T3578] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 30.521995][ T3607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3607 comm=syz.0.54 [ 30.534903][ T3607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3607 comm=syz.0.54 [ 30.739187][ T3619] openvswitch: netlink: Message has 6 unknown bytes. [ 30.841327][ T3625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 30.858523][ T3623] bridge_slave_0: left allmulticast mode [ 30.864322][ T3623] bridge_slave_0: left promiscuous mode [ 30.870510][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.886691][ T3623] bridge_slave_1: left allmulticast mode [ 30.892641][ T3623] bridge_slave_1: left promiscuous mode [ 30.898918][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.935152][ T3623] bond0: (slave bond_slave_0): Releasing backup interface [ 30.947220][ T3630] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 30.955142][ T3630] netlink: 224 bytes leftover after parsing attributes in process `syz.2.64'. [ 30.966877][ T3623] bond0: (slave bond_slave_1): Releasing backup interface [ 30.978917][ T3623] team0: Port device team_slave_0 removed [ 30.987635][ T3623] team0: Port device team_slave_1 removed [ 30.994802][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.002591][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.011407][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.019714][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.255864][ T3649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 31.304642][ T3656] 9pnet_fd: Insufficient options for proto=fd [ 31.322860][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 33.545106][ T29] kauditd_printk_skb: 2251 callbacks suppressed [ 33.545121][ T29] audit: type=1326 audit(1755120521.841:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.575625][ T29] audit: type=1326 audit(1755120521.841:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.599693][ T29] audit: type=1326 audit(1755120521.841:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.623467][ T29] audit: type=1326 audit(1755120521.841:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.647159][ T29] audit: type=1326 audit(1755120521.841:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.671521][ T29] audit: type=1326 audit(1755120521.841:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.695876][ T29] audit: type=1326 audit(1755120521.841:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.720166][ T29] audit: type=1326 audit(1755120521.841:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.744128][ T29] audit: type=1326 audit(1755120521.841:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 33.768495][ T29] audit: type=1326 audit(1755120521.841:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dbd3cadd9 code=0x7ffc0000 [ 35.625783][ T3670] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 35.740558][ T3697] 9pnet_fd: Insufficient options for proto=fd [ 36.024834][ T3354] kernel write not supported for file /52/clear_refs (pid: 3354 comm: kworker/0:2) [ 36.026392][ T3749] loop2: detected capacity change from 0 to 512 [ 36.041871][ T3749] EXT4-fs: Ignoring removed oldalloc option [ 36.051732][ T3749] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.065898][ T3749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.105395][ T3743] Falling back ldisc for ttyS3. [ 36.121967][ T3749] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.156524][ T3749] EXT4-fs (loop2): 1 truncate cleaned up [ 36.174356][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.308490][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.317835][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.318154][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 36.332504][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.371191][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.380372][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.395639][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 36.428840][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.492729][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.502250][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 36.642470][ T3843] loop0: detected capacity change from 0 to 128 [ 36.652552][ T3843] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.671037][ T3845] rdma_op ffff88811b679980 conn xmit_rdma 0000000000000000 [ 36.683444][ T3843] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.687288][ T3834] syz.3.140 (3834) used greatest stack depth: 10176 bytes left [ 36.886204][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.976759][ T3867] loop2: detected capacity change from 0 to 1024 [ 37.007476][ T3867] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.019467][ T3867] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.065495][ T3867] JBD2: no valid journal superblock found [ 37.071814][ T3867] EXT4-fs (loop2): Could not load journal inode [ 37.354579][ T3907] tap0: tun_chr_ioctl cmd 1074025676 [ 37.361150][ T3907] tap0: owner set to 60928 [ 37.399343][ T3912] process 'syz.2.175' launched '/dev/fd/6' with NULL argv: empty string added [ 37.521005][ T3924] bridge0: port 3(vlan2) entered blocking state [ 37.527675][ T3924] bridge0: port 3(vlan2) entered disabled state [ 37.540417][ T3924] vlan2: entered allmulticast mode [ 37.545943][ T3924] bridge0: entered allmulticast mode [ 37.552886][ T3924] vlan2: left allmulticast mode [ 37.558054][ T3924] bridge0: left allmulticast mode [ 37.585125][ T3926] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 37.671315][ T3939] Zero length message leads to an empty skb [ 38.263392][ T4004] netlink: 'syz.3.220': attribute type 29 has an invalid length. [ 38.286520][ T4004] netlink: 'syz.3.220': attribute type 29 has an invalid length. [ 38.318740][ T4008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4008 comm=syz.1.221 [ 38.427991][ T4030] IPv6: Can't replace route, no match found [ 38.490062][ T4038] IPVS: stopping master sync thread 4039 ... [ 38.499814][ T4039] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 38.570033][ T29] kauditd_printk_skb: 1133 callbacks suppressed [ 38.570048][ T29] audit: type=1400 audit(1755120526.871:3484): avc: denied { bind } for pid=4051 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.577654][ T4050] syz.0.240 uses obsolete (PF_INET,SOCK_PACKET) [ 38.617496][ T29] audit: type=1326 audit(1755120526.921:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388e86ebe9 code=0x7ffc0000 [ 38.649209][ T29] audit: type=1326 audit(1755120526.951:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f388e86ebe9 code=0x7ffc0000 [ 38.673728][ T29] audit: type=1326 audit(1755120526.951:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388e86ebe9 code=0x7ffc0000 [ 38.698163][ T29] audit: type=1326 audit(1755120526.951:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388e86ebe9 code=0x7ffc0000 [ 38.864496][ T29] audit: type=1326 audit(1755120527.151:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 38.889689][ T29] audit: type=1326 audit(1755120527.151:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 38.913649][ T29] audit: type=1326 audit(1755120527.161:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 38.938081][ T29] audit: type=1326 audit(1755120527.161:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 38.962032][ T29] audit: type=1326 audit(1755120527.161:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 39.023008][ T4088] sd 0:0:1:0: device reset [ 39.195546][ T4102] loop1: detected capacity change from 0 to 512 [ 39.205869][ T4102] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.219559][ T4102] EXT4-fs (loop1): invalid journal inode [ 39.233271][ T4102] EXT4-fs (loop1): can't get journal size [ 39.252559][ T4102] EXT4-fs (loop1): 1 truncate cleaned up [ 39.273009][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.317286][ T4112] loop0: detected capacity change from 0 to 1024 [ 39.331811][ T4102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.352714][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.380580][ T4116] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 39.406355][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.467549][ T4118] loop1: detected capacity change from 0 to 512 [ 39.524497][ T4118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.553750][ T4118] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.586333][ T4118] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.272: bg 0: block 64: padding at end of block bitmap is not set [ 39.675501][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.040682][ T4159] loop1: detected capacity change from 0 to 8192 [ 40.075791][ T4165] IPVS: Error joining to the multicast group [ 40.096296][ T4159] loop1: p1 < > p2 p4 [ 40.100428][ T4159] loop1: partition table partially beyond EOD, truncated [ 40.127804][ T4159] loop1: p1 start 408832 is beyond EOD, truncated [ 40.134544][ T4159] loop1: p2 size 8388352 extends beyond EOD, truncated [ 40.268240][ T4181] can0: slcan on ttyS3. [ 40.293983][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.297921][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 40.336463][ T4180] can0 (unregistered): slcan off ttyS3. [ 40.383435][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 40.398444][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.426404][ T4198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4198 comm=syz.1.300 [ 40.439119][ T4198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4198 comm=syz.1.300 [ 40.979045][ T4254] lo speed is unknown, defaulting to 1000 [ 40.999202][ T4257] netlink: 'syz.2.311': attribute type 12 has an invalid length. [ 41.007918][ T4257] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 41.016744][ T4254] lo speed is unknown, defaulting to 1000 [ 41.017397][ T4257] netlink: 'syz.2.311': attribute type 12 has an invalid length. [ 41.031518][ T4257] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 41.039985][ T4254] lo speed is unknown, defaulting to 1000 [ 41.054632][ T4254] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.079687][ T4254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.092491][ T4254] lo speed is unknown, defaulting to 1000 [ 41.109505][ T4254] lo speed is unknown, defaulting to 1000 [ 41.117965][ T4254] lo speed is unknown, defaulting to 1000 [ 41.124345][ T4254] lo speed is unknown, defaulting to 1000 [ 41.130745][ T4254] lo speed is unknown, defaulting to 1000 [ 41.297445][ T4289] loop1: detected capacity change from 0 to 8192 [ 41.323347][ T4289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.379784][ T4289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.480022][ T4289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.528293][ T4289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.573703][ T4317] loop0: detected capacity change from 0 to 8192 [ 41.581674][ T4317] ======================================================= [ 41.581674][ T4317] WARNING: The mand mount option has been deprecated and [ 41.581674][ T4317] and is ignored by this kernel. Remove the mand [ 41.581674][ T4317] option from the mount to silence this warning. [ 41.581674][ T4317] ======================================================= [ 41.619231][ T4310] loop2: detected capacity change from 0 to 32768 [ 41.643023][ T4317] syz.0.342: attempt to access beyond end of device [ 41.643023][ T4317] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 41.645545][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.667146][ T4317] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.681014][ T4317] FAT-fs (loop0): Filesystem has been set read-only [ 41.689448][ T4317] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.697841][ T4317] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.721594][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.731150][ T4310] loop2: p1 p3 < > [ 41.735691][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.762011][ T4320] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 41.762011][ T4320] program syz.3.344 not setting count and/or reply_len properly [ 41.768748][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.870704][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 41.933892][ T4338] netlink: zone id is out of range [ 41.934196][ T4335] bond1: entered promiscuous mode [ 41.944673][ T4335] bond1: entered allmulticast mode [ 41.951145][ T4335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.961800][ T4335] bond1 (unregistering): Released all slaves [ 41.974297][ T4341] loop2: detected capacity change from 0 to 128 [ 42.087778][ T4355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4355 comm=syz.0.359 [ 42.611805][ T4388] loop4: detected capacity change from 0 to 256 [ 42.634018][ T4388] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.720416][ T4396] vlan2: entered allmulticast mode [ 42.802457][ T4404] lo speed is unknown, defaulting to 1000 [ 42.957752][ T4425] SELinux: Context Ü is not valid (left unmapped). [ 43.093913][ T4446] loop4: detected capacity change from 0 to 512 [ 43.135198][ T4446] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.161147][ T4446] EXT4-fs (loop4): mount failed [ 43.241555][ T4469] __nla_validate_parse: 14 callbacks suppressed [ 43.241569][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 43.258186][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 43.268573][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 43.287631][ T41] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.313941][ T4469] syz.2.409 (4469) used greatest stack depth: 10080 bytes left [ 43.323957][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.360248][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.369935][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.432526][ T4487] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 43.443297][ T4491] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.687863][ T4532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.434'. [ 43.730889][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 43.730904][ T29] audit: type=1400 audit(1755120532.031:3761): avc: denied { read write } for pid=4534 comm="syz.1.436" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.761567][ T29] audit: type=1400 audit(1755120532.031:3762): avc: denied { open } for pid=4534 comm="syz.1.436" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.797059][ T29] audit: type=1400 audit(1755120532.041:3763): avc: denied { ioctl } for pid=4534 comm="syz.1.436" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.822960][ T29] audit: type=1400 audit(1755120532.091:3764): avc: denied { read write } for pid=4537 comm="syz.2.437" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.857030][ T29] audit: type=1400 audit(1755120532.151:3765): avc: denied { mount } for pid=4540 comm="syz.2.439" name="/" dev="ramfs" ino=7601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 43.921325][ T29] audit: type=1326 audit(1755120532.221:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 43.946373][ T29] audit: type=1326 audit(1755120532.221:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 43.979641][ T29] audit: type=1400 audit(1755120532.241:3768): avc: denied { create } for pid=4547 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.000189][ T29] audit: type=1326 audit(1755120532.251:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 44.025156][ T29] audit: type=1326 audit(1755120532.251:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 44.077225][ T4550] netlink: 'syz.1.444': attribute type 8 has an invalid length. [ 44.096972][ T4552] loop0: detected capacity change from 0 to 512 [ 44.134738][ T4552] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.142807][ T4552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 44.203878][ T4552] System zones: 0-1, 15-15, 18-18, 34-34 [ 44.214392][ T4552] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.223176][ T4552] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.442: casefold flag without casefold feature [ 44.242634][ T4552] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.442: couldn't read orphan inode 16 (err -117) [ 44.252127][ T4546] Set syz1 is full, maxelem 65536 reached [ 44.269814][ T4552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.320350][ T4552] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.328912][ T4552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 44.371956][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.401031][ T4573] loop1: detected capacity change from 0 to 1024 [ 44.426580][ T4577] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 44.441407][ T4573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.483663][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.565970][ T4598] gtp0: entered promiscuous mode [ 44.733256][ T4607] mmap: syz.1.466 (4607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.469026][ T4668] netlink: 200 bytes leftover after parsing attributes in process `syz.4.490'. [ 45.530862][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 45.540207][ T4672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.493'. [ 45.550489][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 45.561539][ T4672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.493'. [ 45.571682][ T4672] netlink: 'syz.3.493': attribute type 6 has an invalid length. [ 45.603993][ C0] hrtimer: interrupt took 37937 ns [ 45.670892][ T4682] program syz.3.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.681560][ T4682] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 45.761121][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 45.788349][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.796291][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.804375][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.812518][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.820356][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.828075][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.836006][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.844613][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.853187][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.861672][ T3354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.870583][ T3354] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 45.904338][ T4695] fido_id[4695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.945769][ T4699] loop1: detected capacity change from 0 to 1024 [ 45.949286][ T4697] lo speed is unknown, defaulting to 1000 [ 45.977677][ T4699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.980774][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/66.tmp-b7:1' failed: Read-only file system [ 46.007897][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 46.026165][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/66.tmp-b7:1' failed: Read-only file system [ 46.039426][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 46.041138][ T4699] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.504: Allocating blocks 449-513 which overlap fs metadata [ 46.126822][ T4698] EXT4-fs (loop1): pa ffff8881072720e0: logic 48, phys. 177, len 21 [ 46.132040][ T4709] syzkaller1: entered promiscuous mode [ 46.135307][ T4698] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 46.151587][ T4709] syzkaller1: entered allmulticast mode [ 46.179646][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.209731][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/66.tmp-b7:1' failed: Read-only file system [ 46.261687][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/66.tmp-b7:1' failed: Read-only file system [ 46.287869][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/67.tmp-b7:1' failed: Read-only file system [ 46.403697][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 46.465756][ T4741] team0 (unregistering): Port device team_slave_0 removed [ 46.481974][ T4741] team0 (unregistering): Port device team_slave_1 removed [ 46.806462][ T4768] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 46.819104][ T4768] : renamed from bond0 (while UP) [ 47.150146][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/67.tmp-b7:1' failed: Read-only file system [ 47.228630][ T4791] SELinux: failed to load policy [ 47.269639][ T3635] udevd[3635]: symlink '../../loop1' '/dev/disk/by-diskseq/67.tmp-b7:1' failed: Read-only file system [ 47.369052][ T4810] netlink: 'syz.4.547': attribute type 12 has an invalid length. [ 47.377301][ T4810] netlink: 'syz.4.547': attribute type 29 has an invalid length. [ 47.397423][ T4810] netlink: 'syz.4.547': attribute type 12 has an invalid length. [ 47.405787][ T4810] netlink: 'syz.4.547': attribute type 29 has an invalid length. [ 47.448636][ T3292] udevd[3292]: symlink '../../loop1' '/dev/disk/by-diskseq/67.tmp-b7:1' failed: Read-only file system [ 47.501915][ T4822] loop2: detected capacity change from 0 to 8192 [ 47.638396][ T4832] lo speed is unknown, defaulting to 1000 [ 47.794716][ T4842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4842 comm=syz.4.562 [ 48.404746][ T4894] IPVS: stopping master sync thread 4897 ... [ 48.408246][ T4897] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 48.564058][ T4914] loop2: detected capacity change from 0 to 2048 [ 48.580827][ T4913] lo speed is unknown, defaulting to 1000 [ 48.597964][ T4914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.623068][ T4914] GUP no longer grows the stack in syz.2.593 (4914): 200000005000-200000008000 (200000001000) [ 48.633958][ T4914] CPU: 0 UID: 0 PID: 4914 Comm: syz.2.593 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 48.634027][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.634037][ T4914] Call Trace: [ 48.634043][ T4914] [ 48.634050][ T4914] __dump_stack+0x1d/0x30 [ 48.634071][ T4914] dump_stack_lvl+0xe8/0x140 [ 48.634110][ T4914] dump_stack+0x15/0x1b [ 48.634127][ T4914] __get_user_pages+0x198d/0x1fa0 [ 48.634154][ T4914] ? __sbitmap_queue_get+0x15/0x20 [ 48.634213][ T4914] ? __pfx_autoremove_wake_function+0x10/0x10 [ 48.634244][ T4914] __gup_longterm_locked+0x8f4/0xe60 [ 48.634343][ T4914] ? bdev_count_inflight+0xf2/0x130 [ 48.634370][ T4914] ? __rcu_read_unlock+0x34/0x70 [ 48.634483][ T4914] ? try_get_folio+0x379/0x3c0 [ 48.634581][ T4914] ? mod_node_page_state+0x1c/0xa0 [ 48.634654][ T4914] gup_fast_fallback+0x1f5/0x1420 [ 48.634683][ T4914] pin_user_pages_fast+0x5f/0x90 [ 48.634708][ T4914] iov_iter_extract_pages+0x253/0x420 [ 48.634777][ T4914] bio_iov_iter_get_pages+0x2ad/0xab0 [ 48.634799][ T4914] ? bio_associate_blkg+0xc7/0xe0 [ 48.634842][ T4914] ? bio_alloc_bioset+0x906/0xac0 [ 48.634871][ T4914] iomap_dio_bio_iter+0x802/0xd10 [ 48.634900][ T4914] __iomap_dio_rw+0x985/0x1250 [ 48.634971][ T4914] ? ext4_journal_check_start+0x11a/0x1b0 [ 48.634993][ T4914] iomap_dio_rw+0x40/0x90 [ 48.635092][ T4914] ext4_file_write_iter+0xad9/0xf00 [ 48.635127][ T4914] do_iter_readv_writev+0x49c/0x540 [ 48.635162][ T4914] vfs_writev+0x2df/0x8b0 [ 48.635194][ T4914] __se_sys_pwritev2+0xfc/0x1c0 [ 48.635215][ T4914] __x64_sys_pwritev2+0x67/0x80 [ 48.635235][ T4914] x64_sys_call+0x2c55/0x2ff0 [ 48.635281][ T4914] do_syscall_64+0xd2/0x200 [ 48.635305][ T4914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.635326][ T4914] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.635355][ T4914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.635444][ T4914] RIP: 0033:0x7f3dbd42ebe9 [ 48.635468][ T4914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.635484][ T4914] RSP: 002b:00007f3dbbe8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 48.635510][ T4914] RAX: ffffffffffffffda RBX: 00007f3dbd655fa0 RCX: 00007f3dbd42ebe9 [ 48.635523][ T4914] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 48.635555][ T4914] RBP: 00007f3dbd4b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 48.635566][ T4914] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000000 [ 48.635576][ T4914] R13: 00007f3dbd656038 R14: 00007f3dbd655fa0 R15: 00007ffee8c0ec08 [ 48.635628][ T4914] [ 48.936407][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.992522][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 48.992535][ T29] audit: type=1400 audit(1755120537.291:3948): avc: denied { sqpoll } for pid=4923 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.035457][ T29] audit: type=1400 audit(1755120537.291:3949): avc: denied { create } for pid=4923 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.055580][ T29] audit: type=1400 audit(1755120537.291:3950): avc: denied { bind } for pid=4923 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.076227][ T29] audit: type=1400 audit(1755120537.291:3951): avc: denied { listen } for pid=4923 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.103626][ T4930] loop1: detected capacity change from 0 to 1024 [ 49.131773][ T4930] EXT4-fs: Ignoring removed bh option [ 49.141626][ T4934] loop3: detected capacity change from 0 to 256 [ 49.167483][ T4930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.191891][ T29] audit: type=1400 audit(1755120537.491:3952): avc: denied { setattr } for pid=4929 comm="syz.1.598" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.195374][ T4930] EXT4-fs error (device loop1): ext4_xattr_set_entry:1660: inode #15: comm syz.1.598: corrupted xattr entries [ 49.237509][ T4930] EXT4-fs (loop1): Remounting filesystem read-only [ 49.250368][ T29] audit: type=1400 audit(1755120537.551:3953): avc: denied { setcurrent } for pid=4941 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.270759][ T29] audit: type=1401 audit(1755120537.551:3954): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 49.291686][ T4930] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #19: comm syz.1.598: dec ref error=-30 [ 49.340291][ T29] audit: type=1400 audit(1755120537.631:3955): avc: denied { ioctl } for pid=4947 comm="syz.0.606" path="socket:[9371]" dev="sockfs" ino=9371 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.366242][ T29] audit: type=1400 audit(1755120537.631:3956): avc: denied { write } for pid=4947 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 49.386640][ T29] audit: type=1400 audit(1755120537.631:3957): avc: denied { read } for pid=4947 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 49.418247][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.468744][ T4957] __nla_validate_parse: 11 callbacks suppressed [ 49.468823][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 49.484618][ T4962] netlink: 'syz.4.609': attribute type 4 has an invalid length. [ 49.484667][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 49.501120][ T4962] netlink: 'syz.4.609': attribute type 4 has an invalid length. [ 49.509050][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.524896][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 49.534308][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 49.543879][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.543931][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.543961][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.711506][ T4985] loop1: detected capacity change from 0 to 512 [ 49.736054][ T4985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 49.762710][ T4985] System zones: 1-12 [ 49.769777][ T4985] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.623: error while reading EA inode 32 err=-116 [ 49.785167][ T4985] EXT4-fs (loop1): Remounting filesystem read-only [ 49.792005][ T4985] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 49.826127][ T4985] EXT4-fs (loop1): 1 orphan inode deleted [ 49.832616][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.895940][ T4993] loop0: detected capacity change from 0 to 8192 [ 49.928389][ T4985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.941720][ T4993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.990808][ T4993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.007921][ T5007] lo speed is unknown, defaulting to 1000 [ 50.052811][ T4993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.140278][ T4993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.187430][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 50.259670][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.278407][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296035][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.318715][ T5025] loop3: detected capacity change from 0 to 512 [ 50.329529][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.356377][ T5025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 50.404608][ T5025] System zones: 1-12 [ 50.423476][ T5025] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.637: Directory hole found for htree index block 0 [ 50.479166][ T5036] netlink: 468 bytes leftover after parsing attributes in process `syz.1.644'. [ 50.511325][ T5025] EXT4-fs (loop3): Remounting filesystem read-only [ 50.532148][ T5025] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 50.580591][ T5025] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 50.620395][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.645718][ T5055] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 50.654298][ T5025] EXT4-fs (loop3): shut down requested (2) [ 50.672359][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.672835][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.902998][ T5072] netlink: 'syz.3.661': attribute type 4 has an invalid length. [ 50.928255][ T5063] loop4: detected capacity change from 0 to 8192 [ 50.943275][ T5063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.985672][ T3635] udevd[3635]: symlink '../../loop4' '/dev/disk/by-diskseq/82.tmp-b7:4' failed: Read-only file system [ 51.008045][ T3635] udevd[3635]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 51.008167][ T5063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.033434][ T3635] udevd[3635]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:4' failed: Read-only file system [ 51.062112][ T3292] udevd[3292]: symlink '../../loop2' '/dev/disk/by-diskseq/71.tmp-b7:2' failed: Read-only file system [ 51.089105][ T5063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.137727][ T5063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.170876][ T5078] loop3: detected capacity change from 0 to 32768 [ 51.195340][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.211386][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.215262][ T3635] loop3: p1 p3 < > [ 51.228168][ T5078] loop3: p1 p3 < > [ 51.229858][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.250889][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.269702][ T3635] udevd[3635]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 51.314042][ T3292] udevd[3292]: symlink '../../loop4' '/dev/disk/by-diskseq/82.tmp-b7:4' failed: Read-only file system [ 51.343969][ T3292] udevd[3292]: symlink '../../loop4' '/dev/disk/by-diskseq/82.tmp-b7:4' failed: Read-only file system [ 51.359014][ T3292] udevd[3292]: symlink '../../loop4' '/dev/disk/by-diskseq/85.tmp-b7:4' failed: Read-only file system [ 51.372769][ T3635] udevd[3635]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 51.397719][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 51.416006][ T5095] program syz.3.669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.436877][ T5095] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 51.510647][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 51.622727][ T3388] kernel write not supported for file /timer_list (pid: 3388 comm: kworker/0:4) [ 51.703330][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.712743][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.738631][ T5133] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 51.738631][ T5133] program syz.2.687 not setting count and/or reply_len properly [ 51.771455][ T3303] block device autoloading is deprecated and will be removed. [ 51.852697][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 52.161655][ T5174] loop2: detected capacity change from 0 to 512 [ 52.168694][ T5174] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.176024][ T5174] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.187705][ T5174] EXT4-fs (loop2): 1 truncate cleaned up [ 52.193770][ T5174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.933770][ T5216] loop1: detected capacity change from 0 to 512 [ 52.962440][ T5216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.977642][ T5219] vhci_hcd: invalid port number 96 [ 52.983198][ T5219] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 53.028272][ T5216] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm wÞ£ÿ: corrupted xattr entries [ 53.053307][ T5216] EXT4-fs (loop1): Remounting filesystem read-only [ 53.064541][ T5216] EXT4-fs (loop1): 1 truncate cleaned up [ 53.071945][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.083450][ T5216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.158104][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.354460][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 53.373798][ T5258] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 53.489330][ T5273] loop2: detected capacity change from 0 to 1024 [ 53.558006][ T5273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.713572][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.977834][ T5318] loop3: detected capacity change from 0 to 8192 [ 54.027907][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 54.027919][ T29] audit: type=1400 audit(1755120542.331:4195): avc: denied { bind } for pid=5323 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.096901][ T29] audit: type=1400 audit(1755120542.401:4196): avc: denied { override_creds } for pid=5325 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.181987][ T29] audit: type=1404 audit(1755120542.451:4197): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 54.197451][ T29] audit: type=1404 audit(1755120542.451:4198): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 54.213218][ T29] audit: type=1400 audit(1755120542.461:4199): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.238294][ T29] audit: type=1400 audit(1755120542.461:4200): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.263770][ T29] audit: type=1400 audit(1755120542.461:4201): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.290584][ T29] audit: type=1400 audit(1755120542.471:4202): avc: denied { map_create } for pid=5333 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.310266][ T29] audit: type=1400 audit(1755120542.471:4203): avc: denied { bpf } for pid=5333 comm="syz.2.776" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.330870][ T29] audit: type=1400 audit(1755120542.471:4204): avc: denied { map_read map_write } for pid=5333 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.356375][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 54.486422][ T5346] smc: net device bond0 applied user defined pnetid SYZ0 [ 54.493932][ T5346] smc: net device bond0 erased user defined pnetid SYZ0 [ 54.977489][ T5382] loop1: detected capacity change from 0 to 512 [ 55.018685][ T5382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.060145][ T5394] netlink: 48 bytes leftover after parsing attributes in process `syz.0.804'. [ 55.070511][ T5382] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.116064][ T5382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.798: corrupted inode contents [ 55.139028][ T5382] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.798: mark_inode_dirty error [ 55.158509][ T5382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.798: corrupted inode contents [ 55.161335][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 55.170953][ T5382] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.798: mark_inode_dirty error [ 55.193054][ T5382] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.798: mark inode dirty (error -117) [ 55.207345][ T5382] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 55.222111][ T5405] loop3: detected capacity change from 0 to 512 [ 55.239428][ T5405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.266821][ T5405] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.285882][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.435840][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.545591][ T5442] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 55.707367][ T5458] SELinux: failed to load policy [ 55.769916][ T5468] netlink: 'syz.4.834': attribute type 27 has an invalid length. [ 55.810496][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.817919][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.883056][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.909183][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.967081][ T5476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.978348][ T5476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.994901][ T5484] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 56.003055][ T2007] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.013904][ T2007] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.027512][ T2007] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.037638][ T2007] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.041580][ T3635] udevd[3635]: symlink '../../loop4' '/dev/disk/by-diskseq/85.tmp-b7:4' failed: Read-only file system [ 56.061403][ T3292] udevd[3292]: symlink '../../loop0' '/dev/disk/by-diskseq/86.tmp-b7:0' failed: Read-only file system [ 56.090232][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 56.094080][ T3635] udevd[3635]: symlink '../../loop3' '/dev/disk/by-diskseq/99.tmp-b7:3' failed: Read-only file system [ 56.117446][ T3292] udevd[3292]: symlink '../../loop4' '/dev/disk/by-diskseq/85.tmp-b7:4' failed: Read-only file system [ 56.147472][ T3635] udevd[3635]: symlink '../../loop0' '/dev/disk/by-diskseq/86.tmp-b7:0' failed: Read-only file system [ 56.169522][ T5499] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.183771][ T3635] udevd[3635]: symlink '../../loop3' '/dev/disk/by-diskseq/99.tmp-b7:3' failed: Read-only file system [ 56.209749][ T3292] udevd[3292]: symlink '../../loop4' '/dev/disk/by-diskseq/85.tmp-b7:4' failed: Read-only file system [ 56.237323][ T3268] udevd[3268]: symlink '../../loop1' '/dev/disk/by-diskseq/98.tmp-b7:1' failed: Read-only file system [ 56.249533][ T5501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.255891][ T3635] udevd[3635]: symlink '../../loop0' '/dev/disk/by-diskseq/86.tmp-b7:0' failed: Read-only file system [ 56.292492][ T5511] loop3: detected capacity change from 0 to 512 [ 56.303477][ T3292] udevd[3292]: symlink '../../loop3' '/dev/disk/by-diskseq/99.tmp-b7:3' failed: Read-only file system [ 56.330794][ T5511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.357606][ T5511] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.483418][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.602430][ T5539] SELinux: failed to load policy [ 56.705255][ T5557] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 56.726171][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.733461][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.744255][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.751649][ T5557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.759270][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.766265][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 56.766821][ T5557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.769224][ T5557] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 56.795955][ T5565] bridge_slave_1: left allmulticast mode [ 56.801714][ T5565] bridge_slave_1: left promiscuous mode [ 56.808180][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.831303][ T5565] bridge_slave_0: left allmulticast mode [ 56.837278][ T5565] bridge_slave_0: left promiscuous mode [ 56.843196][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.889936][ T5565] bond0: (slave bridge0): Releasing backup interface [ 56.897431][ T5575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.882'. [ 57.002363][ T5590] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 57.010800][ T5590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'. [ 57.021172][ T5590] dummy0: entered promiscuous mode [ 57.026538][ T5584] sd 0:0:1:0: device reset [ 57.027504][ T5590] bridge0: port 3(dummy0) entered blocking state [ 57.038300][ T5590] bridge0: port 3(dummy0) entered disabled state [ 57.049514][ T5590] dummy0: entered allmulticast mode [ 57.057124][ T5590] bridge0: port 3(dummy0) entered blocking state [ 57.063633][ T5590] bridge0: port 3(dummy0) entered forwarding state [ 57.073473][ T5594] random: crng reseeded on system resumption [ 57.141330][ T5605] netlink: 68 bytes leftover after parsing attributes in process `syz.4.898'. [ 57.182276][ T5612] netlink: 'syz.4.901': attribute type 2 has an invalid length. [ 57.613088][ T5665] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 57.674111][ T5673] tipc: Enabling of bearer rejected, failed to enable media [ 57.893205][ T5698] loop4: detected capacity change from 0 to 512 [ 57.916725][ T5698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.930484][ T5698] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.986724][ T5705] loop9: detected capacity change from 0 to 8 [ 58.063779][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.094929][ T5722] random: crng reseeded on system resumption [ 58.257395][ T5782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 58.363545][ T5788] loop3: detected capacity change from 0 to 2048 [ 58.408657][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.512689][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.559488][ T5796] syzkaller1: entered promiscuous mode [ 58.565434][ T5796] syzkaller1: entered allmulticast mode [ 58.579514][ T5798] loop1: detected capacity change from 0 to 512 [ 58.627710][ T5798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.663769][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 58.672798][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 58.748537][ T36] Process accounting resumed [ 58.804230][ T5818] random: crng reseeded on system resumption [ 58.825617][ T5822] siw: device registration error -23 [ 58.903912][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.064838][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 59.064853][ T29] audit: type=1400 audit(59.030:4416): avc: denied { mount } for pid=5847 comm="syz.4.977" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 59.107713][ T29] audit: type=1400 audit(59.080:4417): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 59.143890][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 59.167797][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 59.224589][ T29] audit: type=1326 audit(59.180:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.248797][ T29] audit: type=1326 audit(59.180:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.273685][ T5850] loop2: detected capacity change from 0 to 8192 [ 59.367359][ T29] audit: type=1326 audit(59.190:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.391023][ T29] audit: type=1326 audit(59.190:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.417059][ T29] audit: type=1326 audit(59.190:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.440564][ T29] audit: type=1326 audit(59.190:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.464237][ T29] audit: type=1326 audit(59.190:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.487722][ T29] audit: type=1326 audit(59.190:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece209ebe9 code=0x7ffc0000 [ 59.518936][ T5864] loop1: detected capacity change from 0 to 1024 [ 59.573940][ T5864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.778557][ T5888] macvtap0: refused to change device tx_queue_len [ 59.841528][ T5864] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.985: Allocating blocks 497-513 which overlap fs metadata [ 59.937009][ T5910] syz.2.1005 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.960449][ T5864] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.985: Allocating blocks 497-513 which overlap fs metadata [ 59.983149][ T5864] EXT4-fs (loop1): pa ffff88810729e690: logic 256, phys. 369, len 9 [ 59.991773][ T5864] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 60.046318][ T5925] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 60.054846][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.062934][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.079624][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.088085][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.095921][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.103612][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.114726][ T5925] : (slave bridge0): Enslaving as an active interface with an up link [ 60.115169][ T5928] __nla_validate_parse: 11 callbacks suppressed [ 60.115193][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 60.145170][ T5928] bridge_slave_1: left allmulticast mode [ 60.151146][ T5928] bridge_slave_1: left promiscuous mode [ 60.157015][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.195994][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 60.210195][ T5928] bridge_slave_0: left allmulticast mode [ 60.215999][ T5928] bridge_slave_0: left promiscuous mode [ 60.221799][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.243078][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.258771][ T5928] : (slave bridge0): Releasing backup interface [ 60.286122][ T5939] loop4: detected capacity change from 0 to 128 [ 60.319560][ T5940] serio: Serial port ptm0 [ 60.337174][ T5944] tipc: Failed to remove unknown binding: 66,1,1/0:3767834512/3767834514 [ 60.346003][ T5944] tipc: Failed to remove unknown binding: 66,1,1/0:3767834512/3767834514 [ 60.350900][ T5939] syz.4.1017: attempt to access beyond end of device [ 60.350900][ T5939] loop4: rw=0, sector=121, nr_sectors = 8 limit=128 [ 60.394716][ T5947] loop2: detected capacity change from 0 to 512 [ 60.407071][ T5947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.438473][ T5947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.462230][ T5947] EXT4-fs (loop2): shut down requested (2) [ 60.468889][ T5947] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 60.491589][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.491680][ T5949] loop1: detected capacity change from 0 to 2048 [ 60.507472][ T5953] capability: warning: `syz.3.1022' uses deprecated v2 capabilities in a way that may be insecure [ 60.562239][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.603954][ T5966] loop2: detected capacity change from 0 to 1024 [ 60.612957][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.659185][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.726863][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.807557][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 60.822711][ T5990] loop2: detected capacity change from 0 to 1024 [ 60.839019][ T5990] EXT4-fs: Ignoring removed orlov option [ 60.884866][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.928770][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.032624][ T6012] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 61.032624][ T6012] program syz.2.1046 not setting count and/or reply_len properly [ 61.067042][ T3635] udevd[3635]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.099979][ T3635] udevd[3635]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.149704][ T3635] udevd[3635]: symlink '../../loop0' '/dev/disk/by-diskseq/86.tmp-b7:0' failed: Read-only file system [ 61.151610][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1049'. [ 61.176655][ T3292] udevd[3292]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.243341][ T3635] udevd[3635]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.269429][ T6023] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1051'. [ 61.307120][ T3635] udevd[3635]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.327508][ T3292] udevd[3292]: symlink '../../loop0' '/dev/disk/by-diskseq/86.tmp-b7:0' failed: Read-only file system [ 61.351248][ T3635] udevd[3635]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.401840][ T3635] udevd[3635]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 61.421479][ T3292] udevd[3292]: symlink '../../loop3' '/dev/disk/by-diskseq/108.tmp-b7:3' failed: Read-only file system [ 61.487001][ T6042] hub 6-0:1.0: USB hub found [ 61.492149][ T6042] hub 6-0:1.0: 8 ports detected [ 61.549268][ T6053] netlink: 'syz.2.1062': attribute type 3 has an invalid length. [ 61.596554][ T6060] loop0: detected capacity change from 0 to 512 [ 61.603696][ T6060] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.611055][ T6060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.622203][ T6060] EXT4-fs (loop0): 1 truncate cleaned up [ 61.628188][ T6060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.847403][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 61.944866][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 62.181646][ T6060] ================================================================== [ 62.189957][ T6060] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 62.198483][ T6060] [ 62.200885][ T6060] write to 0xffff8881072329a4 of 4 bytes by task 6071 on cpu 0: [ 62.208915][ T6060] xas_set_mark+0x12b/0x140 [ 62.213524][ T6060] __folio_start_writeback+0x1dd/0x440 [ 62.218979][ T6060] ext4_bio_write_folio+0x5ad/0x9f0 [ 62.224178][ T6060] mpage_process_page_bufs+0x4a1/0x620 [ 62.230237][ T6060] mpage_prepare_extent_to_map+0x786/0xc00 [ 62.236128][ T6060] ext4_do_writepages+0xa05/0x2750 [ 62.241266][ T6060] ext4_writepages+0x176/0x300 [ 62.246105][ T6060] do_writepages+0x1c6/0x310 [ 62.251294][ T6060] filemap_write_and_wait_range+0x144/0x340 [ 62.257216][ T6060] ext4_file_write_iter+0xe04/0xf00 [ 62.262590][ T6060] iter_file_splice_write+0x669/0x9e0 [ 62.268039][ T6060] direct_splice_actor+0x156/0x2a0 [ 62.273170][ T6060] splice_direct_to_actor+0x312/0x680 [ 62.278529][ T6060] do_splice_direct+0xda/0x150 [ 62.283376][ T6060] do_sendfile+0x380/0x650 [ 62.287891][ T6060] __x64_sys_sendfile64+0x105/0x150 [ 62.293358][ T6060] x64_sys_call+0x2bb0/0x2ff0 [ 62.298205][ T6060] do_syscall_64+0xd2/0x200 [ 62.303165][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.309438][ T6060] [ 62.312163][ T6060] read to 0xffff8881072329a4 of 4 bytes by task 6060 on cpu 1: [ 62.320230][ T6060] file_write_and_wait_range+0x10e/0x2c0 [ 62.326782][ T6060] generic_buffers_fsync_noflush+0x45/0x120 [ 62.332936][ T6060] ext4_sync_file+0x1ab/0x690 [ 62.337788][ T6060] vfs_fsync_range+0x10a/0x130 [ 62.342637][ T6060] ext4_buffered_write_iter+0x34f/0x3c0 [ 62.349225][ T6060] ext4_file_write_iter+0xdbf/0xf00 [ 62.354527][ T6060] iter_file_splice_write+0x669/0x9e0 [ 62.360254][ T6060] direct_splice_actor+0x156/0x2a0 [ 62.365376][ T6060] splice_direct_to_actor+0x312/0x680 [ 62.370963][ T6060] do_splice_direct+0xda/0x150 [ 62.375727][ T6060] do_sendfile+0x380/0x650 [ 62.380140][ T6060] __x64_sys_sendfile64+0x105/0x150 [ 62.385418][ T6060] x64_sys_call+0x2bb0/0x2ff0 [ 62.390086][ T6060] do_syscall_64+0xd2/0x200 [ 62.394587][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.400556][ T6060] [ 62.403070][ T6060] value changed: 0x0a000021 -> 0x04000021 [ 62.409098][ T6060] [ 62.411507][ T6060] Reported by Kernel Concurrency Sanitizer on: [ 62.418272][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.0.1064 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 62.431216][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.441446][ T6060] ================================================================== [ 62.551348][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.