last executing test programs: 17.740286292s ago: executing program 4 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 17.555622044s ago: executing program 4 (id=710): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 17.519924694s ago: executing program 4 (id=712): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a060003"], 0x18}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 17.439921126s ago: executing program 4 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 17.439692315s ago: executing program 4 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000200), &(0x7f0000000400)}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 17.315971397s ago: executing program 4 (id=718): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d40800"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 17.264262857s ago: executing program 32 (id=718): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d40800"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 14.156163507s ago: executing program 0 (id=776): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) write$9p(r0, &(0x7f0000000040)=';', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 14.028020579s ago: executing program 0 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 13.97886704s ago: executing program 0 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 13.873170791s ago: executing program 0 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 13.823454102s ago: executing program 0 (id=783): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13.747861413s ago: executing program 0 (id=785): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x80000001}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eab, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2, 0x2aa}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 13.747724983s ago: executing program 33 (id=785): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x80000001}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eab, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2, 0x2aa}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1.940838205s ago: executing program 2 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x17) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.894190216s ago: executing program 2 (id=1059): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x76, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.795308997s ago: executing program 3 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)}, 0xa1}], 0x2, 0x0, 0x0) 1.612434569s ago: executing program 2 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'raw\x00', 0x7003, [0x0, 0x807f, 0x3, 0x50d, 0x25]}, &(0x7f0000000100)=0x54) 1.365090293s ago: executing program 6 (id=1070): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.233794884s ago: executing program 2 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x1e) close(r1) 1.101354316s ago: executing program 5 (id=1073): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1.100796936s ago: executing program 2 (id=1074): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x11b22}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xa}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.079242367s ago: executing program 5 (id=1075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 876.605019ms ago: executing program 3 (id=1076): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 876.406729ms ago: executing program 5 (id=1077): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x62040200) 838.93569ms ago: executing program 3 (id=1078): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 809.19256ms ago: executing program 3 (id=1079): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400000400000000000700000033", 0xfffffffffffffdfc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x28d, &(0x7f00003e4000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x0, 0xff7e, 0x0, 0xffffffffffffffff, 0x2280}) setuid(0xee01) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getpgrp(0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/95) 793.00212ms ago: executing program 3 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 611.880672ms ago: executing program 3 (id=1084): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000018c0)=[{0x0}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x2}, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000cc0), 0x4000000000002b6, 0x40002132, 0x0) 597.428123ms ago: executing program 1 (id=1086): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa, 0x800}, 0x4000080) close(r0) 588.368893ms ago: executing program 6 (id=1087): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x688ff5d5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) 455.725424ms ago: executing program 6 (id=1088): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000']) 448.896935ms ago: executing program 2 (id=1089): prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) 419.504435ms ago: executing program 1 (id=1090): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 348.408226ms ago: executing program 5 (id=1091): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008894}, 0x4) 298.383876ms ago: executing program 6 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a183000000000000000005"], 0x6c}}, 0x0) 292.418256ms ago: executing program 5 (id=1093): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x6, 0xffffffff}, 0x10) sendmsg$key(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0, 0x78}}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) 284.096867ms ago: executing program 1 (id=1094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 234.032448ms ago: executing program 6 (id=1095): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 233.754877ms ago: executing program 5 (id=1096): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 233.405568ms ago: executing program 1 (id=1097): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getrusage(0x0, &(0x7f0000000280)) 198.179658ms ago: executing program 6 (id=1098): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 65.939009ms ago: executing program 1 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r2, 0x1) 0s ago: executing program 1 (id=1100): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000001400)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) r2 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 24.054367][ T29] audit: type=1400 audit(1748453079.801:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.055270][ T3303] cgroup: Unknown subsys name 'net' [ 24.085729][ T29] audit: type=1400 audit(1748453079.801:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.117444][ T29] audit: type=1400 audit(1748453079.831:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.294039][ T3303] cgroup: Unknown subsys name 'cpuset' [ 24.306267][ T3303] cgroup: Unknown subsys name 'rlimit' [ 24.459609][ T29] audit: type=1400 audit(1748453080.201:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.485986][ T29] audit: type=1400 audit(1748453080.201:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.515005][ T29] audit: type=1400 audit(1748453080.201:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.540924][ T29] audit: type=1400 audit(1748453080.201:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.544808][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.566707][ T29] audit: type=1400 audit(1748453080.231:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.607237][ T29] audit: type=1400 audit(1748453080.231:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.619767][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.634280][ T29] audit: type=1400 audit(1748453080.331:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.820681][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 25.844374][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 25.926401][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.935047][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.943912][ T3315] bridge_slave_0: entered allmulticast mode [ 25.951010][ T3315] bridge_slave_0: entered promiscuous mode [ 25.973931][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.981202][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.989835][ T3324] bridge_slave_0: entered allmulticast mode [ 25.998512][ T3324] bridge_slave_0: entered promiscuous mode [ 26.007209][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.017643][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.033195][ T3315] bridge_slave_1: entered allmulticast mode [ 26.040988][ T3315] bridge_slave_1: entered promiscuous mode [ 26.058996][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.071023][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.079354][ T3324] bridge_slave_1: entered allmulticast mode [ 26.087046][ T3324] bridge_slave_1: entered promiscuous mode [ 26.146722][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.161695][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.177308][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.195021][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.215251][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.227718][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 26.265265][ T3324] team0: Port device team_slave_0 added [ 26.271513][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 26.290840][ T3315] team0: Port device team_slave_0 added [ 26.300345][ T3315] team0: Port device team_slave_1 added [ 26.311137][ T3324] team0: Port device team_slave_1 added [ 26.360514][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.368095][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.396955][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.415918][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.423561][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.454525][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.469475][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.477133][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.505426][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.525507][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.534117][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.565101][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.582769][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.593475][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.601536][ T3316] bridge_slave_0: entered allmulticast mode [ 26.612930][ T3316] bridge_slave_0: entered promiscuous mode [ 26.644544][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.653153][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.661492][ T3316] bridge_slave_1: entered allmulticast mode [ 26.670246][ T3316] bridge_slave_1: entered promiscuous mode [ 26.681703][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.690011][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.698680][ T3321] bridge_slave_0: entered allmulticast mode [ 26.706112][ T3321] bridge_slave_0: entered promiscuous mode [ 26.720781][ T3324] hsr_slave_0: entered promiscuous mode [ 26.727495][ T3324] hsr_slave_1: entered promiscuous mode [ 26.748608][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.757603][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.765022][ T3321] bridge_slave_1: entered allmulticast mode [ 26.772988][ T3321] bridge_slave_1: entered promiscuous mode [ 26.790321][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.798404][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.806803][ T3325] bridge_slave_0: entered allmulticast mode [ 26.814771][ T3325] bridge_slave_0: entered promiscuous mode [ 26.827087][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.849590][ T3315] hsr_slave_0: entered promiscuous mode [ 26.856074][ T3315] hsr_slave_1: entered promiscuous mode [ 26.862825][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.871484][ T3315] Cannot create hsr debugfs directory [ 26.890567][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.898238][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.906173][ T3325] bridge_slave_1: entered allmulticast mode [ 26.912905][ T3325] bridge_slave_1: entered promiscuous mode [ 26.920203][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.937971][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.962955][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.977353][ T3316] team0: Port device team_slave_0 added [ 27.000030][ T3316] team0: Port device team_slave_1 added [ 27.020261][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.032318][ T3321] team0: Port device team_slave_0 added [ 27.040133][ T3321] team0: Port device team_slave_1 added [ 27.049885][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.057025][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.093641][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.105741][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.113715][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.142496][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.158218][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.201549][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.210385][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.240714][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.259664][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.268514][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.297401][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.313780][ T3325] team0: Port device team_slave_0 added [ 27.328040][ T3325] team0: Port device team_slave_1 added [ 27.366152][ T3316] hsr_slave_0: entered promiscuous mode [ 27.372359][ T3316] hsr_slave_1: entered promiscuous mode [ 27.378507][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.386630][ T3316] Cannot create hsr debugfs directory [ 27.408204][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.415907][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.444092][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.465329][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.472833][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.500216][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.517921][ T3321] hsr_slave_0: entered promiscuous mode [ 27.524336][ T3321] hsr_slave_1: entered promiscuous mode [ 27.530609][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.538657][ T3321] Cannot create hsr debugfs directory [ 27.584735][ T3325] hsr_slave_0: entered promiscuous mode [ 27.591696][ T3325] hsr_slave_1: entered promiscuous mode [ 27.598359][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.606872][ T3325] Cannot create hsr debugfs directory [ 27.641692][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.662426][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.671932][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.695549][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.759137][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.779962][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.791773][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.810486][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.839013][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.850395][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.860120][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.869672][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.931166][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.940973][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.950243][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.965151][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.977461][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.987829][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.016056][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.025329][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.037893][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.047322][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.056457][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.074242][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.088092][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.097426][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.109481][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.120045][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.138647][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.151533][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.164266][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.175361][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.208255][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.250894][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.268386][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.289205][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.296704][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.306561][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.314101][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.328322][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.347043][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.359567][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.368266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.382485][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.404308][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.412355][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.442218][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.475318][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.487701][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.516061][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.524280][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.538117][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.546383][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.581766][ T3315] veth0_vlan: entered promiscuous mode [ 28.592356][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.602639][ T3315] veth1_vlan: entered promiscuous mode [ 28.642364][ T3315] veth0_macvtap: entered promiscuous mode [ 28.656710][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.681740][ T3324] veth0_vlan: entered promiscuous mode [ 28.696271][ T3315] veth1_macvtap: entered promiscuous mode [ 28.703788][ T3324] veth1_vlan: entered promiscuous mode [ 28.716415][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.732983][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.754603][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.765338][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.774313][ T3324] veth0_macvtap: entered promiscuous mode [ 28.786695][ T3324] veth1_macvtap: entered promiscuous mode [ 28.797018][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.806365][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.815724][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.824939][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.851100][ T3321] veth0_vlan: entered promiscuous mode [ 28.880413][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.894360][ T3321] veth1_vlan: entered promiscuous mode [ 28.918120][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.927234][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.962385][ T3321] veth0_macvtap: entered promiscuous mode [ 28.971038][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.980510][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.990189][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.999468][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.014397][ T3321] veth1_macvtap: entered promiscuous mode [ 29.038651][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.069940][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 29.069954][ T29] audit: type=1400 audit(1748453084.811:93): avc: denied { prog_load } for pid=3453 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.071455][ T3316] veth0_vlan: entered promiscuous mode [ 29.076784][ T29] audit: type=1400 audit(1748453084.811:94): avc: denied { bpf } for pid=3453 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.104291][ T3316] veth1_vlan: entered promiscuous mode [ 29.127968][ T29] audit: type=1400 audit(1748453084.811:95): avc: denied { perfmon } for pid=3453 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.143108][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.150287][ T29] audit: type=1400 audit(1748453084.841:96): avc: denied { name_bind } for pid=3453 comm="syz.1.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 29.167949][ T3316] veth0_macvtap: entered promiscuous mode [ 29.195428][ T3321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.204944][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214256][ T3321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.223792][ T3321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.235511][ T3316] veth1_macvtap: entered promiscuous mode [ 29.244037][ T29] audit: type=1400 audit(1748453084.991:97): avc: denied { prog_run } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.267203][ T3325] veth0_vlan: entered promiscuous mode [ 29.280833][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.292194][ T3325] veth1_vlan: entered promiscuous mode [ 29.309953][ T3458] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.311443][ T29] audit: type=1400 audit(1748453085.051:98): avc: denied { create } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.328570][ T3460] loop3: detected capacity change from 0 to 512 [ 29.346226][ T29] audit: type=1400 audit(1748453085.091:99): avc: denied { ioctl } for pid=3457 comm="syz.1.6" path="socket:[4580]" dev="sockfs" ino=4580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.384462][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.399399][ T3460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.401266][ T3458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 29.414206][ T3460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.442769][ T3325] veth0_macvtap: entered promiscuous mode [ 29.449706][ T3460] EXT4-fs (loop3): 1 truncate cleaned up [ 29.452604][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.465150][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.474074][ T3460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.474393][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.495964][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.505241][ T29] audit: type=1400 audit(1748453085.251:100): avc: denied { mount } for pid=3459 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.529626][ T29] audit: type=1400 audit(1748453085.281:101): avc: denied { add_name } for pid=3459 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.530040][ T3458] bridge_slave_1: left allmulticast mode [ 29.551563][ T29] audit: type=1400 audit(1748453085.281:102): avc: denied { create } for pid=3459 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.557774][ T3458] bridge_slave_1: left promiscuous mode [ 29.557934][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.599618][ T3458] bridge_slave_0: left allmulticast mode [ 29.606159][ T3458] bridge_slave_0: left promiscuous mode [ 29.613601][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.631425][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.655271][ T3466] loop3: detected capacity change from 0 to 512 [ 29.688021][ T3325] veth1_macvtap: entered promiscuous mode [ 29.697280][ T3466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.712029][ T3466] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.729603][ T3468] loop0: detected capacity change from 0 to 8192 [ 29.730659][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.750577][ T3468] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.773585][ T3468] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 29.782279][ T3468] FAT-fs (loop0): Filesystem has been set read-only [ 29.801469][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.820892][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.834081][ T3325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.850779][ T3325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.864870][ T3325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.874603][ T3325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.982988][ T3480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 30.072573][ T3488] openvswitch: netlink: Message has 6 unknown bytes. [ 30.214128][ T3495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 30.417919][ T3505] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 30.426221][ T3505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 30.444832][ T3505] dummy0: entered promiscuous mode [ 30.458466][ T3505] bridge0: port 3(dummy0) entered blocking state [ 30.465786][ T3505] bridge0: port 3(dummy0) entered disabled state [ 30.474362][ T3505] dummy0: entered allmulticast mode [ 30.481048][ T3505] bridge0: port 3(dummy0) entered blocking state [ 30.488326][ T3505] bridge0: port 3(dummy0) entered forwarding state [ 30.730228][ C1] hrtimer: interrupt took 74246 ns [ 30.772161][ T3534] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 30.781050][ T3534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.30'. [ 30.842625][ T3534] team0: Port device geneve1 added [ 30.874488][ T3546] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 30.890593][ T3534] syz.3.30 (3534) used greatest stack depth: 10056 bytes left [ 31.060286][ T3557] loop2: detected capacity change from 0 to 512 [ 31.077126][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.111401][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.163062][ T3571] program syz.2.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.293115][ T3586] wireguard0: entered promiscuous mode [ 31.299515][ T3586] wireguard0: entered allmulticast mode [ 31.333505][ T3589] mmap: syz.1.55 (3589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.408193][ T3593] xt_hashlimit: max too large, truncated to 1048576 [ 31.501533][ T3605] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 31.647921][ T3616] loop1: detected capacity change from 0 to 128 [ 31.742987][ T3616] syz.1.67: attempt to access beyond end of device [ 31.742987][ T3616] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 31.758430][ T3616] syz.1.67: attempt to access beyond end of device [ 31.758430][ T3616] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 31.774023][ T3616] syz.1.67: attempt to access beyond end of device [ 31.774023][ T3616] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 31.788512][ T3616] syz.1.67: attempt to access beyond end of device [ 31.788512][ T3616] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 31.802705][ T3616] syz.1.67: attempt to access beyond end of device [ 31.802705][ T3616] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 31.817458][ T3616] syz.1.67: attempt to access beyond end of device [ 31.817458][ T3616] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 31.831693][ T3616] syz.1.67: attempt to access beyond end of device [ 31.831693][ T3616] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 31.858594][ T3616] syz.1.67: attempt to access beyond end of device [ 31.858594][ T3616] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 31.876745][ T3616] syz.1.67: attempt to access beyond end of device [ 31.876745][ T3616] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 31.917673][ T3616] syz.1.67: attempt to access beyond end of device [ 31.917673][ T3616] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 32.280592][ T3653] netlink: 104 bytes leftover after parsing attributes in process `syz.3.82'. [ 32.435562][ T3665] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.89'. [ 32.612282][ T3683] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 32.612282][ T3683] program syz.3.94 not setting count and/or reply_len properly [ 32.828531][ T3695] loop2: detected capacity change from 0 to 1024 [ 32.929953][ T3697] sd 0:0:1:0: device reset [ 32.996493][ T3699] process 'syz.1.102' launched './file2' with NULL argv: empty string added [ 33.077676][ T3695] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.090357][ T3695] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.279937][ T3713] loop0: detected capacity change from 0 to 1024 [ 33.288998][ T3713] EXT4-fs: Ignoring removed orlov option [ 33.298450][ T3695] JBD2: no valid journal superblock found [ 33.304844][ T3695] EXT4-fs (loop2): Could not load journal inode [ 33.318319][ T3713] EXT4-fs (loop0): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 33.337888][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.374701][ T3695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 33.399550][ T3718] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 33.399550][ T3718] program syz.1.109 not setting count and/or reply_len properly [ 33.529583][ T3724] loop2: detected capacity change from 0 to 164 [ 33.557251][ T3724] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 33.575987][ T3724] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 33.590470][ T3724] Symlink component flag not implemented [ 33.597435][ T3724] Symlink component flag not implemented [ 33.605659][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.617897][ T3724] Symlink component flag not implemented (7) [ 33.624647][ T3724] Symlink component flag not implemented (116) [ 33.683243][ T3733] lo speed is unknown, defaulting to 1000 [ 33.690138][ T3733] lo speed is unknown, defaulting to 1000 [ 33.719268][ T3733] lo speed is unknown, defaulting to 1000 [ 33.748599][ T3733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.777114][ T3733] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.810954][ T3733] lo speed is unknown, defaulting to 1000 [ 33.825230][ T3733] lo speed is unknown, defaulting to 1000 [ 33.838584][ T3733] lo speed is unknown, defaulting to 1000 [ 33.845026][ T3733] lo speed is unknown, defaulting to 1000 [ 33.851181][ T3733] lo speed is unknown, defaulting to 1000 [ 33.985496][ T3754] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 34.075329][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 34.075397][ T29] audit: type=1326 audit(1748453089.821:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f912c5f5927 code=0x7ffc0000 [ 34.141985][ T29] audit: type=1326 audit(1748453089.821:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f912c59ab39 code=0x7ffc0000 [ 34.167440][ T29] audit: type=1326 audit(1748453089.821:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 34.192505][ T29] audit: type=1326 audit(1748453089.851:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f912c5f5927 code=0x7ffc0000 [ 34.215971][ T29] audit: type=1326 audit(1748453089.851:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f912c59ab39 code=0x7ffc0000 [ 34.240117][ T29] audit: type=1326 audit(1748453089.851:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 34.264347][ T29] audit: type=1326 audit(1748453089.851:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f912c5f5927 code=0x7ffc0000 [ 34.288870][ T29] audit: type=1326 audit(1748453089.851:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f912c59ab39 code=0x7ffc0000 [ 34.312378][ T29] audit: type=1326 audit(1748453089.851:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 34.337621][ T29] audit: type=1400 audit(1748453089.861:392): avc: denied { setopt } for pid=3757 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.798705][ T3806] syzkaller0: entered promiscuous mode [ 34.804435][ T3806] syzkaller0: entered allmulticast mode [ 34.970099][ T3814] futex_wake_op: syz.4.150 tries to shift op by -1; fix this program [ 34.995744][ T3812] capability: warning: `syz.3.149' uses 32-bit capabilities (legacy support in use) [ 34.996518][ T3816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 35.506030][ T3831] loop3: detected capacity change from 0 to 2048 [ 35.550259][ T3287] loop3: p1 < > p4 [ 35.568504][ T3287] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.632910][ T3831] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 35.693285][ T3008] loop3: p1 < > p4 [ 35.698245][ T3008] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.747986][ T3008] loop3: p1 < > p4 [ 35.764468][ T3008] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.835193][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.848786][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.878454][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.890996][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.964944][ T3808] syz.2.147 (3808) used greatest stack depth: 6992 bytes left [ 36.111746][ T3853] bridge_slave_0: left allmulticast mode [ 36.117910][ T3853] bridge_slave_0: left promiscuous mode [ 36.123827][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.176646][ T3853] bridge_slave_1: left allmulticast mode [ 36.182981][ T3853] bridge_slave_1: left promiscuous mode [ 36.190006][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.215592][ T3853] bond0: (slave bond_slave_0): Releasing backup interface [ 36.233687][ T3853] bond0: (slave bond_slave_1): Releasing backup interface [ 36.247434][ T3853] team0: Port device team_slave_0 removed [ 36.267888][ T3853] team0: Port device team_slave_1 removed [ 36.284799][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.293483][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.321818][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.330064][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.440854][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.449432][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.458584][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.495391][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.503444][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.510979][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.518709][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.527765][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.538479][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.546247][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.554306][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.562323][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.570305][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.578750][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.586724][ T2971] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 36.610624][ T2971] hid-generic 0006:0000:0000.0001: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 36.657299][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.667310][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.673526][ T3865] fido_id[3865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.676857][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.720720][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.730021][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.739808][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.766361][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.776500][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.778690][ T3878] loop4: detected capacity change from 0 to 256 [ 36.786608][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 36.921898][ T3890] lo speed is unknown, defaulting to 1000 [ 36.980219][ T3896] syz_tun: entered allmulticast mode [ 36.994411][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.002416][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.010246][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.024705][ T3895] syz_tun: left allmulticast mode [ 37.044515][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.052537][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.060931][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.068566][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.076774][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.084540][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.092391][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.100606][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.109039][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.117245][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.125841][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.133980][ T2971] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 37.205606][ T2971] hid-generic 0006:0000:0000.0002: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 37.249181][ T3906] fido_id[3906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.285893][ T3908] pim6reg1: entered promiscuous mode [ 37.295773][ T3908] pim6reg1: entered allmulticast mode [ 37.396212][ T3916] capability: warning: `syz.3.190' uses deprecated v2 capabilities in a way that may be insecure [ 37.453617][ T3920] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 37.462246][ T3920] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 37.613710][ T3934] IPVS: stopping master sync thread 3939 ... [ 37.621128][ T3939] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 37.701412][ T3952] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 37.978095][ T3988] syzkaller0: entered promiscuous mode [ 37.985116][ T3988] syzkaller0: entered allmulticast mode [ 38.167117][ T4016] loop2: detected capacity change from 0 to 512 [ 38.176422][ T4016] EXT4-fs: Ignoring removed i_version option [ 38.195512][ T4016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.203136][ T4016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.215: bg 0: block 131: padding at end of block bitmap is not set [ 38.250155][ T4025] Zero length message leads to an empty skb [ 38.258219][ T4016] EXT4-fs (loop2): Remounting filesystem read-only [ 38.268433][ T4016] EXT4-fs (loop2): 1 truncate cleaned up [ 38.278440][ T4016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.310876][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.346268][ T4033] __vm_enough_memory: pid: 4033, comm: syz.3.218, bytes: 4503599627366400 not enough memory for the allocation [ 38.404092][ T4037] ALSA: seq fatal error: cannot create timer (-19) [ 38.418563][ T4042] -1: renamed from syzkaller0 [ 38.610167][ T4095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.618769][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.646119][ T4095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.655308][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.707040][ T4099] loop3: detected capacity change from 0 to 2048 [ 38.754579][ T4099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.788574][ T4099] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 38.814717][ T4099] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 38.828156][ T4099] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.828156][ T4099] [ 38.840340][ T4099] EXT4-fs (loop3): Total free blocks count 0 [ 38.848298][ T4099] EXT4-fs (loop3): Free/Dirty block details [ 38.854921][ T4099] EXT4-fs (loop3): free_blocks=66060288 [ 38.860907][ T4099] EXT4-fs (loop3): dirty_blocks=32 [ 38.868927][ T4099] EXT4-fs (loop3): Block reservation details [ 38.875380][ T4099] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 38.913901][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.996939][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x1 [ 39.004816][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.012952][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.020892][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.028915][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.037299][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.077878][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.085962][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.094258][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.102383][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x2 [ 39.110454][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.118416][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.127021][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.136440][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.147869][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.156486][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.164816][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.174789][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.184454][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.194128][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.202593][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.211737][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.222517][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.230686][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.238627][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.246134][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.254718][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.263464][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.272707][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.280964][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.292411][ T3393] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 39.301180][ T3393] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 39.326880][ T4138] loop0: detected capacity change from 0 to 1024 [ 39.337674][ T4140] fido_id[4140]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.354030][ T4138] ======================================================= [ 39.354030][ T4138] WARNING: The mand mount option has been deprecated and [ 39.354030][ T4138] and is ignored by this kernel. Remove the mand [ 39.354030][ T4138] option from the mount to silence this warning. [ 39.354030][ T4138] ======================================================= [ 39.557844][ T4160] loop0: detected capacity change from 0 to 128 [ 39.616778][ T4162] loop3: detected capacity change from 0 to 1024 [ 39.631489][ T4163] bio_check_eod: 102 callbacks suppressed [ 39.631503][ T4163] syz.0.252: attempt to access beyond end of device [ 39.631503][ T4163] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 39.631686][ T4162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.653598][ T4163] syz.0.252: attempt to access beyond end of device [ 39.653598][ T4163] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 39.693341][ T4163] syz.0.252: attempt to access beyond end of device [ 39.693341][ T4163] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 39.753441][ T4163] syz.0.252: attempt to access beyond end of device [ 39.753441][ T4163] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 39.755053][ T4162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.769803][ T4163] syz.0.252: attempt to access beyond end of device [ 39.769803][ T4163] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 39.800666][ T4163] syz.0.252: attempt to access beyond end of device [ 39.800666][ T4163] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 39.814860][ T4163] syz.0.252: attempt to access beyond end of device [ 39.814860][ T4163] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 39.830903][ T4163] syz.0.252: attempt to access beyond end of device [ 39.830903][ T4163] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 39.845706][ T4163] syz.0.252: attempt to access beyond end of device [ 39.845706][ T4163] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 39.861855][ T4163] syz.0.252: attempt to access beyond end of device [ 39.861855][ T4163] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 39.950095][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.026245][ T4176] serio: Serial port ptm0 [ 40.068323][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 40.068338][ T29] audit: type=1400 audit(1748453608.811:856): avc: denied { ioctl } for pid=4177 comm="syz.4.259" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.137261][ T29] audit: type=1400 audit(1748453608.881:857): avc: denied { shutdown } for pid=4182 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.171997][ T29] audit: type=1400 audit(1748453608.901:858): avc: denied { getopt } for pid=4182 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.193092][ T29] audit: type=1400 audit(1748453608.901:859): avc: denied { write } for pid=4182 comm="syz.0.260" lport=44073 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 40.218966][ T29] audit: type=1400 audit(1748453608.901:860): avc: denied { setopt } for pid=4182 comm="syz.0.260" lport=44073 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 40.251499][ T29] audit: type=1326 audit(1748453608.991:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 40.276826][ T29] audit: type=1326 audit(1748453608.991:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 40.302183][ T29] audit: type=1326 audit(1748453608.991:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 40.327191][ T29] audit: type=1326 audit(1748453608.991:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912c5fe969 code=0x7ffc0000 [ 40.352376][ T4178] loop4: detected capacity change from 0 to 2048 [ 40.398684][ T4193] loop0: detected capacity change from 0 to 128 [ 40.410595][ T29] audit: type=1400 audit(1748453609.121:865): avc: denied { read } for pid=4189 comm="syz.3.265" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.455521][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.472405][ T4193] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 40.500097][ T4193] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 40.509772][ T4193] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 40.522532][ T4193] Buffer I/O error on dev loop0, logical block 134, lost async page write [ 40.532305][ T4193] Buffer I/O error on dev loop0, logical block 135, lost async page write [ 40.542289][ T4193] Buffer I/O error on dev loop0, logical block 136, lost async page write [ 40.581722][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.598091][ T4190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.615863][ T4206] loop1: detected capacity change from 0 to 128 [ 40.623940][ T4190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.786075][ T4222] __nla_validate_parse: 15 callbacks suppressed [ 40.786142][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 41.101531][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.292'. [ 41.198490][ T4270] loop4: detected capacity change from 0 to 128 [ 41.428080][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 41.692551][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.700835][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.709259][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.717555][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.726256][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.736114][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.744618][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.752949][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.761518][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.770292][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.779197][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.787235][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.798863][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.807363][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.816037][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.824385][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.833486][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.841727][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.850487][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.858890][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.867044][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.875279][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.883261][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.891794][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.901525][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.910435][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.918431][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.926803][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.934837][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.943577][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.952095][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.960813][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.971190][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.979849][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.988671][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 41.998614][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.007575][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.015541][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.023862][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.032067][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.040470][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.048483][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.056522][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 42.065410][ T3393] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.108428][ T4321] fido_id[4321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.143777][ T4325] tipc: Started in network mode [ 42.148975][ T4325] tipc: Node identity 1, cluster identity 3 [ 42.155122][ T4325] tipc: Node number set to 1 [ 42.276105][ T4343] netlink: 'syz.1.328': attribute type 12 has an invalid length. [ 42.348791][ T4357] loop0: detected capacity change from 0 to 128 [ 42.414650][ T4364] tipc: Started in network mode [ 42.419976][ T4364] tipc: Node identity 1, cluster identity 3 [ 42.426392][ T4364] tipc: Node number set to 1 [ 42.611057][ T4381] loop2: detected capacity change from 0 to 512 [ 42.621140][ T4381] EXT4-fs: inline encryption not supported [ 42.634000][ T4381] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.651335][ T4381] EXT4-fs (loop2): 1 truncate cleaned up [ 42.660055][ T4381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.693742][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.741857][ T4385] loop0: detected capacity change from 0 to 128 [ 42.808728][ T4397] loop1: detected capacity change from 0 to 128 [ 42.919189][ T4411] loop2: detected capacity change from 0 to 128 [ 43.114593][ T4422] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 43.351404][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 43.361259][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 43.423258][ T4453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4453 comm=syz.2.375 [ 43.437079][ T4453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4453 comm=syz.2.375 [ 44.046648][ T4472] lo speed is unknown, defaulting to 1000 [ 44.300258][ T4490] loop4: detected capacity change from 0 to 128 [ 44.314583][ T4493] sd 0:0:1:0: device reset [ 44.552424][ T4521] bridge0: port 4(syz_tun) entered blocking state [ 44.559438][ T4521] bridge0: port 4(syz_tun) entered disabled state [ 44.584498][ T4521] syz_tun: entered allmulticast mode [ 44.593940][ T4521] syz_tun: entered promiscuous mode [ 44.606325][ T4521] bridge0: port 4(syz_tun) entered blocking state [ 44.612939][ T4521] bridge0: port 4(syz_tun) entered forwarding state [ 44.696353][ T4529] loop2: detected capacity change from 0 to 512 [ 44.708296][ T4529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.749919][ T4529] EXT4-fs (loop2): 1 truncate cleaned up [ 44.781051][ T4529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.868870][ T4551] lo speed is unknown, defaulting to 1000 [ 44.877013][ T4551] lo speed is unknown, defaulting to 1000 [ 44.897236][ T4551] lo speed is unknown, defaulting to 1000 [ 44.919038][ T4551] infiniband sxz0: RDMA CMA: cma_listen_on_dev, error -98 [ 44.949046][ T4551] lo speed is unknown, defaulting to 1000 [ 44.968827][ T4551] lo speed is unknown, defaulting to 1000 [ 44.984978][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.002113][ T4551] lo speed is unknown, defaulting to 1000 [ 45.026463][ T4551] lo speed is unknown, defaulting to 1000 [ 45.047781][ T4551] lo speed is unknown, defaulting to 1000 [ 45.073486][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 45.073500][ T29] audit: type=1326 audit(1748453613.811:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fa638e969 code=0x7ffc0000 [ 45.197836][ T29] audit: type=1400 audit(1748453613.941:1138): avc: denied { mount } for pid=4570 comm="syz.2.423" name="/" dev="configfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.231081][ T4573] loop1: detected capacity change from 0 to 164 [ 45.247352][ T29] audit: type=1400 audit(1748453613.991:1139): avc: denied { mount } for pid=4572 comm="syz.1.424" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.275167][ T29] audit: type=1400 audit(1748453614.021:1140): avc: denied { setattr } for pid=4570 comm="syz.2.423" name="/" dev="configfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.275532][ T4573] bio_check_eod: 4269 callbacks suppressed [ 45.275545][ T4573] syz.1.424: attempt to access beyond end of device [ 45.275545][ T4573] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 45.322909][ T4573] syz.1.424: attempt to access beyond end of device [ 45.322909][ T4573] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.381236][ T29] audit: type=1400 audit(1748453614.121:1141): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.411787][ T4577] SELinux: Context @ is not valid (left unmapped). [ 45.433413][ T29] audit: type=1400 audit(1748453614.151:1142): avc: denied { mac_admin } for pid=4576 comm="syz.4.426" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.456038][ T29] audit: type=1400 audit(1748453614.161:1143): avc: denied { relabelto } for pid=4576 comm="syz.4.426" name="cgroup.controllers" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 45.482938][ T29] audit: type=1400 audit(1748453614.161:1144): avc: denied { associate } for pid=4576 comm="syz.4.426" name="cgroup.controllers" dev="tmpfs" ino=438 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 45.511227][ T29] audit: type=1326 audit(1748453614.171:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa638e969 code=0x7ffc0000 [ 45.540278][ T29] audit: type=1326 audit(1748453614.171:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa638e969 code=0x7ffc0000 [ 45.666584][ T4588] loop3: detected capacity change from 0 to 512 [ 45.674328][ T4588] EXT4-fs: Ignoring removed oldalloc option [ 45.682873][ T4588] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.430: Parent and EA inode have the same ino 15 [ 45.696725][ T4588] EXT4-fs (loop3): Remounting filesystem read-only [ 45.703891][ T4588] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.717787][ T4588] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 45.754268][ T4588] EXT4-fs (loop3): 1 orphan inode deleted [ 45.760956][ T4588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.790631][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.951634][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.966006][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.977420][ T4602] loop3: detected capacity change from 0 to 128 [ 46.022255][ T4607] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 46.022549][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 46.038681][ T4604] IPVS: stopping master sync thread 4607 ... [ 46.210746][ T4619] pim6reg1: entered promiscuous mode [ 46.216599][ T4619] pim6reg1: entered allmulticast mode [ 46.527635][ T4634] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 46.527814][ T4633] IPVS: stopping master sync thread 4634 ... [ 46.610350][ T4636] netlink: 100 bytes leftover after parsing attributes in process `syz.0.451'. [ 46.638853][ T4638] loop4: detected capacity change from 0 to 512 [ 46.653441][ T4638] EXT4-fs (loop4): Invalid log cluster size: 4294967295 [ 46.683828][ T4638] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.452'. [ 46.700955][ T4642] syz.1.453 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.708941][ T4638] netlink: zone id is out of range [ 46.720248][ T4646] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 46.749660][ T4638] netlink: zone id is out of range [ 46.756196][ T4646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.766792][ T4638] netlink: zone id is out of range [ 46.772384][ T4638] netlink: zone id is out of range [ 46.778024][ T4638] netlink: zone id is out of range [ 46.784437][ T4638] netlink: zone id is out of range [ 46.790230][ T4638] netlink: zone id is out of range [ 46.795854][ T4638] netlink: zone id is out of range [ 46.801821][ T4638] netlink: zone id is out of range [ 46.807454][ T4638] netlink: zone id is out of range [ 46.833134][ T4646] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.851222][ T4654] loop1: detected capacity change from 0 to 1024 [ 46.875979][ T4654] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.890032][ T4654] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.904485][ T4646] bridge0: port 3(dummy0) entered disabled state [ 46.905639][ T4654] JBD2: no valid journal superblock found [ 46.912693][ T4646] dummy0: left allmulticast mode [ 46.918411][ T4654] EXT4-fs (loop1): Could not load journal inode [ 46.936089][ T4646] dummy0: left promiscuous mode [ 46.941826][ T4646] bridge0: port 3(dummy0) entered disabled state [ 46.959422][ T4646] bond1: (slave dummy0): making interface the new active one [ 46.968678][ T4646] dummy0: entered promiscuous mode [ 46.985620][ T4646] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 47.011827][ T4654] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 47.125462][ T4674] loop1: detected capacity change from 0 to 512 [ 47.135803][ T4674] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 47.157552][ T4674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 47.174038][ T4674] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.468: corrupted in-inode xattr: e_value size too large [ 47.208516][ T4674] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.468: couldn't read orphan inode 15 (err -117) [ 47.256454][ T4681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 47.275224][ T4674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.329765][ T4683] loop2: detected capacity change from 0 to 1024 [ 47.353210][ T4683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.381573][ T4683] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.472: bg 0: block 88: padding at end of block bitmap is not set [ 47.399100][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.437888][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.577452][ T4706] sd 0:0:1:0: device reset [ 47.682986][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 47.708176][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 47.862927][ T4726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 48.117865][ T4749] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 48.166138][ T4749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.198008][ T4753] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.217533][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 48.249739][ T4749] bond1: (slave veth7): Enslaving as an active interface with a down link [ 48.319847][ T4749] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 48.499092][ T4788] vlan2: entered promiscuous mode [ 48.504391][ T4788] bridge0: entered promiscuous mode [ 48.509954][ T4788] vlan2: entered allmulticast mode [ 48.515318][ T4788] bridge0: entered allmulticast mode [ 48.571290][ T4788] bond1: (slave veth0_to_bond): Releasing active interface [ 48.604752][ T4788] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.614066][ T4788] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.623267][ T4788] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.632574][ T4788] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.662757][ T4788] bond1: (slave veth7): Releasing active interface [ 48.684251][ T4788] vlan2: left promiscuous mode [ 48.689636][ T4788] bridge0: left promiscuous mode [ 48.694968][ T4788] vlan2: left allmulticast mode [ 48.700287][ T4788] bridge0: left allmulticast mode [ 48.705839][ T36] lo speed is unknown, defaulting to 1000 [ 48.712101][ T36] sxz0: Port: 1 Link DOWN [ 48.788897][ T4804] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.523'. [ 48.798517][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.523'. [ 49.247332][ T4831] loop3: detected capacity change from 0 to 128 [ 49.255376][ T4831] FAT-fs (loop3): Directory bread(block 162) failed [ 49.262486][ T4831] FAT-fs (loop3): Directory bread(block 163) failed [ 49.269647][ T4831] FAT-fs (loop3): Directory bread(block 164) failed [ 49.276978][ T4831] FAT-fs (loop3): Directory bread(block 165) failed [ 49.284838][ T4831] FAT-fs (loop3): Directory bread(block 166) failed [ 49.291755][ T4831] FAT-fs (loop3): Directory bread(block 167) failed [ 49.299027][ T4831] FAT-fs (loop3): Directory bread(block 168) failed [ 49.307373][ T4831] FAT-fs (loop3): Directory bread(block 169) failed [ 49.316315][ T4831] FAT-fs (loop3): Directory bread(block 162) failed [ 49.323641][ T4831] FAT-fs (loop3): Directory bread(block 163) failed [ 49.331353][ T4831] syz.3.536: attempt to access beyond end of device [ 49.331353][ T4831] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 49.345649][ T4831] syz.3.536: attempt to access beyond end of device [ 49.345649][ T4831] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 49.452286][ T4842] geneve0: entered allmulticast mode [ 49.571133][ T4853] lo speed is unknown, defaulting to 1000 [ 49.577796][ T4853] lo speed is unknown, defaulting to 1000 [ 49.610629][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4858 comm=syz.2.549 [ 49.623702][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4858 comm=syz.2.549 [ 49.742389][ T4867] netlink: 'syz.2.552': attribute type 5 has an invalid length. [ 50.112463][ T4895] lo speed is unknown, defaulting to 1000 [ 50.120813][ T4895] lo speed is unknown, defaulting to 1000 [ 50.304127][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 50.304142][ T29] audit: type=1400 audit(1748453619.017:1401): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.338430][ T29] audit: type=1400 audit(1748453619.017:1402): avc: denied { open } for pid=3325 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.363478][ T29] audit: type=1400 audit(1748453619.017:1403): avc: denied { ioctl } for pid=3325 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.408108][ T4915] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 50.426632][ T29] audit: type=1400 audit(1748453619.129:1404): avc: denied { map_create } for pid=4913 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.465517][ T4915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.476174][ T29] audit: type=1400 audit(1748453619.157:1405): avc: denied { map_read map_write } for pid=4913 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.497510][ T29] audit: type=1400 audit(1748453619.166:1406): avc: denied { prog_load } for pid=4913 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.518588][ T29] audit: type=1400 audit(1748453619.166:1407): avc: denied { bpf } for pid=4913 comm="syz.2.573" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.541132][ T29] audit: type=1400 audit(1748453619.166:1408): avc: denied { perfmon } for pid=4913 comm="syz.2.573" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.562441][ T29] audit: type=1400 audit(1748453619.166:1409): avc: denied { prog_run } for pid=4913 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.590103][ T4920] bond1: (slave veth3): Enslaving as an active interface with a down link [ 50.600416][ T29] audit: type=1400 audit(1748453619.279:1410): avc: denied { create } for pid=4921 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.628848][ T4915] bond1: (slave dummy0): making interface the new active one [ 50.671310][ T4915] dummy0: entered promiscuous mode [ 50.714232][ T4915] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 50.801107][ T4934] loop2: detected capacity change from 0 to 512 [ 50.859161][ T4934] EXT4-fs (loop2): 1 orphan inode deleted [ 50.877398][ T4069] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 50.891454][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.931604][ T4934] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.965376][ T4937] syzkaller0: entered promiscuous mode [ 50.971609][ T4937] syzkaller0: entered allmulticast mode [ 51.138557][ T4958] loop0: detected capacity change from 0 to 1024 [ 51.154634][ T4958] EXT4-fs: Ignoring removed nobh option [ 51.160387][ T4958] EXT4-fs: Ignoring removed nobh option [ 51.171485][ T4958] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 51.185011][ T4958] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.591: inode #4294967295: comm syz.0.591: iget: illegal inode # [ 51.200649][ T4962] __nla_validate_parse: 2 callbacks suppressed [ 51.200664][ T4962] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.593'. [ 51.201296][ T4958] EXT4-fs (loop0): no journal found [ 51.223011][ T4958] EXT4-fs (loop0): can't get journal size [ 51.231495][ T4958] EXT4-fs (loop0): failed to initialize system zone (-22) [ 51.244136][ T4958] EXT4-fs (loop0): mount failed [ 51.563657][ T4991] loop3: detected capacity change from 0 to 256 [ 51.746410][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.763833][ T5002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5002 comm=syz.1.618 [ 51.778701][ T5002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5002 comm=syz.1.618 [ 52.707539][ T5024] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 52.746432][ T5028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5028 comm=syz.4.620 [ 52.781221][ T5036] loop3: detected capacity change from 0 to 128 [ 53.032354][ T5061] netlink: 'syz.2.634': attribute type 21 has an invalid length. [ 53.040649][ T5061] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 53.048532][ T5061] netlink: 144 bytes leftover after parsing attributes in process `syz.2.634'. [ 53.524860][ T5074] loop0: detected capacity change from 0 to 128 [ 53.578256][ T5074] syz.0.639: attempt to access beyond end of device [ 53.578256][ T5074] loop0: rw=2049, sector=194, nr_sectors = 1 limit=128 [ 53.592329][ T5074] Buffer I/O error on dev loop0, logical block 194, lost async page write [ 53.602137][ T5074] syz.0.639: attempt to access beyond end of device [ 53.602137][ T5074] loop0: rw=2049, sector=195, nr_sectors = 1 limit=128 [ 53.616834][ T5074] Buffer I/O error on dev loop0, logical block 195, lost async page write [ 53.625902][ T5074] syz.0.639: attempt to access beyond end of device [ 53.625902][ T5074] loop0: rw=2049, sector=196, nr_sectors = 1 limit=128 [ 53.640564][ T5074] Buffer I/O error on dev loop0, logical block 196, lost async page write [ 53.649909][ T5074] syz.0.639: attempt to access beyond end of device [ 53.649909][ T5074] loop0: rw=2049, sector=197, nr_sectors = 1 limit=128 [ 53.664819][ T5074] Buffer I/O error on dev loop0, logical block 197, lost async page write [ 53.675107][ T5074] syz.0.639: attempt to access beyond end of device [ 53.675107][ T5074] loop0: rw=2049, sector=198, nr_sectors = 1 limit=128 [ 53.689086][ T5074] Buffer I/O error on dev loop0, logical block 198, lost async page write [ 53.698729][ T5074] syz.0.639: attempt to access beyond end of device [ 53.698729][ T5074] loop0: rw=2049, sector=199, nr_sectors = 1 limit=128 [ 53.713983][ T5074] Buffer I/O error on dev loop0, logical block 199, lost async page write [ 53.724039][ T5074] syz.0.639: attempt to access beyond end of device [ 53.724039][ T5074] loop0: rw=2049, sector=200, nr_sectors = 1 limit=128 [ 53.739335][ T5074] Buffer I/O error on dev loop0, logical block 200, lost async page write [ 53.750662][ T5074] syz.0.639: attempt to access beyond end of device [ 53.750662][ T5074] loop0: rw=2049, sector=201, nr_sectors = 16 limit=128 [ 53.790562][ T4069] kworker/u8:11: attempt to access beyond end of device [ 53.790562][ T4069] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 53.918701][ T5088] loop0: detected capacity change from 0 to 128 [ 53.921689][ T5084] lo speed is unknown, defaulting to 1000 [ 53.932531][ T5086] loop3: detected capacity change from 0 to 2048 [ 53.933785][ T5084] lo speed is unknown, defaulting to 1000 [ 53.948798][ T5088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 54.007154][ T5086] ext4: Unknown parameter 'noacl' [ 54.020639][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 54.047307][ T5096] netlink: 'syz.1.650': attribute type 11 has an invalid length. [ 54.056223][ T5096] netlink: 448 bytes leftover after parsing attributes in process `syz.1.650'. [ 54.058554][ T5088] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.211689][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.521647][ T5128] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 54.700573][ T5147] loop4: detected capacity change from 0 to 512 [ 54.721749][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 54.737991][ T5147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.755925][ T5147] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.786830][ T5147] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.671: corrupted inode contents [ 54.828443][ T5147] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.671: mark_inode_dirty error [ 54.842900][ T5147] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.671: corrupted inode contents [ 54.895548][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.922280][ T5163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.985579][ T5163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.047563][ T5163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.121264][ T5163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.188319][ T5163] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.204339][ T5163] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.223253][ T5163] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.232501][ T5179] bridge: RTM_NEWNEIGH with invalid ether address [ 55.251383][ T5163] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.263130][ T5181] loop0: detected capacity change from 0 to 128 [ 55.428914][ T5188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 55.456079][ T4069] kworker/u8:11: attempt to access beyond end of device [ 55.456079][ T4069] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 55.507095][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.527162][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 55.532432][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.563891][ T5197] loop1: detected capacity change from 0 to 128 [ 55.579851][ T5197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 55.594664][ T5197] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.628692][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.659036][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 55.659052][ T29] audit: type=1326 audit(1748453624.022:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.701453][ T29] audit: type=1326 audit(1748453624.031:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.726891][ T29] audit: type=1400 audit(1748453624.041:1595): avc: denied { write } for pid=5182 comm="syz.3.688" path="socket:[9859]" dev="sockfs" ino=9859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.751469][ T29] audit: type=1326 audit(1748453624.041:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.776346][ T29] audit: type=1326 audit(1748453624.050:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.801130][ T29] audit: type=1400 audit(1748453624.059:1598): avc: denied { tracepoint } for pid=5209 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.822251][ T29] audit: type=1400 audit(1748453624.059:1599): avc: denied { read } for pid=5209 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.853904][ T29] audit: type=1326 audit(1748453624.059:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.880611][ T29] audit: type=1326 audit(1748453624.069:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.907651][ T29] audit: type=1326 audit(1748453624.078:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 55.984943][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 56.091197][ T5261] SELinux: Context Ü is not valid (left unmapped). [ 56.199328][ T5274] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 56.357209][ T5309] bridge0: entered promiscuous mode [ 56.376894][ T5309] bridge0: port 3(macvlan2) entered blocking state [ 56.384195][ T5309] bridge0: port 3(macvlan2) entered disabled state [ 56.393779][ T5309] macvlan2: entered allmulticast mode [ 56.399773][ T5309] bridge0: entered allmulticast mode [ 56.418058][ T5309] macvlan2: left allmulticast mode [ 56.423787][ T5309] bridge0: left allmulticast mode [ 56.449079][ T5309] bridge0: left promiscuous mode [ 56.474737][ T5312] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 56.544146][ T5320] loop2: detected capacity change from 0 to 1024 [ 56.572841][ T5320] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 56.594288][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 56.606776][ T5320] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.622220][ T5320] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.716: iget: special inode unallocated [ 56.646928][ T5320] EXT4-fs (loop2): no journal found [ 56.652498][ T5320] EXT4-fs (loop2): can't get journal size [ 56.665148][ T5322] syzkaller0: entered promiscuous mode [ 56.671046][ T5322] syzkaller0: entered allmulticast mode [ 56.683418][ T5320] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.716: iget: special inode unallocated [ 56.718087][ T5320] EXT4-fs (loop2): get root inode failed [ 56.724004][ T5320] EXT4-fs (loop2): mount failed [ 56.773955][ T5338] loop2: detected capacity change from 0 to 128 [ 56.881468][ T5338] Buffer I/O error on dev loop2, logical block 194, lost async page write [ 56.893344][ T5338] Buffer I/O error on dev loop2, logical block 195, lost async page write [ 56.899313][ T5330] lo speed is unknown, defaulting to 1000 [ 56.902992][ T5338] Buffer I/O error on dev loop2, logical block 196, lost async page write [ 56.925020][ T5330] lo speed is unknown, defaulting to 1000 [ 56.981577][ T5354] vlan2: entered promiscuous mode [ 56.987257][ T5354] bridge0: entered promiscuous mode [ 56.993186][ T5354] vlan2: entered allmulticast mode [ 56.998726][ T5354] bridge0: entered allmulticast mode [ 57.072747][ T326] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 57.087703][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.095524][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.107965][ T36] net_ratelimit: 86 callbacks suppressed [ 57.107996][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.175039][ T5354] bridge_slave_0: left allmulticast mode [ 57.181341][ T5354] bridge_slave_0: left promiscuous mode [ 57.188022][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.212014][ T5354] bridge_slave_1: left allmulticast mode [ 57.218659][ T5354] bridge_slave_1: left promiscuous mode [ 57.225121][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.240782][ T5354] bond0: (slave bond_slave_0): Releasing backup interface [ 57.281208][ T5354] bond0: (slave bond_slave_1): Releasing backup interface [ 57.293648][ T5354] team0: Port device team_slave_0 removed [ 57.304200][ T5354] team0: Port device team_slave_1 removed [ 57.312661][ T5354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.323337][ T5354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.332877][ T5354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.342432][ T5354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.375012][ T5354] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.384427][ T5354] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.394701][ T5354] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.405181][ T5354] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.428097][ T5354] vlan2: left promiscuous mode [ 57.433371][ T5354] bridge0: left promiscuous mode [ 57.440178][ T5354] vlan2: left allmulticast mode [ 57.446663][ T5354] bridge0: left allmulticast mode [ 57.583834][ T5330] chnl_net:caif_netlink_parms(): no params data found [ 57.616607][ T5391] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.741'. [ 57.626072][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 57.668897][ T5399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.677950][ T5399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.687732][ T5399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.701810][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.710047][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.717626][ T5397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.718109][ T5330] bridge_slave_0: entered allmulticast mode [ 57.726621][ T5397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.733672][ T5330] bridge_slave_0: entered promiscuous mode [ 57.766594][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.774469][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.846388][ T5410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5410 comm=syz.3.750 [ 57.859896][ T5330] bridge_slave_1: entered allmulticast mode [ 57.871482][ T5330] bridge_slave_1: entered promiscuous mode [ 57.878732][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.914217][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.928862][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.951330][ T5330] team0: Port device team_slave_0 added [ 57.958577][ T5330] team0: Port device team_slave_1 added [ 57.975086][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.982549][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.010619][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.022717][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.030669][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.058656][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.093766][ T5330] hsr_slave_0: entered promiscuous mode [ 58.104109][ T5330] hsr_slave_1: entered promiscuous mode [ 58.110530][ T5330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.118792][ T5330] Cannot create hsr debugfs directory [ 58.139990][ T5422] loop1: detected capacity change from 0 to 128 [ 58.156411][ T5420] pimreg: entered allmulticast mode [ 58.218279][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.232031][ T5420] pimreg: left allmulticast mode [ 58.271718][ T5330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.281124][ T5330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.291591][ T5330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.301908][ T5330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.321919][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.330810][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.339490][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.347887][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.402354][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.428748][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.442789][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.461429][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.510900][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.518996][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.635378][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.643533][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.724414][ T5449] loop3: detected capacity change from 0 to 128 [ 58.729619][ T5330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.744506][ T5330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.765626][ T5449] FAT-fs (loop3): Directory bread(block 162) failed [ 58.772780][ T5449] FAT-fs (loop3): Directory bread(block 163) failed [ 58.790167][ T5449] FAT-fs (loop3): Directory bread(block 164) failed [ 58.822138][ T5449] FAT-fs (loop3): Directory bread(block 165) failed [ 58.856573][ T5449] FAT-fs (loop3): Directory bread(block 166) failed [ 58.884322][ T5449] FAT-fs (loop3): Directory bread(block 167) failed [ 58.904119][ T2971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.916380][ T5449] FAT-fs (loop3): Directory bread(block 168) failed [ 58.935326][ T5449] FAT-fs (loop3): Directory bread(block 169) failed [ 58.958750][ T5449] FAT-fs (loop3): Directory bread(block 162) failed [ 58.968788][ T41] bond0 (unregistering): Released all slaves [ 58.988609][ T5449] FAT-fs (loop3): Directory bread(block 163) failed [ 58.997162][ T41] bond1 (unregistering): Released all slaves [ 59.005845][ T5449] bio_check_eod: 185 callbacks suppressed [ 59.005912][ T5449] syz.3.767: attempt to access beyond end of device [ 59.005912][ T5449] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 59.031169][ T5449] syz.3.767: attempt to access beyond end of device [ 59.031169][ T5449] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 59.088407][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.119530][ T41] hsr_slave_0: left promiscuous mode [ 59.153309][ T41] hsr_slave_1: left promiscuous mode [ 59.244816][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.338879][ T5495] wg2: entered promiscuous mode [ 59.344205][ T5495] wg2: entered allmulticast mode [ 59.469417][ T4058] dummy0: left promiscuous mode [ 59.549039][ T5330] veth0_vlan: entered promiscuous mode [ 59.581232][ T5330] veth1_vlan: entered promiscuous mode [ 59.703390][ T5330] veth0_macvtap: entered promiscuous mode [ 59.712736][ T5330] veth1_macvtap: entered promiscuous mode [ 59.739613][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.771203][ T5588] loop0: detected capacity change from 0 to 128 [ 59.772446][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.798696][ T5330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.808865][ T5330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.818691][ T5330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.828252][ T5330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.999227][ T5604] SELinux: failed to load policy [ 60.102554][ T4058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.155585][ T4058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.208669][ T4058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.252716][ T4058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.375997][ T4058] bridge_slave_1: left allmulticast mode [ 60.381840][ T4058] bridge_slave_1: left promiscuous mode [ 60.388325][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.408672][ T4058] bridge_slave_0: left allmulticast mode [ 60.414984][ T4058] bridge_slave_0: left promiscuous mode [ 60.421594][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.425156][ T5660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.790'. [ 60.553127][ T4058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.566045][ T4058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.578209][ T4058] bond0 (unregistering): Released all slaves [ 60.623184][ T5667] syzkaller0: entered promiscuous mode [ 60.629119][ T5667] syzkaller0: entered allmulticast mode [ 60.656648][ T4058] tipc: Left network mode [ 60.664778][ T5632] lo speed is unknown, defaulting to 1000 [ 60.733035][ T4058] hsr_slave_0: left promiscuous mode [ 60.756891][ T4058] hsr_slave_1: left promiscuous mode [ 60.781356][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.789725][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.813806][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.821901][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.834130][ T4058] veth1_macvtap: left promiscuous mode [ 60.841529][ T4058] veth0_macvtap: left promiscuous mode [ 61.000094][ T4058] team0 (unregistering): Port device team_slave_1 removed [ 61.012045][ T4058] team0 (unregistering): Port device team_slave_0 removed [ 61.120713][ T5728] netlink: 96 bytes leftover after parsing attributes in process `syz.2.807'. [ 61.141431][ T5705] lo speed is unknown, defaulting to 1000 [ 61.246928][ T5632] chnl_net:caif_netlink_parms(): no params data found [ 61.325117][ T5745] loop3: detected capacity change from 0 to 1024 [ 61.333094][ T5745] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.344951][ T5745] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.377524][ T29] kauditd_printk_skb: 653 callbacks suppressed [ 61.377538][ T29] audit: type=1326 audit(1748453629.373:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.410874][ T29] audit: type=1326 audit(1748453629.373:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.436299][ T29] audit: type=1326 audit(1748453629.373:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.448119][ T5745] JBD2: no valid journal superblock found [ 61.468318][ T5745] EXT4-fs (loop3): Could not load journal inode [ 61.489135][ T29] audit: type=1326 audit(1748453629.485:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.514342][ T29] audit: type=1326 audit(1748453629.485:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.540270][ T29] audit: type=1326 audit(1748453629.485:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.565266][ T29] audit: type=1326 audit(1748453629.485:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.589944][ T29] audit: type=1326 audit(1748453629.485:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 61.614807][ T29] audit: type=1326 audit(1748453629.485:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.645512][ T29] audit: type=1326 audit(1748453629.579:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 61.773332][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.780840][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.831128][ T5632] bridge_slave_0: entered allmulticast mode [ 61.839973][ T5632] bridge_slave_0: entered promiscuous mode [ 61.874510][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.882228][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.917712][ T5632] bridge_slave_1: entered allmulticast mode [ 61.926191][ T5632] bridge_slave_1: entered promiscuous mode [ 61.934574][ T5738] lo speed is unknown, defaulting to 1000 [ 61.963723][ T5786] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.990906][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 62.003903][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 62.022816][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.059979][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.143758][ T5632] team0: Port device team_slave_0 added [ 62.166019][ T5632] team0: Port device team_slave_1 added [ 62.198419][ T5813] netlink: 420 bytes leftover after parsing attributes in process `syz.1.830'. [ 62.217984][ T5813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.830'. [ 62.259200][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.266988][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.294396][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.345966][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'. [ 62.395589][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.402823][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.431327][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.485256][ T5632] hsr_slave_0: entered promiscuous mode [ 62.492493][ T5632] hsr_slave_1: entered promiscuous mode [ 62.519660][ T5632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.564457][ T5632] Cannot create hsr debugfs directory [ 62.691269][ T5864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 62.762949][ T5632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.771194][ T5870] loop1: detected capacity change from 0 to 512 [ 62.779551][ T5870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.795342][ T5632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.799731][ T5870] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.816080][ T5632] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.838563][ T5632] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.846507][ T5870] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 62.859836][ T5870] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 62.881526][ T5870] EXT4-fs (loop1): 1 truncate cleaned up [ 62.900329][ T5870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.908221][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.948241][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.992847][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.996172][ T5870] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.000424][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.046699][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.054196][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.100381][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.147072][ T4063] dummy0: left promiscuous mode [ 63.224019][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.308200][ T5910] lo speed is unknown, defaulting to 1000 [ 63.451586][ T5947] loop2: detected capacity change from 0 to 2048 [ 63.465869][ T5632] veth0_vlan: entered promiscuous mode [ 63.484650][ T5632] veth1_vlan: entered promiscuous mode [ 63.500373][ T5451] loop2: p1 < > p4 [ 63.507225][ T5451] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.509750][ T5632] veth0_macvtap: entered promiscuous mode [ 63.530081][ T5947] loop2: p1 < > p4 [ 63.535937][ T5947] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.568674][ T3008] loop2: p1 < > p4 [ 63.576038][ T3008] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.595155][ T5632] veth1_macvtap: entered promiscuous mode [ 63.638759][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.673436][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.701226][ T5632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.710892][ T5632] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.720127][ T5632] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.729627][ T5632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741120][ T5451] udevd[5451]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.751865][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.772094][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.777699][ T5451] udevd[5451]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.814305][ T5966] lo speed is unknown, defaulting to 1000 [ 64.302922][ T6005] SELinux: policydb magic number 0x30386c6e does not match expected magic number 0xf97cff8c [ 64.368076][ T6005] SELinux: failed to load policy [ 64.399312][ T6002] loop5: detected capacity change from 0 to 512 [ 64.490953][ T6002] EXT4-fs (loop5): 1 orphan inode deleted [ 64.503334][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 64.542066][ T6002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.595196][ T6030] netlink: 96 bytes leftover after parsing attributes in process `syz.6.878'. [ 64.655002][ T6002] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.779713][ T6047] syzkaller1: entered promiscuous mode [ 64.786016][ T6047] syzkaller1: entered allmulticast mode [ 64.814611][ T6053] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 64.839829][ T5330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.863712][ T6053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.948203][ T6053] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.957102][ T6053] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.966047][ T6053] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.974890][ T6053] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.002548][ T6069] loop5: detected capacity change from 0 to 512 [ 65.009270][ T6053] bond1: (slave geneve2): making interface the new active one [ 65.047697][ T6053] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.068087][ T6069] EXT4-fs: Ignoring removed bh option [ 65.074406][ T6069] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.095850][ T6082] ip6gre1: entered allmulticast mode [ 65.109580][ T6074] bond1: entered promiscuous mode [ 65.115684][ T6074] geneve2: entered promiscuous mode [ 65.126698][ T6069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.148614][ T6069] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.357695][ T5330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.484452][ T6125] SELinux: policydb magic number 0x30386c6e does not match expected magic number 0xf97cff8c [ 65.529670][ T6125] SELinux: failed to load policy [ 65.535224][ T6138] loop5: detected capacity change from 0 to 1024 [ 65.544468][ T6141] netlink: 'syz.6.907': attribute type 1 has an invalid length. [ 65.566836][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.908'. [ 65.592542][ T6138] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.604598][ T6138] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.627697][ T6138] JBD2: no valid journal superblock found [ 65.634152][ T6138] EXT4-fs (loop5): Could not load journal inode [ 65.658540][ T6148] netlink: 96 bytes leftover after parsing attributes in process `syz.2.910'. [ 65.747090][ T6149] veth0: entered promiscuous mode [ 66.064175][ T6178] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 66.200664][ T6190] loop6: detected capacity change from 0 to 512 [ 66.257417][ T6190] journal_path: Non-blockdev passed as './bus' [ 66.264029][ T6190] EXT4-fs: error: could not find journal device path [ 66.344892][ T6193] tipc: Started in network mode [ 66.350187][ T6193] tipc: Node identity 4, cluster identity 4711 [ 66.357240][ T6193] tipc: Node number set to 4 [ 66.829812][ T6222] loop2: detected capacity change from 0 to 128 [ 66.838523][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 66.838533][ T29] audit: type=1326 audit(1748453634.472:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 66.869896][ T29] audit: type=1326 audit(1748453634.472:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 66.896117][ T29] audit: type=1326 audit(1748453634.472:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ccccce969 code=0x7ffc0000 [ 66.921812][ T29] audit: type=1326 audit(1748453634.472:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ccccce9a3 code=0x7ffc0000 [ 66.946251][ T29] audit: type=1326 audit(1748453634.472:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cccccd41f code=0x7ffc0000 [ 66.974113][ T29] audit: type=1326 audit(1748453634.472:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7ccccce9f7 code=0x7ffc0000 [ 67.001177][ T29] audit: type=1326 audit(1748453634.472:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cccccd2d0 code=0x7ffc0000 [ 67.029191][ T29] audit: type=1326 audit(1748453634.472:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ccccce56b code=0x7ffc0000 [ 67.056588][ T29] audit: type=1326 audit(1748453634.565:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cccccd5ca code=0x7ffc0000 [ 67.081211][ T29] audit: type=1326 audit(1748453634.565:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cccccd5ca code=0x7ffc0000 [ 67.262416][ T6238] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 67.283074][ T6238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.308719][ T6238] bond2: (slave geneve2): making interface the new active one [ 67.318638][ T6238] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 67.347708][ T6238] bond2: entered promiscuous mode [ 67.353565][ T6238] geneve2: entered promiscuous mode [ 67.756904][ T6249] lo speed is unknown, defaulting to 1000 [ 67.832294][ T6264] tipc: Started in network mode [ 67.839029][ T6264] tipc: Node identity 7f000001, cluster identity 4711 [ 67.855939][ T6264] tipc: Enabled bearer , priority 10 [ 67.930963][ T6270] net_ratelimit: 1 callbacks suppressed [ 67.930980][ T6270] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 68.215067][ T6278] lo speed is unknown, defaulting to 1000 [ 68.367431][ T6291] tipc: Started in network mode [ 68.372826][ T6291] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 68.397372][ T6291] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 68.405942][ T6291] tipc: Enabled bearer , priority 10 [ 68.521618][ T6295] vlan2: entered allmulticast mode [ 68.529831][ T6295] dummy0: entered allmulticast mode [ 69.046100][ T1039] tipc: Node number set to 2130706433 [ 69.063349][ T6334] loop5: detected capacity change from 0 to 1024 [ 69.143384][ T6334] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.153458][ T6334] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 69.206617][ T6334] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.287186][ T6334] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.981: unexpected bad inode w/o EXT4_IGET_BAD [ 69.415846][ T6334] EXT4-fs (loop5): no journal found [ 69.421370][ T6334] EXT4-fs (loop5): can't get journal size [ 69.452509][ T6334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.606166][ T1039] tipc: Node number set to 1 [ 69.726317][ T5330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.795241][ T6397] $Hÿ: renamed from bond0 (while UP) [ 69.817308][ T6397] $Hÿ: entered promiscuous mode [ 69.822770][ T6397] bond_slave_0: entered promiscuous mode [ 69.829836][ T6397] bond_slave_1: entered promiscuous mode [ 69.841210][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 69.976961][ T6409] -1: renamed from syzkaller0 [ 70.119919][ T6420] loop3: detected capacity change from 0 to 128 [ 70.131772][ T6419] loop5: detected capacity change from 0 to 164 [ 70.201805][ T6419] syz.5.997: attempt to access beyond end of device [ 70.201805][ T6419] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.227904][ T6419] syz.5.997: attempt to access beyond end of device [ 70.227904][ T6419] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.228889][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 70.254226][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1000'. [ 70.264073][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 70.294462][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1000'. [ 70.304873][ T6425] netlink: 'syz.3.1000': attribute type 6 has an invalid length. [ 70.477871][ T6435] infiniband syz!: set active [ 70.484523][ T6435] infiniband syz!: added team_slave_0 [ 70.501676][ T6450] vlan3: entered allmulticast mode [ 70.511594][ T6450] dummy0: entered allmulticast mode [ 70.518374][ T6435] RDS/IB: syz!: added [ 70.525235][ T6435] smc: adding ib device syz! with port count 1 [ 70.532156][ T6435] smc: ib device syz! port 1 has pnetid [ 70.645633][ T6457] sch_tbf: burst 3504 is lower than device lo mtu (65550) ! [ 70.763342][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 70.790772][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 71.421193][ T6505] netlink: 'syz.5.1035': attribute type 3 has an invalid length. [ 71.436764][ T3391] IPVS: starting estimator thread 0... [ 71.506048][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 71.547479][ T6507] IPVS: using max 3024 ests per chain, 151200 per kthread [ 71.564890][ T6522] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1042'. [ 71.633626][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 71.642194][ T6526] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.683432][ T6533] netlink: 'syz.1.1047': attribute type 3 has an invalid length. [ 71.915098][ T6552] netlink: 'syz.1.1055': attribute type 11 has an invalid length. [ 71.923742][ T6552] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1055'. [ 72.000078][ T6560] netlink: 'syz.2.1059': attribute type 13 has an invalid length. [ 72.153552][ T6560] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.162619][ T6560] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.171139][ T6560] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.180346][ T6560] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.193944][ T6562] vlan2: entered allmulticast mode [ 72.199466][ T6562] bridge_slave_0: entered allmulticast mode [ 72.314118][ T6577] lo speed is unknown, defaulting to 1000 [ 72.667032][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 72.667049][ T29] audit: type=1326 audit(1748453639.935:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.698906][ T29] audit: type=1326 audit(1748453639.935:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.765896][ T29] audit: type=1326 audit(1748453639.935:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.791898][ T29] audit: type=1326 audit(1748453639.935:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.817169][ T29] audit: type=1326 audit(1748453639.935:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.842217][ T29] audit: type=1326 audit(1748453639.991:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.867962][ T29] audit: type=1326 audit(1748453639.991:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.893831][ T29] audit: type=1326 audit(1748453639.991:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.919307][ T29] audit: type=1326 audit(1748453639.991:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 72.950487][ T29] audit: type=1326 audit(1748453639.991:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d39e969 code=0x7ffc0000 [ 73.039581][ T6590] lo speed is unknown, defaulting to 1000 [ 73.064377][ T6606] lo speed is unknown, defaulting to 1000 [ 73.173071][ T6615] sch_fq: defrate 0 ignored. [ 73.673214][ T6650] loop5: detected capacity change from 0 to 2048 [ 73.687692][ T6650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.707565][ T6650] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.737326][ T6657] syzkaller0: entered promiscuous mode [ 73.743708][ T6657] syzkaller0: entered allmulticast mode [ 73.859423][ T6350] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 345: padding at end of block bitmap is not set [ 73.902390][ T6350] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 239 with error 117 [ 73.916276][ T6350] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.916276][ T6350] [ 73.931898][ T6663] ================================================================== [ 73.940379][ T6663] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 73.947711][ T6663] [ 73.950249][ T6663] read-write to 0xffff88810bd91230 of 8 bytes by task 6650 on cpu 1: [ 73.958840][ T6663] xas_init_marks+0x18a/0x320 [ 73.963699][ T6663] __filemap_remove_folio+0x19d/0x2a0 [ 73.969611][ T6663] __remove_mapping+0x338/0x460 [ 73.974669][ T6663] shrink_folio_list+0x1882/0x2660 [ 73.980076][ T6663] evict_folios+0x2888/0x33d0 [ 73.985172][ T6663] try_to_shrink_lruvec+0x45a/0x7e0 [ 73.990872][ T6663] shrink_lruvec+0x22e/0x1a40 [ 73.995921][ T6663] shrink_node+0x686/0x2110 [ 74.000671][ T6663] do_try_to_free_pages+0x3f6/0xcd0 [ 74.006854][ T6663] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 74.013469][ T6663] try_charge_memcg+0x3ab/0x870 [ 74.019011][ T6663] obj_cgroup_charge_pages+0xb7/0x1a0 [ 74.025429][ T6663] __memcg_kmem_charge_page+0x9f/0x170 [ 74.031589][ T6663] __alloc_frozen_pages_noprof+0x188/0x360 [ 74.037908][ T6663] alloc_pages_mpol+0xb3/0x250 [ 74.043023][ T6663] alloc_pages_noprof+0x90/0x130 [ 74.048362][ T6663] __vmalloc_node_range_noprof+0x6d5/0xe40 [ 74.054731][ T6663] __kvmalloc_node_noprof+0x312/0x4f0 [ 74.060200][ T6663] ip_set_alloc+0x1f/0x30 [ 74.065246][ T6663] hash_netiface_create+0x282/0x740 [ 74.070628][ T6663] ip_set_create+0x3c9/0x960 [ 74.075622][ T6663] nfnetlink_rcv_msg+0x4c3/0x590 [ 74.080839][ T6663] netlink_rcv_skb+0x120/0x220 [ 74.085978][ T6663] nfnetlink_rcv+0x16b/0x1690 [ 74.090712][ T6663] netlink_unicast+0x59e/0x670 [ 74.095854][ T6663] netlink_sendmsg+0x58b/0x6b0 [ 74.101112][ T6663] __sock_sendmsg+0x145/0x180 [ 74.106209][ T6663] ____sys_sendmsg+0x31e/0x4e0 [ 74.111344][ T6663] ___sys_sendmsg+0x17b/0x1d0 [ 74.116613][ T6663] __x64_sys_sendmsg+0xd4/0x160 [ 74.121909][ T6663] x64_sys_call+0x2999/0x2fb0 [ 74.127036][ T6663] do_syscall_64+0xd2/0x200 [ 74.131728][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.138081][ T6663] [ 74.140748][ T6663] read to 0xffff88810bd91230 of 8 bytes by task 6663 on cpu 0: [ 74.149013][ T6663] xas_find_marked+0x218/0x620 [ 74.153985][ T6663] find_get_entry+0x5d/0x380 [ 74.158705][ T6663] filemap_get_folios_tag+0x13b/0x210 [ 74.164640][ T6663] mpage_prepare_extent_to_map+0x330/0xb80 [ 74.170731][ T6663] ext4_do_writepages+0x6eb/0x2270 [ 74.176315][ T6663] ext4_writepages+0x176/0x300 [ 74.181328][ T6663] do_writepages+0x1c6/0x310 [ 74.186387][ T6663] filemap_write_and_wait_range+0x144/0x340 [ 74.192663][ T6663] filemap_invalidate_pages+0xa4/0x1a0 [ 74.198325][ T6663] kiocb_invalidate_pages+0x6e/0x80 [ 74.203982][ T6663] __iomap_dio_rw+0x5d4/0x1250 [ 74.209202][ T6663] iomap_dio_rw+0x40/0x90 [ 74.214642][ T6663] ext4_file_write_iter+0xad9/0xf00 [ 74.220592][ T6663] do_iter_readv_writev+0x3ee/0x4b0 [ 74.225909][ T6663] vfs_writev+0x2c9/0x870 [ 74.230571][ T6663] do_writev+0xe7/0x210 [ 74.235801][ T6663] __x64_sys_writev+0x45/0x50 [ 74.240810][ T6663] x64_sys_call+0x2006/0x2fb0 [ 74.245529][ T6663] do_syscall_64+0xd2/0x200 [ 74.251254][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.257620][ T6663] [ 74.259962][ T6663] value changed: 0xffffffffffffffff -> 0xfffffffffffffffc [ 74.267246][ T6663] [ 74.269849][ T6663] Reported by Kernel Concurrency Sanitizer on: [ 74.276102][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.5.1096 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 74.288766][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.299186][ T6663] ================================================================== [ 74.606959][ T5330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.