last executing test programs: 2.318654181s ago: executing program 2 (id=2245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.201776143s ago: executing program 2 (id=2248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {0x0, 0x883e, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ae48d214546cf494b71f43c55a318b9653ae7c027534e6ad57e52bbceb7efce4", "b994e42ec4927209e0440421333dc3be67b868281605c57745a9edad3f0e8cdbf2a9ab0e22cacf1df5cef1625a24c878", "805dbb6310ce51ea44b269157630f5ce0b7457e4d24ff86ff17e509e", {"f518f69ab516612289a2379b31368997", "c069d81d9f5b8f0308c3f1393d5e4736"}}}}}}}, 0x0) 2.13172683s ago: executing program 2 (id=2250): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x380, 0x0, 0x0, 0x108, 0x108, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@empty, @remote, [], [], 'gre0\x00', 'bond0\x00', {}, {}, 0x89}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x3, 0x200, 0x4884, 0xa9d5, 0x5, 0x5, 0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffe, 0x2, 0x4}, {0xffffffffffffffff, 0x5, 0x6}, 0x7, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xeb, 0x3}}}, {{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'vlan1\x00', {0xff}, {}, 0x88, 0x5}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x31}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'tunl0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpriority(0x0, 0x0) 2.082681364s ago: executing program 2 (id=2253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1fd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r10 = memfd_create(&(0x7f0000000080), 0x0) splice(r4, 0x0, r10, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@nobh}, {@abort}, {@norecovery}, {@nojournal_checksum}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") 655.191079ms ago: executing program 4 (id=2318): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 590.541994ms ago: executing program 4 (id=2321): syz_emit_ethernet(0xfdef, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f00001b3000/0x3000)=nil, 0x3000, 0x0) 526.268011ms ago: executing program 4 (id=2325): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/4096, 0x1000}, 0x401}], 0x1, 0x22, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 405.273352ms ago: executing program 4 (id=2334): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) acct(&(0x7f0000000200)='./file0\x00') 378.526014ms ago: executing program 1 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1000, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) 346.296787ms ago: executing program 4 (id=2337): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) 345.712988ms ago: executing program 1 (id=2338): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x5000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x44}}, 0x0) 340.766278ms ago: executing program 2 (id=2339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001640)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69ecce", 0xe8}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7408e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410010000000000010856055f582d7ed3b9ca5bf48d2e9a8", 0x2b}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000dc0)="e94b02", 0x3}, {&(0x7f0000000440)="9b596a9be76e0954732c", 0xa}], 0xa, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x0) 272.219235ms ago: executing program 4 (id=2341): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 272.100515ms ago: executing program 1 (id=2342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@val, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x86dd, 0x7}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102}}}}}}, 0x2e) 268.915915ms ago: executing program 0 (id=2343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) 263.578636ms ago: executing program 3 (id=2344): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1) 222.673489ms ago: executing program 3 (id=2345): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 222.177889ms ago: executing program 0 (id=2346): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) semctl$SETVAL(0x0, 0x0, 0x8, 0x0) 161.117295ms ago: executing program 2 (id=2347): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) 160.762485ms ago: executing program 0 (id=2348): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) getegid() 160.448575ms ago: executing program 3 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_user(r2, &(0x7f00000000c0)={'system_u:object_r:iptables_exec_t:s0', 0x20, 'staff_u\x00'}, 0x2d) 145.650497ms ago: executing program 1 (id=2350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b00000000030014"], 0x30}}, 0x0) 107.067281ms ago: executing program 1 (id=2351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendfile(r2, r1, 0x0, 0x1000) 102.491791ms ago: executing program 3 (id=2352): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r0, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x14) 72.060854ms ago: executing program 3 (id=2353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 71.610323ms ago: executing program 0 (id=2354): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) close_range(r0, 0xffffffffffffffff, 0x0) 11.301659ms ago: executing program 0 (id=2355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 11.200029ms ago: executing program 1 (id=2356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) close(r0) 11.082419ms ago: executing program 3 (id=2357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xa, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={0x0, 0x6be3c8ea}, 0x8) 0s ago: executing program 0 (id=2358): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): e=1 [ 19.682633][ T29] audit: type=1400 audit(1730763057.917:80): avc: denied { siginh } for pid=3250 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.026255][ T29] audit: type=1400 audit(1730763059.277:81): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 27.869224][ T29] audit: type=1400 audit(1730763066.117:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.870287][ T3304] cgroup: Unknown subsys name 'net' [ 27.891917][ T29] audit: type=1400 audit(1730763066.117:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.919272][ T29] audit: type=1400 audit(1730763066.147:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.094897][ T3304] cgroup: Unknown subsys name 'cpuset' [ 28.100905][ T3304] cgroup: Unknown subsys name 'rlimit' [ 28.219145][ T29] audit: type=1400 audit(1730763066.467:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.244447][ T29] audit: type=1400 audit(1730763066.467:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.265034][ T29] audit: type=1400 audit(1730763066.467:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.272908][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.285367][ T29] audit: type=1400 audit(1730763066.467:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.314155][ T29] audit: type=1400 audit(1730763066.467:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.338968][ T29] audit: type=1400 audit(1730763066.467:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.362247][ T29] audit: type=1400 audit(1730763066.547:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.391473][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.609538][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.642211][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.650832][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.683508][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.696243][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.733363][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.740437][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.747609][ T3315] bridge_slave_0: entered allmulticast mode [ 29.753929][ T3315] bridge_slave_0: entered promiscuous mode [ 29.773270][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.780330][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.787534][ T3317] bridge_slave_0: entered allmulticast mode [ 29.793954][ T3317] bridge_slave_0: entered promiscuous mode [ 29.805104][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.812238][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.819384][ T3315] bridge_slave_1: entered allmulticast mode [ 29.825766][ T3315] bridge_slave_1: entered promiscuous mode [ 29.838474][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.845562][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.852621][ T3317] bridge_slave_1: entered allmulticast mode [ 29.859077][ T3317] bridge_slave_1: entered promiscuous mode [ 29.918798][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.928968][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.942240][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.949363][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.956560][ T3321] bridge_slave_0: entered allmulticast mode [ 29.963015][ T3321] bridge_slave_0: entered promiscuous mode [ 29.974276][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.984293][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.002492][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.009656][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.016824][ T3321] bridge_slave_1: entered allmulticast mode [ 30.023253][ T3321] bridge_slave_1: entered promiscuous mode [ 30.029441][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.036672][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.043734][ T3323] bridge_slave_0: entered allmulticast mode [ 30.050116][ T3323] bridge_slave_0: entered promiscuous mode [ 30.065455][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.072498][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.079679][ T3314] bridge_slave_0: entered allmulticast mode [ 30.085890][ T3314] bridge_slave_0: entered promiscuous mode [ 30.096667][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.103741][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.110973][ T3323] bridge_slave_1: entered allmulticast mode [ 30.117400][ T3323] bridge_slave_1: entered promiscuous mode [ 30.128872][ T3317] team0: Port device team_slave_0 added [ 30.134646][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.141731][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.148970][ T3314] bridge_slave_1: entered allmulticast mode [ 30.155469][ T3314] bridge_slave_1: entered promiscuous mode [ 30.171159][ T3315] team0: Port device team_slave_0 added [ 30.177449][ T3317] team0: Port device team_slave_1 added [ 30.183748][ T3315] team0: Port device team_slave_1 added [ 30.194838][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.222720][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.237145][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.256595][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.270831][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.280442][ T3321] team0: Port device team_slave_0 added [ 30.286370][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.293300][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.319222][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.330796][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.340092][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.347053][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.372985][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.384021][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.391025][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.417037][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.432616][ T3321] team0: Port device team_slave_1 added [ 30.445492][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.452474][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.478464][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.503098][ T3314] team0: Port device team_slave_0 added [ 30.512100][ T3314] team0: Port device team_slave_1 added [ 30.518309][ T3323] team0: Port device team_slave_0 added [ 30.530053][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.537125][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.563021][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.574706][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.581653][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.607577][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.624050][ T3323] team0: Port device team_slave_1 added [ 30.656451][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.663440][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.689359][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.705893][ T3317] hsr_slave_0: entered promiscuous mode [ 30.711773][ T3317] hsr_slave_1: entered promiscuous mode [ 30.728321][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.735283][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.761185][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.778660][ T3315] hsr_slave_0: entered promiscuous mode [ 30.784662][ T3315] hsr_slave_1: entered promiscuous mode [ 30.790507][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.798121][ T3315] Cannot create hsr debugfs directory [ 30.803823][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.810832][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.836753][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.850358][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.857332][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.883401][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.924071][ T3321] hsr_slave_0: entered promiscuous mode [ 30.930147][ T3321] hsr_slave_1: entered promiscuous mode [ 30.936033][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.943574][ T3321] Cannot create hsr debugfs directory [ 30.957138][ T3314] hsr_slave_0: entered promiscuous mode [ 30.963249][ T3314] hsr_slave_1: entered promiscuous mode [ 30.969140][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.976727][ T3314] Cannot create hsr debugfs directory [ 31.010507][ T3323] hsr_slave_0: entered promiscuous mode [ 31.016417][ T3323] hsr_slave_1: entered promiscuous mode [ 31.022243][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.029832][ T3323] Cannot create hsr debugfs directory [ 31.195915][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.205706][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.216279][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.224866][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.239335][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.247861][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.256619][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.265244][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.297105][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.305913][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.322429][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.333070][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.353459][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.369836][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.379926][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.398025][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.425261][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.440079][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.449321][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.459445][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.475694][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.485914][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.510397][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.527842][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.541044][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.548119][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.556860][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.563978][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.572566][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.579605][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.605536][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.616784][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.623905][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.646641][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.669889][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.683879][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.700046][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.707127][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.721549][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.728625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.739227][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.756374][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.771141][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.789189][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.798365][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.805661][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.818860][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.825909][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.834772][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.841828][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.857827][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.864978][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.907883][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.918509][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.933949][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.014261][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.061582][ T3314] veth0_vlan: entered promiscuous mode [ 32.090419][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.099623][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.108413][ T3314] veth1_vlan: entered promiscuous mode [ 32.116956][ T3317] veth0_vlan: entered promiscuous mode [ 32.132391][ T3314] veth0_macvtap: entered promiscuous mode [ 32.154678][ T3317] veth1_vlan: entered promiscuous mode [ 32.172005][ T3315] veth0_vlan: entered promiscuous mode [ 32.178995][ T3314] veth1_macvtap: entered promiscuous mode [ 32.193288][ T3317] veth0_macvtap: entered promiscuous mode [ 32.207916][ T3317] veth1_macvtap: entered promiscuous mode [ 32.222361][ T3315] veth1_vlan: entered promiscuous mode [ 32.231001][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.247262][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.257844][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.269366][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.287110][ T3321] veth0_vlan: entered promiscuous mode [ 32.300625][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.309310][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.319767][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.330753][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.341985][ T3315] veth0_macvtap: entered promiscuous mode [ 32.349862][ T3321] veth1_vlan: entered promiscuous mode [ 32.356940][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.365768][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.374527][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.383217][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.397413][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.406225][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.415042][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.423757][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.445660][ T3315] veth1_macvtap: entered promiscuous mode [ 32.461085][ T3323] veth0_vlan: entered promiscuous mode [ 32.487584][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.498154][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.508097][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.518609][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.529627][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.537607][ T3323] veth1_vlan: entered promiscuous mode [ 32.545405][ T3321] veth0_macvtap: entered promiscuous mode [ 32.552060][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.569846][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.580354][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.590214][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.600910][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.613308][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.613713][ T3458] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.628479][ T3323] veth0_macvtap: entered promiscuous mode [ 32.648350][ T3323] veth1_macvtap: entered promiscuous mode [ 32.656137][ T3321] veth1_macvtap: entered promiscuous mode [ 32.663641][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.672388][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.681155][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.689927][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.712308][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.722927][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.732884][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.743581][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.751423][ T3464] netlink: 71224 bytes leftover after parsing attributes in process `syz.1.8'. [ 32.753564][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.772870][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.783949][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.797597][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.808100][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.817966][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.828436][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.838257][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.848767][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.858568][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.869030][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.883206][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.887646][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 32.887662][ T29] audit: type=1400 audit(1730763071.127:130): avc: denied { create } for pid=3465 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.916800][ T29] audit: type=1400 audit(1730763071.127:131): avc: denied { write } for pid=3465 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.936833][ T29] audit: type=1400 audit(1730763071.127:132): avc: denied { nlmsg_read } for pid=3465 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.958197][ T29] audit: type=1400 audit(1730763071.167:133): avc: denied { setopt } for pid=3467 comm="syz.1.10" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.978337][ T29] audit: type=1400 audit(1730763071.187:134): avc: denied { create } for pid=3469 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.997574][ T29] audit: type=1400 audit(1730763071.187:135): avc: denied { setopt } for pid=3469 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.016815][ T29] audit: type=1400 audit(1730763071.207:136): avc: denied { create } for pid=3471 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.024843][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.035946][ T29] audit: type=1400 audit(1730763071.227:137): avc: denied { getopt } for pid=3471 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.046371][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.046394][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.065516][ T29] audit: type=1400 audit(1730763071.257:138): avc: denied { map_create } for pid=3475 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.065576][ T29] audit: type=1400 audit(1730763071.257:139): avc: denied { map_read map_write } for pid=3475 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.075376][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.075389][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.144471][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.160106][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.169214][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.179720][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.189617][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.200093][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.209909][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.220434][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.230316][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.240877][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.251835][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.268141][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.277001][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.285830][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.294548][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.312765][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321574][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.330332][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.339042][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.364882][ T3486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 33.426113][ T3492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 33.435091][ T3492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 33.605529][ T3514] Illegal XDP return value 146455380 on prog (id 2) dev N/A, expect packet loss! [ 33.663755][ T3525] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 33.840758][ T3556] netlink: 100 bytes leftover after parsing attributes in process `syz.2.50'. [ 33.849762][ T3556] netlink: 100 bytes leftover after parsing attributes in process `syz.2.50'. [ 33.862972][ T3562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.49'. [ 33.957787][ T3575] delete_channel: no stack [ 34.019941][ T3588] loop4: detected capacity change from 0 to 512 [ 34.039647][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 34.048164][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.068008][ T3588] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.120424][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.270847][ T3625] vhci_hcd: invalid port number 0 [ 34.275264][ T3635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 34.358998][ T3649] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.376819][ T3651] tmpfs: Bad value for 'mpol' [ 34.755614][ T3687] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 34.763518][ T3687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.112'. [ 34.804290][ T3691] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 34.811956][ T3691] netlink: 'syz.1.114': attribute type 2 has an invalid length. [ 34.849141][ T3696] tmpfs: Bad value for 'mpol' [ 35.098125][ T3644] syz.2.91 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 35.112224][ T3644] CPU: 0 UID: 0 PID: 3644 Comm: syz.2.91 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 35.122743][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.132804][ T3644] Call Trace: [ 35.136084][ T3644] [ 35.139059][ T3644] dump_stack_lvl+0xf2/0x150 [ 35.143710][ T3644] dump_stack+0x15/0x20 [ 35.147894][ T3644] dump_header+0x83/0x2d0 [ 35.152373][ T3644] oom_kill_process+0x341/0x4c0 [ 35.157259][ T3644] out_of_memory+0x9af/0xbe0 [ 35.161989][ T3644] ? css_next_descendant_pre+0x11c/0x140 [ 35.167649][ T3644] mem_cgroup_out_of_memory+0x13e/0x190 [ 35.173298][ T3644] try_charge_memcg+0x51b/0x810 [ 35.178201][ T3644] obj_cgroup_charge_pages+0xbd/0x1a0 [ 35.183674][ T3644] __memcg_kmem_charge_page+0x9d/0x170 [ 35.189216][ T3644] __alloc_pages_noprof+0x1bc/0x340 [ 35.194412][ T3644] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 35.199829][ T3644] alloc_pages_noprof+0xe1/0x100 [ 35.204812][ T3644] __vmalloc_node_range_noprof+0x72e/0xec0 [ 35.210650][ T3644] __kvmalloc_node_noprof+0x121/0x170 [ 35.216033][ T3644] ? ip_set_alloc+0x1f/0x30 [ 35.220562][ T3644] ip_set_alloc+0x1f/0x30 [ 35.224887][ T3644] hash_ipmark_create+0x2e3/0x7d0 [ 35.230050][ T3644] ? __nla_parse+0x40/0x60 [ 35.234458][ T3644] ? __pfx_hash_ipmark_create+0x10/0x10 [ 35.240137][ T3644] ip_set_create+0x359/0x8a0 [ 35.244788][ T3644] ? __pfx_memchr+0x1/0x10 [ 35.249293][ T3644] ? __nla_parse+0x40/0x60 [ 35.253788][ T3644] nfnetlink_rcv_msg+0x4a9/0x570 [ 35.258764][ T3644] netlink_rcv_skb+0x12c/0x230 [ 35.263594][ T3644] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 35.269133][ T3644] nfnetlink_rcv+0x16c/0x15c0 [ 35.273865][ T3644] ? kmem_cache_free+0xdc/0x2d0 [ 35.278717][ T3644] ? nlmon_xmit+0x51/0x60 [ 35.283060][ T3644] ? __kfree_skb+0x102/0x150 [ 35.287674][ T3644] ? consume_skb+0x49/0x160 [ 35.292250][ T3644] ? nlmon_xmit+0x51/0x60 [ 35.296570][ T3644] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 35.301877][ T3644] ? __dev_queue_xmit+0xb4c/0x2040 [ 35.307110][ T3644] ? ref_tracker_free+0x3a5/0x410 [ 35.312179][ T3644] ? __dev_queue_xmit+0x161/0x2040 [ 35.317302][ T3644] ? ref_tracker_alloc+0x1f5/0x2f0 [ 35.322486][ T3644] ? __netlink_deliver_tap+0x495/0x4c0 [ 35.327981][ T3644] netlink_unicast+0x599/0x670 [ 35.332832][ T3644] netlink_sendmsg+0x5cc/0x6e0 [ 35.337593][ T3644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.342954][ T3644] __sock_sendmsg+0x140/0x180 [ 35.347639][ T3644] ____sys_sendmsg+0x312/0x410 [ 35.352403][ T3644] __sys_sendmsg+0x1d9/0x270 [ 35.357160][ T3644] ? futex_wait+0x18e/0x1c0 [ 35.361696][ T3644] __x64_sys_sendmsg+0x46/0x50 [ 35.366453][ T3644] x64_sys_call+0x2689/0x2d60 [ 35.371126][ T3644] do_syscall_64+0xc9/0x1c0 [ 35.375666][ T3644] ? clear_bhb_loop+0x55/0xb0 [ 35.380388][ T3644] ? clear_bhb_loop+0x55/0xb0 [ 35.385058][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.390966][ T3644] RIP: 0033:0x7f1ceaefe719 [ 35.395374][ T3644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.415026][ T3644] RSP: 002b:00007f1ce9b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.423453][ T3644] RAX: ffffffffffffffda RBX: 00007f1ceb0b5f80 RCX: 00007f1ceaefe719 [ 35.431416][ T3644] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 35.439375][ T3644] RBP: 00007f1ceaf7139e R08: 0000000000000000 R09: 0000000000000000 [ 35.447402][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.455365][ T3644] R13: 0000000000000000 R14: 00007f1ceb0b5f80 R15: 00007ffdd3817548 [ 35.463371][ T3644] [ 35.466602][ T3644] memory: usage 307200kB, limit 307200kB, failcnt 165 [ 35.473380][ T3644] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 35.481739][ T3644] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 35.489162][ T3644] Memory cgroup stats for /syz2: [ 35.489633][ T3644] cache 32768 [ 35.497947][ T3644] rss 0 [ 35.500756][ T3644] shmem 0 [ 35.503771][ T3644] mapped_file 32768 [ 35.507626][ T3644] dirty 32768 [ 35.510913][ T3644] writeback 0 [ 35.514282][ T3644] workingset_refault_anon 45 [ 35.518880][ T3644] workingset_refault_file 0 [ 35.523384][ T3644] swap 184320 [ 35.526715][ T3644] swapcached 0 [ 35.530135][ T3644] pgpgin 854 [ 35.533368][ T3644] pgpgout 846 [ 35.536925][ T3644] pgfault 1996 [ 35.540316][ T3644] pgmajfault 18 [ 35.543786][ T3644] inactive_anon 0 [ 35.547494][ T3644] active_anon 0 [ 35.551026][ T3644] inactive_file 32768 [ 35.555182][ T3644] active_file 0 [ 35.558715][ T3644] unevictable 0 [ 35.562212][ T3644] hierarchical_memory_limit 314572800 [ 35.567660][ T3644] hierarchical_memsw_limit 9223372036854771712 [ 35.573842][ T3644] total_cache 32768 [ 35.577749][ T3644] total_rss 0 [ 35.581070][ T3644] total_shmem 0 [ 35.584646][ T3644] total_mapped_file 32768 [ 35.588975][ T3644] total_dirty 32768 [ 35.592781][ T3644] total_writeback 0 [ 35.596604][ T3644] total_workingset_refault_anon 45 [ 35.601733][ T3644] total_workingset_refault_file 0 [ 35.606766][ T3644] total_swap 184320 [ 35.610579][ T3644] total_swapcached 0 [ 35.614593][ T3644] total_pgpgin 854 [ 35.618319][ T3644] total_pgpgout 846 [ 35.622322][ T3644] total_pgfault 1996 [ 35.626247][ T3644] total_pgmajfault 18 [ 35.630277][ T3644] total_inactive_anon 0 [ 35.634513][ T3644] total_active_anon 0 [ 35.638502][ T3644] total_inactive_file 32768 [ 35.643013][ T3644] total_active_file 0 [ 35.647043][ T3644] total_unevictable 0 [ 35.651089][ T3644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.91,pid=3642,uid=0 [ 35.665582][ T3644] Memory cgroup out of memory: Killed process 3642 (syz.2.91) total-vm:88964kB, anon-rss:736kB, file-rss:15964kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 35.796071][ T3642] syz.2.91 (3642) used greatest stack depth: 9016 bytes left [ 35.960009][ T3644] syz.2.91 (3644) used greatest stack depth: 7384 bytes left [ 35.998898][ T3759] bond1: entered allmulticast mode [ 36.004264][ T3759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.105821][ T3783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 36.274221][ T3814] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 36.315175][ T3823] netlink: 'syz.2.179': attribute type 30 has an invalid length. [ 36.402984][ T3845] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 36.588134][ T3877] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 36.690279][ T3904] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 37.400280][ T4013] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 37.507327][ T4022] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 37.716046][ T4044] netlink: 'syz.4.294': attribute type 21 has an invalid length. [ 37.743171][ T4044] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 37.819331][ T4052] __nla_validate_parse: 19 callbacks suppressed [ 37.819343][ T4052] netlink: 830 bytes leftover after parsing attributes in process `syz.0.287'. [ 37.921435][ T4064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'. [ 37.991488][ T4076] tipc: Can't bind to reserved service type 3 [ 37.991491][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 37.991505][ T29] audit: type=1400 audit(1730763076.237:225): avc: denied { bind } for pid=4075 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.008075][ T4079] capability: warning: `syz.0.300' uses deprecated v2 capabilities in a way that may be insecure [ 38.053143][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 38.067125][ T29] audit: type=1400 audit(1730763076.277:226): avc: denied { create } for pid=4077 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.086429][ T29] audit: type=1400 audit(1730763076.277:227): avc: denied { setopt } for pid=4077 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.105968][ T29] audit: type=1400 audit(1730763076.287:228): avc: denied { accept } for pid=4074 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.148912][ T29] audit: type=1400 audit(1730763076.357:229): avc: denied { write } for pid=4089 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.168193][ T29] audit: type=1400 audit(1730763076.387:230): avc: denied { write } for pid=4086 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.172564][ T4092] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 38.187646][ T29] audit: type=1400 audit(1730763076.387:231): avc: denied { connect } for pid=4086 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.215571][ T29] audit: type=1400 audit(1730763076.387:232): avc: denied { name_connect } for pid=4086 comm="syz.3.306" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.232835][ T4099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 38.351442][ T4125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 38.373483][ T4129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 38.375710][ T29] audit: type=1400 audit(1730763076.517:233): avc: denied { setopt } for pid=4103 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.401588][ T29] audit: type=1400 audit(1730763076.557:234): avc: denied { read } for pid=4114 comm="syz.4.319" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.529503][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 38.695903][ T4187] 9pnet_fd: Insufficient options for proto=fd [ 38.748263][ T4195] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 39.073758][ T4228] loop0: detected capacity change from 0 to 1024 [ 39.080455][ T4228] EXT4-fs: Ignoring removed nobh option [ 39.086059][ T4228] EXT4-fs: Ignoring removed orlov option [ 39.091723][ T4228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.170977][ T4240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.178298][ T4240] IPv6: NLM_F_CREATE should be set when creating new route [ 39.188307][ T4228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.270852][ T4246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 39.704228][ T4254] loop1: detected capacity change from 0 to 1024 [ 39.732702][ T4254] EXT4-fs: Ignoring removed nobh option [ 39.738360][ T4254] EXT4-fs: Ignoring removed orlov option [ 39.744191][ T4254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.778042][ T4275] loop3: detected capacity change from 0 to 1024 [ 39.802417][ T4275] EXT4-fs: Ignoring removed nobh option [ 39.808213][ T4275] EXT4-fs: Ignoring removed orlov option [ 39.814142][ T4275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.828471][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.906365][ T4275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.153105][ T4283] 9pnet_fd: Insufficient options for proto=fd [ 40.865595][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.879012][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.928263][ T4300] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 41.179222][ T4329] capability: warning: `syz.0.415' uses 32-bit capabilities (legacy support in use) [ 41.319464][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.404301][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.428'. [ 41.450924][ T4370] validate_nla: 4 callbacks suppressed [ 41.450939][ T4370] netlink: 'syz.0.432': attribute type 21 has an invalid length. [ 41.478147][ T4375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 42.258553][ T4519] netlink: 'syz.4.505': attribute type 21 has an invalid length. [ 42.666616][ T4578] loop0: detected capacity change from 0 to 1024 [ 42.683815][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.707835][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.921917][ T4575] loop1: detected capacity change from 0 to 1024 [ 42.938964][ T4575] EXT4-fs: Ignoring removed nobh option [ 42.944603][ T4575] EXT4-fs: Ignoring removed orlov option [ 42.950371][ T4575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.987349][ T4599] loop0: detected capacity change from 0 to 1024 [ 43.004743][ T4575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.016914][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 43.016929][ T29] audit: type=1326 audit(1730763081.257:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd3727d3aa code=0x7ffc0000 [ 43.019120][ T4599] EXT4-fs: Ignoring removed nobh option [ 43.023113][ T29] audit: type=1326 audit(1730763081.257:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd3727d3aa code=0x7ffc0000 [ 43.023138][ T29] audit: type=1326 audit(1730763081.267:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbd3727cfb7 code=0x7ffc0000 [ 43.046312][ T4599] EXT4-fs: Ignoring removed orlov option [ 43.051812][ T29] audit: type=1326 audit(1730763081.267:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbd3727feba code=0x7ffc0000 [ 43.075012][ T4599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.139179][ T29] audit: type=1326 audit(1730763081.387:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03ce67d0b0 code=0x7ffc0000 [ 43.171670][ T29] audit: type=1326 audit(1730763081.417:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f03ce67d497 code=0x7ffc0000 [ 43.194837][ T29] audit: type=1326 audit(1730763081.417:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03ce67d0b0 code=0x7ffc0000 [ 43.218132][ T29] audit: type=1326 audit(1730763081.417:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 43.241417][ T29] audit: type=1326 audit(1730763081.417:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 43.269732][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.282525][ T29] audit: type=1326 audit(1730763081.527:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd3727d0b0 code=0x7ffc0000 [ 43.379242][ T4631] __nla_validate_parse: 14 callbacks suppressed [ 43.379255][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 43.399440][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 43.477216][ T4638] --map-set only usable from mangle table [ 43.512759][ T4641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.561'. [ 43.804292][ T4671] netlink: 'syz.4.576': attribute type 21 has an invalid length. [ 43.812058][ T4671] netlink: 164 bytes leftover after parsing attributes in process `syz.4.576'. [ 43.961896][ T4658] loop3: detected capacity change from 0 to 1024 [ 43.997068][ T4658] EXT4-fs: Ignoring removed nobh option [ 44.002720][ T4658] EXT4-fs: Ignoring removed orlov option [ 44.008489][ T4658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.124521][ T4658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.430800][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.580351][ T4691] netlink: 240 bytes leftover after parsing attributes in process `syz.2.583'. [ 44.621631][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.718636][ T4706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.590'. [ 44.776470][ T4711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.594'. [ 44.838092][ T4713] loop2: detected capacity change from 0 to 512 [ 44.869481][ T4713] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.586: casefold flag without casefold feature [ 44.883784][ T4713] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.586: couldn't read orphan inode 15 (err -117) [ 44.897556][ T4713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.925730][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.996590][ T4737] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 45.027838][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 45.036850][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 45.129280][ T4752] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.611' sets config #5 [ 45.446378][ T4792] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 45.464954][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.472332][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.486903][ T4775] 9pnet_fd: Insufficient options for proto=fd [ 45.494256][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.501307][ T4792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.508594][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.515750][ T4792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.538562][ T4792] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.567419][ T4800] netlink: 'syz.0.634': attribute type 26 has an invalid length. [ 45.708528][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.796603][ T4829] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 46.078309][ T4841] loop1: detected capacity change from 0 to 1024 [ 46.094624][ T4841] EXT4-fs: Ignoring removed nobh option [ 46.100268][ T4841] EXT4-fs: Ignoring removed orlov option [ 46.106055][ T4841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.170091][ T4841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.213264][ T4892] tmpfs: Bad value for 'mpol' [ 46.811707][ T4976] tmpfs: Bad value for 'mpol' [ 46.901232][ T4963] 9pnet_fd: Insufficient options for proto=fd [ 47.858184][ T5035] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 47.902612][ T5042] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 48.027219][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.066027][ T5065] syz.2.760 uses obsolete (PF_INET,SOCK_PACKET) [ 48.081925][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 48.081938][ T29] audit: type=1326 audit(1730763086.327:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.111413][ T29] audit: type=1326 audit(1730763086.327:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.134621][ T29] audit: type=1326 audit(1730763086.327:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.157877][ T29] audit: type=1326 audit(1730763086.347:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.181108][ T29] audit: type=1326 audit(1730763086.347:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.242583][ T29] audit: type=1326 audit(1730763086.487:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 48.266344][ T29] audit: type=1326 audit(1730763086.487:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 48.289721][ T29] audit: type=1326 audit(1730763086.487:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.313088][ T29] audit: type=1326 audit(1730763086.487:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.336503][ T29] audit: type=1326 audit(1730763086.487:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 48.580676][ T5080] loop1: detected capacity change from 0 to 1024 [ 48.627984][ T5080] EXT4-fs: Ignoring removed nobh option [ 48.633594][ T5080] EXT4-fs: Ignoring removed orlov option [ 48.639349][ T5080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.657958][ T5119] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 48.669746][ T5069] loop4: detected capacity change from 0 to 1024 [ 48.685632][ T5087] loop0: detected capacity change from 0 to 1024 [ 48.726412][ T5087] EXT4-fs: Ignoring removed nobh option [ 48.732077][ T5087] EXT4-fs: Ignoring removed orlov option [ 48.737946][ T5087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.758145][ T5069] EXT4-fs: Ignoring removed nobh option [ 48.763817][ T5069] EXT4-fs: Ignoring removed orlov option [ 48.769575][ T5069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.814436][ T5080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.874419][ T5069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.932779][ T5087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.980377][ T5145] ipt_rpfilter: unknown options [ 48.988761][ T5147] tmpfs: Bad value for 'mpol' [ 49.526956][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.597032][ T5170] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 49.604834][ T5170] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 49.762115][ T5182] __nla_validate_parse: 15 callbacks suppressed [ 49.762128][ T5182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.806'. [ 49.788951][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.809063][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.867834][ T5194] bridge1: entered promiscuous mode [ 49.873062][ T5194] bridge1: entered allmulticast mode [ 49.940133][ T5213] netlink: 'syz.4.820': attribute type 9 has an invalid length. [ 49.947898][ T5213] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.820'. [ 49.979027][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 50.004049][ T5223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'. [ 50.012944][ T5223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'. [ 50.148599][ T5245] random: crng reseeded on system resumption [ 50.226248][ T5256] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.235157][ T5256] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.243941][ T5256] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.252767][ T5256] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.261957][ T5256] geneve2: entered promiscuous mode [ 50.267278][ T5256] geneve2: entered allmulticast mode [ 50.342335][ T5269] netlink: 'syz.2.850': attribute type 21 has an invalid length. [ 50.360696][ T5270] bridge1: entered promiscuous mode [ 50.366016][ T5270] bridge1: entered allmulticast mode [ 50.697331][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 50.753431][ T5333] netlink: 256 bytes leftover after parsing attributes in process `syz.3.882'. [ 51.414709][ T5392] 9pnet_fd: Insufficient options for proto=fd [ 51.928173][ T5475] 9pnet_fd: Insufficient options for proto=fd [ 52.007588][ T5453] loop4: detected capacity change from 0 to 1024 [ 52.015245][ T5453] EXT4-fs: Ignoring removed nobh option [ 52.020899][ T5453] EXT4-fs: Ignoring removed orlov option [ 52.026631][ T5453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.116477][ T5453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.018615][ T5535] ip6t_srh: unknown srh match flags 5294 [ 53.268568][ T5553] sctp: [Deprecated]: syz.1.976 (pid 5553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.268568][ T5553] Use struct sctp_sack_info instead [ 53.326780][ T5516] 9pnet_fd: Insufficient options for proto=fd [ 53.393434][ T5563] sctp: [Deprecated]: syz.0.980 (pid 5563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.393434][ T5563] Use struct sctp_sack_info instead [ 53.440668][ T5567] loop0: detected capacity change from 0 to 164 [ 53.481077][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 53.481142][ T29] audit: type=1400 audit(1730763091.727:852): avc: denied { mount } for pid=5566 comm="syz.0.982" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 53.536784][ T29] audit: type=1400 audit(1730763091.787:853): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 53.844175][ T29] audit: type=1400 audit(1730763092.087:854): avc: denied { read append } for pid=5596 comm="syz.1.998" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.060926][ T29] audit: type=1400 audit(1730763092.307:855): avc: denied { getopt } for pid=5619 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.134155][ T5626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1011'. [ 54.204422][ T29] audit: type=1400 audit(1730763092.447:856): avc: denied { write } for pid=5628 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.307179][ T5642] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1018'. [ 54.531796][ T5655] geneve2: left allmulticast mode [ 54.739426][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.019307][ T29] audit: type=1400 audit(1730763093.267:857): avc: denied { append } for pid=5689 comm="syz.1.1039" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.110397][ T5696] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1041'. [ 55.121204][ T5698] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1042'. [ 55.125830][ T5700] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1045'. [ 55.195274][ T5704] ======================================================= [ 55.195274][ T5704] WARNING: The mand mount option has been deprecated and [ 55.195274][ T5704] and is ignored by this kernel. Remove the mand [ 55.195274][ T5704] option from the mount to silence this warning. [ 55.195274][ T5704] ======================================================= [ 55.266552][ T5704] tmpfs: Bad value for 'mpol' [ 55.602090][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 55.630081][ T5735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1063'. [ 55.675796][ T5742] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1074'. [ 55.687215][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 55.782255][ T5762] netlink: del zone limit has 4 unknown bytes [ 55.869281][ T5774] loop1: detected capacity change from 0 to 128 [ 55.895389][ T29] audit: type=1400 audit(1730763094.147:858): avc: denied { mount } for pid=5773 comm="syz.1.1081" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.932333][ T29] audit: type=1400 audit(1730763094.147:859): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.133250][ T29] audit: type=1326 audit(1730763094.377:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5802 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 56.156700][ T29] audit: type=1326 audit(1730763094.377:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5802 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426926e719 code=0x7ffc0000 [ 56.233691][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 56.275755][ T5827] netlink: 'syz.3.1108': attribute type 15 has an invalid length. [ 56.283659][ T5827] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1108'. [ 56.313094][ T5832] 9pnet_fd: Insufficient options for proto=fd [ 56.441920][ T5856] netlink: 'syz.2.1121': attribute type 10 has an invalid length. [ 56.484106][ T5866] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.1125'. [ 56.519387][ T5870] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 56.527204][ T5870] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 56.534987][ T5870] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 56.550493][ T5873] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 56.827641][ T5861] loop3: detected capacity change from 0 to 1024 [ 56.871007][ T5861] EXT4-fs: Ignoring removed nobh option [ 56.876682][ T5861] EXT4-fs: Ignoring removed orlov option [ 56.882391][ T5861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.926926][ T5910] bond_slave_0: entered promiscuous mode [ 56.932638][ T5910] bond_slave_1: entered promiscuous mode [ 56.956351][ T5861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.536566][ T5947] 9pnet_fd: Insufficient options for proto=fd [ 57.607742][ T5946] 9pnet_fd: Insufficient options for proto=fd [ 57.906132][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.942935][ T5967] xt_policy: too many policy elements [ 58.009877][ T5982] delete_channel: no stack [ 58.180899][ T6022] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 58.183666][ T6023] autofs4:pid:6023:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 58.536777][ T6073] program syz.2.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.571885][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 58.571899][ T29] audit: type=1400 audit(1730763096.817:1058): avc: denied { append } for pid=2997 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.629339][ T6080] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 58.646512][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 58.661656][ T6063] 9pnet_fd: Insufficient options for proto=fd [ 58.717166][ T29] audit: type=1400 audit(1730763096.887:1059): avc: denied { create } for pid=6081 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.736794][ T29] audit: type=1400 audit(1730763096.887:1060): avc: denied { setopt } for pid=6081 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.756408][ T29] audit: type=1400 audit(1730763096.897:1061): avc: denied { mounton } for pid=6060 comm="syz.0.1216" path="/264/file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.779082][ T29] audit: type=1400 audit(1730763096.897:1062): avc: denied { create } for pid=6082 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.798693][ T29] audit: type=1400 audit(1730763096.897:1063): avc: denied { getopt } for pid=6082 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.874224][ T29] audit: type=1400 audit(1730763097.037:1064): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 58.896404][ T29] audit: type=1400 audit(1730763097.037:1065): avc: denied { search } for pid=2997 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.918057][ T29] audit: type=1400 audit(1730763097.037:1066): avc: denied { open } for pid=2997 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.940649][ T29] audit: type=1400 audit(1730763097.037:1067): avc: denied { getattr } for pid=2997 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.994919][ T6093] netlink: 'syz.1.1229': attribute type 13 has an invalid length. [ 59.003748][ T6093] syz_tun: refused to change device tx_queue_len [ 59.010166][ T6093] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 59.094189][ T6111] bond0: entered allmulticast mode [ 59.321112][ T6152] gre1: entered promiscuous mode [ 59.326143][ T6152] gre1: entered allmulticast mode [ 59.741562][ T6205] 9pnet_fd: Insufficient options for proto=fd [ 59.829745][ T6240] netlink: 'syz.1.1281': attribute type 2 has an invalid length. [ 59.953227][ T6257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.044239][ T6272] netlink: 'syz.3.1298': attribute type 21 has an invalid length. [ 60.333667][ T6275] loop4: detected capacity change from 0 to 1024 [ 60.347908][ T6275] EXT4-fs: Ignoring removed nobh option [ 60.353507][ T6275] EXT4-fs: Ignoring removed orlov option [ 60.359445][ T6275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.474390][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.480339][ T6342] __nla_validate_parse: 21 callbacks suppressed [ 60.480355][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'. [ 60.501848][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'. [ 60.685409][ T6367] loop0: detected capacity change from 0 to 1024 [ 60.698256][ T6367] EXT4-fs: Ignoring removed orlov option [ 60.703941][ T6367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.728474][ T6367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.749691][ T6367] EXT4-fs error (device loop0): ext4_lookup:1813: inode #15: comm syz.0.1338: casefold flag without casefold feature [ 60.793655][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.843669][ T6388] loop0: detected capacity change from 0 to 128 [ 60.972742][ T6395] 9pnet_fd: Insufficient options for proto=fd [ 61.058997][ T6399] loop0: detected capacity change from 0 to 1024 [ 61.086567][ T6377] loop2: detected capacity change from 0 to 1024 [ 61.093501][ T6377] EXT4-fs: Ignoring removed nobh option [ 61.099241][ T6377] EXT4-fs: Ignoring removed orlov option [ 61.105001][ T6377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.118836][ T6399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.204371][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.296660][ T6377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.455505][ T6417] cgroup: Bad value for 'name' [ 61.483040][ T6404] loop1: detected capacity change from 0 to 1024 [ 61.518160][ T6404] EXT4-fs: Ignoring removed nobh option [ 61.523843][ T6404] EXT4-fs: Ignoring removed orlov option [ 61.529723][ T6404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.619186][ T6404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.699952][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.994147][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1369'. [ 62.466067][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 62.664493][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.735331][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 62.805344][ T6526] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1401'. [ 62.843792][ T6526] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1401'. [ 62.852853][ T6526] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1401'. [ 63.213715][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.222899][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1428'. [ 63.235596][ T6581] openvswitch: netlink: Tunnel attr 12592 out of range max 16 [ 63.334680][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1438'. [ 63.395307][ T6600] loop0: detected capacity change from 0 to 1024 [ 63.413271][ T6607] loop3: detected capacity change from 0 to 512 [ 63.420080][ T6607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.436823][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.467101][ T6600] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.1439: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 63.485560][ T6607] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 63.493559][ T6607] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 63.520915][ T6607] EXT4-fs (loop3): 1 truncate cleaned up [ 63.526803][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.551438][ T6607] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm syz.3.1442: lblock 0 mapped to illegal pblock 4 (length 1) [ 63.566118][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.587086][ T6607] EXT4-fs (loop3): Remounting filesystem read-only [ 63.602003][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.632119][ T6631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6631 comm=syz.1.1452 [ 63.647526][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 63.647586][ T29] audit: type=1400 audit(1730763101.897:1366): avc: denied { nlmsg_write } for pid=6630 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 63.765729][ T29] audit: type=1400 audit(1730763101.987:1367): avc: denied { read } for pid=6641 comm="syz.0.1456" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.790069][ T29] audit: type=1400 audit(1730763101.987:1368): avc: denied { open } for pid=6641 comm="syz.0.1456" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.792056][ T6603] loop2: detected capacity change from 0 to 1024 [ 63.814745][ T29] audit: type=1326 audit(1730763102.017:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 63.844516][ T29] audit: type=1326 audit(1730763102.017:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 63.868593][ T29] audit: type=1326 audit(1730763102.017:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 63.892179][ T29] audit: type=1326 audit(1730763102.017:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ceaefe753 code=0x7ffc0000 [ 63.915472][ T29] audit: type=1326 audit(1730763102.017:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1ceaefd1ff code=0x7ffc0000 [ 63.938801][ T29] audit: type=1326 audit(1730763102.037:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1ceaefe7a7 code=0x7ffc0000 [ 63.962231][ T29] audit: type=1326 audit(1730763102.037:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ceaefd0b0 code=0x7ffc0000 [ 64.066813][ T6666] openvswitch: netlink: Message has 8 unknown bytes. [ 64.088298][ T6603] EXT4-fs: Ignoring removed nobh option [ 64.093950][ T6603] EXT4-fs: Ignoring removed orlov option [ 64.099717][ T6603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.125043][ T6672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.140422][ T6674] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.324615][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.578248][ T6723] 9pnet_fd: Insufficient options for proto=fd [ 65.038446][ T6775] loop0: detected capacity change from 0 to 512 [ 65.052764][ T6775] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.070291][ T6775] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 65.111094][ T6775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 65.119786][ T6775] System zones: 1-12 [ 65.133577][ T6775] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1519: corrupted in-inode xattr: e_value size too large [ 65.155009][ T6775] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1519: couldn't read orphan inode 15 (err -117) [ 65.170400][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.195373][ T6785] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 65.208384][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.412557][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.469629][ T6809] netlink: 'syz.2.1533': attribute type 3 has an invalid length. [ 65.491031][ T6814] __nla_validate_parse: 6 callbacks suppressed [ 65.491046][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 65.506267][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 65.513404][ T6815] loop0: detected capacity change from 0 to 1024 [ 65.546807][ T6815] EXT4-fs: Ignoring removed nobh option [ 65.552518][ T6815] EXT4-fs: Ignoring removed orlov option [ 65.558293][ T6815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.608040][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1542'. [ 65.630709][ T6831] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 65.712979][ T6815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.763495][ T6846] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1549'. [ 65.828302][ T6849] 9pnet_fd: Insufficient options for proto=fd [ 65.861969][ T6855] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1553'. [ 65.919459][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 66.011733][ T6867] tmpfs: Bad value for 'mpol' [ 66.026467][ T6869] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 66.034387][ T6869] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 66.067271][ T6873] netlink: 'syz.2.1562': attribute type 15 has an invalid length. [ 66.110021][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 66.167401][ T6885] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 66.185673][ T6883] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1567'. [ 66.199903][ T6883] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 66.207722][ T6883] netlink: 'syz.4.1567': attribute type 2 has an invalid length. [ 66.215475][ T6883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1567'. [ 66.245033][ T6887] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1569'. [ 66.587555][ T6916] netlink: 'syz.4.1584': attribute type 21 has an invalid length. [ 66.606194][ T6916] netlink: 'syz.4.1584': attribute type 4 has an invalid length. [ 66.613978][ T6916] netlink: 'syz.4.1584': attribute type 5 has an invalid length. [ 66.975054][ T6981] netlink: 'syz.4.1615': attribute type 7 has an invalid length. [ 67.126935][ T7008] tmpfs: Bad value for 'mpol' [ 67.151171][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.332710][ T7048] program syz.1.1647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.414938][ T7060] ieee802154 phy0 wpan0: encryption failed: -90 [ 67.421123][ T7061] cgroup: release_agent respecified [ 67.542332][ T7031] loop3: detected capacity change from 0 to 1024 [ 67.570643][ T7031] EXT4-fs: Ignoring removed nobh option [ 67.576312][ T7031] EXT4-fs: Ignoring removed orlov option [ 67.582066][ T7031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.602693][ T7078] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.652931][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.667045][ T7087] team0: Port device team_slave_0 removed [ 67.808761][ T7098] delete_channel: no stack [ 67.978435][ T7130] loop4: detected capacity change from 0 to 1024 [ 68.005784][ T7130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.074734][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.118288][ T7138] ------------[ cut here ]------------ [ 68.123826][ T7138] Please remove unsupported % in format string [ 68.131146][ T7138] WARNING: CPU: 0 PID: 7138 at lib/vsprintf.c:2659 format_decode+0x87f/0x8a0 [ 68.140009][ T7138] Modules linked in: [ 68.143943][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.4.1688 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 68.154760][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.164833][ T7138] RIP: 0010:format_decode+0x87f/0x8a0 [ 68.170219][ T7138] Code: dc b2 86 e8 e3 e1 1c fc c6 05 c6 a6 86 01 01 90 4c 89 ef e8 43 e0 1c fc 41 0f b6 75 00 48 c7 c7 2f ea 3b 86 e8 32 bf e5 fb 90 <0f> 0b 90 90 4c 89 ff e8 35 ee 1c fc 4d 8b 27 e9 a3 fe ff ff e8 a8 [ 68.189883][ T7138] RSP: 0018:ffffc90001a3fa50 EFLAGS: 00010246 [ 68.196005][ T7138] RAX: 45539aad837c2700 RBX: ffff00ffffffffff RCX: 0000000000040000 [ 68.203985][ T7138] RDX: ffffc90007ab0000 RSI: 00000000000013f3 RDI: 00000000000013f4 [ 68.211990][ T7138] RBP: 0000000000000000 R08: ffffffff8111f637 R09: 0000000000000000 [ 68.219987][ T7138] R10: 0001ffffffffffff R11: ffff888126b81080 R12: ffff0a00ffffff00 [ 68.227992][ T7138] R13: ffffc90001a3fbb4 R14: ffff0000ffffff00 R15: ffffc90001a3fad8 [ 68.236046][ T7138] FS: 00007f4267ee16c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 68.245098][ T7138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.251760][ T7138] CR2: 0000001b3331eff8 CR3: 00000001348d4000 CR4: 00000000003506f0 [ 68.259763][ T7138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.267772][ T7138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 68.275795][ T7138] Call Trace: [ 68.279139][ T7138] [ 68.282103][ T7138] ? __warn+0x141/0x350 [ 68.286307][ T7138] ? report_bug+0x315/0x420 [ 68.290833][ T7138] ? format_decode+0x87f/0x8a0 [ 68.295624][ T7138] ? handle_bug+0x60/0x90 [ 68.299975][ T7138] ? exc_invalid_op+0x1a/0x50 [ 68.304687][ T7138] ? asm_exc_invalid_op+0x1a/0x20 [ 68.309758][ T7138] ? __warn_printk+0x167/0x1b0 [ 68.314643][ T7138] ? format_decode+0x87f/0x8a0 [ 68.319428][ T7138] bstr_printf+0xb5/0x9e0 [ 68.323773][ T7138] ? bpf_test_run+0x1d6/0x4a0 [ 68.328647][ T7138] bpf_trace_printk+0xba/0x1d0 [ 68.333420][ T7138] ? bpf_test_run+0x1d6/0x4a0 [ 68.338214][ T7138] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 68.343685][ T7138] bpf_test_run+0x1e5/0x4a0 [ 68.348333][ T7138] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 68.353726][ T7138] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 68.359637][ T7138] ? bpf_test_run+0x104/0x4a0 [ 68.364462][ T7138] bpf_prog_test_run_skb+0x830/0xba0 [ 68.369885][ T7138] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 68.375909][ T7138] bpf_prog_test_run+0x20f/0x3a0 [ 68.380903][ T7138] __sys_bpf+0x400/0x7a0 [ 68.385180][ T7138] __x64_sys_bpf+0x43/0x50 [ 68.389763][ T7138] x64_sys_call+0x2625/0x2d60 [ 68.394494][ T7138] do_syscall_64+0xc9/0x1c0 [ 68.399030][ T7138] ? clear_bhb_loop+0x55/0xb0 [ 68.403766][ T7138] ? clear_bhb_loop+0x55/0xb0 [ 68.408494][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.414436][ T7138] RIP: 0033:0x7f426926e719 [ 68.418897][ T7138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.438542][ T7138] RSP: 002b:00007f4267ee1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.447079][ T7138] RAX: ffffffffffffffda RBX: 00007f4269425f80 RCX: 00007f426926e719 [ 68.455090][ T7138] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 68.463104][ T7138] RBP: 00007f42692e139e R08: 0000000000000000 R09: 0000000000000000 [ 68.471113][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.479121][ T7138] R13: 0000000000000000 R14: 00007f4269425f80 R15: 00007ffd650f5b38 [ 68.487212][ T7138] [ 68.490241][ T7138] ---[ end trace 0000000000000000 ]--- [ 68.802898][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 68.802912][ T29] audit: type=1400 audit(1730763107.047:1534): avc: denied { read } for pid=7174 comm="syz.2.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.919311][ T29] audit: type=1400 audit(1730763107.167:1535): avc: denied { append } for pid=7187 comm="syz.2.1713" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.928966][ T7189] loop1: detected capacity change from 0 to 512 [ 69.011609][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.063351][ T7189] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.129352][ T7189] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 69.139818][ T7189] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 69.149232][ T7189] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1714: Failed to acquire dquot type 1 [ 69.209688][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.247800][ T29] audit: type=1400 audit(1730763107.497:1536): avc: denied { getopt } for pid=7224 comm="syz.2.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.382707][ T7246] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.449980][ T29] audit: type=1400 audit(1730763107.697:1537): avc: denied { bind } for pid=7252 comm="syz.2.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.528098][ T29] audit: type=1400 audit(1730763107.777:1538): avc: denied { read } for pid=7260 comm="syz.0.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.606132][ T7272] loop2: detected capacity change from 0 to 512 [ 69.617572][ T29] audit: type=1400 audit(1730763107.807:1539): avc: denied { read } for pid=3053 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.644198][ T7272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.666130][ T7276] 9pnet_fd: Insufficient options for proto=fd [ 69.695346][ T29] audit: type=1400 audit(1730763107.947:1540): avc: denied { connect } for pid=7280 comm="syz.4.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.736012][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.754890][ T7272] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.781813][ T7294] loop1: detected capacity change from 0 to 1024 [ 69.789017][ T7294] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.799761][ T29] audit: type=1400 audit(1730763108.047:1541): avc: denied { create } for pid=7271 comm="syz.2.1754" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.842879][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.876615][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.893403][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.345774][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.478657][ T7354] validate_nla: 3 callbacks suppressed [ 70.478669][ T7354] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 70.521794][ T7361] loop1: detected capacity change from 0 to 512 [ 70.539169][ T7361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.562163][ T7361] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.574337][ T7366] loop4: detected capacity change from 0 to 512 [ 70.590226][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.640988][ T7366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.716396][ T7366] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.886447][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.904536][ T7357] loop3: detected capacity change from 0 to 1024 [ 70.934885][ T7357] EXT4-fs: Ignoring removed nobh option [ 70.940529][ T7357] EXT4-fs: Ignoring removed orlov option [ 70.946263][ T7357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.997909][ T7394] __nla_validate_parse: 21 callbacks suppressed [ 70.997923][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1803'. [ 71.054953][ T7357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.398536][ T7440] loop0: detected capacity change from 0 to 512 [ 71.419940][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 71.441146][ T7440] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1821: attempt to clear invalid blocks 1 len 1 [ 71.482520][ T7440] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1821: bg 0: block 343: padding at end of block bitmap is not set [ 71.528728][ T7440] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.561695][ T7440] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1821: invalid indirect mapped block 1819239214 (level 0) [ 71.606932][ T7440] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1821: invalid indirect mapped block 1819239214 (level 1) [ 71.650143][ T7440] EXT4-fs (loop0): 1 truncate cleaned up [ 71.656323][ T7440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.672229][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 71.697092][ T7463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1832'. [ 71.706107][ T7463] netlink: 444 bytes leftover after parsing attributes in process `syz.2.1832'. [ 71.724808][ T7463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1832'. [ 71.737222][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.110932][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1850'. [ 72.156089][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.285023][ T7523] lo speed is unknown, defaulting to 1000 [ 72.299861][ T7523] lo speed is unknown, defaulting to 1000 [ 72.332229][ T7523] lo speed is unknown, defaulting to 1000 [ 72.362616][ T7523] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.377319][ T7523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.392473][ T7523] lo speed is unknown, defaulting to 1000 [ 72.429951][ T7523] lo speed is unknown, defaulting to 1000 [ 72.437570][ T7523] lo speed is unknown, defaulting to 1000 [ 72.455407][ T7523] lo speed is unknown, defaulting to 1000 [ 72.472810][ T7523] lo speed is unknown, defaulting to 1000 [ 72.475516][ T7552] process 'syz.2.1875' launched '/dev/fd/4' with NULL argv: empty string added [ 72.628181][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 72.676592][ T7588] siw: device registration error -23 [ 72.737953][ T7598] loop1: detected capacity change from 0 to 512 [ 72.825048][ T7613] syz.0.1904[7613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.825179][ T7613] syz.0.1904[7613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.830770][ T7598] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1898: attempt to clear invalid blocks 1 len 1 [ 72.838905][ T7613] syz.0.1904[7613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.887352][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 72.900323][ T7598] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1898: bg 0: block 343: padding at end of block bitmap is not set [ 72.944949][ T7629] syz.2.1912[7629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.945485][ T7629] syz.2.1912[7629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.964222][ T7598] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.988439][ T7629] syz.2.1912[7629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.999012][ T7598] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1898: invalid indirect mapped block 1819239214 (level 0) [ 73.049573][ T7598] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1898: invalid indirect mapped block 1819239214 (level 1) [ 73.075371][ T7598] EXT4-fs (loop1): 1 truncate cleaned up [ 73.081547][ T7598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.126767][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 73.172729][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.188092][ T7664] loop4: detected capacity change from 0 to 1024 [ 73.234918][ T7664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.261639][ T7676] loop1: detected capacity change from 0 to 512 [ 73.304667][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.308248][ T7676] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 73.322756][ T7676] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 73.339451][ T7676] EXT4-fs (loop1): 1 truncate cleaned up [ 73.349892][ T7676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.356759][ T7689] delete_channel: no stack [ 73.418975][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.494411][ T7710] loop2: detected capacity change from 0 to 512 [ 73.503404][ T7710] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.516466][ T7710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.552845][ T7710] EXT4-fs (loop2): 1 truncate cleaned up [ 73.560624][ T7710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.581715][ T7712] loop4: detected capacity change from 0 to 2048 [ 73.589810][ T7712] journal_path: Non-blockdev passed as '' [ 73.595585][ T7712] EXT4-fs: error: could not find journal device path [ 73.660009][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.699947][ T7739] loop4: detected capacity change from 0 to 512 [ 73.724105][ T7740] loop1: detected capacity change from 0 to 512 [ 73.758388][ T7750] loop3: detected capacity change from 0 to 128 [ 73.764859][ T7740] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.1965: corrupted xattr block 95: invalid header [ 73.770989][ T7739] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1964: invalid indirect mapped block 4294967295 (level 1) [ 73.804640][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 73.804650][ T29] audit: type=1400 audit(1730763112.057:1678): avc: denied { append } for pid=7754 comm="syz.0.1972" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.814300][ T7757] tipc: Started in network mode [ 73.835618][ T7755] support for the xor transformation has been removed. [ 73.839351][ T7757] tipc: Node identity 1, cluster identity 4711 [ 73.839363][ T7757] tipc: Node number set to 1 [ 73.850784][ T7739] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1964: invalid indirect mapped block 4294967295 (level 1) [ 73.862958][ T7757] tipc: Cannot configure node identity twice [ 73.874919][ T7740] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 73.892033][ T7740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1965: bg 0: block 7: invalid block bitmap [ 73.915385][ T7739] EXT4-fs (loop4): 2 truncates cleaned up [ 73.921794][ T7739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.938090][ T7740] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 73.965501][ T29] audit: type=1326 audit(1730763112.217:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 73.997616][ T7739] EXT4-fs error (device loop4): ext4_get_parent:1860: inode #11: comm syz.4.1964: bad parent inode number: 3 [ 74.014543][ T7740] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.1965: corrupted xattr block 95: invalid header [ 74.030198][ T29] audit: type=1326 audit(1730763112.217:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 74.053655][ T29] audit: type=1326 audit(1730763112.217:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 74.077140][ T29] audit: type=1400 audit(1730763112.217:1682): avc: denied { tracepoint } for pid=7766 comm="syz.0.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.096995][ T29] audit: type=1326 audit(1730763112.267:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 74.100278][ T7774] syz.2.1980: attempt to access beyond end of device [ 74.100278][ T7774] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 74.120399][ T29] audit: type=1326 audit(1730763112.287:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 74.120425][ T29] audit: type=1326 audit(1730763112.287:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 74.138406][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.156729][ T29] audit: type=1326 audit(1730763112.307:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3727e719 code=0x7ffc0000 [ 74.213661][ T7740] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 74.230408][ T7740] EXT4-fs (loop1): 1 orphan inode deleted [ 74.256087][ T7740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.288203][ T29] audit: type=1400 audit(1730763112.537:1687): avc: denied { mount } for pid=7782 comm="syz.0.1984" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.342226][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.344250][ T7789] loop0: detected capacity change from 0 to 512 [ 74.362201][ T7789] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.386226][ T7789] EXT4-fs (loop0): 1 truncate cleaned up [ 74.407416][ T7791] loop4: detected capacity change from 0 to 1024 [ 74.413110][ T7789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.439994][ T7791] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.456615][ T7789] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 74.472214][ T7791] JBD2: no valid journal superblock found [ 74.478019][ T7791] EXT4-fs (loop4): Could not load journal inode [ 74.510701][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.520949][ T7808] loop2: detected capacity change from 0 to 128 [ 74.545484][ T7810] loop1: detected capacity change from 0 to 512 [ 74.590875][ T7810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.591273][ T7818] loop0: detected capacity change from 0 to 2048 [ 74.647329][ T4501] loop0: p1 < > p3 p4 < > [ 74.652696][ T4501] loop0: p3 start 4284289 is beyond EOD, truncated [ 74.657979][ T7810] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.675505][ T7830] netlink: 'syz.4.2006': attribute type 29 has an invalid length. [ 74.686507][ T7830] netlink: 'syz.4.2006': attribute type 29 has an invalid length. [ 74.699224][ T7818] loop0: p1 < > p3 p4 < > [ 74.714313][ T7818] loop0: p3 start 4284289 is beyond EOD, truncated [ 74.739548][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.764019][ T7845] tipc: Started in network mode [ 74.769041][ T7845] tipc: Node identity 4, cluster identity 4711 [ 74.775224][ T7845] tipc: Node number set to 4 [ 74.784635][ T7845] tipc: Cannot configure node identity twice [ 74.796044][ T3015] loop0: p1 < > p3 p4 < > [ 74.801966][ T3015] loop0: p3 start 4284289 is beyond EOD, truncated [ 74.814747][ T7852] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2017' sets config #0 [ 74.857413][ T7850] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 74.865692][ T7850] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 74.886310][ T7860] tipc: Started in network mode [ 74.891216][ T7860] tipc: Node identity 1, cluster identity 5 [ 74.897205][ T7860] tipc: Node number set to 1 [ 74.903192][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 74.935136][ T7866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.955464][ T7872] netlink: 'syz.1.2026': attribute type 9 has an invalid length. [ 74.969278][ T4501] udevd[4501]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 75.000959][ T7866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.026519][ T4501] udevd[4501]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 75.085511][ T7866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.157515][ T7897] netlink: 'syz.0.2038': attribute type 4 has an invalid length. [ 75.186838][ T7866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.207052][ T3377] lo speed is unknown, defaulting to 1000 [ 75.207594][ T7901] tun0: tun_chr_ioctl cmd 2148553947 [ 75.218368][ T7897] netlink: 'syz.0.2038': attribute type 4 has an invalid length. [ 75.228566][ T3394] lo speed is unknown, defaulting to 1000 [ 75.262685][ T7866] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.287810][ T7866] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.325160][ T7911] bridge0: port 3(vlan2) entered blocking state [ 75.331466][ T7911] bridge0: port 3(vlan2) entered disabled state [ 75.338069][ T7911] vlan2: entered allmulticast mode [ 75.343279][ T7911] gretap0: entered allmulticast mode [ 75.349323][ T7911] vlan2: entered promiscuous mode [ 75.354388][ T7911] gretap0: entered promiscuous mode [ 75.359962][ T7911] bridge0: port 3(vlan2) entered blocking state [ 75.366370][ T7911] bridge0: port 3(vlan2) entered forwarding state [ 75.379038][ T7866] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.398570][ T7866] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.410238][ T7918] loop3: detected capacity change from 0 to 512 [ 75.417915][ T7918] EXT4-fs (loop3): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 75.453043][ T7919] lo speed is unknown, defaulting to 1000 [ 75.552921][ T7919] 9pnet_fd: Insufficient options for proto=fd [ 75.582257][ T7941] SET target dimension over the limit! [ 75.693603][ T7957] loop1: detected capacity change from 0 to 2048 [ 75.734978][ T7957] loop1: p1 < > p3 p4 < > [ 75.753824][ T7957] loop1: p3 start 4284289 is beyond EOD, truncated [ 75.802948][ T7969] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 75.850801][ T7969] bond_slave_0: left promiscuous mode [ 75.856332][ T7969] bond_slave_1: left promiscuous mode [ 75.960659][ T7949] loop3: detected capacity change from 0 to 1024 [ 75.980614][ T7949] EXT4-fs: Ignoring removed nobh option [ 75.986388][ T7949] EXT4-fs: Ignoring removed orlov option [ 75.992075][ T7949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.023212][ T7949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.098740][ T7996] syz.4.2082[7996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.098865][ T7996] syz.4.2082[7996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.132683][ T7996] syz.4.2082[7996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.466403][ T8026] loop4: detected capacity change from 0 to 2048 [ 76.503602][ T8026] EXT4-fs: Ignoring removed orlov option [ 76.580680][ T8026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.928522][ T53] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.009274][ T53] EXT4-fs (loop4): Remounting filesystem read-only [ 77.033262][ T8045] loop2: detected capacity change from 0 to 512 [ 77.078273][ T8045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.151152][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.192859][ T8045] EXT4-fs (loop2): 1 orphan inode deleted [ 77.198675][ T8045] EXT4-fs (loop2): 1 truncate cleaned up [ 77.205018][ T8045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.213778][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.219345][ T8045] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 77.240938][ T8045] EXT4-fs (loop2): Remounting filesystem read-only [ 77.295032][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.346161][ T8072] __nla_validate_parse: 10 callbacks suppressed [ 77.346179][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2106'. [ 77.365861][ T8074] syz.1.2114[8074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.426312][ T8086] xt_connbytes: Forcing CT accounting to be enabled [ 77.433805][ T8088] loop4: detected capacity change from 0 to 512 [ 77.458241][ T8088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.511428][ T8088] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.519392][ T8088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 77.523936][ T8101] loop0: detected capacity change from 0 to 256 [ 77.552443][ T8088] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 77.561969][ T8088] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 77.571172][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.583442][ T8101] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 77.591365][ T8101] FAT-fs (loop0): Filesystem has been set read-only [ 77.591611][ T8108] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 77.591611][ T8108] The task syz.2.2122 (8108) triggered the difference, watch for misbehavior. [ 77.615663][ T8088] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 77.653918][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.722345][ T8116] xt_connbytes: Forcing CT accounting to be enabled [ 77.787952][ T8135] dvmrp8: entered allmulticast mode [ 77.794166][ T8135] dvmrp8: left allmulticast mode [ 77.800448][ T8127] loop3: detected capacity change from 0 to 2048 [ 77.826768][ T8127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.849354][ T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.866723][ T11] EXT4-fs (loop3): Remounting filesystem read-only [ 77.877076][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.929967][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.969991][ T8163] bridge0: port 3(vlan2) entered blocking state [ 77.976377][ T8163] bridge0: port 3(vlan2) entered disabled state [ 77.983528][ T8163] vlan2: entered allmulticast mode [ 77.993199][ T8163] vlan2: left allmulticast mode [ 78.004000][ T8168] sctp: [Deprecated]: syz.4.2155 (pid 8168) Use of int in max_burst socket option deprecated. [ 78.004000][ T8168] Use struct sctp_assoc_value instead [ 78.191724][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2162'. [ 78.229063][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2172'. [ 78.271972][ T8172] loop4: detected capacity change from 0 to 1024 [ 78.279302][ T8172] EXT4-fs: Ignoring removed nobh option [ 78.284931][ T8172] EXT4-fs: Ignoring removed orlov option [ 78.290579][ T8172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.306728][ T8172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.939055][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2190'. [ 78.948170][ T8250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2190'. [ 79.170250][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 79.170264][ T29] audit: type=1326 audit(1730763117.417:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 79.237024][ T29] audit: type=1326 audit(1730763117.457:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 79.260439][ T29] audit: type=1326 audit(1730763117.457:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce67e719 code=0x7ffc0000 [ 79.288051][ T8273] 9pnet: Could not find request transport: f [ 79.332369][ T8285] IPv6: Can't replace route, no match found [ 79.365428][ T29] audit: type=1326 audit(1730763117.617:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.388980][ T29] audit: type=1326 audit(1730763117.617:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.427519][ T29] audit: type=1326 audit(1730763117.657:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.440853][ T8291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2210'. [ 79.450938][ T29] audit: type=1326 audit(1730763117.657:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.483250][ T29] audit: type=1326 audit(1730763117.657:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.506822][ T29] audit: type=1326 audit(1730763117.667:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.530296][ T29] audit: type=1326 audit(1730763117.667:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceaefe719 code=0x7ffc0000 [ 79.651237][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 79.732776][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.740009][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.748683][ T8313] bridge0: entered promiscuous mode [ 79.764663][ T8313] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 80.119940][ T8321] loop0: detected capacity change from 0 to 1024 [ 80.185502][ T8321] EXT4-fs: Ignoring removed nobh option [ 80.191268][ T8321] EXT4-fs: Ignoring removed orlov option [ 80.197037][ T8321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.235479][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 80.244455][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 80.494713][ T8321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.815521][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 81.036279][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.304453][ T8381] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 81.406416][ T8391] bpf_get_probe_write_proto: 2 callbacks suppressed [ 81.406433][ T8391] syz.4.2251[8391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.413077][ T8391] syz.4.2251[8391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.455980][ T8391] syz.4.2251[8391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.636997][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.721174][ T8423] lo speed is unknown, defaulting to 1000 [ 81.838518][ T8395] loop2: detected capacity change from 0 to 1024 [ 81.878796][ T8395] EXT4-fs: Ignoring removed nobh option [ 81.884542][ T8395] EXT4-fs: Ignoring removed orlov option [ 81.890304][ T8395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.990849][ T8395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.012430][ T8449] loop0: detected capacity change from 0 to 2048 [ 82.070841][ T8449] loop0: p1 < > p4 [ 82.076305][ T8449] loop0: p4 size 8388608 extends beyond EOD, truncated [ 82.132959][ T8449] Process accounting resumed [ 82.311883][ T8477] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 82.338096][ T8479] IPv6: Can't replace route, no match found [ 82.394732][ T8481] lo speed is unknown, defaulting to 1000 [ 82.411087][ T8489] __nla_validate_parse: 1 callbacks suppressed [ 82.411102][ T8489] netlink: 199796 bytes leftover after parsing attributes in process `syz.4.2296'. [ 82.493559][ T8497] openvswitch: netlink: IPv4 tun info is not correct [ 82.517837][ T8500] syz.1.2301[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.517969][ T8500] syz.1.2301[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.546014][ T8500] syz.1.2301[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.699293][ T8521] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.717565][ T8516] vhci_hcd: invalid port number 61 [ 82.718094][ T8521] vhci_hcd: invalid port number 23 [ 82.735969][ T8] kernel write not supported for file /vcsa1 (pid: 8 comm: kworker/0:0) [ 82.908061][ T8543] syz.0.2322 (8543): attempted to duplicate a private mapping with mremap. This is not supported. [ 83.027340][ T8557] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 83.128293][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.166085][ T8579] loop4: detected capacity change from 0 to 512 [ 83.176523][ T8579] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.185616][ T8579] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 83.247293][ T8579] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 83.258093][ T8] IPVS: starting estimator thread 0... [ 83.263515][ T8579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 83.271601][ T8579] System zones: 0-2, 18-18, 34-34 [ 83.280875][ T8579] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.298704][ T8595] loop2: detected capacity change from 0 to 128 [ 83.328069][ T8579] EXT4-fs (loop4): 1 truncate cleaned up [ 83.334282][ T8579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.364146][ T8591] IPVS: using max 2688 ests per chain, 134400 per kthread [ 83.378237][ T8595] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.411375][ T8595] ext4 filesystem being mounted at /466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.447267][ T8612] IPv6: Can't replace route, no match found [ 83.463087][ T8579] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 83.481676][ T3315] ================================================================== [ 83.489789][ T3315] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 83.491382][ T8615] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 83.497093][ T3315] [ 83.497102][ T3315] read-write to 0xffff88810634e228 of 8 bytes by task 53 on cpu 1: [ 83.497123][ T3315] xas_clear_mark+0x90/0x180 [ 83.506086][ T8615] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 83.508212][ T3315] __folio_start_writeback+0x2e2/0x440 [ 83.516799][ T8615] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 83.520653][ T3315] __block_write_full_folio+0x506/0x8c0 [ 83.549519][ T3315] block_write_full_folio+0x293/0x2b0 [ 83.554917][ T3315] write_cache_pages+0x62/0x100 [ 83.559778][ T3315] blkdev_writepages+0x59/0x90 [ 83.564550][ T3315] do_writepages+0x1d8/0x480 [ 83.569146][ T3315] __writeback_single_inode+0x89/0x850 [ 83.574607][ T3315] writeback_sb_inodes+0x461/0xa30 [ 83.579718][ T3315] __writeback_inodes_wb+0x9a/0x1a0 [ 83.584911][ T3315] wb_writeback+0x274/0x640 [ 83.589440][ T3315] wb_workfn+0x67f/0x940 [ 83.593686][ T3315] process_scheduled_works+0x483/0x9a0 [ 83.599149][ T3315] worker_thread+0x51d/0x6f0 [ 83.603735][ T3315] kthread+0x1d1/0x210 [ 83.607900][ T3315] ret_from_fork+0x4b/0x60 [ 83.612500][ T3315] ret_from_fork_asm+0x1a/0x30 [ 83.617271][ T3315] [ 83.619598][ T3315] read to 0xffff88810634e228 of 8 bytes by task 3315 on cpu 0: [ 83.627144][ T3315] xas_find_marked+0x216/0x660 [ 83.631921][ T3315] find_get_entry+0x54/0x390 [ 83.636530][ T3315] filemap_get_folios_tag+0x9e/0x210 [ 83.641820][ T3315] writeback_iter+0x4b0/0x830 [ 83.646494][ T3315] write_cache_pages+0x4b/0x100 [ 83.651342][ T3315] blkdev_writepages+0x59/0x90 [ 83.656104][ T3315] do_writepages+0x1d8/0x480 [ 83.660695][ T3315] filemap_fdatawrite_wbc+0xdb/0x100 [ 83.665987][ T3315] filemap_flush+0x61/0x90 [ 83.670406][ T3315] sync_blockdev_nowait+0x29/0x40 [ 83.675437][ T3315] sync_filesystem+0xe3/0x190 [ 83.680115][ T3315] generic_shutdown_super+0x46/0x220 [ 83.685406][ T3315] kill_block_super+0x2a/0x70 [ 83.690090][ T3315] ext4_kill_sb+0x44/0x80 [ 83.694429][ T3315] deactivate_locked_super+0x7d/0x1c0 [ 83.699801][ T3315] deactivate_super+0x9f/0xb0 [ 83.704477][ T3315] cleanup_mnt+0x268/0x2e0 [ 83.708888][ T3315] __cleanup_mnt+0x19/0x20 [ 83.713301][ T3315] task_work_run+0x13a/0x1a0 [ 83.717893][ T3315] syscall_exit_to_user_mode+0xbe/0x130 [ 83.723440][ T3315] do_syscall_64+0xd6/0x1c0 [ 83.727942][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.733854][ T3315] [ 83.736169][ T3315] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 83.743289][ T3315] [ 83.745605][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 83.751742][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 83.764063][ T3315] Tainted: [W]=WARN [ 83.767862][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.777919][ T3315] ================================================================== [ 83.792188][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.801648][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.836441][ T8626] loop2: detected capacity change from 0 to 512 [ 83.842895][ T8626] EXT4-fs: dax option not supported [ 83.861225][ T8628] syz.4.2361[8628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.861322][ T8628] syz.4.2361[8628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.873077][ T8628] syz.4.2361[8628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.854953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)