last executing test programs: 709.483513ms ago: executing program 0 (id=1612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @dev}, 0x10) 641.324819ms ago: executing program 1 (id=1615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 640.739879ms ago: executing program 0 (id=1617): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 639.954569ms ago: executing program 1 (id=1619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 631.43781ms ago: executing program 0 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) 578.230914ms ago: executing program 0 (id=1624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 560.655265ms ago: executing program 0 (id=1627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020600) syz_clone(0x20001400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8008551c, &(0x7f0000000180)={0x1f, 0x18, 0x0, 0xfffc, 0x0, 0x1000, 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x18, 0x4, 0x0, 0x8, 0x68, 0x67, 0x0, 0x3, 0x11, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0x50, 0x1, 0x1}, @lsrr={0x83, 0x3, 0x13}, @timestamp={0x44, 0x8, 0x1c, 0x0, 0x6, [0xffff]}, @rr={0x7, 0xf, 0x3f, [@dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x43}]}, @generic={0x7, 0x6, "f28d7753"}, @timestamp={0x44, 0x4, 0x7c, 0x0, 0xa}, @cipso={0x86, 0x10, 0x2, [{0x4, 0xa, "3e32964c7365b1d5"}]}, @rr={0x7, 0x13, 0x7b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100, @private=0xa010100]}, @end]}}, {0x4e20, 0x4e22, 0x8}}}}}, 0x0) 495.52627ms ago: executing program 0 (id=1632): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/184, 0xb8}}], 0x1, 0x40010122, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 459.204363ms ago: executing program 1 (id=1637): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 398.063039ms ago: executing program 1 (id=1640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0) 349.875082ms ago: executing program 1 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 349.650752ms ago: executing program 2 (id=1644): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 349.256772ms ago: executing program 2 (id=1647): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f00000017c0), 0x0, 0x0, 0x8) 307.008795ms ago: executing program 1 (id=1648): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 306.480165ms ago: executing program 2 (id=1651): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") syz_open_procfs(0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 304.585415ms ago: executing program 3 (id=1652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 253.08536ms ago: executing program 3 (id=1654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) 252.94651ms ago: executing program 2 (id=1655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)={0x14, r1, 0xb31, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) 252.71472ms ago: executing program 3 (id=1657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) fcntl$setlease(r2, 0x400, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 196.819874ms ago: executing program 4 (id=1658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 196.502034ms ago: executing program 2 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 196.286264ms ago: executing program 3 (id=1660): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 196.122174ms ago: executing program 4 (id=1661): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = dup(r0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) 195.904304ms ago: executing program 3 (id=1662): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0a2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 131.990519ms ago: executing program 4 (id=1663): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44c}}, 0x0) 131.70323ms ago: executing program 2 (id=1664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 114.671101ms ago: executing program 4 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r2, r3) 78.255194ms ago: executing program 3 (id=1666): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 47.711876ms ago: executing program 4 (id=1667): ioperm(0xc, 0x1ff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r2, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) 0s ago: executing program 4 (id=1668): unshare(0x24040400) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 28.281433][ T29] audit: type=1400 audit(1754818768.547:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.282545][ T3290] cgroup: Unknown subsys name 'net' [ 28.304189][ T29] audit: type=1400 audit(1754818768.547:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.331661][ T29] audit: type=1400 audit(1754818768.577:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.451996][ T3290] cgroup: Unknown subsys name 'cpuset' [ 28.458290][ T3290] cgroup: Unknown subsys name 'rlimit' [ 28.569520][ T29] audit: type=1400 audit(1754818768.827:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.594942][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.605492][ T29] audit: type=1400 audit(1754818768.827:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.625966][ T29] audit: type=1400 audit(1754818768.827:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.644206][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k Setting up swapspace version 1, size = 127995904 bytes [ 28.646433][ T29] audit: type=1400 audit(1754818768.837:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.675293][ T29] audit: type=1400 audit(1754818768.837:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.700103][ T29] audit: type=1400 audit(1754818768.837:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.723488][ T29] audit: type=1400 audit(1754818768.877:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.451683][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.483194][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 30.529182][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.545670][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.579388][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.586547][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.593687][ T3303] bridge_slave_0: entered allmulticast mode [ 30.600228][ T3303] bridge_slave_0: entered promiscuous mode [ 30.617160][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.624255][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.631461][ T3303] bridge_slave_1: entered allmulticast mode [ 30.638039][ T3303] bridge_slave_1: entered promiscuous mode [ 30.668890][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 30.698389][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.705454][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.712734][ T3306] bridge_slave_0: entered allmulticast mode [ 30.719027][ T3306] bridge_slave_0: entered promiscuous mode [ 30.726805][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.735894][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.742958][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.750088][ T3306] bridge_slave_1: entered allmulticast mode [ 30.756463][ T3306] bridge_slave_1: entered promiscuous mode [ 30.782725][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.801771][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.808845][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.816367][ T3308] bridge_slave_0: entered allmulticast mode [ 30.822935][ T3308] bridge_slave_0: entered promiscuous mode [ 30.846580][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.853742][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.860831][ T3308] bridge_slave_1: entered allmulticast mode [ 30.867297][ T3308] bridge_slave_1: entered promiscuous mode [ 30.873437][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.880506][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.887708][ T3302] bridge_slave_0: entered allmulticast mode [ 30.894434][ T3302] bridge_slave_0: entered promiscuous mode [ 30.906919][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.916925][ T3303] team0: Port device team_slave_0 added [ 30.932329][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.939384][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.946632][ T3302] bridge_slave_1: entered allmulticast mode [ 30.953160][ T3302] bridge_slave_1: entered promiscuous mode [ 30.964998][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.974679][ T3303] team0: Port device team_slave_1 added [ 31.009452][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.016599][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.023799][ T3300] bridge_slave_0: entered allmulticast mode [ 31.030074][ T3300] bridge_slave_0: entered promiscuous mode [ 31.037468][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.047899][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.057819][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.076477][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.083561][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.090759][ T3300] bridge_slave_1: entered allmulticast mode [ 31.097536][ T3300] bridge_slave_1: entered promiscuous mode [ 31.104671][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.123641][ T3306] team0: Port device team_slave_0 added [ 31.134626][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.141673][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.167558][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.192919][ T3302] team0: Port device team_slave_0 added [ 31.199295][ T3306] team0: Port device team_slave_1 added [ 31.205733][ T3308] team0: Port device team_slave_0 added [ 31.212374][ T3308] team0: Port device team_slave_1 added [ 31.218388][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.225364][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.251265][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.263193][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.275693][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.285322][ T3302] team0: Port device team_slave_1 added [ 31.305762][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.312793][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.338831][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.364522][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.371549][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.397510][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.408635][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.415725][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.441624][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.477216][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.484171][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.510145][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.524881][ T3300] team0: Port device team_slave_0 added [ 31.531960][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.538946][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.564923][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.578005][ T3303] hsr_slave_0: entered promiscuous mode [ 31.584190][ T3303] hsr_slave_1: entered promiscuous mode [ 31.593169][ T3300] team0: Port device team_slave_1 added [ 31.604787][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.611783][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.637744][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.683454][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.690416][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.716371][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.727843][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.734850][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.760814][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.773584][ T3308] hsr_slave_0: entered promiscuous mode [ 31.779371][ T3308] hsr_slave_1: entered promiscuous mode [ 31.785393][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 31.791137][ T3308] Cannot create hsr debugfs directory [ 31.803645][ T3306] hsr_slave_0: entered promiscuous mode [ 31.809589][ T3306] hsr_slave_1: entered promiscuous mode [ 31.815662][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.821405][ T3306] Cannot create hsr debugfs directory [ 31.849738][ T3302] hsr_slave_0: entered promiscuous mode [ 31.855740][ T3302] hsr_slave_1: entered promiscuous mode [ 31.861562][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.867314][ T3302] Cannot create hsr debugfs directory [ 31.932577][ T3300] hsr_slave_0: entered promiscuous mode [ 31.938503][ T3300] hsr_slave_1: entered promiscuous mode [ 31.944528][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.950270][ T3300] Cannot create hsr debugfs directory [ 32.092652][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.101725][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.110665][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.119632][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.143074][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.153582][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.169713][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.178551][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.204612][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.213536][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.231094][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.245639][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.259203][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.269976][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.278760][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.288466][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.317360][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.346936][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.363365][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.370396][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.387157][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.405658][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.414147][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.421191][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.430286][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.439175][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.448163][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.478504][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.493372][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.500517][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.521582][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.529958][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.537023][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.549310][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.573901][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.584516][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.626606][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.633688][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.642634][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.649749][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.669070][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.692813][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.699912][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.710787][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.728440][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.736767][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.743919][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.792234][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.815463][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.822639][ T1881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.842065][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.850935][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.858086][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.869488][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.919531][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.004081][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.052814][ T3303] veth0_vlan: entered promiscuous mode [ 33.066138][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.090616][ T3302] veth0_vlan: entered promiscuous mode [ 33.098465][ T3303] veth1_vlan: entered promiscuous mode [ 33.110189][ T3302] veth1_vlan: entered promiscuous mode [ 33.130445][ T3306] veth0_vlan: entered promiscuous mode [ 33.148255][ T3306] veth1_vlan: entered promiscuous mode [ 33.162687][ T3308] veth0_vlan: entered promiscuous mode [ 33.169939][ T3302] veth0_macvtap: entered promiscuous mode [ 33.183872][ T3308] veth1_vlan: entered promiscuous mode [ 33.190581][ T3302] veth1_macvtap: entered promiscuous mode [ 33.206126][ T3303] veth0_macvtap: entered promiscuous mode [ 33.219614][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.235778][ T3306] veth0_macvtap: entered promiscuous mode [ 33.244372][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.253790][ T3303] veth1_macvtap: entered promiscuous mode [ 33.264275][ T3308] veth0_macvtap: entered promiscuous mode [ 33.276889][ T3306] veth1_macvtap: entered promiscuous mode [ 33.292404][ T3300] veth0_vlan: entered promiscuous mode [ 33.298271][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.307187][ T3308] veth1_macvtap: entered promiscuous mode [ 33.318617][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.331355][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.331369][ T29] audit: type=1400 audit(1754818773.597:81): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.VtAlYh/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.332106][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.345536][ T29] audit: type=1400 audit(1754818773.607:82): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.369891][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.390795][ T29] audit: type=1400 audit(1754818773.607:83): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.VtAlYh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.404224][ T3300] veth1_vlan: entered promiscuous mode [ 33.423228][ T29] audit: type=1400 audit(1754818773.607:84): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.430807][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450316][ T29] audit: type=1400 audit(1754818773.607:85): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.VtAlYh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.450347][ T29] audit: type=1400 audit(1754818773.607:86): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.VtAlYh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.469754][ T3300] veth0_macvtap: entered promiscuous mode [ 33.485564][ T29] audit: type=1400 audit(1754818773.607:87): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.519878][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.553547][ T29] audit: type=1400 audit(1754818773.807:88): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.563084][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.576293][ T29] audit: type=1400 audit(1754818773.807:89): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.587515][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.613767][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.628336][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.629417][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.652134][ T3300] veth1_macvtap: entered promiscuous mode [ 33.659668][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.679076][ T29] audit: type=1400 audit(1754818773.937:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.703977][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.713790][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.723409][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745858][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.768712][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794181][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.819469][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.852625][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.874496][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.910223][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.947739][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987072][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.038045][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.074806][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.090399][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.108253][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117744][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.133258][ T3502] loop3: detected capacity change from 0 to 1024 [ 34.140027][ T3502] EXT4-fs: Ignoring removed orlov option [ 34.167759][ T3502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.255570][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.395905][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 34.690067][ T3569] loop1: detected capacity change from 0 to 512 [ 34.726527][ T3569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.759739][ T3569] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.793591][ T3569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.38: bg 0: block 64: padding at end of block bitmap is not set [ 34.857676][ T3569] syz.1.38 (3569) used greatest stack depth: 10880 bytes left [ 34.872964][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.961193][ T3580] Illegal XDP return value 4294967274 on prog (id 34) dev N/A, expect packet loss! [ 35.037647][ T3590] loop2: detected capacity change from 0 to 128 [ 35.236946][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.236946][ T51] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 35.267254][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.267254][ T51] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 35.282175][ T3602] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.295674][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.295674][ T51] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 35.337110][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.337110][ T51] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 35.350853][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.350853][ T51] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 35.364714][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.364714][ T51] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 35.378328][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.378328][ T51] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 35.440864][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.440864][ T51] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 35.468630][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.468630][ T51] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 35.491400][ T51] kworker/u8:3: attempt to access beyond end of device [ 35.491400][ T51] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 35.574542][ T3621] mmap: syz.2.53 (3621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.734443][ T3631] netlink: 'syz.4.66': attribute type 27 has an invalid length. [ 35.753378][ T3633] Zero length message leads to an empty skb [ 35.845990][ T3642] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 35.853710][ T3642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.866217][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.873386][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.942704][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.958556][ T3646] netlink: 'syz.2.74': attribute type 3 has an invalid length. [ 35.959127][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.118771][ T3634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.143635][ T3634] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.160308][ T3634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.175883][ T3642] dummy0: entered promiscuous mode [ 36.184079][ T3642] bridge0: port 3(dummy0) entered blocking state [ 36.190501][ T3642] bridge0: port 3(dummy0) entered disabled state [ 36.198564][ T3598] syz.1.49 (3598) used greatest stack depth: 7304 bytes left [ 36.206421][ T3642] dummy0: entered allmulticast mode [ 36.214610][ T3642] bridge0: port 3(dummy0) entered blocking state [ 36.221101][ T3642] bridge0: port 3(dummy0) entered forwarding state [ 36.251672][ T1881] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.260739][ T3658] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.269652][ T1881] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.297631][ T3665] loop3: detected capacity change from 0 to 128 [ 36.308067][ T3666] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.314023][ T1881] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.365768][ T1881] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.517273][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 36.622037][ T3700] vhci_hcd: invalid port number 96 [ 36.627194][ T3700] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 36.673320][ T3708] geneve2: entered promiscuous mode [ 36.678558][ T3708] geneve2: entered allmulticast mode [ 36.840838][ T3722] loop3: detected capacity change from 0 to 512 [ 36.990877][ T3735] SELinux: Context @ is not valid (left unmapped). [ 37.131747][ T3748] IPv6: Can't replace route, no match found [ 37.140982][ T3750] loop3: detected capacity change from 0 to 512 [ 37.193940][ T3750] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.122: error while reading EA inode 32 err=-116 [ 37.241789][ T3750] EXT4-fs (loop3): Remounting filesystem read-only [ 37.248356][ T3750] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.248523][ T3761] loop0: detected capacity change from 0 to 1024 [ 37.261427][ T3750] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 37.283195][ T3750] EXT4-fs (loop3): 1 orphan inode deleted [ 37.295013][ T3761] ======================================================= [ 37.295013][ T3761] WARNING: The mand mount option has been deprecated and [ 37.295013][ T3761] and is ignored by this kernel. Remove the mand [ 37.295013][ T3761] option from the mount to silence this warning. [ 37.295013][ T3761] ======================================================= [ 37.334515][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.362702][ T3750] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.366678][ T3761] EXT4-fs: inline encryption not supported [ 37.447644][ T3776] loop2: detected capacity change from 0 to 2048 [ 37.497312][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 37.506239][ T3784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 37.515239][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 37.524663][ T3291] loop2: p1 < > p4 [ 37.526757][ T3784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 37.528611][ T3761] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 37.537414][ T3784] netlink: 'syz.3.138': attribute type 6 has an invalid length. [ 37.561594][ T3291] loop2: p4 size 8388608 extends beyond EOD, truncated [ 37.604825][ T3776] loop2: p1 < > p4 [ 37.620889][ T3776] loop2: p4 size 8388608 extends beyond EOD, truncated [ 37.644969][ T2991] loop2: p1 < > p4 [ 37.649338][ T2991] loop2: p4 size 8388608 extends beyond EOD, truncated [ 37.704529][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.723739][ C1] hrtimer: interrupt took 46704 ns [ 37.754913][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.780010][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.828387][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 37.864113][ T3810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'. [ 37.881115][ T3815] sd 0:0:1:0: device reset [ 37.888280][ T3807] loop3: detected capacity change from 0 to 4096 [ 37.919973][ T3807] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.961148][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.059493][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 38.105341][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.129884][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.254495][ T3846] syz.1.166 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.370761][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 38.370829][ T29] audit: type=1400 audit(1754818778.627:357): avc: denied { bind } for pid=3862 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.417571][ T3860] loop4: detected capacity change from 0 to 4096 [ 38.423341][ T29] audit: type=1400 audit(1754818778.627:358): avc: denied { node_bind } for pid=3862 comm="syz.1.174" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.445152][ T29] audit: type=1400 audit(1754818778.627:359): avc: denied { name_bind } for pid=3862 comm="syz.1.174" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 38.490503][ T3868] netlink: 'syz.1.175': attribute type 6 has an invalid length. [ 38.504308][ T3860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.544855][ T29] audit: type=1400 audit(1754818778.797:360): avc: denied { read } for pid=3859 comm="syz.4.173" path=2F33312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.580748][ T29] audit: type=1400 audit(1754818778.797:361): avc: denied { map } for pid=3859 comm="syz.4.173" path=2F33312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.616679][ T29] audit: type=1400 audit(1754818778.797:362): avc: denied { execute } for pid=3859 comm="syz.4.173" path=2F33312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.664547][ T29] audit: type=1400 audit(1754818778.927:363): avc: denied { validate_trans } for pid=3878 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.686510][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.734396][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.770103][ T3887] capability: warning: `syz.3.184' uses deprecated v2 capabilities in a way that may be insecure [ 38.813581][ T29] audit: type=1326 audit(1754818779.077:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864674ebe9 code=0x7ffc0000 [ 38.836922][ T29] audit: type=1326 audit(1754818779.077:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864674ebe9 code=0x7ffc0000 [ 38.860251][ T29] audit: type=1326 audit(1754818779.077:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864674ebe9 code=0x7ffc0000 [ 39.123855][ T3921] loop4: detected capacity change from 0 to 1024 [ 39.139878][ T3921] EXT4-fs: Ignoring removed orlov option [ 39.179404][ T3921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.198916][ T3928] syz.1.201 uses obsolete (PF_INET,SOCK_PACKET) [ 39.483617][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.549278][ T3968] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.558550][ T3971] openvswitch: netlink: Message has 6 unknown bytes. [ 39.574945][ T3968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.642062][ T3979] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 39.655627][ T3983] __nla_validate_parse: 4 callbacks suppressed [ 39.655651][ T3983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 39.682462][ T3983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.699989][ T3983] bond1: (slave batadv0): Opening slave failed [ 39.858651][ T4009] C: renamed from team_slave_0 [ 39.876352][ T4011] process 'syz.1.240' launched '/dev/fd/3' with NULL argv: empty string added [ 39.886614][ T4009] netlink: 152 bytes leftover after parsing attributes in process `syz.4.239'. [ 39.973954][ T4022] loop2: detected capacity change from 0 to 2048 [ 39.982473][ T4022] EXT4-fs: inline encryption not supported [ 40.037399][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.177197][ T4022] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.245: bg 0: block 234: padding at end of block bitmap is not set [ 40.234784][ T4022] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.247102][ T4022] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.247102][ T4022] [ 40.256976][ T4022] EXT4-fs (loop2): Total free blocks count 0 [ 40.263004][ T4022] EXT4-fs (loop2): Free/Dirty block details [ 40.268964][ T4022] EXT4-fs (loop2): free_blocks=0 [ 40.274040][ T4022] EXT4-fs (loop2): dirty_blocks=16 [ 40.279200][ T4022] EXT4-fs (loop2): Block reservation details [ 40.285385][ T4022] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 40.337585][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.537801][ T4089] team_slave_0: entered promiscuous mode [ 40.543580][ T4089] team_slave_1: entered promiscuous mode [ 40.558595][ T4089] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 40.568225][ T4089] team0: Device macvtap1 is already an upper device of the team interface [ 40.580606][ T4089] team_slave_0: left promiscuous mode [ 40.586031][ T4089] team_slave_1: left promiscuous mode [ 40.666573][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 41.102033][ T4146] loop4: detected capacity change from 0 to 512 [ 41.135200][ T4146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.161351][ T4146] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.271251][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.362376][ T4167] netlink: 76 bytes leftover after parsing attributes in process `syz.3.311'. [ 41.404807][ T4173] macvtap0: refused to change device tx_queue_len [ 41.615839][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 41.649505][ T4209] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 42.106035][ T4281] netlink: 'syz.0.337': attribute type 21 has an invalid length. [ 42.122080][ T4281] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 42.129858][ T4281] netlink: 144 bytes leftover after parsing attributes in process `syz.0.337'. [ 42.221356][ T4306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4306 comm=syz.0.343 [ 42.777515][ T4403] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004DB|0xffffffffffffffffmemory.events [ 42.905901][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 42.992334][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 43.001373][ T4438] netlink: 'syz.1.375': attribute type 18 has an invalid length. [ 43.068057][ T4438] vxlan0: entered promiscuous mode [ 43.087078][ T1881] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.137656][ T1881] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.146564][ T1881] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.155489][ T1881] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.318687][ T4471] infiniband syz!: set active [ 43.323516][ T4471] infiniband syz!: added team_slave_0 [ 43.370285][ T4471] RDS/IB: syz!: added [ 43.381900][ T4471] smc: adding ib device syz! with port count 1 [ 43.388322][ T4471] smc: ib device syz! port 1 has pnetid [ 43.522845][ T4490] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 43.565541][ T4492] loop2: detected capacity change from 0 to 1024 [ 43.593884][ T4492] EXT4-fs: Ignoring removed orlov option [ 43.613753][ T4492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.666373][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 43.666410][ T29] audit: type=1326 audit(1754818783.927:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.695847][ T29] audit: type=1326 audit(1754818783.927:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.719101][ T29] audit: type=1326 audit(1754818783.927:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.742342][ T29] audit: type=1326 audit(1754818783.927:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.771871][ T29] audit: type=1326 audit(1754818784.027:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.795485][ T29] audit: type=1326 audit(1754818784.027:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.818746][ T29] audit: type=1326 audit(1754818784.027:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.842384][ T29] audit: type=1326 audit(1754818784.057:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.865795][ T29] audit: type=1326 audit(1754818784.057:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.889033][ T29] audit: type=1326 audit(1754818784.057:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 43.991674][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.281508][ T4522] C: renamed from team_slave_0 (while UP) [ 44.292653][ T4522] netlink: 152 bytes leftover after parsing attributes in process `syz.0.414'. [ 44.398325][ T4530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.419'. [ 44.612301][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.619740][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.627232][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.634640][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.642052][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.649444][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.656910][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.664373][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.671829][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.679264][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.733359][ T4564] serio: Serial port ptm0 [ 44.740465][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [] on [ 45.108079][ T4586] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.125736][ T4584] IPVS: stopping master sync thread 4586 ... [ 45.231086][ T4593] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.680097][ T4644] geneve2: entered promiscuous mode [ 45.685419][ T4644] geneve2: entered allmulticast mode [ 46.205447][ T4685] __nla_validate_parse: 7 callbacks suppressed [ 46.205464][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 46.846493][ T4789] loop4: detected capacity change from 0 to 1024 [ 46.924405][ T4789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.950927][ T4810] netlink: 'syz.1.497': attribute type 27 has an invalid length. [ 47.011159][ T4820] loop2: detected capacity change from 0 to 1024 [ 47.024370][ T4818] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004DB|0xffffffffffffffffmemory.events [ 47.038132][ T4820] EXT4-fs: Ignoring removed oldalloc option [ 47.074985][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.088839][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.096106][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.138944][ T4820] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.145865][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.160523][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.193577][ T4820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.240401][ T4810] vxlan0: left promiscuous mode [ 47.272277][ T4820] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 47.305972][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.321025][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.329442][ T4821] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.343194][ T4821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.361024][ T31] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.370011][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.396405][ T31] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.405412][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.416881][ T4844] loop2: detected capacity change from 0 to 512 [ 47.460820][ T4844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.465150][ T31] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.482221][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.491159][ T4844] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.495299][ T31] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.510513][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.551536][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.685657][ T4871] loop3: detected capacity change from 0 to 1024 [ 47.705979][ T4871] EXT4-fs: Ignoring removed oldalloc option [ 47.721834][ T4871] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.747420][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.787398][ T4871] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 47.809676][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.938911][ T4884] SELinux: ebitmap: truncated map [ 47.944810][ T4884] SELinux: failed to load policy [ 48.171691][ T4901] netlink: 76 bytes leftover after parsing attributes in process `syz.3.532'. [ 48.182853][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 48.201357][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.208801][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.243697][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.251091][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.395428][ T4923] netlink: 3 bytes leftover after parsing attributes in process `syz.0.541'. [ 48.416781][ T4923] batadv0: entered promiscuous mode [ 48.422107][ T4923] batadv0: entered allmulticast mode [ 48.770764][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 48.830173][ T4953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.837648][ T4953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.854003][ T4953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.861533][ T4953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.903851][ T4958] netlink: 'syz.3.557': attribute type 27 has an invalid length. [ 48.981379][ T4958] bridge0: port 3(dummy0) entered disabled state [ 48.987907][ T4958] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.995148][ T4958] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.091802][ T36] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 49.105083][ T4958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.151466][ T4967] fido_id[4967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.172194][ T4958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.208455][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 49.208471][ T29] audit: type=1400 audit(1754818789.467:711): avc: denied { map } for pid=4970 comm="syz.0.560" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.295850][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.313586][ T4959] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.340273][ T4975] SELinux: unknown common r [ 49.345600][ T4959] bridge0: port 3(dummy0) entered blocking state [ 49.352075][ T4959] bridge0: port 3(dummy0) entered forwarding state [ 49.357756][ T4975] SELinux: failed to load policy [ 49.374602][ T4959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.412085][ T3416] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.431786][ T3416] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.468711][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.484539][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.494583][ T29] audit: type=1400 audit(1754818789.747:712): avc: denied { append } for pid=4983 comm="syz.4.569" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.556043][ T4993] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 49.579782][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 49.604077][ T4995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.693623][ T4995] bond1: (slave batadv0): Opening slave failed [ 49.719750][ T29] audit: type=1326 audit(1754818789.977:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 49.744719][ T29] audit: type=1326 audit(1754818789.977:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 49.768046][ T29] audit: type=1326 audit(1754818789.977:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 49.791461][ T29] audit: type=1326 audit(1754818789.977:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 49.814847][ T29] audit: type=1326 audit(1754818789.977:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 49.904444][ T5019] loop2: detected capacity change from 0 to 512 [ 49.912854][ T29] audit: type=1326 audit(1754818790.017:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 49.936157][ T29] audit: type=1400 audit(1754818790.057:719): avc: denied { create } for pid=5009 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 49.942090][ T5019] EXT4-fs: Ignoring removed oldalloc option [ 49.955810][ T29] audit: type=1326 audit(1754818790.107:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5011 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 50.102643][ T5019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.584: Parent and EA inode have the same ino 15 [ 50.132913][ T5019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.584: Parent and EA inode have the same ino 15 [ 50.149550][ T5019] EXT4-fs (loop2): 1 orphan inode deleted [ 50.169746][ T5019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.170165][ T5050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.598'. [ 50.204207][ T5052] loop4: detected capacity change from 0 to 164 [ 50.233234][ T5052] bio_check_eod: 102 callbacks suppressed [ 50.233281][ T5052] syz.4.599: attempt to access beyond end of device [ 50.233281][ T5052] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.279726][ T5052] syz.4.599: attempt to access beyond end of device [ 50.279726][ T5052] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.293758][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.363143][ T5065] loop4: detected capacity change from 0 to 1024 [ 50.394151][ T5069] loop3: detected capacity change from 0 to 1024 [ 50.402536][ T5069] EXT4-fs: Ignoring removed orlov option [ 50.408638][ T5065] EXT4-fs: Ignoring removed bh option [ 50.414261][ T5065] EXT4-fs: inline encryption not supported [ 50.423021][ T5069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.435851][ T5065] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.453034][ T5065] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.605: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.468433][ T5065] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.605: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.483217][ T5065] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.605: Failed to acquire dquot type 0 [ 50.495226][ T5065] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.505177][ T5065] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.605: mark_inode_dirty error [ 50.516414][ T5065] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.526715][ T5065] EXT4-fs (loop4): 1 orphan inode deleted [ 50.532779][ T5065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.545325][ T4376] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.571178][ T4376] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 50.597531][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.614284][ T3303] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.638927][ T3303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.650875][ T3303] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 50.730573][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.776626][ T5077] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 50.916787][ T5088] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.926900][ T5089] netlink: 'syz.2.613': attribute type 27 has an invalid length. [ 51.035887][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.043178][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.193124][ T5115] loop3: detected capacity change from 0 to 128 [ 51.237266][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.276227][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.294965][ T5096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.312262][ T4376] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.324601][ T4376] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.514725][ T5126] netlink: 'syz.2.632': attribute type 13 has an invalid length. [ 51.709667][ T5137] loop4: detected capacity change from 0 to 512 [ 51.806901][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 51.834784][ T5137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.851323][ T4376] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.860392][ T4376] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.901450][ T5137] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.014215][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.054374][ T5149] loop3: detected capacity change from 0 to 512 [ 52.083310][ T5149] EXT4-fs: Ignoring removed oldalloc option [ 52.129193][ T5149] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.642: Parent and EA inode have the same ino 15 [ 52.149922][ T5149] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.642: Parent and EA inode have the same ino 15 [ 52.171977][ T5149] EXT4-fs (loop3): 1 orphan inode deleted [ 52.178172][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.211389][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.419562][ T5189] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 52.743042][ T5236] vhci_hcd: default hub control req: 6006 v0f00 i0001 l0 [ 52.856272][ T5250] loop4: detected capacity change from 0 to 128 [ 53.151026][ T5271] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.242058][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 53.541850][ T5229] cgroup: fork rejected by pids controller in /syz2 [ 53.643825][ T5324] tipc: Started in network mode [ 53.648761][ T5324] tipc: Node identity 4, cluster identity 4711 [ 53.655054][ T5324] tipc: Node number set to 4 [ 54.444118][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 54.444136][ T29] audit: type=1326 audit(1754818794.707:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9099ebe9 code=0x7ffc0000 [ 54.511148][ T29] audit: type=1326 audit(1754818794.747:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f5b9099ebe9 code=0x7ffc0000 [ 54.534489][ T29] audit: type=1326 audit(1754818794.747:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9099ebe9 code=0x7ffc0000 [ 54.587001][ T5377] loop4: detected capacity change from 0 to 4096 [ 54.599134][ T5377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.673068][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.755605][ T5396] netlink: 'syz.0.739': attribute type 13 has an invalid length. [ 54.866675][ T29] audit: type=1400 audit(1754818795.127:891): avc: denied { mount } for pid=5407 comm="syz.1.745" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.870209][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.895934][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.931705][ T5411] loop4: detected capacity change from 0 to 512 [ 54.940868][ T5411] EXT4-fs: Ignoring removed oldalloc option [ 54.951324][ T29] audit: type=1326 audit(1754818795.187:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 54.974665][ T29] audit: type=1326 audit(1754818795.187:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 54.997944][ T29] audit: type=1326 audit(1754818795.187:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 55.021270][ T29] audit: type=1326 audit(1754818795.187:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 55.044566][ T29] audit: type=1326 audit(1754818795.187:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 55.067837][ T29] audit: type=1326 audit(1754818795.187:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 55.102632][ T5411] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.746: Parent and EA inode have the same ino 15 [ 55.129843][ T5411] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.746: Parent and EA inode have the same ino 15 [ 55.143124][ T5411] EXT4-fs (loop4): 1 orphan inode deleted [ 55.164245][ T5411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.216628][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.270452][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.279927][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.296764][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.316987][ T51] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.558708][ T5446] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.578871][ T5446] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 56.394344][ T5498] loop4: detected capacity change from 0 to 2048 [ 56.427431][ T3291] loop4: p2 p3 p7 [ 56.439661][ T5498] loop4: p2 p3 p7 [ 56.501208][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 56.512129][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 56.522111][ T3803] udevd[3803]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 56.543466][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 56.554435][ T3803] udevd[3803]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 56.565596][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 56.727910][ T5529] loop4: detected capacity change from 0 to 512 [ 56.734862][ T5529] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.760613][ T5529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.773708][ T5529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.801646][ T5529] EXT4-fs (loop4): 1 truncate cleaned up [ 56.816810][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.857224][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.039059][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 57.581296][ T5592] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.588749][ T5592] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 58.278015][ T5621] netlink: 7 bytes leftover after parsing attributes in process `syz.0.847'. [ 58.291334][ T5621] netlink: 7 bytes leftover after parsing attributes in process `syz.0.847'. [ 58.416270][ T5635] Falling back ldisc for ttyS3. [ 58.424944][ T5640] wg2: entered promiscuous mode [ 58.429866][ T5640] wg2: entered allmulticast mode [ 58.612521][ T5665] netlink: 7 bytes leftover after parsing attributes in process `syz.2.858'. [ 58.621945][ T5665] netlink: 7 bytes leftover after parsing attributes in process `syz.2.858'. [ 58.665698][ T5673] netlink: 'syz.2.862': attribute type 8 has an invalid length. [ 58.701472][ T5669] Falling back ldisc for ttyS3. [ 58.732970][ T5677] loop4: detected capacity change from 0 to 2048 [ 58.755863][ T5677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.768083][ T5677] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.795094][ T5687] netlink: 'syz.0.877': attribute type 8 has an invalid length. [ 58.823345][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.911446][ T5698] SELinux: ebitmap: truncated map [ 58.919363][ T5698] SELinux: failed to load policy [ 59.418157][ T5729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'. [ 59.745882][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 59.745961][ T29] audit: type=1326 audit(2000000003.030:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 59.775767][ T29] audit: type=1326 audit(2000000003.030:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 59.863225][ T29] audit: type=1326 audit(2000000003.040:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 59.886628][ T29] audit: type=1326 audit(2000000003.040:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 59.910292][ T29] audit: type=1326 audit(2000000003.040:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 59.933773][ T29] audit: type=1326 audit(59.751:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 59.956766][ T29] audit: type=1326 audit(59.761:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 60.062208][ T29] audit: type=1326 audit(60.041:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864674ebe9 code=0x7ffc0000 [ 60.134806][ T29] audit: type=1326 audit(60.081:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864674ebe9 code=0x7ffc0000 [ 60.157503][ T29] audit: type=1326 audit(60.081:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864674ebe9 code=0x7ffc0000 [ 60.906438][ T5884] netlink: 'syz.1.929': attribute type 4 has an invalid length. [ 60.914186][ T5884] netlink: 17 bytes leftover after parsing attributes in process `syz.1.929'. [ 61.718070][ T5966] loop3: detected capacity change from 0 to 8192 [ 62.523227][ T6039] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 62.530950][ T6039] netlink: 'syz.1.997': attribute type 6 has an invalid length. [ 62.538711][ T6039] netlink: 'syz.1.997': attribute type 3 has an invalid length. [ 62.546476][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.997'. [ 62.564373][ T6038] bridge0: entered promiscuous mode [ 62.570635][ T6038] bridge0: port 3(macsec1) entered blocking state [ 62.577251][ T6038] bridge0: port 3(macsec1) entered disabled state [ 62.585071][ T6038] macsec1: entered allmulticast mode [ 62.590474][ T6038] bridge0: entered allmulticast mode [ 62.597256][ T6038] macsec1: left allmulticast mode [ 62.602369][ T6038] bridge0: left allmulticast mode [ 62.608552][ T6038] bridge0: left promiscuous mode [ 62.664797][ T10] hid_parser_main: 22 callbacks suppressed [ 62.664809][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.678112][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.685521][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.693094][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.700504][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.708049][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.715631][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.723080][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.730731][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.738143][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.764287][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 62.973885][ T6077] loop1: detected capacity change from 0 to 512 [ 62.983954][ T6077] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.000633][ T6083] netlink: 'syz.3.1020': attribute type 29 has an invalid length. [ 63.009683][ T6083] netlink: 'syz.3.1020': attribute type 29 has an invalid length. [ 63.018558][ T6083] netlink: 480 bytes leftover after parsing attributes in process `syz.3.1020'. [ 63.019735][ T6077] EXT4-fs (loop1): 1 truncate cleaned up [ 63.065122][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.133593][ T6097] bridge0: port 3(macsec1) entered blocking state [ 63.140128][ T6097] bridge0: port 3(macsec1) entered disabled state [ 63.148113][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.157182][ T6095] loop2: detected capacity change from 0 to 8192 [ 63.173285][ T6097] macsec1: entered allmulticast mode [ 63.178639][ T6097] bridge0: entered allmulticast mode [ 63.186391][ T6097] macsec1: left allmulticast mode [ 63.191473][ T6097] bridge0: left allmulticast mode [ 63.224102][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.233158][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.329163][ T6128] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 63.336989][ T6128] netlink: 'syz.3.1041': attribute type 6 has an invalid length. [ 63.344851][ T6128] netlink: 'syz.3.1041': attribute type 3 has an invalid length. [ 63.352691][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1041'. [ 63.364888][ T6130] loop4: detected capacity change from 0 to 512 [ 63.372362][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1043'. [ 63.381371][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 63.390411][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1043'. [ 63.400739][ T6130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.402050][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1043'. [ 63.413329][ T6130] EXT4-fs (loop4): 1 truncate cleaned up [ 63.426308][ T6130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.481542][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.642355][ T6173] loop3: detected capacity change from 0 to 512 [ 63.656304][ T6173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.685003][ T6173] EXT4-fs (loop3): 1 truncate cleaned up [ 63.698428][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.750759][ T5825] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 63.804193][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.896323][ T6194] netlink: 'syz.1.1070': attribute type 29 has an invalid length. [ 63.913143][ T6194] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1070'. [ 63.969986][ T6200] vxcan3: entered promiscuous mode [ 63.975230][ T6200] vxcan3: entered allmulticast mode [ 64.545761][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz1] on syz0 [ 64.755712][ T6259] bridge0: entered promiscuous mode [ 64.772501][ T6259] bridge0: port 4(macsec1) entered blocking state [ 64.779011][ T6259] bridge0: port 4(macsec1) entered disabled state [ 64.786934][ T6259] macsec1: entered allmulticast mode [ 64.792342][ T6259] bridge0: entered allmulticast mode [ 64.800757][ T6259] macsec1: left allmulticast mode [ 64.805850][ T6259] bridge0: left allmulticast mode [ 64.821204][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 64.830334][ T6259] bridge0: left promiscuous mode [ 64.850526][ T6263] vlan2: entered promiscuous mode [ 64.855622][ T6263] gretap0: entered promiscuous mode [ 64.998542][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 64.998558][ T29] audit: type=1400 audit(64.981:1201): avc: denied { override_creds } for pid=6279 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.064517][ T29] audit: type=1326 audit(65.051:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.087351][ T29] audit: type=1326 audit(65.051:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.110061][ T29] audit: type=1326 audit(65.051:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.132814][ T29] audit: type=1326 audit(65.081:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.155581][ T29] audit: type=1326 audit(65.081:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.178382][ T29] audit: type=1326 audit(65.081:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.201151][ T29] audit: type=1326 audit(65.081:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.223892][ T29] audit: type=1326 audit(65.081:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.246662][ T29] audit: type=1326 audit(65.081:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef406ebe9 code=0x7ffc0000 [ 65.444057][ T6319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1128'. [ 66.089872][ T6402] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.161936][ T6408] syzkaller1: entered promiscuous mode [ 66.167529][ T6408] syzkaller1: entered allmulticast mode [ 66.268544][ T6410] loop2: detected capacity change from 0 to 1024 [ 66.275311][ T6410] EXT4-fs: Ignoring removed orlov option [ 66.286823][ T6410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.337335][ T6416] 0{X: renamed from gretap0 (while UP) [ 66.352958][ T6416] 0{X: entered allmulticast mode [ 66.358887][ T6416] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 66.422917][ T6425] validate_nla: 1 callbacks suppressed [ 66.422932][ T6425] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 66.442308][ T6425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.460869][ T6425] bond1: (slave bridge1): making interface the new active one [ 66.469934][ T6425] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 66.510045][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.954937][ T6493] vlan2: entered promiscuous mode [ 66.960100][ T6493] gretap0: entered promiscuous mode [ 67.616305][ T6559] vhci_hcd: invalid port number 23 [ 67.775865][ T6586] vxcan3: entered promiscuous mode [ 67.781038][ T6586] vxcan3: entered allmulticast mode [ 67.789136][ T6587] __nla_validate_parse: 3 callbacks suppressed [ 67.789186][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1249'. [ 67.815420][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 67.832020][ T6587] vlan2: entered promiscuous mode [ 67.837139][ T6587] gretap0: entered promiscuous mode [ 67.844632][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 67.854424][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 67.864120][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 68.035201][ T6619] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 68.062598][ T6622] vxcan3: entered promiscuous mode [ 68.067906][ T6622] vxcan3: entered allmulticast mode [ 68.152167][ T6631] netlink: 'syz.3.1264': attribute type 3 has an invalid length. [ 68.711196][ T6703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1297'. [ 68.728666][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1298'. [ 68.737786][ T6705] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1298'. [ 68.778962][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1298'. [ 68.810567][ T6705] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1298'. [ 69.585570][ T6735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6735 comm=syz.1.1311 [ 69.598140][ T6735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6735 comm=syz.1.1311 [ 69.678065][ T6753] netlink: 'syz.1.1321': attribute type 21 has an invalid length. [ 69.702923][ T6758] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.715088][ T6760] netlink: 'syz.3.1324': attribute type 2 has an invalid length. [ 69.722909][ T6760] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 70.008432][ T6815] loop1: detected capacity change from 0 to 512 [ 70.039465][ T6815] __quota_error: 385 callbacks suppressed [ 70.039482][ T6815] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 70.055840][ T29] audit: type=1400 audit(70.051:1596): avc: denied { sys_module } for pid=6817 comm="syz.3.1346" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.077776][ T6815] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.093760][ T6815] EXT4-fs (loop1): mount failed [ 70.161279][ T6833] 9pnet: Could not find request transport: 0xffffffffffffffff [ 70.179923][ T6839] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 70.215504][ T29] audit: type=1326 audit(70.201:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.238402][ T29] audit: type=1326 audit(70.201:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.261075][ T29] audit: type=1326 audit(70.201:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.296741][ T6848] loop1: detected capacity change from 0 to 1024 [ 70.297981][ T29] audit: type=1326 audit(70.271:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.305992][ T6848] EXT4-fs: Ignoring removed bh option [ 70.325955][ T29] audit: type=1326 audit(70.271:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.331729][ T6848] EXT4-fs: inline encryption not supported [ 70.354145][ T29] audit: type=1326 audit(70.271:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.363661][ T6848] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.382663][ T29] audit: type=1326 audit(70.271:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 70.395692][ T6848] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1356: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.415615][ T29] audit: type=1326 audit(70.271:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 70.509569][ T6848] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1356: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.542850][ T6848] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1356: Failed to acquire dquot type 0 [ 70.554480][ T6848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 70.564799][ T6848] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1356: mark_inode_dirty error [ 70.565695][ T6869] netlink: zone id is out of range [ 70.581344][ T6869] netlink: zone id is out of range [ 70.586968][ T6848] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 70.597573][ T6848] EXT4-fs (loop1): 1 orphan inode deleted [ 70.602219][ T6869] netlink: zone id is out of range [ 70.608813][ T6869] netlink: zone id is out of range [ 70.614362][ T6869] netlink: zone id is out of range [ 70.614480][ T5818] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.619505][ T6869] netlink: zone id is out of range [ 70.619522][ T6869] netlink: zone id is out of range [ 70.620173][ T6848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.642686][ T5818] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 0 [ 70.700342][ T6848] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 70.730206][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.049153][ T6926] 9pnet_fd: Insufficient options for proto=fd [ 71.155207][ T6938] unsupported nla_type 65024 [ 71.715119][ T7023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7023 comm=syz.1.1436 [ 72.117481][ T7096] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 72.127633][ T7096] SELinux: failed to load policy [ 72.544441][ T7146] 9p: Unknown access argument 0xffffffffffffffff: -22 [ 72.592989][ T7152] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.677989][ T7160] capability: warning: `syz.4.1497' uses 32-bit capabilities (legacy support in use) [ 72.759027][ T7174] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.194189][ T7211] __nla_validate_parse: 15 callbacks suppressed [ 73.194209][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 73.225965][ T7211] IPVS: Error joining to the multicast group [ 73.240073][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 73.309152][ T7222] loop1: detected capacity change from 0 to 512 [ 73.327818][ T7222] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1526: iget: bad i_size value: 38620345925642 [ 73.355284][ T7222] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1526: couldn't read orphan inode 15 (err -117) [ 73.381694][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.462346][ T7234] netlink: 'syz.0.1531': attribute type 21 has an invalid length. [ 73.483966][ T7235] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1526: bg 0: block 5: invalid block bitmap [ 73.484008][ T7234] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1531'. [ 73.507138][ T7235] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1440 with error 28 [ 73.519727][ T7235] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.519727][ T7235] [ 73.529481][ T7235] EXT4-fs (loop1): Total free blocks count 0 [ 73.535566][ T7235] EXT4-fs (loop1): Free/Dirty block details [ 73.541598][ T7235] EXT4-fs (loop1): free_blocks=0 [ 73.546563][ T7235] EXT4-fs (loop1): dirty_blocks=1449 [ 73.551917][ T7235] EXT4-fs (loop1): Block reservation details [ 73.558084][ T7235] EXT4-fs (loop1): i_reserved_data_blocks=1449 [ 73.631570][ T5825] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1440 with max blocks 8 with error 28 [ 73.734719][ T7259] x_tables: ip_tables: udp match: only valid for protocol 17 [ 73.763202][ T7263] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1545'. [ 74.161588][ T7285] netlink: 'syz.3.1554': attribute type 10 has an invalid length. [ 74.174649][ T7285] bridge0: port 3(dummy0) entered disabled state [ 74.181864][ T7285] dummy0: left allmulticast mode [ 74.186894][ T7285] dummy0: left promiscuous mode [ 74.191898][ T7285] bridge0: port 3(dummy0) entered disabled state [ 74.200057][ T7285] team0: Port device dummy0 added [ 74.213069][ T7285] netlink: 'syz.3.1554': attribute type 10 has an invalid length. [ 74.233238][ T7285] team0: Port device dummy0 removed [ 74.240271][ T7285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.325355][ T7292] netlink: 'syz.1.1557': attribute type 4 has an invalid length. [ 74.792482][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 74.827377][ T7333] wireguard0: entered promiscuous mode [ 74.833105][ T7333] wireguard0: entered allmulticast mode [ 75.078547][ T7341] Set syz1 is full, maxelem 65536 reached [ 75.151639][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 75.151700][ T29] audit: type=1400 audit(75.131:1840): avc: denied { create } for pid=7352 comm="syz.3.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.182415][ T29] audit: type=1400 audit(75.171:1841): avc: denied { connect } for pid=7352 comm="syz.3.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.222993][ T7363] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1589'. [ 75.232678][ T7363] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1589'. [ 75.368231][ T29] audit: type=1326 audit(75.351:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 75.399124][ T29] audit: type=1326 audit(75.351:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 75.421937][ T29] audit: type=1326 audit(75.351:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 75.444800][ T29] audit: type=1326 audit(75.351:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 75.467577][ T29] audit: type=1326 audit(75.351:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff436caebe9 code=0x7ffc0000 [ 75.493175][ T29] audit: type=1326 audit(75.381:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 75.515907][ T29] audit: type=1326 audit(75.381:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 75.538713][ T29] audit: type=1326 audit(75.381:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c3e0ebe9 code=0x7ffc0000 [ 75.579417][ T7402] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 75.640181][ T7414] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1613'. [ 75.658990][ T7414] batadv0: entered promiscuous mode [ 75.664265][ T7414] batadv0: entered allmulticast mode [ 75.827653][ T7454] IPVS: Error joining to the multicast group [ 75.851567][ T7456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1634'. [ 75.860636][ T7456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1634'. [ 76.140639][ T7516] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 76.167510][ T7516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.194621][ T7516] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 76.336921][ T7527] ================================================================== [ 76.345022][ T7527] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 76.353617][ T7527] [ 76.355938][ T7527] write to 0xffff88812d318228 of 8 bytes by task 7531 on cpu 0: [ 76.363589][ T7527] shmem_file_splice_read+0x470/0x600 [ 76.368974][ T7527] splice_direct_to_actor+0x26f/0x680 [ 76.374351][ T7527] do_splice_direct+0xda/0x150 [ 76.379118][ T7527] do_sendfile+0x380/0x650 [ 76.383544][ T7527] __x64_sys_sendfile64+0x105/0x150 [ 76.388762][ T7527] x64_sys_call+0x2bb0/0x2ff0 [ 76.393453][ T7527] do_syscall_64+0xd2/0x200 [ 76.397980][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.403897][ T7527] [ 76.406219][ T7527] write to 0xffff88812d318228 of 8 bytes by task 7527 on cpu 1: [ 76.413854][ T7527] shmem_file_splice_read+0x470/0x600 [ 76.419255][ T7527] splice_direct_to_actor+0x26f/0x680 [ 76.424634][ T7527] do_splice_direct+0xda/0x150 [ 76.429403][ T7527] do_sendfile+0x380/0x650 [ 76.433840][ T7527] __x64_sys_sendfile64+0x105/0x150 [ 76.439066][ T7527] x64_sys_call+0x2bb0/0x2ff0 [ 76.443747][ T7527] do_syscall_64+0xd2/0x200 [ 76.448261][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.454164][ T7527] [ 76.456489][ T7527] value changed: 0x0000000000013b30 -> 0x0000000000013b90 [ 76.463599][ T7527] [ 76.465927][ T7527] Reported by Kernel Concurrency Sanitizer on: [ 76.472102][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.3.1666 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 76.484253][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.494318][ T7527] ==================================================================