last executing test programs: 34.634756835s ago: executing program 1 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2f, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x4, 0x0, 0xe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8040) 34.607134515s ago: executing program 1 (id=97): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r3, r0, 0x0) 34.522960665s ago: executing program 1 (id=99): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 34.491315796s ago: executing program 1 (id=100): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 34.157832878s ago: executing program 1 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x2, 0xffff0000, 0x1, 'queue0\x00', 0x3}) close(r2) 33.87717961s ago: executing program 1 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 33.83584324s ago: executing program 32 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 33.574406401s ago: executing program 0 (id=136): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 33.458951692s ago: executing program 0 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0x0, 0x2000005, 0x4, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0||6') 33.333721383s ago: executing program 0 (id=140): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) personality(0x500006) 33.236582154s ago: executing program 0 (id=142): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 32.564854188s ago: executing program 0 (id=147): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x34000}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 32.102099401s ago: executing program 0 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 32.038946172s ago: executing program 33 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1.371349462s ago: executing program 4 (id=1464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x2c) 1.280308562s ago: executing program 4 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x9, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 1.226932432s ago: executing program 4 (id=1469): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.182704193s ago: executing program 4 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usbip_server_init(0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 780.329615ms ago: executing program 3 (id=1501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 748.116566ms ago: executing program 2 (id=1504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 682.354566ms ago: executing program 3 (id=1505): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 665.059526ms ago: executing program 2 (id=1507): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 578.176837ms ago: executing program 5 (id=1511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) symlink(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x18) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 575.715717ms ago: executing program 4 (id=1512): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000b80)={0x100, 0x1f, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xed, 0xc9, 0x0, 0x1, [@typed={0x4, 0xca}, @nested={0xb5, 0x97, 0x0, 0x1, [@typed={0x4, 0x135, 0x0, 0x0, @str}, @typed={0x8, 0x138, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xe4}, @generic="f16ade12108a3d33142085261dc991fc01deabc8a49c44840de7e5795dfc77aa39fcfb45931139dc82fb81699e85fede732090053fe609c8fd4e0016965816e2a604a55188e995b5760879ccd57aa6297f61ee704972d7b4883211802c138f7169291634c1fec61670352d6decb092556ed8f0aa53c05edd22089e6230b1d873befd8cf6ec4944", @generic="b81691e8ed04", @generic, @nested={0x4, 0xd6}, @typed={0x8, 0x79, 0x0, 0x0, @uid}, @nested={0x4, 0x124}, @nested={0x4, 0x12}]}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @generic="0d420b9db15e321f383b3d1c0a95c900ddb296d35e1bb86ab4"]}]}, 0x100}], 0x2}, 0x0) 518.752637ms ago: executing program 6 (id=1513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x2c) 518.420237ms ago: executing program 3 (id=1514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sysinfo(&(0x7f0000000f80)=""/154) 66.77013ms ago: executing program 5 (id=1533): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2000000, 0x0, 0xe803}}) 0s ago: executing program 6 (id=1534): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 22.842261][ T29] audit: type=1400 audit(1761931630.456:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.865209][ T29] audit: type=1400 audit(1761931630.476:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.865957][ T3302] cgroup: Unknown subsys name 'net' [ 22.892845][ T29] audit: type=1400 audit(1761931630.506:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.009266][ T3302] cgroup: Unknown subsys name 'cpuset' [ 23.015367][ T3302] cgroup: Unknown subsys name 'rlimit' [ 23.144424][ T29] audit: type=1400 audit(1761931630.756:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.167750][ T29] audit: type=1400 audit(1761931630.756:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.188197][ T29] audit: type=1400 audit(1761931630.756:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.208532][ T29] audit: type=1400 audit(1761931630.756:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.228829][ T29] audit: type=1400 audit(1761931630.786:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.235707][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.253656][ T29] audit: type=1400 audit(1761931630.786:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.285420][ T29] audit: type=1400 audit(1761931630.876:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.328549][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.148457][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.199589][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 25.216566][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.223665][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.230852][ T3312] bridge_slave_0: entered allmulticast mode [ 25.237138][ T3312] bridge_slave_0: entered promiscuous mode [ 25.251504][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.258561][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.265766][ T3312] bridge_slave_1: entered allmulticast mode [ 25.272339][ T3312] bridge_slave_1: entered promiscuous mode [ 25.303508][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 25.322942][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.339531][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.379577][ T3312] team0: Port device team_slave_0 added [ 25.387443][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.406298][ T3312] team0: Port device team_slave_1 added [ 25.419428][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.426640][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.433840][ T3315] bridge_slave_0: entered allmulticast mode [ 25.440138][ T3315] bridge_slave_0: entered promiscuous mode [ 25.446680][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.453773][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.460874][ T3315] bridge_slave_1: entered allmulticast mode [ 25.467295][ T3315] bridge_slave_1: entered promiscuous mode [ 25.492071][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.499045][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.524955][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.549553][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.556499][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.582442][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.597492][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 25.623433][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.632602][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.639687][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.646772][ T3322] bridge_slave_0: entered allmulticast mode [ 25.653180][ T3322] bridge_slave_0: entered promiscuous mode [ 25.675313][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.684544][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.691610][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.698864][ T3322] bridge_slave_1: entered allmulticast mode [ 25.705115][ T3322] bridge_slave_1: entered promiscuous mode [ 25.720451][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.727535][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.734653][ T3313] bridge_slave_0: entered allmulticast mode [ 25.741012][ T3313] bridge_slave_0: entered promiscuous mode [ 25.762748][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.769850][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.776958][ T3313] bridge_slave_1: entered allmulticast mode [ 25.783329][ T3313] bridge_slave_1: entered promiscuous mode [ 25.802460][ T3312] hsr_slave_0: entered promiscuous mode [ 25.808361][ T3312] hsr_slave_1: entered promiscuous mode [ 25.819894][ T3315] team0: Port device team_slave_0 added [ 25.826679][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.836526][ T3315] team0: Port device team_slave_1 added [ 25.850090][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.870690][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.902270][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.911395][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.918506][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.925818][ T3320] bridge_slave_0: entered allmulticast mode [ 25.932148][ T3320] bridge_slave_0: entered promiscuous mode [ 25.946858][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.953831][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.979902][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.995403][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.002552][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.009675][ T3320] bridge_slave_1: entered allmulticast mode [ 26.016016][ T3320] bridge_slave_1: entered promiscuous mode [ 26.022674][ T3322] team0: Port device team_slave_0 added [ 26.032738][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.039699][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.065627][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.085502][ T3322] team0: Port device team_slave_1 added [ 26.095815][ T3313] team0: Port device team_slave_0 added [ 26.118285][ T3313] team0: Port device team_slave_1 added [ 26.125027][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.135729][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.145175][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.152205][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.178119][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.214138][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.221119][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.247017][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.260355][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.267343][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.293336][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.320492][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.327482][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.353381][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.366483][ T3315] hsr_slave_0: entered promiscuous mode [ 26.372407][ T3315] hsr_slave_1: entered promiscuous mode [ 26.378065][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 26.383810][ T3315] Cannot create hsr debugfs directory [ 26.389923][ T3320] team0: Port device team_slave_0 added [ 26.415703][ T3320] team0: Port device team_slave_1 added [ 26.451409][ T3322] hsr_slave_0: entered promiscuous mode [ 26.457352][ T3322] hsr_slave_1: entered promiscuous mode [ 26.463543][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 26.469315][ T3322] Cannot create hsr debugfs directory [ 26.474997][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.481962][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.507959][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.532654][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.539651][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.565598][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.578198][ T3313] hsr_slave_0: entered promiscuous mode [ 26.584269][ T3313] hsr_slave_1: entered promiscuous mode [ 26.590112][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 26.595814][ T3313] Cannot create hsr debugfs directory [ 26.670740][ T3320] hsr_slave_0: entered promiscuous mode [ 26.676667][ T3320] hsr_slave_1: entered promiscuous mode [ 26.682604][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 26.688375][ T3320] Cannot create hsr debugfs directory [ 26.699042][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.723860][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.752491][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.775405][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.829366][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.842779][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.856491][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.865628][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.886682][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.897687][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.913241][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.927170][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.943469][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.953805][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.963220][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.979028][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.019113][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.038373][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.047624][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.056080][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.067663][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.074722][ T2816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.089449][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.099498][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.106519][ T2816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.119086][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.128176][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.137587][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.151093][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.158120][ T2816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.173328][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.180383][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.204318][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.236363][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.246759][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.271222][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.292018][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.307710][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.316749][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.323848][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.332352][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.339435][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.361124][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.368174][ T2816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.377455][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.384530][ T2816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.405705][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.425057][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.435487][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.467751][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.476865][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.495207][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.530655][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.552184][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.561193][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.568264][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.583140][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.594328][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.601462][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.647213][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.657632][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.678606][ T3315] veth0_vlan: entered promiscuous mode [ 27.712244][ T3315] veth1_vlan: entered promiscuous mode [ 27.756189][ T3313] veth0_vlan: entered promiscuous mode [ 27.778074][ T3313] veth1_vlan: entered promiscuous mode [ 27.785164][ T3315] veth0_macvtap: entered promiscuous mode [ 27.797867][ T3315] veth1_macvtap: entered promiscuous mode [ 27.812766][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.820959][ T3312] veth0_vlan: entered promiscuous mode [ 27.827389][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.842154][ T3322] veth0_vlan: entered promiscuous mode [ 27.856814][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.867751][ T3322] veth1_vlan: entered promiscuous mode [ 27.883689][ T3313] veth0_macvtap: entered promiscuous mode [ 27.891099][ T1085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.909668][ T1085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.918938][ T3313] veth1_macvtap: entered promiscuous mode [ 27.929856][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.937184][ T3312] veth1_vlan: entered promiscuous mode [ 27.949885][ T1085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.960236][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.977122][ T1085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.987778][ T3322] veth0_macvtap: entered promiscuous mode [ 27.996380][ T1085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.010766][ T3322] veth1_macvtap: entered promiscuous mode [ 28.016535][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.016547][ T29] audit: type=1400 audit(1761931635.626:81): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.39TviP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.046947][ T29] audit: type=1400 audit(1761931635.626:82): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.068899][ T29] audit: type=1400 audit(1761931635.626:83): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.39TviP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.094048][ T29] audit: type=1400 audit(1761931635.626:84): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.115789][ T29] audit: type=1400 audit(1761931635.626:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.39TviP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.142286][ T29] audit: type=1400 audit(1761931635.626:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.39TviP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.169550][ T29] audit: type=1400 audit(1761931635.626:87): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.191425][ T1085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.198784][ T29] audit: type=1400 audit(1761931635.626:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.222897][ T29] audit: type=1400 audit(1761931635.626:89): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.247346][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.251237][ T3320] veth0_vlan: entered promiscuous mode [ 28.270768][ T1085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.279621][ T1085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.300824][ T3320] veth1_vlan: entered promiscuous mode [ 28.308681][ T29] audit: type=1400 audit(1761931635.906:90): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.319328][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.347156][ T3320] veth0_macvtap: entered promiscuous mode [ 28.358488][ T3320] veth1_macvtap: entered promiscuous mode [ 28.381657][ T3312] veth0_macvtap: entered promiscuous mode [ 28.390380][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.391479][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.399033][ T3487] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.399065][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.416612][ T3312] veth1_macvtap: entered promiscuous mode [ 28.423789][ T3487] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.439240][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.457859][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.460196][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.466512][ T3487] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.482496][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.491148][ T3487] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.506849][ T1085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.509758][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 28.519914][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.531648][ T3490] loop0: detected capacity change from 0 to 512 [ 28.533364][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.548527][ T1085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.573431][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.579591][ T3490] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 28.610316][ T1085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.639557][ T3490] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 28.655287][ T3490] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 28.672669][ T1085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.689917][ T3490] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 28.703461][ T1085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.724234][ T1085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.744692][ T1085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.790505][ T1085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.799662][ T1085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.809330][ T1085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.856522][ T1085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.885711][ T1085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.150867][ T3545] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 29.162008][ T3545] team0: Port device dummy0 added [ 29.172084][ T3545] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 29.184560][ T3545] team0: Port device dummy0 removed [ 29.201049][ T3545] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 29.224618][ T3545] syz.3.20 (3545) used greatest stack depth: 10448 bytes left [ 29.288416][ T3564] syzkaller0: entered allmulticast mode [ 29.313472][ T3564] syzkaller0 (unregistering): left allmulticast mode [ 29.366323][ T3572] process 'syz.2.32' launched '/dev/fd/6' with NULL argv: empty string added [ 29.376437][ T3570] bridge_slave_1: left allmulticast mode [ 29.382240][ T3570] bridge_slave_1: left promiscuous mode [ 29.388034][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.398943][ T3570] bridge_slave_0: left allmulticast mode [ 29.404649][ T3570] bridge_slave_0: left promiscuous mode [ 29.410474][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.698256][ T3601] mmap: syz.0.45 (3601) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.760364][ T3606] random: crng reseeded on system resumption [ 29.811265][ T3608] loop0: detected capacity change from 0 to 256 [ 29.829743][ T3610] unsupported nla_type 52263 [ 29.839181][ T3608] FAT-fs (loop0): bogus logical sector size 0 [ 29.845287][ T3608] FAT-fs (loop0): Can't find a valid FAT filesystem [ 29.907144][ T3614] loop2: detected capacity change from 0 to 8192 [ 29.921495][ T3618] random: crng reseeded on system resumption [ 29.939462][ T3306] loop2: p1 p3 [ 29.944466][ T3306] loop2: p1 start 51314688 is beyond EOD, truncated [ 29.951195][ T3306] loop2: p3 start 65536 is beyond EOD, truncated [ 29.963660][ T3614] loop2: p1 p3 [ 29.967210][ T3614] loop2: p1 start 51314688 is beyond EOD, truncated [ 29.973939][ T3614] loop2: p3 start 65536 is beyond EOD, truncated [ 30.081982][ C1] hrtimer: interrupt took 38380 ns [ 30.186312][ T3639] netlink: 'syz.0.63': attribute type 3 has an invalid length. [ 30.228415][ T3644] loop0: detected capacity change from 0 to 512 [ 30.235535][ T3644] EXT4-fs: Ignoring removed bh option [ 30.251356][ T3644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.264314][ T3644] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.278008][ T3644] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 30.294785][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.398109][ T3657] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 30.459044][ T3665] loop0: detected capacity change from 0 to 1024 [ 30.466897][ T3665] ======================================================= [ 30.466897][ T3665] WARNING: The mand mount option has been deprecated and [ 30.466897][ T3665] and is ignored by this kernel. Remove the mand [ 30.466897][ T3665] option from the mount to silence this warning. [ 30.466897][ T3665] ======================================================= [ 30.469959][ T3667] pimreg: entered allmulticast mode [ 30.530260][ T3665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.543543][ T3669] loop3: detected capacity change from 0 to 512 [ 30.551391][ T3669] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.561951][ T3667] pimreg: left allmulticast mode [ 30.569113][ T3669] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.76: error while reading EA inode 32 err=-116 [ 30.575411][ T3665] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.74: Allocating blocks 497-513 which overlap fs metadata [ 30.581532][ T3669] EXT4-fs (loop3): 1 orphan inode deleted [ 30.601583][ T3669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.610897][ T3665] EXT4-fs (loop0): pa ffff88810723d0e0: logic 16, phys. 145, len 23 [ 30.621626][ T3665] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 30.645514][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.677655][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.734706][ T3682] FAT-fs (loop7): unable to read boot sector [ 31.040172][ T3710] loop3: detected capacity change from 0 to 1024 [ 31.060631][ T3710] EXT4-fs: inline encryption not supported [ 31.066581][ T3710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.073266][ T3710] EXT4-fs: Ignoring removed bh option [ 31.097574][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.120461][ T3710] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.95: Allocating blocks 385-513 which overlap fs metadata [ 31.137207][ T3709] EXT4-fs (loop3): pa ffff88810723d070: logic 16, phys. 129, len 24 [ 31.145408][ T3709] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 31.161522][ T3724] loop1: detected capacity change from 0 to 512 [ 31.180530][ T3724] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.100: inode has both inline data and extents flags [ 31.200940][ T3724] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.100: couldn't read orphan inode 15 (err -117) [ 31.226236][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.254123][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.277339][ T3729] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.299015][ T3724] loop1: detected capacity change from 512 to 64 [ 31.322021][ T3730] syz.1.100: attempt to access beyond end of device [ 31.322021][ T3730] loop1: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 31.338422][ T3730] EXT4-fs (loop1): discard request in group:0 block:252 count:1 failed with -5 [ 31.347680][ T3730] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: IO failure [ 31.365900][ T3730] syz.1.100: attempt to access beyond end of device [ 31.365900][ T3730] loop1: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 31.380796][ T3730] EXT4-fs (loop1): discard request in group:0 block:254 count:1 failed with -5 [ 31.399173][ T3730] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: IO failure [ 31.469460][ T3315] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 31.552171][ T3637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.576581][ T3763] netlink: 'syz.2.116': attribute type 21 has an invalid length. [ 31.593378][ T3767] loop3: detected capacity change from 0 to 512 [ 31.601935][ T3763] netlink: 'syz.2.116': attribute type 6 has an invalid length. [ 31.623563][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.636577][ T3767] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.659943][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.708091][ T3777] netlink: 'syz.2.122': attribute type 12 has an invalid length. [ 31.754235][ T2816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.819563][ T3788] loop3: detected capacity change from 0 to 128 [ 31.828032][ T3787] wireguard0: entered promiscuous mode [ 31.833594][ T3787] wireguard0: entered allmulticast mode [ 31.862995][ T3788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.883882][ T3788] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.897742][ T3788] EXT4-fs (loop3): shut down requested (1) [ 31.917623][ T3800] netlink: 'syz.0.132': attribute type 3 has an invalid length. [ 31.917947][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.938588][ T2816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.996922][ T3804] loop2: detected capacity change from 0 to 2048 [ 32.009642][ T2816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.165024][ T2816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.180322][ T3804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 32.201930][ T3877] netlink: 'syz.4.138': attribute type 39 has an invalid length. [ 32.365973][ T2816] bridge_slave_1: left allmulticast mode [ 32.371808][ T2816] bridge_slave_1: left promiscuous mode [ 32.377641][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.411429][ T2816] bridge_slave_0: left allmulticast mode [ 32.417107][ T2816] bridge_slave_0: left promiscuous mode [ 32.422779][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.444408][ T3892] loop0: detected capacity change from 0 to 512 [ 32.476195][ T3892] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.142: inode has both inline data and extents flags [ 32.524525][ T3892] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.142: couldn't read orphan inode 15 (err -117) [ 32.663021][ T3804] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.678281][ T3804] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 32.690964][ T3804] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.690964][ T3804] [ 32.700629][ T3804] EXT4-fs (loop2): Total free blocks count 0 [ 32.706608][ T3804] EXT4-fs (loop2): Free/Dirty block details [ 32.712537][ T3804] EXT4-fs (loop2): free_blocks=2415919104 [ 32.718247][ T3804] EXT4-fs (loop2): dirty_blocks=8208 [ 32.723600][ T3804] EXT4-fs (loop2): Block reservation details [ 32.729620][ T3804] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 32.738029][ T3892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.770325][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.789984][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.841272][ T3892] loop0: detected capacity change from 512 to 64 [ 32.850227][ T2816] bond0 (unregistering): Released all slaves [ 32.862340][ T3792] chnl_net:caif_netlink_parms(): no params data found [ 32.869845][ T3894] syz.0.142: attempt to access beyond end of device [ 32.869845][ T3894] loop0: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 32.901294][ T2816] hsr_slave_0: left promiscuous mode [ 32.907034][ T3894] EXT4-fs (loop0): discard request in group:0 block:252 count:1 failed with -5 [ 32.917287][ T3894] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: IO failure [ 32.917445][ T2816] hsr_slave_1: left promiscuous mode [ 32.926318][ T3894] syz.0.142: attempt to access beyond end of device [ 32.926318][ T3894] loop0: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 32.944496][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.945234][ T3894] EXT4-fs (loop0): discard request in group:0 block:254 count:1 failed with -5 [ 32.951932][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.979791][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.979905][ T3894] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: IO failure [ 32.987206][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.002533][ T3804] syz.2.134 (3804) used greatest stack depth: 10120 bytes left [ 33.019852][ T3826] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 33.032992][ T2816] veth1_macvtap: left promiscuous mode [ 33.038931][ T2816] veth0_macvtap: left promiscuous mode [ 33.046421][ T2816] veth1_vlan: left promiscuous mode [ 33.063915][ T3903] loop4: detected capacity change from 0 to 512 [ 33.065728][ T3313] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 33.072125][ T3903] EXT4-fs: Ignoring removed bh option [ 33.093881][ T2816] veth0_vlan: left promiscuous mode [ 33.119268][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.140485][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.160486][ T3903] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.199962][ T3903] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.232734][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 33.247314][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 33.256298][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.282612][ T3909] netlink: 'syz.4.148': attribute type 3 has an invalid length. [ 33.370177][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.377278][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.385672][ T3916] loop4: detected capacity change from 0 to 512 [ 33.392841][ T3792] bridge_slave_0: entered allmulticast mode [ 33.399563][ T3792] bridge_slave_0: entered promiscuous mode [ 33.405944][ T3916] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.419963][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.427046][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.443346][ T3792] bridge_slave_1: entered allmulticast mode [ 33.449970][ T3792] bridge_slave_1: entered promiscuous mode [ 33.450274][ T3916] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 33.471796][ T3916] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 33.480300][ T3916] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 33.488063][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 33.488077][ T29] audit: type=1400 audit(1761931641.096:364): avc: denied { create } for pid=3914 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.524610][ T3929] netlink: 'syz.2.151': attribute type 39 has an invalid length. [ 33.539106][ T3792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.551814][ T3792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.561354][ T29] audit: type=1400 audit(1761931641.096:365): avc: denied { write } for pid=3914 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.587521][ T29] audit: type=1400 audit(1761931641.096:366): avc: denied { append } for pid=3914 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.611627][ T29] audit: type=1400 audit(1761931641.156:367): avc: denied { unlink } for pid=3927 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.636001][ T29] audit: type=1400 audit(1761931641.206:368): avc: denied { execmem } for pid=3931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 33.669313][ T3792] team0: Port device team_slave_0 added [ 33.679069][ T3792] team0: Port device team_slave_1 added [ 33.695087][ T29] audit: type=1400 audit(1761931641.306:369): avc: denied { bind } for pid=3935 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.714578][ T29] audit: type=1400 audit(1761931641.306:370): avc: denied { setopt } for pid=3935 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.754059][ T3940] syzkaller0: entered allmulticast mode [ 33.760305][ T3792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.767271][ T3792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.793296][ T3792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.805690][ T3940] syzkaller0 (unregistering): left allmulticast mode [ 33.836726][ T3949] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.875043][ T29] audit: type=1400 audit(1761931641.486:371): avc: denied { read write } for pid=3957 comm="syz.3.156" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 33.898607][ T29] audit: type=1400 audit(1761931641.486:372): avc: denied { open } for pid=3957 comm="syz.3.156" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 33.937738][ T29] audit: type=1400 audit(1761931641.546:373): avc: denied { create } for pid=3963 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.960016][ T3792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.966968][ T3792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.992933][ T3792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.071912][ T3792] hsr_slave_0: entered promiscuous mode [ 34.078085][ T3792] hsr_slave_1: entered promiscuous mode [ 34.084192][ T3792] debugfs: 'hsr0' already exists in 'hsr' [ 34.089933][ T3792] Cannot create hsr debugfs directory [ 34.121637][ T2816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.193532][ T2816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.282412][ T2816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.354634][ T2816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.387547][ T4007] __nla_validate_parse: 16 callbacks suppressed [ 34.387560][ T4007] netlink: 176 bytes leftover after parsing attributes in process `syz.3.166'. [ 34.437434][ T3932] chnl_net:caif_netlink_parms(): no params data found [ 34.607330][ T3932] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.614515][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.632988][ T4047] udevd[4047]: failed to send result of seq 8209 to main daemon: Connection refused [ 34.639125][ T3298] udevd[3298]: failed to send result of seq 8204 to main daemon: Transport endpoint is not connected [ 34.642760][ T3306] udevd[3306]: failed to send result of seq 8203 to main daemon: Transport endpoint is not connected [ 34.656672][ T3799] udevd[3799]: failed to send result of seq 8205 to main daemon: Transport endpoint is not connected [ 34.664424][ T3932] bridge_slave_0: entered allmulticast mode [ 34.685875][ T3932] bridge_slave_0: entered promiscuous mode [ 34.702288][ T4044] wireguard0: entered promiscuous mode [ 34.707778][ T4044] wireguard0: entered allmulticast mode [ 34.730259][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.737343][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.752517][ T3932] bridge_slave_1: entered allmulticast mode [ 34.764999][ T3932] bridge_slave_1: entered promiscuous mode [ 34.778116][ T2816] bridge_slave_1: left allmulticast mode [ 34.784017][ T2816] bridge_slave_1: left promiscuous mode [ 34.789927][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.801930][ T2816] bridge_slave_0: left allmulticast mode [ 34.807616][ T2816] bridge_slave_0: left promiscuous mode [ 34.813534][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.902368][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.914319][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.925791][ T2816] bond0 (unregistering): Released all slaves [ 34.956757][ T3932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.970528][ T3932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.981429][ T2816] hsr_slave_0: left promiscuous mode [ 34.987062][ T2816] hsr_slave_1: left promiscuous mode [ 34.994857][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.002273][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.026965][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.034498][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.063331][ T2816] veth1_macvtap: left promiscuous mode [ 35.071602][ T2816] veth0_macvtap: left promiscuous mode [ 35.077350][ T2816] veth1_vlan: left promiscuous mode [ 35.084029][ T2816] veth0_vlan: left promiscuous mode [ 35.184482][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 35.215881][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 35.274876][ T3792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.318759][ T3792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.342326][ T3932] team0: Port device team_slave_0 added [ 35.357001][ T3792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.382123][ T3932] team0: Port device team_slave_1 added [ 35.397137][ T3792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.449177][ T3932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.456161][ T3932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.482246][ T3932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.502214][ T3932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.509276][ T3932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.535226][ T3932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.606695][ T4085] loop4: detected capacity change from 0 to 2048 [ 35.625750][ T3932] hsr_slave_0: entered promiscuous mode [ 35.635326][ T3932] hsr_slave_1: entered promiscuous mode [ 35.648424][ T3932] debugfs: 'hsr0' already exists in 'hsr' [ 35.654235][ T3932] Cannot create hsr debugfs directory [ 35.667493][ T3792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.679557][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.724649][ T3792] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.759848][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.788318][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.795462][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.844650][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.851758][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.894608][ T3792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.905451][ T3792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.982335][ T3932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 36.005337][ T3792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.024709][ T3932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 36.041325][ T3932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 36.052531][ T3932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 36.189386][ T4152] Zero length message leads to an empty skb [ 36.197278][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.217640][ T3932] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.236933][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.244021][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.271757][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.278914][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.331430][ T3792] veth0_vlan: entered promiscuous mode [ 36.339439][ T3792] veth1_vlan: entered promiscuous mode [ 36.381276][ T3932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.390103][ T3792] veth0_macvtap: entered promiscuous mode [ 36.405335][ T3792] veth1_macvtap: entered promiscuous mode [ 36.431290][ T3792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.444886][ T3792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.463086][ T311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.480803][ T311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.504235][ T311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.526154][ T311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.587667][ T4204] loop3: detected capacity change from 0 to 2048 [ 36.589826][ T4195] netlink: 176 bytes leftover after parsing attributes in process `syz.2.226'. [ 36.630245][ T3932] veth0_vlan: entered promiscuous mode [ 36.636056][ T4204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.637927][ T3932] veth1_vlan: entered promiscuous mode [ 36.664119][ T3932] veth0_macvtap: entered promiscuous mode [ 36.671551][ T3932] veth1_macvtap: entered promiscuous mode [ 36.685362][ T3932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.697193][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.724510][ T3932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.762386][ T3885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.774692][ T3885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.787026][ T311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.799772][ T311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.876597][ T4235] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.884257][ T4235] vhci_hcd: invalid port number 96 [ 36.889468][ T4235] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 36.945487][ T4245] syz.6.240 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.095605][ T4265] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.125716][ T4265] vhci_hcd: invalid port number 96 [ 37.130897][ T4265] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 37.319311][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.5.263'. [ 37.328254][ T4292] netlink: 108 bytes leftover after parsing attributes in process `syz.5.263'. [ 37.337432][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.5.263'. [ 37.347066][ T4292] netlink: 108 bytes leftover after parsing attributes in process `syz.5.263'. [ 37.356101][ T4292] netlink: 84 bytes leftover after parsing attributes in process `syz.5.263'. [ 37.386586][ T4299] loop6: detected capacity change from 0 to 128 [ 37.399190][ T4299] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 37.414343][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.267'. [ 37.433856][ T3932] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.453040][ T4306] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 37.543079][ T4320] syz.6.276 uses obsolete (PF_INET,SOCK_PACKET) [ 37.627923][ T3885] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.717607][ T4336] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.733309][ T4336] wireguard0: entered promiscuous mode [ 37.738807][ T4336] wireguard0: entered allmulticast mode [ 37.782056][ T4339] netlink: 3 bytes leftover after parsing attributes in process `syz.2.284'. [ 37.791513][ T4339] 0ªX¹¦À: renamed from caif0 [ 37.797827][ T4339] 0ªX¹¦À: entered allmulticast mode [ 37.803084][ T4339] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 37.846846][ T4343] netlink: 96 bytes leftover after parsing attributes in process `syz.2.286'. [ 37.948308][ T4357] loop3: detected capacity change from 0 to 512 [ 37.961473][ T4357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.974303][ T4357] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.997225][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.087993][ T4373] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.203114][ T4399] loop4: detected capacity change from 0 to 256 [ 38.231262][ T4396] loop2: detected capacity change from 0 to 8192 [ 38.380505][ T4424] loop4: detected capacity change from 0 to 512 [ 38.390724][ T4426] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 38.404783][ T4426] bond0: (slave dummy0): Releasing backup interface [ 38.413564][ T4424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.431169][ T4426] team0: Port device dummy0 added [ 38.455066][ T4426] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 38.463858][ T4424] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.466852][ T4430] netlink: 'syz.5.323': attribute type 1 has an invalid length. [ 38.482128][ T4430] netlink: 'syz.5.323': attribute type 2 has an invalid length. [ 38.500792][ T4426] team0: Port device dummy0 removed [ 38.506706][ T4424] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz.4.321: invalid size [ 38.517328][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 38.517339][ T29] audit: type=1400 audit(1761931646.116:585): avc: denied { remove_name } for pid=4423 comm="syz.4.321" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.546148][ T29] audit: type=1400 audit(1761931646.116:586): avc: denied { rmdir } for pid=4423 comm="syz.4.321" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.570856][ T4426] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.596539][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.625280][ T29] audit: type=1400 audit(1761931646.236:587): avc: denied { map_create } for pid=4435 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.644298][ T29] audit: type=1400 audit(1761931646.236:588): avc: denied { bpf } for pid=4435 comm="syz.4.324" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.664708][ T29] audit: type=1400 audit(1761931646.236:589): avc: denied { map_read map_write } for pid=4435 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.690300][ T4432] Falling back ldisc for ttyS3. [ 38.691761][ T29] audit: type=1400 audit(1761931646.256:590): avc: denied { prog_load } for pid=4435 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.714064][ T29] audit: type=1400 audit(1761931646.256:591): avc: denied { perfmon } for pid=4435 comm="syz.4.324" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.734858][ T29] audit: type=1400 audit(1761931646.276:592): avc: denied { prog_run } for pid=4435 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.761848][ T29] audit: type=1400 audit(1761931646.376:593): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.785971][ T29] audit: type=1400 audit(1761931646.376:594): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.835193][ T4440] syz.5.328 (4440) used greatest stack depth: 9008 bytes left [ 38.972399][ T4459] loop5: detected capacity change from 0 to 4096 [ 38.988152][ T4459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.238212][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.525910][ T4500] wg1: entered promiscuous mode [ 39.531056][ T4500] wg1: entered allmulticast mode [ 39.629089][ T3632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.635153][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 39.704013][ T4525] __nla_validate_parse: 4 callbacks suppressed [ 39.704027][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.363'. [ 40.050059][ T4575] loop4: detected capacity change from 0 to 512 [ 40.057633][ T4575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.099050][ T4575] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.387: couldn't read orphan inode 26 (err -116) [ 40.123241][ T4575] EXT4-fs (loop4): Remounting filesystem read-only [ 40.132696][ T4575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.149354][ T4582] xt_limit: Overflow, try lower: 0/0 [ 40.154745][ T4575] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.178561][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.336995][ T4622] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 40.350115][ T4619] loop3: detected capacity change from 0 to 512 [ 40.358151][ T4619] EXT4-fs: Ignoring removed nobh option [ 40.373250][ T4619] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.403: corrupted inode contents [ 40.401228][ T4619] EXT4-fs (loop3): Remounting filesystem read-only [ 40.414288][ T4619] EXT4-fs (loop3): 1 truncate cleaned up [ 40.426333][ T4619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.451327][ T4619] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.477595][ T4619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.487144][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.412'. [ 40.517937][ T4647] loop4: detected capacity change from 0 to 128 [ 40.529898][ T4647] FAT-fs (loop4): Directory bread(block 32) failed [ 40.536528][ T4647] FAT-fs (loop4): Directory bread(block 33) failed [ 40.572594][ T4647] FAT-fs (loop4): Directory bread(block 34) failed [ 40.590254][ T4647] FAT-fs (loop4): Directory bread(block 35) failed [ 40.602212][ T4647] FAT-fs (loop4): Directory bread(block 36) failed [ 40.609934][ T4647] FAT-fs (loop4): Directory bread(block 37) failed [ 40.616531][ T4647] FAT-fs (loop4): Directory bread(block 38) failed [ 40.623447][ T4647] FAT-fs (loop4): Directory bread(block 39) failed [ 40.644233][ T4647] FAT-fs (loop4): Directory bread(block 40) failed [ 40.651104][ T4647] FAT-fs (loop4): Directory bread(block 41) failed [ 40.760135][ T4674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.427'. [ 40.769096][ T4674] netlink: 140 bytes leftover after parsing attributes in process `syz.6.427'. [ 40.825089][ T4679] netlink: 'syz.5.430': attribute type 1 has an invalid length. [ 40.863241][ T4686] random: crng reseeded on system resumption [ 41.317192][ T4757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.466'. [ 41.344137][ T4757] 1ªX¹¦À: renamed from 60ªX¹¦À [ 41.357496][ T4765] loop6: detected capacity change from 0 to 512 [ 41.369174][ T4757] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 41.413499][ T4765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.444655][ T4765] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.554743][ T4782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4782 comm=syz.4.476 [ 41.635080][ T3932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.257269][ T4824] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 42.409671][ T4835] xt_hashlimit: max too large, truncated to 1048576 [ 42.501142][ T4840] SELinux: policydb version 4376 does not match my version range 15-35 [ 42.525440][ T4840] SELinux: failed to load policy [ 42.546420][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 42.555322][ T4849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 42.564265][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 42.579741][ T4849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 42.588792][ T4849] netlink: 'syz.3.505': attribute type 6 has an invalid length. [ 42.603164][ T4853] netlink: 96 bytes leftover after parsing attributes in process `syz.4.508'. [ 42.687804][ T4866] macvtap0: refused to change device tx_queue_len [ 42.895419][ T4887] netlink: 'syz.5.524': attribute type 1 has an invalid length. [ 42.965320][ T4897] hub 2-0:1.0: USB hub found [ 42.975014][ T4897] hub 2-0:1.0: 8 ports detected [ 43.068979][ T4909] Driver unsupported XDP return value 0 on prog (id 385) dev N/A, expect packet loss! [ 43.098691][ T4914] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 43.105228][ T4914] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 43.113420][ T4914] vhci_hcd vhci_hcd.0: Device attached [ 43.152046][ T4916] vhci_hcd: connection closed [ 43.171917][ T3885] vhci_hcd: stop threads [ 43.180927][ T3885] vhci_hcd: release socket [ 43.185403][ T3885] vhci_hcd: disconnect device [ 43.545668][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 43.545694][ T29] audit: type=1400 audit(1761931651.156:904): avc: denied { bind } for pid=4945 comm="syz.6.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.592956][ T29] audit: type=1400 audit(1761931651.196:905): avc: denied { read } for pid=4947 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.693844][ T29] audit: type=1400 audit(1761931651.306:906): avc: denied { mount } for pid=4957 comm="syz.4.556" name="/" dev="hugetlbfs" ino=9566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 43.757837][ T29] audit: type=1400 audit(1761931651.356:907): avc: denied { create } for pid=4961 comm="syz.6.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.777292][ T29] audit: type=1400 audit(1761931651.356:908): avc: denied { connect } for pid=4961 comm="syz.6.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.903345][ T4979] SELinux: Context Ü is not valid (left unmapped). [ 43.911028][ T29] audit: type=1400 audit(1761931651.516:909): avc: denied { mac_admin } for pid=4978 comm="syz.6.565" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.022991][ T4997] bond_slave_0: entered promiscuous mode [ 44.028710][ T4997] bond_slave_1: entered promiscuous mode [ 44.034823][ T29] audit: type=1400 audit(1761931651.546:910): avc: denied { getopt } for pid=4984 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.054277][ T29] audit: type=1400 audit(1761931651.616:911): avc: denied { create } for pid=4993 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.059765][ T4997] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 44.073652][ T29] audit: type=1400 audit(1761931651.616:912): avc: denied { write } for pid=4993 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.100001][ T29] audit: type=1400 audit(1761931651.636:913): avc: denied { mount } for pid=4999 comm="syz.3.576" name="/" dev="mqueue" ino=2525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.149972][ T4997] bond_slave_0: left promiscuous mode [ 44.155392][ T4997] bond_slave_1: left promiscuous mode [ 44.214814][ T5009] SELinux: failed to load policy [ 44.403919][ T5003] loop6: detected capacity change from 0 to 32768 [ 44.547066][ T5038] netlink: 'syz.5.595': attribute type 9 has an invalid length. [ 44.573146][ T3885] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.592295][ T3885] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.611611][ T3885] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.622047][ T3862] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.789532][ T5058] tipc: Started in network mode [ 44.794426][ T5058] tipc: Node identity ac14140f, cluster identity 4711 [ 44.819255][ T5058] tipc: New replicast peer: 255.255.255.83 [ 44.825237][ T5058] tipc: Enabled bearer , priority 10 [ 44.929279][ T5077] SELinux: policydb version 0 does not match my version range 15-35 [ 44.940867][ T5077] SELinux: failed to load policy [ 45.101382][ T5107] vcan0: entered allmulticast mode [ 45.106741][ T5107] vcan0: left allmulticast mode [ 45.128151][ T5113] netlink: 'syz.6.629': attribute type 39 has an invalid length. [ 45.131684][ T5112] loop2: detected capacity change from 0 to 512 [ 45.148578][ T5112] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.156159][ T5112] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.630: corrupted inode contents [ 45.169911][ T5112] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 45.178842][ T5112] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.630: corrupted inode contents [ 45.191557][ T5112] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.630: mark_inode_dirty error [ 45.204500][ T5112] EXT4-fs (loop2): 1 orphan inode deleted [ 45.210707][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.235111][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.562841][ T5165] __nla_validate_parse: 10 callbacks suppressed [ 45.562858][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.653'. [ 45.579443][ T5169] capability: warning: `syz.3.655' uses 32-bit capabilities (legacy support in use) [ 45.622201][ T5172] loop6: detected capacity change from 0 to 128 [ 45.641054][ T5172] syz.6.658: attempt to access beyond end of device [ 45.641054][ T5172] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 45.664845][ T5172] syz.6.658: attempt to access beyond end of device [ 45.664845][ T5172] loop6: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 45.687420][ T5172] syz.6.658: attempt to access beyond end of device [ 45.687420][ T5172] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 45.700809][ T5172] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 45.724781][ T5172] syz.6.658: attempt to access beyond end of device [ 45.724781][ T5172] loop6: rw=2049, sector=170, nr_sectors = 80 limit=128 [ 45.772084][ T5172] syz.6.658: attempt to access beyond end of device [ 45.772084][ T5172] loop6: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 45.828831][ T3401] tipc: Node number set to 2886997007 [ 45.849609][ T5192] loop3: detected capacity change from 0 to 256 [ 45.910326][ T5192] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.145542][ T5223] wireguard0: entered promiscuous mode [ 46.151069][ T5223] wireguard0: entered allmulticast mode [ 46.175072][ T5228] netlink: 32 bytes leftover after parsing attributes in process `syz.6.678'. [ 46.211629][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.682'. [ 46.221438][ T5234] netlink: 'syz.6.682': attribute type 1 has an invalid length. [ 46.229121][ T5234] netlink: 'syz.6.682': attribute type 2 has an invalid length. [ 46.236761][ T5234] netlink: 16 bytes leftover after parsing attributes in process `syz.6.682'. [ 46.271366][ T5238] netlink: 'syz.6.683': attribute type 10 has an invalid length. [ 46.289313][ T5238] team0: Port device dummy0 added [ 46.302378][ T5238] netlink: 'syz.6.683': attribute type 10 has an invalid length. [ 46.313750][ T5238] team0: Port device dummy0 removed [ 46.321734][ T5238] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.375523][ T5241] loop3: detected capacity change from 0 to 8192 [ 46.452880][ T5256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.692'. [ 46.462827][ T5256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.692'. [ 46.506087][ T5263] loop6: detected capacity change from 0 to 512 [ 46.521826][ T5263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.534636][ T5263] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.554178][ T3932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.562418][ T5270] loop3: detected capacity change from 0 to 256 [ 46.611720][ T5278] loop6: detected capacity change from 0 to 128 [ 46.681834][ T5277] SELinux: failed to load policy [ 47.176336][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 47.266332][ T5317] loop2: detected capacity change from 0 to 4096 [ 47.274908][ T5317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.520428][ T5342] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 47.528625][ T5342] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 47.586683][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.690805][ T5356] loop3: detected capacity change from 0 to 8192 [ 47.739259][ T5356] loop3: p1 p2 p4 < > [ 47.743345][ T5356] loop3: partition table partially beyond EOD, truncated [ 47.750730][ T5356] loop3: p1 start 16777216 is beyond EOD, truncated [ 47.757337][ T5356] loop3: p2 size 515840 extends beyond EOD, truncated [ 47.764405][ T5368] loop2: detected capacity change from 0 to 8192 [ 47.766443][ T5356] loop3: p4 start 16777216 is beyond EOD, truncated [ 47.785682][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 47.793555][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 47.872984][ T5376] SELinux: ebitmap: truncated map [ 47.879723][ T5376] SELinux: failed to load policy [ 48.166143][ T5433] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 48.193564][ T5439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 48.202509][ T5439] netem: change failed [ 48.332319][ T5445] SELinux: failed to load policy [ 48.510257][ T5481] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 48.672126][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 48.672141][ T29] audit: type=1326 audit(1761931656.286:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.702944][ T29] audit: type=1326 audit(1761931656.286:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.726367][ T29] audit: type=1326 audit(1761931656.286:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.749677][ T29] audit: type=1326 audit(1761931656.286:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.773077][ T29] audit: type=1326 audit(1761931656.296:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.796713][ T29] audit: type=1326 audit(1761931656.296:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.820120][ T29] audit: type=1326 audit(1761931656.296:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.843416][ T29] audit: type=1326 audit(1761931656.316:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.866735][ T29] audit: type=1326 audit(1761931656.316:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.890123][ T29] audit: type=1326 audit(1761931656.316:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 48.960072][ T5513] loop4: detected capacity change from 0 to 8192 [ 48.991608][ T3312] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 48.999484][ T3312] FAT-fs (loop4): Filesystem has been set read-only [ 49.082064][ T5531] xt_limit: Overflow, try lower: 0/0 [ 49.175630][ T5530] SELinux: failed to load policy [ 49.385239][ T5546] loop6: detected capacity change from 0 to 8192 [ 49.448503][ T5564] xt_limit: Overflow, try lower: 0/0 [ 49.449150][ T3932] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 49.461696][ T3932] FAT-fs (loop6): Filesystem has been set read-only [ 49.539246][ T5580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5580 comm=syz.6.844 [ 49.815691][ T5611] netlink: 3 bytes leftover after parsing attributes in process `syz.5.851'. [ 49.824749][ T5611] 0ªX¹¦À: renamed from caif0 [ 49.831674][ T5611] 0ªX¹¦À: entered allmulticast mode [ 49.836997][ T5611] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 49.931853][ T5623] xt_hashlimit: max too large, truncated to 1048576 [ 50.129540][ T5639] netlink: 'syz.3.863': attribute type 20 has an invalid length. [ 50.137300][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 50.163772][ T2816] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.172832][ T2816] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.179177][ T5639] netlink: 'syz.3.863': attribute type 20 has an invalid length. [ 50.181674][ T2816] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.199814][ T2816] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.605138][ T5680] loop5: detected capacity change from 0 to 512 [ 50.630271][ T5680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.671957][ T5680] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.755166][ T5693] __nla_validate_parse: 1 callbacks suppressed [ 50.755183][ T5693] netlink: 96 bytes leftover after parsing attributes in process `syz.6.885'. [ 50.793568][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.886'. [ 50.802515][ T5695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.886'. [ 50.811411][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.886'. [ 50.820561][ T5695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.886'. [ 50.829760][ T5695] netlink: 'syz.6.886': attribute type 6 has an invalid length. [ 50.865931][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.952484][ T5708] hub 2-0:1.0: USB hub found [ 50.968893][ T5708] hub 2-0:1.0: 8 ports detected [ 51.174867][ T5728] loop4: detected capacity change from 0 to 512 [ 51.216656][ T5728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.247332][ T5728] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.431537][ T5747] netlink: 'syz.6.910': attribute type 20 has an invalid length. [ 51.433009][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.439340][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.910'. [ 51.517298][ T2816] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.517310][ T5747] netlink: 'syz.6.910': attribute type 20 has an invalid length. [ 51.517368][ T2816] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.526046][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.910'. [ 51.590486][ T2816] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.610811][ T2816] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.629123][ T5764] netlink: 260 bytes leftover after parsing attributes in process `syz.5.918'. [ 51.638203][ T5764] netlink: 260 bytes leftover after parsing attributes in process `syz.5.918'. [ 51.881860][ T5780] loop2: detected capacity change from 0 to 128 [ 52.015289][ T5794] netlink: 260 bytes leftover after parsing attributes in process `syz.6.931'. [ 52.114521][ T5810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5810 comm=syz.6.938 [ 52.127022][ T5810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5810 comm=syz.6.938 [ 52.147939][ T5809] SELinux: ebitmap: map size 68 does not match my size 64 (high bit was 0) [ 52.157394][ T5809] SELinux: failed to load policy [ 52.515619][ T5824] tipc: Started in network mode [ 52.520544][ T5824] tipc: Node identity ac14140f, cluster identity 4711 [ 52.527460][ T5828] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 52.527496][ T5824] tipc: New replicast peer: 255.255.255.83 [ 52.533973][ T5828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 52.534069][ T5828] vhci_hcd vhci_hcd.0: Device attached [ 52.539910][ T5824] tipc: Enabled bearer , priority 10 [ 52.556860][ T5829] vhci_hcd: connection closed [ 52.559805][ T3885] vhci_hcd: stop threads [ 52.568755][ T3885] vhci_hcd: release socket [ 52.573197][ T3885] vhci_hcd: disconnect device [ 52.606643][ T5835] bond_slave_0: entered promiscuous mode [ 52.612460][ T5835] bond_slave_1: entered promiscuous mode [ 52.619811][ T5835] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 52.632597][ T5835] bond_slave_0: left promiscuous mode [ 52.638001][ T5835] bond_slave_1: left promiscuous mode [ 52.683597][ T5841] SELinux: ebitmap: map size 68 does not match my size 64 (high bit was 0) [ 52.692410][ T5841] SELinux: failed to load policy [ 52.776760][ T5849] 0ªX¹¦À: renamed from caif0 [ 52.787932][ T5849] 0ªX¹¦À: entered allmulticast mode [ 52.793220][ T5849] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.831432][ T5857] netlink: 'syz.3.969': attribute type 9 has an invalid length. [ 52.831477][ T5856] netlink: 'syz.4.959': attribute type 20 has an invalid length. [ 52.835202][ T5856] netlink: 'syz.4.959': attribute type 20 has an invalid length. [ 52.839232][ T3885] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.839335][ T3885] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.877192][ T3885] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.887850][ T3885] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.954735][ T5861] SELinux: policydb version 0 does not match my version range 15-35 [ 52.964461][ T5861] SELinux: failed to load policy [ 53.021794][ T5876] bond_slave_0: entered promiscuous mode [ 53.027468][ T5876] bond_slave_1: entered promiscuous mode [ 53.033129][ T5876] dummy0: entered promiscuous mode [ 53.040356][ T5876] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 53.049888][ T5876] bond_slave_0: left promiscuous mode [ 53.055354][ T5876] bond_slave_1: left promiscuous mode [ 53.060774][ T5876] dummy0: left promiscuous mode [ 53.109539][ T5884] 0ªX¹¦À: renamed from 61ªX¹¦À [ 53.123298][ T5884] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 53.208000][ T5892] netlink: 'syz.4.978': attribute type 39 has an invalid length. [ 53.357269][ T5917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 53.363808][ T5917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.371987][ T5917] vhci_hcd vhci_hcd.0: Device attached [ 53.380174][ T5918] vhci_hcd: connection closed [ 53.380399][ T3811] vhci_hcd: stop threads [ 53.389398][ T3811] vhci_hcd: release socket [ 53.393834][ T3811] vhci_hcd: disconnect device [ 53.434506][ T5923] SELinux: ebitmap: map size 68 does not match my size 64 (high bit was 0) [ 53.443453][ T5923] SELinux: failed to load policy [ 53.491114][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.499943][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.558790][ T3394] tipc: Node number set to 2886997007 [ 53.694741][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 53.694827][ T29] audit: type=1400 audit(1761931661.306:1444): avc: denied { mounton } for pid=5955 comm="syz.2.1006" path="/196/file0" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.906830][ T29] audit: type=1326 audit(1761931661.516:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 53.935724][ T5966] loop6: detected capacity change from 0 to 8192 [ 53.960555][ T29] audit: type=1326 audit(1761931661.516:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 53.984023][ T29] audit: type=1326 audit(1761931661.556:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.007463][ T29] audit: type=1326 audit(1761931661.556:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.031044][ T29] audit: type=1326 audit(1761931661.556:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.054714][ T29] audit: type=1326 audit(1761931661.556:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.078215][ T29] audit: type=1326 audit(1761931661.556:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.101606][ T29] audit: type=1326 audit(1761931661.556:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.124985][ T29] audit: type=1326 audit(1761931661.556:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa50274efc9 code=0x7ffc0000 [ 54.217917][ T5983] loop5: detected capacity change from 0 to 512 [ 54.237333][ T5981] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 54.248083][ T5983] EXT4-fs (loop5): orphan cleanup on readonly fs [ 54.285152][ T5983] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.1019: corrupted inode contents [ 54.307206][ T5983] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 54.328058][ T5983] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.1019: corrupted inode contents [ 54.347560][ T5983] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.1019: mark_inode_dirty error [ 54.361087][ T5983] EXT4-fs (loop5): 1 orphan inode deleted [ 54.367225][ T5983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.395349][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.427314][ T5999] loop5: detected capacity change from 0 to 128 [ 54.438808][ T6005] bond_slave_0: entered promiscuous mode [ 54.444460][ T6005] bond_slave_1: entered promiscuous mode [ 54.450130][ T6005] dummy0: entered promiscuous mode [ 54.460869][ T6005] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 54.471999][ T6007] loop4: detected capacity change from 0 to 256 [ 54.479339][ T6007] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.490559][ T6005] bond_slave_0: left promiscuous mode [ 54.495955][ T6005] bond_slave_1: left promiscuous mode [ 54.501426][ T6005] dummy0: left promiscuous mode [ 54.616947][ T6013] wireguard0: entered promiscuous mode [ 54.622574][ T6013] wireguard0: entered allmulticast mode [ 54.638029][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.646751][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.861558][ T6058] loop3: detected capacity change from 0 to 128 [ 54.886266][ T6060] loop6: detected capacity change from 0 to 512 [ 54.895630][ T6060] EXT4-fs: Ignoring removed bh option [ 54.903272][ T6060] EXT4-fs: Ignoring removed oldalloc option [ 54.909281][ T6060] ext4: Unknown parameter 'dont_measure' [ 54.927910][ T6062] wireguard0: entered promiscuous mode [ 54.933537][ T6062] wireguard0: entered allmulticast mode [ 55.063702][ T6075] loop6: detected capacity change from 0 to 512 [ 55.072504][ T6075] EXT4-fs (loop6): orphan cleanup on readonly fs [ 55.079160][ T6075] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.1055: corrupted inode contents [ 55.091406][ T6075] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 55.100344][ T6075] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.1055: corrupted inode contents [ 55.112499][ T6075] EXT4-fs error (device loop6): ext4_evict_inode:302: inode #15: comm syz.6.1055: mark_inode_dirty error [ 55.124236][ T6075] EXT4-fs (loop6): 1 orphan inode deleted [ 55.130724][ T6075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.158081][ T3932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.230675][ T6095] random: crng reseeded on system resumption [ 55.779210][ T6105] wireguard0: entered promiscuous mode [ 55.784775][ T6105] wireguard0: entered allmulticast mode [ 55.878936][ T6101] Falling back ldisc for ttyS3. [ 55.906160][ T6125] loop3: detected capacity change from 0 to 512 [ 55.914234][ T6125] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.924428][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1072: corrupted inode contents [ 55.958822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.960108][ T6125] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 55.976239][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1072: corrupted inode contents [ 55.993719][ T6125] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.1072: mark_inode_dirty error [ 56.006571][ T6125] EXT4-fs (loop3): 1 orphan inode deleted [ 56.013008][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.036048][ T6137] loop4: detected capacity change from 0 to 512 [ 56.051914][ T6137] EXT4-fs: Ignoring removed i_version option [ 56.057978][ T6137] EXT4-fs: Ignoring removed bh option [ 56.070741][ T6139] loop5: detected capacity change from 0 to 512 [ 56.077348][ T6139] EXT4-fs: Ignoring removed bh option [ 56.089012][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.115491][ T6139] EXT4-fs: Ignoring removed oldalloc option [ 56.115820][ T6137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.121476][ T6139] ext4: Unknown parameter 'dont_measure' [ 56.174162][ T6137] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.314318][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.331602][ T6166] loop2: detected capacity change from 0 to 128 [ 56.342364][ T6166] syz.2.1101: attempt to access beyond end of device [ 56.342364][ T6166] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 56.356315][ T6168] __nla_validate_parse: 17 callbacks suppressed [ 56.356330][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 56.371595][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1091'. [ 56.380646][ T6168] validate_nla: 1 callbacks suppressed [ 56.380659][ T6168] netlink: 'syz.5.1091': attribute type 20 has an invalid length. [ 56.395126][ T6166] syz.2.1101: attempt to access beyond end of device [ 56.395126][ T6166] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 56.419001][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 56.427995][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1091'. [ 56.437026][ T6168] netlink: 'syz.5.1091': attribute type 20 has an invalid length. [ 56.449872][ T6166] syz.2.1101: attempt to access beyond end of device [ 56.449872][ T6166] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 56.463304][ T6166] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 56.473334][ T6166] syz.2.1101: attempt to access beyond end of device [ 56.473334][ T6166] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 56.617112][ T6181] loop4: detected capacity change from 0 to 8192 [ 56.661601][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 56.670837][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 56.679302][ T6181] loop4: p1 p2 p4 < > [ 56.683756][ T6181] loop4: partition table partially beyond EOD, truncated [ 56.698732][ T6181] loop4: p1 start 16777216 is beyond EOD, truncated [ 56.705340][ T6181] loop4: p2 size 515840 extends beyond EOD, truncated [ 56.763484][ T6181] loop4: p4 start 16777216 is beyond EOD, truncated [ 56.861478][ T6208] ip6gre1: entered allmulticast mode [ 56.901683][ T6216] random: crng reseeded on system resumption [ 56.922267][ T6220] loop6: detected capacity change from 0 to 512 [ 56.929172][ T6220] EXT4-fs: Ignoring removed i_version option [ 56.935396][ T6220] EXT4-fs: Ignoring removed bh option [ 56.969088][ T6220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.982800][ T6229] loop3: detected capacity change from 0 to 128 [ 56.992151][ T6220] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.026919][ T6229] syz.3.1117: attempt to access beyond end of device [ 57.026919][ T6229] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 57.029094][ T3932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.040671][ T6229] syz.3.1117: attempt to access beyond end of device [ 57.040671][ T6229] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 57.063254][ T6229] syz.3.1117: attempt to access beyond end of device [ 57.063254][ T6229] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 57.076819][ T6229] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 57.086156][ T6229] syz.3.1117: attempt to access beyond end of device [ 57.086156][ T6229] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 57.100512][ T6229] syz.3.1117: attempt to access beyond end of device [ 57.100512][ T6229] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 57.113948][ T6229] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 57.138873][ T6229] syz.3.1117: attempt to access beyond end of device [ 57.138873][ T6229] loop3: rw=2049, sector=178, nr_sectors = 72 limit=128 [ 57.422913][ T6269] loop2: detected capacity change from 0 to 512 [ 57.429485][ T6269] EXT4-fs: Ignoring removed i_version option [ 57.435575][ T6269] EXT4-fs: Ignoring removed bh option [ 57.450141][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.463005][ T6269] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.489003][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.650942][ T6301] netlink: 'syz.6.1146': attribute type 1 has an invalid length. [ 57.658806][ T6301] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1146'. [ 57.722403][ T6308] loop5: detected capacity change from 0 to 128 [ 57.734088][ T6308] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 57.745287][ T6308] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 57.757098][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1149'. [ 57.766439][ T6308] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 57.776286][ T6308] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 57.787443][ T6314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6314 comm=syz.6.1150 [ 57.801305][ T6308] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 57.803528][ T6313] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1151'. [ 57.810499][ T6308] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 57.827973][ T6314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6314 comm=syz.6.1150 [ 57.872266][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 58.311974][ T6379] netlink: 'syz.6.1181': attribute type 10 has an invalid length. [ 58.320277][ T6379] dummy0: entered promiscuous mode [ 58.326781][ T6379] bond0: (slave dummy0): Releasing backup interface [ 58.337340][ T6379] bridge0: port 3(dummy0) entered blocking state [ 58.343750][ T6379] bridge0: port 3(dummy0) entered disabled state [ 58.351528][ T6379] dummy0: entered allmulticast mode [ 58.397492][ T6389] x_tables: duplicate underflow at hook 1 [ 58.718420][ T6438] netlink: 'syz.4.1209': attribute type 2 has an invalid length. [ 58.778463][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 58.778477][ T29] audit: type=1326 audit(1761931666.386:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.810550][ T29] audit: type=1326 audit(1761931666.416:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.833978][ T29] audit: type=1326 audit(1761931666.426:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.857430][ T29] audit: type=1326 audit(1761931666.426:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.880936][ T29] audit: type=1326 audit(1761931666.426:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.904417][ T29] audit: type=1326 audit(1761931666.426:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.927916][ T29] audit: type=1326 audit(1761931666.426:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.951321][ T29] audit: type=1326 audit(1761931666.426:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.974778][ T29] audit: type=1326 audit(1761931666.426:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 58.998179][ T29] audit: type=1326 audit(1761931666.426:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.6.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b65aefc9 code=0x7ffc0000 [ 59.117288][ T6461] netlink: 'syz.3.1222': attribute type 3 has an invalid length. [ 59.336883][ T6496] netem: change failed [ 59.568697][ T6542] msdos: Unknown parameter '' [ 59.575697][ T6546] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 59.704101][ T6572] loop6: detected capacity change from 0 to 128 [ 59.723592][ T6572] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.739407][ T6572] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.771558][ T3932] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.859296][ T6596] loop3: detected capacity change from 0 to 764 [ 59.868449][ T6596] rock: directory entry would overflow storage [ 59.874917][ T6596] rock: sig=0x4f50, size=4, remaining=3 [ 59.880583][ T6596] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 60.237086][ T6638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.237101][ T6638] IPv6: NLM_F_CREATE should be set when creating new route [ 60.335617][ T6650] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 60.335687][ T6650] SELinux: failed to load policy [ 60.384623][ T6652] loop2: detected capacity change from 0 to 1024 [ 60.396147][ T6652] EXT4-fs: Ignoring removed orlov option [ 60.428751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.472588][ T6652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.485679][ T6652] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.040580][ T6729] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.086970][ T6729] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 61.098271][ T6741] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 61.127606][ T6747] netlink: 'syz.4.1353': attribute type 3 has an invalid length. [ 61.262263][ T6777] vlan2: entered allmulticast mode [ 61.388705][ T6794] geneve2: entered promiscuous mode [ 61.393959][ T6794] geneve2: entered allmulticast mode [ 61.498822][ T6802] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 61.639565][ T6814] loop4: detected capacity change from 0 to 512 [ 61.646469][ T6814] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.658258][ T6814] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.672375][ T6814] EXT4-fs (loop4): 1 truncate cleaned up [ 61.678603][ T6814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.715398][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.789737][ T6835] __nla_validate_parse: 22 callbacks suppressed [ 61.789749][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 61.804901][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 61.951650][ T6848] pim6reg: entered allmulticast mode [ 61.957549][ T6848] pim6reg: left allmulticast mode [ 61.960116][ T6850] loop5: detected capacity change from 0 to 128 [ 61.969216][ T6850] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 61.978576][ T6850] netlink: 'syz.5.1402': attribute type 3 has an invalid length. [ 61.986332][ T6850] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1402'. [ 62.022551][ T6854] loop5: detected capacity change from 0 to 128 [ 62.151356][ T6868] bond1: entered promiscuous mode [ 62.156452][ T6868] bond1: entered allmulticast mode [ 62.162522][ T6868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.172640][ T6868] bond1 (unregistering): Released all slaves [ 62.335995][ T6861] bio_check_eod: 18 callbacks suppressed [ 62.336013][ T6861] syz.5.1404: attempt to access beyond end of device [ 62.336013][ T6861] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.355329][ T6861] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 62.418879][ T6854] syz.5.1404: attempt to access beyond end of device [ 62.418879][ T6854] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.432405][ T6854] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 62.441654][ T6854] syz.5.1404: attempt to access beyond end of device [ 62.441654][ T6854] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.455096][ T6854] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 62.609443][ T6890] loop6: detected capacity change from 0 to 128 [ 62.627799][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1422'. [ 62.702939][ T6902] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1426'. [ 62.744466][ T6910] loop2: detected capacity change from 0 to 512 [ 62.759642][ T6910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.792980][ T6910] EXT4-fs (loop2): 1 truncate cleaned up [ 62.811530][ T6910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.951737][ T6910] EXT4-fs error (device loop2): ext4_xattr_block_find:1874: inode #15: comm syz.2.1431: corrupted xattr block 33: invalid header [ 63.002349][ T6910] EXT4-fs (loop2): Remounting filesystem read-only [ 63.055980][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.170795][ T6944] dvmrp0: entered allmulticast mode [ 63.180581][ T6944] dvmrp0: left allmulticast mode [ 63.199260][ T6948] syz.5.1447: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 63.213856][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.5.1447 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.213896][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.213909][ T6948] Call Trace: [ 63.213915][ T6948] [ 63.213921][ T6948] __dump_stack+0x1d/0x30 [ 63.213951][ T6948] dump_stack_lvl+0xe8/0x140 [ 63.213974][ T6948] dump_stack+0x15/0x1b [ 63.213991][ T6948] warn_alloc+0x12b/0x1a0 [ 63.214036][ T6948] ? __rcu_read_unlock+0x4f/0x70 [ 63.214109][ T6948] __vmalloc_node_range_noprof+0x9d/0xed0 [ 63.214197][ T6948] ? __futex_wait+0x1fa/0x260 [ 63.214218][ T6948] ? __pfx_futex_wake_mark+0x10/0x10 [ 63.214241][ T6948] ? __rcu_read_unlock+0x4f/0x70 [ 63.214272][ T6948] ? avc_has_perm_noaudit+0x1b1/0x200 [ 63.214403][ T6948] vmalloc_user_noprof+0x7d/0xb0 [ 63.214439][ T6948] ? xskq_create+0x80/0xe0 [ 63.214463][ T6948] xskq_create+0x80/0xe0 [ 63.214483][ T6948] xsk_init_queue+0x95/0xf0 [ 63.214540][ T6948] xsk_setsockopt+0x3f5/0x640 [ 63.214574][ T6948] ? __pfx_xsk_setsockopt+0x10/0x10 [ 63.214593][ T6948] __sys_setsockopt+0x184/0x200 [ 63.214641][ T6948] __x64_sys_setsockopt+0x64/0x80 [ 63.214706][ T6948] x64_sys_call+0x20ec/0x3000 [ 63.214757][ T6948] do_syscall_64+0xd2/0x200 [ 63.214816][ T6948] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.214868][ T6948] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.214972][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.214997][ T6948] RIP: 0033:0x7f2d413defc9 [ 63.215016][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.215038][ T6948] RSP: 002b:00007f2d3fe47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 63.215125][ T6948] RAX: ffffffffffffffda RBX: 00007f2d41635fa0 RCX: 00007f2d413defc9 [ 63.215137][ T6948] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 63.215182][ T6948] RBP: 00007f2d41461f91 R08: 0000000000000004 R09: 0000000000000000 [ 63.215195][ T6948] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.215207][ T6948] R13: 00007f2d41636038 R14: 00007f2d41635fa0 R15: 00007fff62c22dd8 [ 63.215225][ T6948] [ 63.215236][ T6948] Mem-Info: [ 63.433523][ T6948] active_anon:4928 inactive_anon:3 isolated_anon:0 [ 63.433523][ T6948] active_file:8841 inactive_file:2436 isolated_file:0 [ 63.433523][ T6948] unevictable:0 dirty:207 writeback:0 [ 63.433523][ T6948] slab_reclaimable:3250 slab_unreclaimable:14744 [ 63.433523][ T6948] mapped:28915 shmem:344 pagetables:1019 [ 63.433523][ T6948] sec_pagetables:0 bounce:0 [ 63.433523][ T6948] kernel_misc_reclaimable:0 [ 63.433523][ T6948] free:1898332 free_pcp:9852 free_cma:0 [ 63.478239][ T6948] Node 0 active_anon:19712kB inactive_anon:12kB active_file:35364kB inactive_file:9744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115660kB dirty:828kB writeback:0kB shmem:1376kB kernel_stack:4096kB pagetables:4076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 63.505477][ T6948] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.535130][ T6948] lowmem_reserve[]: 0 2881 7859 7859 [ 63.540472][ T6948] Node 0 DMA32 free:2946740kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 63.571604][ T6948] lowmem_reserve[]: 0 0 4978 4978 [ 63.576650][ T6948] Node 0 Normal free:4632176kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19712kB inactive_anon:12kB active_file:35364kB inactive_file:9744kB unevictable:0kB writepending:828kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:36132kB local_pcp:18184kB free_cma:0kB [ 63.609626][ T6948] lowmem_reserve[]: 0 0 0 0 [ 63.614310][ T6948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 63.627114][ T6948] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946740kB [ 63.643479][ T6948] Node 0 Normal: 84*4kB (ME) 268*8kB (UM) 258*16kB (UM) 161*32kB (UME) 70*64kB (UME) 26*128kB (UME) 22*256kB (UM) 6*512kB (UME) 28*1024kB (UME) 24*2048kB (U) 1105*4096kB (UME) = 4632176kB [ 63.662247][ T6948] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 63.671547][ T6948] 11599 total pagecache pages [ 63.676231][ T6948] 3 pages in swap cache [ 63.680387][ T6948] Free swap = 124984kB [ 63.684521][ T6948] Total swap = 124996kB [ 63.688762][ T6948] 2097051 pages RAM [ 63.692607][ T6948] 0 pages HighMem/MovableOnly [ 63.697262][ T6948] 81084 pages reserved [ 63.729647][ T6956] loop5: detected capacity change from 0 to 512 [ 63.737311][ T6956] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.860391][ T6956] EXT4-fs (loop5): 1 truncate cleaned up [ 63.866543][ T6956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.978830][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 63.978845][ T29] audit: type=1400 audit(1761931671.586:2084): avc: denied { connect } for pid=6968 comm="syz.6.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.006906][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.049844][ T29] audit: type=1400 audit(1761931671.666:2085): avc: denied { read } for pid=6971 comm="syz.6.1457" lport=36911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.121611][ T29] audit: type=1326 audit(1761931671.686:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.145170][ T29] audit: type=1326 audit(1761931671.686:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.168793][ T29] audit: type=1326 audit(1761931671.686:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.192231][ T29] audit: type=1326 audit(1761931671.686:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.215757][ T29] audit: type=1326 audit(1761931671.686:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.239217][ T29] audit: type=1326 audit(1761931671.686:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.262803][ T29] audit: type=1326 audit(1761931671.686:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.273441][ T6986] 9pnet_fd: p9_fd_create_unix (6986): problem connecting socket: ./file0: -2 [ 64.286464][ T29] audit: type=1326 audit(1761931671.686:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.5.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d413defc9 code=0x7ffc0000 [ 64.449096][ T7008] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 64.481928][ T7014] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 64.488469][ T7014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.496041][ T7014] vhci_hcd vhci_hcd.0: Device attached [ 64.504936][ T7022] loop6: detected capacity change from 0 to 512 [ 64.515329][ T7019] vhci_hcd: connection closed [ 64.515437][ T7022] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 64.530355][ T3862] vhci_hcd: stop threads [ 64.534673][ T3862] vhci_hcd: release socket [ 64.539179][ T3862] vhci_hcd: disconnect device [ 64.543864][ T7022] EXT4-fs (loop6): 1 truncate cleaned up [ 64.551266][ T7022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.582439][ T7022] EXT4-fs error (device loop6): ext4_xattr_block_find:1874: inode #15: comm syz.6.1477: corrupted xattr block 33: invalid header [ 64.596381][ T7022] EXT4-fs (loop6): Remounting filesystem read-only [ 64.620027][ T3932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.638192][ T7033] vlan2: entered allmulticast mode [ 64.643407][ T7033] bridge_slave_0: entered allmulticast mode [ 64.779446][ T7060] loop5: detected capacity change from 0 to 512 [ 64.801691][ T7060] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.812317][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1500'. [ 64.823869][ T7060] EXT4-fs (loop5): 1 truncate cleaned up [ 64.830079][ T7060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.866996][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 64.910771][ T7060] EXT4-fs error (device loop5): ext4_xattr_block_find:1874: inode #15: comm syz.5.1496: corrupted xattr block 33: invalid header [ 64.917959][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 64.943688][ T7060] EXT4-fs (loop5): Remounting filesystem read-only [ 64.969258][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.068395][ T7096] netlink: 'syz.5.1511': attribute type 10 has an invalid length. [ 65.076316][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1511'. [ 65.116245][ T7096] dummy0: entered promiscuous mode [ 65.122642][ T7096] bridge0: port 3(dummy0) entered blocking state [ 65.129061][ T7096] bridge0: port 3(dummy0) entered disabled state [ 65.141135][ T7096] dummy0: entered allmulticast mode [ 65.147116][ T7096] bridge0: port 3(dummy0) entered blocking state [ 65.153503][ T7096] bridge0: port 3(dummy0) entered forwarding state [ 65.177691][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 65.186638][ T7107] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 65.241394][ T7116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7116 comm=syz.5.1522 [ 65.255208][ T7118] loop3: detected capacity change from 0 to 128 [ 65.266540][ T7116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7116 comm=syz.5.1522 [ 65.429187][ T7135] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 65.456700][ T7135] bond1 (unregistering): Released all slaves [ 65.589660][ T3869] ================================================================== [ 65.597770][ T3869] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 65.607236][ T3869] [ 65.609547][ T3869] write to 0xffff88810c3bca1b of 34 bytes by task 7118 on cpu 1: [ 65.617252][ T3869] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 65.623143][ T3869] generic_perform_write+0x2c2/0x490 [ 65.628421][ T3869] __generic_file_write_iter+0x9e/0x120 [ 65.633960][ T3869] generic_file_write_iter+0x8d/0x2f0 [ 65.639336][ T3869] iter_file_splice_write+0x666/0xa60 [ 65.644705][ T3869] direct_splice_actor+0x156/0x2a0 [ 65.649810][ T3869] splice_direct_to_actor+0x312/0x680 [ 65.655172][ T3869] do_splice_direct+0xda/0x150 [ 65.659928][ T3869] do_sendfile+0x380/0x650 [ 65.664343][ T3869] __x64_sys_sendfile64+0x105/0x150 [ 65.669543][ T3869] x64_sys_call+0x2bb4/0x3000 [ 65.674214][ T3869] do_syscall_64+0xd2/0x200 [ 65.678703][ T3869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.684585][ T3869] [ 65.686892][ T3869] read to 0xffff88810c3bca00 of 512 bytes by task 3869 on cpu 0: [ 65.694590][ T3869] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 65.700478][ T3869] generic_perform_write+0x2c2/0x490 [ 65.705751][ T3869] shmem_file_write_iter+0xc5/0xf0 [ 65.711725][ T3869] lo_rw_aio+0x6a0/0x760 [ 65.715968][ T3869] loop_process_work+0x52d/0xa60 [ 65.720905][ T3869] loop_workfn+0x31/0x40 [ 65.725151][ T3869] process_scheduled_works+0x4ce/0x9d0 [ 65.730616][ T3869] worker_thread+0x582/0x770 [ 65.735203][ T3869] kthread+0x489/0x510 [ 65.739265][ T3869] ret_from_fork+0x122/0x1b0 [ 65.743843][ T3869] ret_from_fork_asm+0x1a/0x30 [ 65.748600][ T3869] [ 65.750905][ T3869] Reported by Kernel Concurrency Sanitizer on: [ 65.757052][ T3869] CPU: 0 UID: 0 PID: 3869 Comm: kworker/u8:58 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.767031][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.777092][ T3869] Workqueue: loop3 loop_workfn [ 65.781865][ T3869] ================================================================== [ 65.813088][ T7118] syz.3.1524: attempt to access beyond end of device [ 65.813088][ T7118] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.826494][ T7118] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 65.836788][ T7132] syz.3.1524: attempt to access beyond end of device [ 65.836788][ T7132] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.850284][ T7132] Buffer I/O error on dev loop3, logical block 128, lost async page write