last executing test programs: 1.149115688s ago: executing program 4 (id=1340): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.075134679s ago: executing program 4 (id=1342): syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x3a0e04d, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 912.479832ms ago: executing program 0 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) close(r1) 813.832984ms ago: executing program 0 (id=1349): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 682.572227ms ago: executing program 0 (id=1353): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a94}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 667.777487ms ago: executing program 3 (id=1354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 630.558618ms ago: executing program 0 (id=1356): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x74}}, 0x0) 626.411848ms ago: executing program 3 (id=1358): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 577.895079ms ago: executing program 0 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 543.771169ms ago: executing program 3 (id=1360): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x2, 0x305}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000200)=0xffefffdc, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)=' \x00\x00', 0x3) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 522.11857ms ago: executing program 3 (id=1361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 503.24538ms ago: executing program 2 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 502.83765ms ago: executing program 1 (id=1372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 484.467431ms ago: executing program 0 (id=1363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 431.444002ms ago: executing program 1 (id=1364): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$SNAPSHOT_FREE(r0, 0x3305) 391.683382ms ago: executing program 2 (id=1365): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x9d45, 0x47, 0x0, 0x7, 0x4f1d, 0x6, 0x6}) 367.007853ms ago: executing program 1 (id=1366): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 285.069244ms ago: executing program 2 (id=1367): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 266.303705ms ago: executing program 3 (id=1368): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/204, 0xcc) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x200803, &(0x7f00000033c0)={[{@noblock_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 215.683946ms ago: executing program 1 (id=1369): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x74}}, 0x0) 214.044836ms ago: executing program 4 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b5}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000004c40)=[@ioring_restriction_sqe_op={0x1, 0x54}], 0x1) 153.920487ms ago: executing program 2 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r2, r3, 0x0) 153.636887ms ago: executing program 4 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 90.413808ms ago: executing program 2 (id=1374): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 90.174548ms ago: executing program 2 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 89.818478ms ago: executing program 3 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) unshare(0x2040400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 79.067759ms ago: executing program 1 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x84) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) 63.369849ms ago: executing program 1 (id=1378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r1) 44.028239ms ago: executing program 4 (id=1379): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}, @TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}]}}}]}, 0x6c}}, 0x0) 0s ago: executing program 4 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x11a}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 26.299588][ T29] audit: type=1400 audit(1756930983.451:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.300429][ T3293] cgroup: Unknown subsys name 'net' [ 26.322320][ T29] audit: type=1400 audit(1756930983.451:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.349661][ T29] audit: type=1400 audit(1756930983.471:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.490045][ T3293] cgroup: Unknown subsys name 'cpuset' [ 26.496149][ T3293] cgroup: Unknown subsys name 'rlimit' [ 26.585583][ T29] audit: type=1400 audit(1756930983.731:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.608977][ T29] audit: type=1400 audit(1756930983.731:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.629417][ T29] audit: type=1400 audit(1756930983.731:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.649761][ T29] audit: type=1400 audit(1756930983.731:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.670056][ T29] audit: type=1400 audit(1756930983.761:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.676923][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.694910][ T29] audit: type=1400 audit(1756930983.761:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.726796][ T29] audit: type=1400 audit(1756930983.851:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.762053][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.856929][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.884897][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.909224][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.934280][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.959939][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.986478][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.993565][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.001482][ T3307] bridge_slave_0: entered allmulticast mode [ 28.007858][ T3307] bridge_slave_0: entered promiscuous mode [ 28.028470][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.035560][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.043418][ T3307] bridge_slave_1: entered allmulticast mode [ 28.049891][ T3307] bridge_slave_1: entered promiscuous mode [ 28.055919][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.063021][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.070239][ T3304] bridge_slave_0: entered allmulticast mode [ 28.076636][ T3304] bridge_slave_0: entered promiscuous mode [ 28.095853][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.102979][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.110111][ T3304] bridge_slave_1: entered allmulticast mode [ 28.116516][ T3304] bridge_slave_1: entered promiscuous mode [ 28.149769][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.170237][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.177310][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.184536][ T3310] bridge_slave_0: entered allmulticast mode [ 28.190892][ T3310] bridge_slave_0: entered promiscuous mode [ 28.197831][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.208009][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.230937][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.237997][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.245226][ T3310] bridge_slave_1: entered allmulticast mode [ 28.251610][ T3310] bridge_slave_1: entered promiscuous mode [ 28.262953][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.276585][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.283674][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.290801][ T3306] bridge_slave_0: entered allmulticast mode [ 28.297134][ T3306] bridge_slave_0: entered promiscuous mode [ 28.303548][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.310623][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.317730][ T3302] bridge_slave_0: entered allmulticast mode [ 28.324094][ T3302] bridge_slave_0: entered promiscuous mode [ 28.330780][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.337824][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.344935][ T3302] bridge_slave_1: entered allmulticast mode [ 28.351468][ T3302] bridge_slave_1: entered promiscuous mode [ 28.366689][ T3307] team0: Port device team_slave_0 added [ 28.372476][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.379529][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.386606][ T3306] bridge_slave_1: entered allmulticast mode [ 28.392962][ T3306] bridge_slave_1: entered promiscuous mode [ 28.413955][ T3307] team0: Port device team_slave_1 added [ 28.429089][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.438760][ T3304] team0: Port device team_slave_0 added [ 28.460882][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.470894][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.480599][ T3304] team0: Port device team_slave_1 added [ 28.486530][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.493530][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.519490][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.531239][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.541323][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.551104][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.573966][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.580945][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.606840][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.636474][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.643491][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.669405][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.684842][ T3302] team0: Port device team_slave_0 added [ 28.691232][ T3310] team0: Port device team_slave_0 added [ 28.697968][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.705009][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.731336][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.742574][ T3306] team0: Port device team_slave_0 added [ 28.751274][ T3302] team0: Port device team_slave_1 added [ 28.757673][ T3310] team0: Port device team_slave_1 added [ 28.773987][ T3306] team0: Port device team_slave_1 added [ 28.801484][ T3307] hsr_slave_0: entered promiscuous mode [ 28.807336][ T3307] hsr_slave_1: entered promiscuous mode [ 28.822293][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.829234][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.855333][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.871096][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.878092][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.904009][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.915211][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.922179][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.948065][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.959063][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.966028][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.991963][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.002805][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.009755][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.035761][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.066371][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.073362][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.099299][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.115622][ T3304] hsr_slave_0: entered promiscuous mode [ 29.121577][ T3304] hsr_slave_1: entered promiscuous mode [ 29.127422][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 29.133171][ T3304] Cannot create hsr debugfs directory [ 29.160801][ T3306] hsr_slave_0: entered promiscuous mode [ 29.166739][ T3306] hsr_slave_1: entered promiscuous mode [ 29.172622][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 29.178337][ T3306] Cannot create hsr debugfs directory [ 29.219476][ T3302] hsr_slave_0: entered promiscuous mode [ 29.225521][ T3302] hsr_slave_1: entered promiscuous mode [ 29.231395][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 29.237104][ T3302] Cannot create hsr debugfs directory [ 29.267565][ T3310] hsr_slave_0: entered promiscuous mode [ 29.274273][ T3310] hsr_slave_1: entered promiscuous mode [ 29.280035][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 29.285737][ T3310] Cannot create hsr debugfs directory [ 29.430628][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.439020][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.451649][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.462642][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.486090][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.494775][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.506338][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.514829][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.542993][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.551781][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.566937][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.577419][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.607044][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.618614][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.636111][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.646212][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.680174][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.693289][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.701025][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.710162][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.718536][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.731484][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.747397][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.754531][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.764804][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.776451][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.783583][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.797788][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.835149][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.842636][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.868403][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.875594][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.893241][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.900329][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.913457][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.920585][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.929073][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.936122][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.947761][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.981052][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.003412][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.012948][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.020028][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.030010][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.038969][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.046032][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.073785][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.086393][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.096816][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.119837][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.130117][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.137159][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.147146][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.154204][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.174594][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.185031][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.228575][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.255231][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.288050][ T3307] veth0_vlan: entered promiscuous mode [ 30.308172][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.343182][ T3307] veth1_vlan: entered promiscuous mode [ 30.351207][ T3306] veth0_vlan: entered promiscuous mode [ 30.358363][ T3306] veth1_vlan: entered promiscuous mode [ 30.385684][ T3307] veth0_macvtap: entered promiscuous mode [ 30.400658][ T3307] veth1_macvtap: entered promiscuous mode [ 30.416337][ T3306] veth0_macvtap: entered promiscuous mode [ 30.427169][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.439926][ T3306] veth1_macvtap: entered promiscuous mode [ 30.468568][ T3304] veth0_vlan: entered promiscuous mode [ 30.475824][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.486481][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.498921][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.517142][ T3302] veth0_vlan: entered promiscuous mode [ 30.524661][ T3304] veth1_vlan: entered promiscuous mode [ 30.533277][ T3302] veth1_vlan: entered promiscuous mode [ 30.542276][ T2214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.556070][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.569310][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.592861][ T3302] veth0_macvtap: entered promiscuous mode [ 30.600097][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.608848][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.618213][ T3310] veth0_vlan: entered promiscuous mode [ 30.626824][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.628303][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.636844][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.660623][ T3310] veth1_vlan: entered promiscuous mode [ 30.671152][ T3302] veth1_macvtap: entered promiscuous mode [ 30.683422][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.696217][ T3310] veth0_macvtap: entered promiscuous mode [ 30.715113][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.722577][ T3473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.731726][ T3473] netem: change failed [ 30.738664][ T3310] veth1_macvtap: entered promiscuous mode [ 30.748342][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.756649][ T3304] veth0_macvtap: entered promiscuous mode [ 30.774401][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.784759][ T3304] veth1_macvtap: entered promiscuous mode [ 30.796201][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.812044][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.824565][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.837889][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.847646][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.858787][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.877394][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.910970][ T1432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.943361][ T1432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.964626][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.971762][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.016878][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.033201][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.081091][ T1432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.091940][ T1432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.102684][ T3497] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 31.123071][ T3489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.136863][ T3500] netlink: zone id is out of range [ 31.151209][ T3500] netlink: zone id is out of range [ 31.162137][ T1432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.187129][ T1432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.206624][ T1432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.218886][ T1432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237108][ T1432] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.247683][ T1432] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.258792][ T1432] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.315554][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 31.315568][ T29] audit: type=1400 audit(1756930988.461:142): avc: denied { create } for pid=3517 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.350326][ T29] audit: type=1400 audit(1756930988.491:143): avc: denied { create } for pid=3521 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.385062][ T29] audit: type=1400 audit(1756930988.501:144): avc: denied { connect } for pid=3521 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.404485][ T29] audit: type=1400 audit(1756930988.501:145): avc: denied { write } for pid=3521 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.423583][ T29] audit: type=1400 audit(1756930988.531:146): avc: denied { create } for pid=3523 comm="syz.1.22" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.479822][ T29] audit: type=1400 audit(1756930988.621:147): avc: denied { allowed } for pid=3531 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.512067][ T29] audit: type=1400 audit(1756930988.661:148): avc: denied { bind } for pid=3531 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.531377][ T29] audit: type=1400 audit(1756930988.661:149): avc: denied { listen } for pid=3531 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.579762][ T3533] netlink: 96 bytes leftover after parsing attributes in process `syz.0.25'. [ 31.614933][ T29] audit: type=1400 audit(1756930988.761:150): avc: denied { create } for pid=3538 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.648127][ T29] audit: type=1400 audit(1756930988.781:151): avc: denied { write } for pid=3538 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.436029][ T3599] loop1: detected capacity change from 0 to 8192 [ 32.444900][ T3599] ======================================================= [ 32.444900][ T3599] WARNING: The mand mount option has been deprecated and [ 32.444900][ T3599] and is ignored by this kernel. Remove the mand [ 32.444900][ T3599] option from the mount to silence this warning. [ 32.444900][ T3599] ======================================================= [ 33.260646][ T3619] netlink: 64 bytes leftover after parsing attributes in process `syz.0.64'. [ 33.387010][ T3631] pimreg: entered allmulticast mode [ 33.419247][ T3631] pimreg: left allmulticast mode [ 33.436483][ T3637] Zero length message leads to an empty skb [ 33.502801][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.511668][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.526415][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.545157][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.553997][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.566507][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.591925][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 34.245378][ T3485] syz.2.9 (3485) used greatest stack depth: 10880 bytes left [ 34.518639][ C0] hrtimer: interrupt took 25849 ns [ 34.559609][ T3771] loop1: detected capacity change from 0 to 512 [ 34.582446][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.630109][ T3771] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.717839][ T3788] netlink: 'syz.2.140': attribute type 29 has an invalid length. [ 34.731426][ T3788] netlink: 'syz.2.140': attribute type 29 has an invalid length. [ 34.732696][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.742138][ T3788] netlink: 'syz.2.140': attribute type 29 has an invalid length. [ 34.781336][ T3788] netlink: 'syz.2.140': attribute type 29 has an invalid length. [ 34.934028][ T3810] loop2: detected capacity change from 0 to 1024 [ 34.959289][ T3810] EXT4-fs: Ignoring removed nobh option [ 34.964955][ T3810] EXT4-fs: Ignoring removed bh option [ 35.031085][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.162441][ T3828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3828 comm=syz.1.158 [ 35.174997][ T3828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3828 comm=syz.1.158 [ 35.323106][ T3837] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.148: Allocating blocks 497-513 which overlap fs metadata [ 35.463241][ T3859] loop4: detected capacity change from 0 to 512 [ 35.495312][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.562130][ T3859] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.600105][ T3837] EXT4-fs (loop2): pa ffff888107235070: logic 48, phys. 177, len 21 [ 35.608113][ T3837] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 35.701442][ T3877] bridge0: entered promiscuous mode [ 35.710242][ T3877] macsec1: entered allmulticast mode [ 35.715630][ T3877] bridge0: entered allmulticast mode [ 35.718490][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.724401][ T3877] bridge0: port 3(macsec1) entered blocking state [ 35.736575][ T3877] bridge0: port 3(macsec1) entered disabled state [ 35.753514][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.766097][ T3877] bridge0: left allmulticast mode [ 35.771281][ T3877] bridge0: left promiscuous mode [ 35.882769][ T3901] netlink: 'syz.1.190': attribute type 21 has an invalid length. [ 35.890592][ T3901] __nla_validate_parse: 6 callbacks suppressed [ 35.890611][ T3901] netlink: 156 bytes leftover after parsing attributes in process `syz.1.190'. [ 35.918483][ T3906] syz.4.191: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 35.933137][ T3906] CPU: 1 UID: 0 PID: 3906 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.933162][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.933174][ T3906] Call Trace: [ 35.933180][ T3906] [ 35.933187][ T3906] __dump_stack+0x1d/0x30 [ 35.933207][ T3906] dump_stack_lvl+0xe8/0x140 [ 35.933302][ T3906] dump_stack+0x15/0x1b [ 35.933320][ T3906] warn_alloc+0x12b/0x1a0 [ 35.933356][ T3906] ? __list_add_valid_or_report+0x38/0xe0 [ 35.933385][ T3906] ? merge_sched_in+0x605/0xa60 [ 35.933405][ T3906] __vmalloc_node_range_noprof+0x9c/0xe00 [ 35.933447][ T3906] ? __rcu_read_unlock+0x4f/0x70 [ 35.933482][ T3906] ? avc_has_perm_noaudit+0x1b1/0x200 [ 35.933513][ T3906] ? should_fail_ex+0x30/0x280 [ 35.933546][ T3906] ? xskq_create+0x36/0xe0 [ 35.933577][ T3906] vmalloc_user_noprof+0x7d/0xb0 [ 35.933606][ T3906] ? xskq_create+0x80/0xe0 [ 35.933678][ T3906] xskq_create+0x80/0xe0 [ 35.933711][ T3906] xsk_init_queue+0x95/0xf0 [ 35.933746][ T3906] xsk_setsockopt+0x477/0x640 [ 35.933819][ T3906] ? __pfx_xsk_setsockopt+0x10/0x10 [ 35.933860][ T3906] __sys_setsockopt+0x181/0x200 [ 35.933905][ T3906] __x64_sys_setsockopt+0x64/0x80 [ 35.933927][ T3906] x64_sys_call+0x20ec/0x2ff0 [ 35.934038][ T3906] do_syscall_64+0xd2/0x200 [ 35.934068][ T3906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.934094][ T3906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.934128][ T3906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.934210][ T3906] RIP: 0033:0x7fb662deebe9 [ 35.934223][ T3906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.934240][ T3906] RSP: 002b:00007fb66184f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 35.934325][ T3906] RAX: ffffffffffffffda RBX: 00007fb663025fa0 RCX: 00007fb662deebe9 [ 35.934338][ T3906] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 35.934350][ T3906] RBP: 00007fb662e71e19 R08: 0000000000000004 R09: 0000000000000000 [ 35.934368][ T3906] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 35.934379][ T3906] R13: 00007fb663026038 R14: 00007fb663025fa0 R15: 00007ffe89862ad8 [ 35.934395][ T3906] [ 35.934406][ T3906] Mem-Info: [ 36.158641][ T3906] active_anon:5510 inactive_anon:2 isolated_anon:0 [ 36.158641][ T3906] active_file:8180 inactive_file:2211 isolated_file:0 [ 36.158641][ T3906] unevictable:28 dirty:1484 writeback:0 [ 36.158641][ T3906] slab_reclaimable:3101 slab_unreclaimable:13705 [ 36.158641][ T3906] mapped:29108 shmem:204 pagetables:1192 [ 36.158641][ T3906] sec_pagetables:0 bounce:0 [ 36.158641][ T3906] kernel_misc_reclaimable:0 [ 36.158641][ T3906] free:1897454 free_pcp:13538 free_cma:0 [ 36.203711][ T3906] Node 0 active_anon:22040kB inactive_anon:8kB active_file:32720kB inactive_file:8844kB unevictable:112kB isolated(anon):0kB isolated(file):0kB mapped:116432kB dirty:5936kB writeback:0kB shmem:816kB kernel_stack:3344kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 36.231138][ T3906] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 36.260063][ T3906] lowmem_reserve[]: 0 2883 7862 7862 [ 36.265428][ T3906] Node 0 DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 36.295785][ T3906] lowmem_reserve[]: 0 0 4978 4978 [ 36.300836][ T3906] Node 0 Normal free:4625164kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22040kB inactive_anon:8kB active_file:32720kB inactive_file:8844kB unevictable:112kB writepending:6052kB present:5242880kB managed:5098240kB mlocked:112kB bounce:0kB free_pcp:50620kB local_pcp:26024kB free_cma:0kB [ 36.333187][ T3906] lowmem_reserve[]: 0 0 0 0 [ 36.337773][ T3906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 36.350506][ T3906] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB [ 36.366787][ T3906] Node 0 Normal: 137*4kB (UME) 43*8kB (UE) 63*16kB (U) 34*32kB (UME) 20*64kB (U) 14*128kB (UE) 9*256kB (UE) 5*512kB (UE) 4*1024kB (UM) 1*2048kB (E) 1125*4096kB (UM) = 4625068kB [ 36.384704][ T3906] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 36.393995][ T3906] 10593 total pagecache pages [ 36.398649][ T3906] 3 pages in swap cache [ 36.402803][ T3906] Free swap = 124984kB [ 36.406943][ T3906] Total swap = 124996kB [ 36.411095][ T3906] 2097051 pages RAM [ 36.414963][ T3906] 0 pages HighMem/MovableOnly [ 36.419751][ T3906] 80445 pages reserved [ 36.471998][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 36.472065][ T29] audit: type=1400 audit(1756930993.621:356): avc: denied { watch watch_reads } for pid=3919 comm="syz.3.197" path="/36/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.585325][ T29] audit: type=1326 audit(1756930993.721:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.608666][ T29] audit: type=1326 audit(1756930993.721:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.631941][ T29] audit: type=1326 audit(1756930993.731:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.655222][ T29] audit: type=1326 audit(1756930993.731:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.678629][ T29] audit: type=1326 audit(1756930993.731:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.702025][ T29] audit: type=1326 audit(1756930993.731:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.725135][ T29] audit: type=1326 audit(1756930993.731:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.748680][ T29] audit: type=1326 audit(1756930993.731:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 36.772034][ T29] audit: type=1326 audit(1756930993.731:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 37.320266][ T4002] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 37.327938][ T4002] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.235'. [ 37.438931][ T4018] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 37.451425][ T4018] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 37.462219][ T4020] loop4: detected capacity change from 0 to 512 [ 37.478984][ T4018] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 37.500121][ T4022] loop1: detected capacity change from 0 to 1024 [ 37.507680][ T4020] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.526923][ T4020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 37.538296][ T4020] System zones: 1-12 [ 37.543340][ T4022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.559783][ T4022] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.569848][ T4020] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.243: corrupted in-inode xattr: e_value size too large [ 37.599471][ T4020] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.243: couldn't read orphan inode 15 (err -117) [ 37.612246][ T4022] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.244: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.619050][ T4020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.642658][ T4032] loop3: detected capacity change from 0 to 512 [ 37.672440][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.672438][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.685088][ T4032] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.739666][ T4032] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.752866][ T4032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.798263][ T4032] EXT4-fs (loop3): 1 truncate cleaned up [ 37.816585][ T4032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.844368][ T4050] loop4: detected capacity change from 0 to 1024 [ 37.851183][ T4050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.864192][ T4050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 37.872371][ T4050] System zones: 0-1, 3-36 [ 37.884041][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.926170][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.956888][ T4057] hub 2-0:1.0: USB hub found [ 37.980503][ T4057] hub 2-0:1.0: 8 ports detected [ 38.214580][ T4079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.415252][ T4090] Driver unsupported XDP return value 0 on prog (id 232) dev N/A, expect packet loss! [ 38.425885][ T4093] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 38.447637][ T4092] IPVS: stopping master sync thread 4093 ... [ 38.514865][ T4097] loop2: detected capacity change from 0 to 128 [ 38.538173][ T4097] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 38.546737][ T4097] FAT-fs (loop2): Filesystem has been set read-only [ 38.566010][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.659786][ T4106] syz.3.278 (4106) used greatest stack depth: 10704 bytes left [ 38.711677][ T4121] mmap: syz.3.285 (4121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.729121][ T4123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4123 comm=syz.2.288 [ 38.989881][ T4158] bridge_slave_0: left allmulticast mode [ 38.995561][ T4158] bridge_slave_0: left promiscuous mode [ 39.001223][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.011134][ T4158] bridge_slave_1: left allmulticast mode [ 39.016785][ T4158] bridge_slave_1: left promiscuous mode [ 39.022780][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.033297][ T4158] bond0: (slave bond_slave_0): Releasing backup interface [ 39.043827][ T4158] bond0: (slave bond_slave_1): Releasing backup interface [ 39.058223][ T4158] team0: Port device team_slave_0 removed [ 39.067400][ T4158] team0: Port device team_slave_1 removed [ 39.076656][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.084386][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.093954][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.101539][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.130635][ T4166] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 39.219627][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 39.228593][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 39.241591][ T4189] bridge0: port 3(macsec1) entered blocking state [ 39.248228][ T4189] bridge0: port 3(macsec1) entered disabled state [ 39.269512][ T4189] macsec1: entered allmulticast mode [ 39.294249][ T4189] macsec1: left allmulticast mode [ 39.360823][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 39.377984][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 39.392120][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 39.423542][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 39.433090][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 39.545089][ T4228] loop4: detected capacity change from 0 to 2048 [ 39.590004][ T3520] loop4: p4 < > [ 39.602739][ T4228] loop4: p4 < > [ 39.608197][ T2993] udevd[2993]: worker [3520] terminated by signal 33 (Unknown signal 33) [ 39.622172][ T2993] udevd[2993]: worker [3520] failed while handling '/devices/virtual/block/loop4' [ 39.639163][ T2993] loop4: p4 < > [ 40.144478][ T4263] pim6reg: entered allmulticast mode [ 40.152620][ T4263] pim6reg: left allmulticast mode [ 40.504570][ T4277] ip6tnl1: entered promiscuous mode [ 40.548983][ T4277] syz.0.350 (4277) used greatest stack depth: 10176 bytes left [ 41.548004][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 41.563930][ T4309] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 41.861521][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 41.861535][ T29] audit: type=1400 audit(1756930999.011:590): avc: denied { connect } for pid=4310 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.916282][ T29] audit: type=1400 audit(1756930999.041:591): avc: denied { read } for pid=4310 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 42.054319][ T29] audit: type=1400 audit(1756930999.201:592): avc: denied { mount } for pid=4324 comm="syz.1.369" name="/" dev="ramfs" ino=8328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.135079][ T29] audit: type=1400 audit(1756930999.281:593): avc: denied { write } for pid=4328 comm="syz.1.371" path="socket:[7391]" dev="sockfs" ino=7391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.247342][ T4339] netlink: 212 bytes leftover after parsing attributes in process `syz.0.376'. [ 42.293216][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 42.302315][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 42.523046][ T29] audit: type=1400 audit(1756930999.341:594): avc: denied { create } for pid=4335 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.542659][ T29] audit: type=1400 audit(1756930999.341:595): avc: denied { sys_admin } for pid=4335 comm="syz.4.365" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 42.637069][ T4369] loop4: detected capacity change from 0 to 512 [ 42.673880][ T29] audit: type=1400 audit(1756930999.821:596): avc: denied { create } for pid=4371 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.697149][ T4372] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.707716][ T4372] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 42.735936][ T4369] EXT4-fs (loop4): too many log groups per flexible block group [ 42.744020][ T4369] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 42.753537][ T4372] openvswitch: netlink: Message has 6 unknown bytes. [ 42.760277][ T29] audit: type=1400 audit(1756930999.841:597): avc: denied { write } for pid=4371 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.769480][ T4369] EXT4-fs (loop4): mount failed [ 42.815524][ T4384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4384 comm=syz.2.395 [ 42.867668][ T4390] team_slave_0: entered promiscuous mode [ 42.873400][ T4390] team_slave_1: entered promiscuous mode [ 42.883521][ T4390] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 42.889434][ T29] audit: type=1400 audit(1756931000.031:598): avc: denied { read write } for pid=4391 comm="syz.2.399" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.905970][ T4390] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 42.913641][ T29] audit: type=1400 audit(1756931000.031:599): avc: denied { open } for pid=4391 comm="syz.2.399" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.954803][ T3412] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 42.962302][ T3412] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 42.989677][ T3412] hid-generic 0000:0003:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 43.314701][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 43.323565][ T4414] netlink: 'syz.3.407': attribute type 15 has an invalid length. [ 43.341453][ T4414] vxlan0: entered promiscuous mode [ 43.356738][ T1432] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.365842][ T1432] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.387027][ T1432] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.408485][ T1432] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.763406][ T4461] loop2: detected capacity change from 0 to 512 [ 44.772189][ T4461] EXT4-fs: Ignoring removed oldalloc option [ 44.799018][ T4461] EXT4-fs (loop2): 1 truncate cleaned up [ 44.815573][ T4461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.852602][ T4469] : renamed from bond0 (while UP) [ 44.965232][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.989167][ T4481] netlink: 'syz.3.437': attribute type 39 has an invalid length. [ 45.010711][ T4483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.299734][ T4523] 9pnet_fd: Insufficient options for proto=fd [ 45.323922][ T4529] syz.0.457 uses obsolete (PF_INET,SOCK_PACKET) [ 45.325468][ T10] IPVS: starting estimator thread 0... [ 45.352630][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 45.365390][ T4538] netlink: 376 bytes leftover after parsing attributes in process `syz.0.461'. [ 45.424041][ T4532] IPVS: using max 2928 ests per chain, 146400 per kthread [ 45.451292][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 45.462367][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 45.472936][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 45.481968][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 45.493487][ T4558] macvtap0: refused to change device tx_queue_len [ 45.685692][ T4579] loop2: detected capacity change from 0 to 512 [ 45.710152][ T4579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.730802][ T4579] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.744417][ T4579] EXT4-fs (loop2): 1 truncate cleaned up [ 45.753230][ T4579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.810703][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.889117][ T4598] loop4: detected capacity change from 0 to 1024 [ 45.897152][ T4598] EXT4-fs: Ignoring removed nobh option [ 45.902805][ T4598] EXT4-fs: Ignoring removed bh option [ 45.911568][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.954611][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.001486][ T4606] loop4: detected capacity change from 0 to 512 [ 46.014693][ T4606] EXT4-fs: Ignoring removed oldalloc option [ 46.022373][ T4606] EXT4-fs (loop4): 1 truncate cleaned up [ 46.028465][ T4606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.112755][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.406480][ T4640] loop1: detected capacity change from 0 to 512 [ 46.431555][ T4640] EXT4-fs: Ignoring removed oldalloc option [ 46.446534][ T4640] EXT4-fs (loop1): 1 truncate cleaned up [ 46.452812][ T4640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.550502][ T4657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.610493][ T4665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4665 comm=syz.4.512 [ 46.652021][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.706703][ T4670] loop3: detected capacity change from 0 to 8192 [ 46.750578][ T4670] loop3: p1 p2 p3 p4 [ 46.754723][ T4670] loop3: p1 start 51379968 is beyond EOD, truncated [ 46.783109][ T4670] loop3: p3 size 15991040 extends beyond EOD, truncated [ 46.807772][ T4670] loop3: p4 start 16711680 is beyond EOD, truncated [ 46.895475][ T4697] loop3: detected capacity change from 0 to 512 [ 46.908391][ T4698] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.939429][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 46.939454][ T29] audit: type=1326 audit(1756931004.081:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 46.960803][ T4697] EXT4-fs: Ignoring removed oldalloc option [ 46.968977][ T29] audit: type=1326 audit(1756931004.081:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 46.998230][ T29] audit: type=1326 audit(1756931004.081:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ec6df14a5 code=0x7ffc0000 [ 47.021450][ T29] audit: type=1326 audit(1756931004.081:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.044762][ T29] audit: type=1326 audit(1756931004.081:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.045531][ T4697] EXT4-fs (loop3): 1 truncate cleaned up [ 47.068127][ T29] audit: type=1326 audit(1756931004.081:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.075977][ T4697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.096967][ T29] audit: type=1326 audit(1756931004.081:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.096993][ T29] audit: type=1326 audit(1756931004.081:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.155936][ T29] audit: type=1326 audit(1756931004.081:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.179181][ T29] audit: type=1326 audit(1756931004.081:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 47.238350][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.293308][ T4717] netlink: 'syz.1.534': attribute type 2 has an invalid length. [ 47.301011][ T4717] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 47.308647][ T4717] __nla_validate_parse: 9 callbacks suppressed [ 47.308658][ T4717] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.534'. [ 47.451782][ T4729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4729 comm=syz.1.538 [ 47.466455][ T4729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.538'. [ 47.524301][ T4736] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.541259][ T4733] loop2: detected capacity change from 0 to 128 [ 47.549283][ T4733] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.562330][ T4733] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.579598][ T4734] loop3: detected capacity change from 0 to 4096 [ 47.645459][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.689250][ T4734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.785021][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.832513][ T4758] geneve0: entered allmulticast mode [ 47.882349][ T4760] pim6reg1: entered promiscuous mode [ 47.887708][ T4760] pim6reg1: entered allmulticast mode [ 47.984469][ T4776] loop3: detected capacity change from 0 to 512 [ 48.011741][ T4776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.031827][ T4776] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.104087][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.390251][ T4830] loop4: detected capacity change from 0 to 128 [ 48.419188][ T4830] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.459625][ T4830] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.637551][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.767007][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 49.136430][ T4946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4946 comm=syz.2.605 [ 49.154003][ T4947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.603'. [ 49.225836][ T4953] tipc: Started in network mode [ 49.230780][ T4953] tipc: Node identity 42ae3f9e51c1, cluster identity 4711 [ 49.237996][ T4953] tipc: Enabled bearer , priority 0 [ 49.266501][ T4953] tipc: Disabling bearer [ 49.274906][ T4955] netlink: 388 bytes leftover after parsing attributes in process `syz.2.609'. [ 49.322091][ T4957] pim6reg1: entered promiscuous mode [ 49.327391][ T4957] pim6reg1: entered allmulticast mode [ 49.790413][ T4974] netlink: 96 bytes leftover after parsing attributes in process `syz.4.618'. [ 49.852115][ T4987] loop4: detected capacity change from 0 to 1024 [ 49.872381][ T4987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.885291][ T4987] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.898031][ T4987] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.624: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.912707][ T4987] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.624: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.926854][ T4987] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 49.939151][ T4987] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.939151][ T4987] [ 49.953980][ T4987] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.624: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.988684][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.138786][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 50.147755][ T5026] netlink: 'syz.4.639': attribute type 18 has an invalid length. [ 50.159801][ T1432] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.159812][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 50.159841][ T1432] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.168535][ T5026] netlink: 'syz.4.639': attribute type 18 has an invalid length. [ 50.178676][ T1432] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.202751][ T1432] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.217010][ T5029] netlink: 96 bytes leftover after parsing attributes in process `syz.0.640'. [ 50.305307][ T5039] loop3: detected capacity change from 0 to 512 [ 50.340856][ T5039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.355971][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.357430][ T5039] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.363264][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.398406][ T5035] team_slave_0: left promiscuous mode [ 50.404056][ T5035] team_slave_1: left promiscuous mode [ 50.414390][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.440745][ T5056] loop1: detected capacity change from 0 to 128 [ 50.575035][ T5035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.597119][ T5035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.860238][ T4922] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.869266][ T4922] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.966590][ T4922] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.975610][ T4922] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.021482][ T4922] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.030466][ T4922] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.085760][ T4922] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.094674][ T4922] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.222556][ T5121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.671'. [ 51.274985][ T5129] unsupported nla_type 52263 [ 51.330751][ T5127] loop1: detected capacity change from 0 to 4096 [ 51.338081][ T5127] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.480343][ T5127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.502781][ T5153] SELinux: failed to load policy [ 51.515248][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.642326][ T9] Process accounting resumed [ 51.690718][ T5189] rdma_op ffff88811a724d80 conn xmit_rdma 0000000000000000 [ 51.728994][ T5193] loop2: detected capacity change from 0 to 2048 [ 51.810514][ T5193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.827886][ T5193] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.971451][ T5193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.703: bg 0: block 345: padding at end of block bitmap is not set [ 52.009079][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 52.009092][ T29] audit: type=1400 audit(1756931009.151:950): avc: denied { create } for pid=5208 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.042524][ T29] audit: type=1400 audit(1756931009.191:951): avc: denied { write } for pid=5208 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.069948][ T4927] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 52.082421][ T4927] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.082421][ T4927] [ 52.086450][ T5214] loop3: detected capacity change from 0 to 1024 [ 52.092086][ T4927] EXT4-fs (loop2): Total free blocks count 0 [ 52.104424][ T4927] EXT4-fs (loop2): Free/Dirty block details [ 52.110382][ T4927] EXT4-fs (loop2): free_blocks=0 [ 52.115306][ T4927] EXT4-fs (loop2): dirty_blocks=16 [ 52.120433][ T4927] EXT4-fs (loop2): Block reservation details [ 52.126403][ T4927] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 52.173286][ T29] audit: type=1326 audit(1756931009.321:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.210674][ T29] audit: type=1326 audit(1756931009.351:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.233935][ T29] audit: type=1326 audit(1756931009.351:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.257232][ T29] audit: type=1326 audit(1756931009.351:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.280540][ T29] audit: type=1326 audit(1756931009.351:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.303775][ T29] audit: type=1326 audit(1756931009.351:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.327092][ T29] audit: type=1326 audit(1756931009.351:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525ebebe9 code=0x7ffc0000 [ 52.360196][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.361896][ T5214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.390739][ T5214] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.462952][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.590510][ T5239] loop3: detected capacity change from 0 to 1024 [ 52.591995][ T5241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5241 comm=syz.2.721 [ 52.614011][ T5239] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 52.623503][ T5239] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.723: Failed to acquire dquot type 0 [ 52.639972][ T5241] __nla_validate_parse: 6 callbacks suppressed [ 52.639988][ T5241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.721'. [ 52.655644][ T5239] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 52.674262][ T5239] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.723: corrupted inode contents [ 52.686875][ T5239] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.723: mark_inode_dirty error [ 52.687037][ T5239] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.723: corrupted inode contents [ 52.687118][ T5239] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.723: mark_inode_dirty error [ 52.687231][ T5239] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.723: corrupted inode contents [ 52.687301][ T5239] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 52.687499][ T5239] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.723: corrupted inode contents [ 52.687664][ T5239] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.723: mark_inode_dirty error [ 52.687772][ T5239] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 52.688156][ T5239] EXT4-fs (loop3): 1 truncate cleaned up [ 52.688509][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.703595][ T5239] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.786688][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.932213][ T5274] loop4: detected capacity change from 0 to 512 [ 52.938790][ T5274] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 52.948789][ T5274] EXT4-fs (loop4): 1 truncate cleaned up [ 52.955248][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.089261][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 53.800272][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.030793][ T5357] loop1: detected capacity change from 0 to 512 [ 54.044518][ T5357] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 54.058930][ T5359] loop4: detected capacity change from 0 to 1024 [ 54.067104][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 54.076891][ T5362] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 54.087271][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 54.097443][ T5357] EXT4-fs (loop1): 1 truncate cleaned up [ 54.113791][ T5359] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.775: Failed to acquire dquot type 0 [ 54.125868][ T5357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.139964][ T5359] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 54.205122][ T5359] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.775: corrupted inode contents [ 54.249063][ T5359] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.775: mark_inode_dirty error [ 54.274806][ T5359] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.775: corrupted inode contents [ 54.310325][ T5359] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.775: mark_inode_dirty error [ 54.345677][ T5379] bridge: RTM_NEWNEIGH with invalid ether address [ 54.361038][ T5359] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.775: corrupted inode contents [ 54.380337][ T5359] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 54.402281][ T5359] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.775: corrupted inode contents [ 54.425735][ T5359] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.775: mark_inode_dirty error [ 54.437939][ T5359] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 54.467215][ T5359] EXT4-fs (loop4): 1 truncate cleaned up [ 54.475967][ T5359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.494229][ T5359] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.526694][ T5392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.786'. [ 54.539894][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.749053][ T5402] loop9: detected capacity change from 0 to 7 [ 54.787687][ T5402] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.797850][ T5402] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.798770][ T5409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5409 comm=syz.0.794 [ 54.805741][ T5402] loop9: unable to read partition table [ 54.824286][ T5402] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 54.824286][ T5402] ) failed (rc=-5) [ 54.827355][ T5409] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 54.865625][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.886663][ T5409] bond1: (slave bridge2): making interface the new active one [ 54.899894][ T5409] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 55.187211][ T5390] syz.3.780 (5390) used greatest stack depth: 7304 bytes left [ 55.483338][ T5476] netlink: 96 bytes leftover after parsing attributes in process `syz.2.825'. [ 55.563690][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.571338][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.578746][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.586210][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.593705][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.601158][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.608821][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.616355][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.623944][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.631348][ T3470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.643447][ T5493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.833'. [ 55.653003][ T3470] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 55.684696][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 55.710938][ T5503] random: crng reseeded on system resumption [ 56.365961][ T5538] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.378256][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 56.387192][ T5538] bridge_slave_1: left allmulticast mode [ 56.392982][ T5538] bridge_slave_1: left promiscuous mode [ 56.398606][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.406605][ T5538] bridge_slave_0: left allmulticast mode [ 56.412348][ T5538] bridge_slave_0: left promiscuous mode [ 56.418084][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.578596][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 56.755557][ T47] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 57.012997][ T5609] loop3: detected capacity change from 0 to 128 [ 57.021037][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 57.021051][ T29] audit: type=1400 audit(1756931014.171:1072): avc: denied { mounton } for pid=5608 comm="syz.3.883" path="/163/file0/file0" dev="loop3" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 57.123569][ T5617] bond0: entered promiscuous mode [ 57.128695][ T5617] bond_slave_0: entered promiscuous mode [ 57.134549][ T5617] bond_slave_1: entered promiscuous mode [ 57.145707][ T5617] dummy0: entered promiscuous mode [ 57.152836][ T5617] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 57.153679][ T5622] loop1: detected capacity change from 0 to 1024 [ 57.162844][ T5617] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 57.163203][ T5617] hsr1: entered promiscuous mode [ 57.184108][ T5617] hsr1: entered allmulticast mode [ 57.189139][ T5617] bond0: entered allmulticast mode [ 57.194323][ T5617] bond_slave_0: entered allmulticast mode [ 57.200163][ T5617] bond_slave_1: entered allmulticast mode [ 57.207493][ T5617] dummy0: entered allmulticast mode [ 57.213941][ T5622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.237072][ T5622] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.327013][ T5639] syz.3.894 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.358975][ T29] audit: type=1400 audit(1756931014.501:1073): avc: denied { nlmsg_write } for pid=5640 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.363483][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.379686][ T29] audit: type=1107 audit(1756931014.501:1074): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 57.483838][ T5657] loop2: detected capacity change from 0 to 128 [ 57.521647][ T5661] hub 9-0:1.0: USB hub found [ 57.526160][ T5061] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 57.526514][ T5661] hub 9-0:1.0: 8 ports detected [ 57.607964][ T29] audit: type=1326 audit(1756931014.751:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5670 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 57.631333][ T29] audit: type=1326 audit(1756931014.751:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5670 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 57.654727][ T29] audit: type=1326 audit(1756931014.751:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5670 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 57.677974][ T29] audit: type=1326 audit(1756931014.751:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ec6df14a5 code=0x7ffc0000 [ 57.701325][ T29] audit: type=1326 audit(1756931014.751:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5670 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 57.703902][ T5681] netlink: zone id is out of range [ 57.724655][ T29] audit: type=1326 audit(1756931014.751:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5670 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 57.741304][ T5681] netlink: zone id is out of range [ 57.753157][ T29] audit: type=1326 audit(1756931014.751:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5670 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ec6dbd84a code=0x7ffc0000 [ 57.781494][ T5681] netlink: zone id is out of range [ 57.786592][ T5681] netlink: zone id is out of range [ 57.791795][ T5681] netlink: zone id is out of range [ 57.797003][ T5681] netlink: zone id is out of range [ 57.802140][ T5681] netlink: zone id is out of range [ 57.807268][ T5681] netlink: zone id is out of range [ 57.812423][ T5681] netlink: zone id is out of range [ 57.817538][ T5681] netlink: zone id is out of range [ 57.895338][ T5690] vlan2: entered allmulticast mode [ 57.900520][ T5690] bridge_slave_0: entered allmulticast mode [ 57.988438][ T5707] loop4: detected capacity change from 0 to 128 [ 58.096709][ T5732] __nla_validate_parse: 4 callbacks suppressed [ 58.096725][ T5732] netlink: 148 bytes leftover after parsing attributes in process `syz.1.936'. [ 58.205062][ T5746] loop1: detected capacity change from 0 to 128 [ 58.256345][ T5754] bond0: entered promiscuous mode [ 58.263269][ T5754] dummy0: entered promiscuous mode [ 58.270424][ T5754] debugfs: 'hsr1' already exists in 'hsr' [ 58.276153][ T5754] Cannot create hsr debugfs directory [ 58.285066][ T5752] SELinux: ebitmap: truncated map [ 58.292165][ T5752] SELinux: failed to load policy [ 58.297288][ T5754] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 58.323315][ T5754] hsr1: entered promiscuous mode [ 58.328351][ T5754] hsr1: entered allmulticast mode [ 58.333508][ T5754] bond0: entered allmulticast mode [ 58.347051][ T5761] loop2: detected capacity change from 0 to 164 [ 58.356193][ T5754] dummy0: entered allmulticast mode [ 58.362732][ T5761] syz.2.951: attempt to access beyond end of device [ 58.362732][ T5761] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 58.376794][ T5761] syz.2.951: attempt to access beyond end of device [ 58.376794][ T5761] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 58.396372][ T5763] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.410006][ T5763] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.533820][ T5791] bond0: entered promiscuous mode [ 58.538884][ T5791] bond_slave_0: entered promiscuous mode [ 58.544706][ T5791] bond_slave_1: entered promiscuous mode [ 58.552737][ T5791] dummy0: entered promiscuous mode [ 58.558122][ T5791] debugfs: 'hsr1' already exists in 'hsr' [ 58.563900][ T5791] Cannot create hsr debugfs directory [ 58.577017][ T5791] hsr1: entered promiscuous mode [ 58.582157][ T5791] hsr1: entered allmulticast mode [ 58.587192][ T5791] bond0: entered allmulticast mode [ 58.592340][ T5791] bond_slave_0: entered allmulticast mode [ 58.598091][ T5791] bond_slave_1: entered allmulticast mode [ 58.604123][ T5791] dummy0: entered allmulticast mode [ 58.654182][ T5802] rdma_op ffff88811cbad980 conn xmit_rdma 0000000000000000 [ 58.756727][ T5813] netlink: 7 bytes leftover after parsing attributes in process `syz.2.974'. [ 58.766153][ T5813] netlink: 7 bytes leftover after parsing attributes in process `syz.2.974'. [ 58.865981][ T5824] netlink: 96 bytes leftover after parsing attributes in process `syz.2.978'. [ 58.888601][ T5826] loop2: detected capacity change from 0 to 1024 [ 58.896332][ T5826] EXT4-fs: Ignoring removed nobh option [ 58.902287][ T5826] EXT4-fs: Ignoring removed bh option [ 58.908097][ T5826] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.921481][ T5826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.358956][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 59.433659][ T5848] vlan2: entered allmulticast mode [ 59.501833][ T5861] loop3: detected capacity change from 0 to 128 [ 59.509833][ T5861] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.522653][ T5861] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.577593][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.686228][ T5885] vlan2: entered allmulticast mode [ 59.691498][ T5885] bridge_slave_0: entered allmulticast mode [ 59.740761][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.928544][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 59.940646][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 59.956055][ T5926] bridge0: entered promiscuous mode [ 59.962196][ T5926] bridge0: port 1(macsec1) entered blocking state [ 59.968657][ T5926] bridge0: port 1(macsec1) entered disabled state [ 59.996479][ T5926] macsec1: entered allmulticast mode [ 60.001834][ T5926] bridge0: entered allmulticast mode [ 60.083113][ T5926] macsec1: left allmulticast mode [ 60.088263][ T5926] bridge0: left allmulticast mode [ 60.105403][ T5926] bridge0: left promiscuous mode [ 60.126811][ T5935] netlink: 'syz.3.1022': attribute type 4 has an invalid length. [ 60.160417][ T5935] netlink: 'syz.3.1022': attribute type 4 has an invalid length. [ 60.240294][ T5945] loop3: detected capacity change from 0 to 512 [ 60.260767][ T5945] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.283418][ T5945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 60.304250][ T5945] System zones: 1-12 [ 60.314682][ T5945] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1026: corrupted in-inode xattr: e_value size too large [ 60.341341][ T5945] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1026: couldn't read orphan inode 15 (err -117) [ 60.408294][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.510153][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.540625][ T5969] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 60.548413][ T5969] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 60.556193][ T5969] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1035'. [ 60.640526][ T5969] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 60.648307][ T5969] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 60.656170][ T5969] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1035'. [ 60.877600][ T5986] pim6reg: entered allmulticast mode [ 60.922372][ T5986] pim6reg: left allmulticast mode [ 61.150763][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1048'. [ 61.402322][ T6028] loop1: detected capacity change from 0 to 164 [ 61.423057][ T6028] syz.1.1058: attempt to access beyond end of device [ 61.423057][ T6028] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 61.452275][ T6030] netem: change failed [ 61.496097][ T6028] syz.1.1058: attempt to access beyond end of device [ 61.496097][ T6028] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 61.624960][ T6050] bridge0: port 3(syz_tun) entered blocking state [ 61.631669][ T6050] bridge0: port 3(syz_tun) entered disabled state [ 61.659484][ T6050] syz_tun: entered allmulticast mode [ 61.667607][ T6050] syz_tun: entered promiscuous mode [ 61.701452][ T6050] syz_tun: left allmulticast mode [ 61.706500][ T6050] syz_tun: left promiscuous mode [ 61.711675][ T6050] bridge0: port 3(syz_tun) entered disabled state [ 61.731779][ T6052] infiniband syz!: set down [ 61.736303][ T6052] infiniband syz!: added team_slave_0 [ 61.751589][ T6052] RDS/IB: syz!: added [ 61.755690][ T6052] smc: adding ib device syz! with port count 1 [ 61.762744][ T6052] smc: ib device syz! port 1 has pnetid [ 61.769537][ T6050] bridge_slave_0: left allmulticast mode [ 61.775179][ T6050] bridge_slave_0: left promiscuous mode [ 61.781008][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.820375][ T6050] bridge_slave_1: left allmulticast mode [ 61.826077][ T6050] bridge_slave_1: left promiscuous mode [ 61.831855][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.862685][ T6050] bond0: (slave bond_slave_0): Releasing backup interface [ 61.880841][ T6050] bond0: (slave bond_slave_1): Releasing backup interface [ 61.902125][ T6050] team0: Port device team_slave_0 removed [ 61.911523][ T6050] team0: Port device team_slave_1 removed [ 61.917587][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.929836][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.012589][ T9] hid_parser_main: 76 callbacks suppressed [ 62.012667][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.025892][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.033296][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.073058][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.080516][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.087961][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.095400][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.102842][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.110280][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.117655][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.127843][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 62.149313][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 62.155653][ T29] audit: type=1326 audit(1756931019.291:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc83ebe9 code=0x7ffc0000 [ 62.218202][ T6071] loop2: detected capacity change from 0 to 164 [ 62.226628][ T6071] syz.2.1078: attempt to access beyond end of device [ 62.226628][ T6071] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.246620][ T6071] syz.2.1078: attempt to access beyond end of device [ 62.246620][ T6071] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.299851][ T29] audit: type=1326 audit(1756931019.301:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9fc83ebe9 code=0x7ffc0000 [ 62.323316][ T29] audit: type=1326 audit(1756931019.301:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc83ebe9 code=0x7ffc0000 [ 62.347293][ T29] audit: type=1326 audit(1756931019.301:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fc9fc83ebe9 code=0x7ffc0000 [ 62.370620][ T29] audit: type=1326 audit(1756931019.301:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc83ebe9 code=0x7ffc0000 [ 62.394097][ T29] audit: type=1326 audit(1756931019.301:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc83ebe9 code=0x7ffc0000 [ 62.417578][ T29] audit: type=1400 audit(1756931019.341:1302): avc: denied { map } for pid=6067 comm="syz.2.1076" path="socket:[12963]" dev="sockfs" ino=12963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.441860][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.473643][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.493373][ T29] audit: type=1400 audit(1756931019.591:1303): avc: denied { read write } for pid=6079 comm="syz.1.1082" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.496171][ T6084] geneve0: entered allmulticast mode [ 62.516987][ T29] audit: type=1400 audit(1756931019.591:1304): avc: denied { open } for pid=6079 comm="syz.1.1082" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.517016][ T29] audit: type=1400 audit(1756931019.591:1305): avc: denied { ioctl } for pid=6079 comm="syz.1.1082" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.592324][ T6084] geneve0: entered promiscuous mode [ 62.682007][ T6083] geneve0: left promiscuous mode [ 62.687044][ T6083] geneve0: left allmulticast mode [ 63.030167][ T6122] geneve0: entered allmulticast mode [ 63.035738][ T6122] geneve0: entered promiscuous mode [ 63.105067][ T6133] loop2: detected capacity change from 0 to 512 [ 63.113149][ T6133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.131304][ T6121] geneve0: left promiscuous mode [ 63.131353][ T6133] EXT4-fs (loop2): 1 truncate cleaned up [ 63.136340][ T6121] geneve0: left allmulticast mode [ 63.143562][ T6133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.182983][ T6133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.194200][ T6146] __nla_validate_parse: 4 callbacks suppressed [ 63.194216][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 63.258841][ T6153] loop4: detected capacity change from 0 to 2048 [ 63.283876][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 63.288512][ T6153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.369060][ T6166] veth1_macvtap: left promiscuous mode [ 63.381016][ T3310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 63.387571][ T6166] macsec0: entered promiscuous mode [ 63.412003][ T3310] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.446051][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.471323][ T6171] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1119'. [ 63.474531][ T6173] geneve0: entered promiscuous mode [ 63.533106][ T6171] 0{X: renamed from gretap0 [ 63.550195][ T6171] 0{X: entered allmulticast mode [ 63.560067][ T6171] net_ratelimit: 340 callbacks suppressed [ 63.560080][ T6171] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 63.601816][ T6172] geneve0: left promiscuous mode [ 63.651097][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1127'. [ 63.754189][ T6205] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1135'. [ 63.789191][ T6205] batadv1: entered promiscuous mode [ 63.794645][ T6205] batadv1: entered allmulticast mode [ 63.842255][ T6212] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1138'. [ 63.860713][ T6212] 0{X: renamed from gretap0 (while UP) [ 63.900268][ T6212] 0{X: entered allmulticast mode [ 63.913450][ T6212] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 63.943602][ T6216] loop2: detected capacity change from 0 to 764 [ 63.970455][ T6216] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.058306][ T6233] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1149'. [ 64.076087][ T6235] bridge0: port 1(syz_tun) entered blocking state [ 64.082638][ T6235] bridge0: port 1(syz_tun) entered disabled state [ 64.102161][ T6235] syz_tun: entered allmulticast mode [ 64.109301][ T6235] syz_tun: entered promiscuous mode [ 64.125156][ T6235] bridge0: port 1(syz_tun) entered blocking state [ 64.131765][ T6235] bridge0: port 1(syz_tun) entered forwarding state [ 64.178913][ T6244] syz_tun: left allmulticast mode [ 64.184030][ T6244] syz_tun: left promiscuous mode [ 64.189060][ T6244] bridge0: port 1(syz_tun) entered disabled state [ 64.198986][ T6246] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1153'. [ 64.237641][ T6246] 0{X: renamed from gretap0 [ 64.246023][ T6246] 0{X: entered allmulticast mode [ 64.253572][ T6246] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 64.431628][ T6264] loop1: detected capacity change from 0 to 164 [ 64.453707][ T6264] syz.1.1161: attempt to access beyond end of device [ 64.453707][ T6264] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.483681][ T6264] syz.1.1161: attempt to access beyond end of device [ 64.483681][ T6264] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.781976][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1174'. [ 64.835216][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1178'. [ 64.890803][ T6307] loop4: detected capacity change from 0 to 512 [ 64.898102][ T6307] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 64.922502][ T6307] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.938026][ T6307] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.1179: corrupted inode contents [ 64.952779][ T6307] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.1179: mark_inode_dirty error [ 64.965005][ T6307] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1179: invalid indirect mapped block 1 (level 1) [ 64.980957][ T6307] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.1179: corrupted inode contents [ 64.993317][ T6307] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 65.004653][ T6307] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.1179: corrupted inode contents [ 65.016980][ T6307] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.1179: mark_inode_dirty error [ 65.030757][ T6307] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 65.052928][ T6307] EXT4-fs (loop4): 1 truncate cleaned up [ 65.071407][ T6307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.125551][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.660041][ T6406] capability: warning: `syz.1.1216' uses deprecated v2 capabilities in a way that may be insecure [ 65.689591][ T6410] 0{X: renamed from gretap0 (while UP) [ 65.697090][ T6410] 0{X: entered allmulticast mode [ 65.704083][ T6410] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 65.966715][ T6448] loop4: detected capacity change from 0 to 512 [ 65.986773][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.009880][ T6448] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.022508][ T6448] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1244: corrupted inode contents [ 66.035139][ T6448] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1244: mark_inode_dirty error [ 66.046704][ T6448] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1244: corrupted inode contents [ 66.058868][ T6448] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1244: mark_inode_dirty error [ 66.082661][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.157789][ T6458] 0{X: renamed from gretap0 (while UP) [ 66.182825][ T6458] 0{X: entered allmulticast mode [ 66.189293][ T6458] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 66.410765][ T6501] 1{X: renamed from 30{X (while UP) [ 66.436431][ T6501] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 66.601240][ T6530] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 66.603976][ T6528] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 66.635903][ T6528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.716487][ T6528] bond2 (unregistering): Released all slaves [ 66.753735][ T6534] 1{X: renamed from 30{X (while UP) [ 66.771201][ T6534] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 66.822535][ T6521] Set syz1 is full, maxelem 65536 reached [ 66.918426][ T6560] loop4: detected capacity change from 0 to 512 [ 66.956025][ T6560] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1281: casefold flag without casefold feature [ 66.973287][ T6560] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1281: couldn't read orphan inode 15 (err -117) [ 66.988397][ T6560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.005519][ T6560] EXT4-fs (loop4): shut down requested (0) [ 67.064527][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.126963][ T6580] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 67.154062][ T6578] loop4: detected capacity change from 0 to 4096 [ 67.170257][ T6578] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.184350][ T6578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.218972][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 67.218986][ T29] audit: type=1326 audit(1756931024.361:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec6db5ba7 code=0x7ffc0000 [ 67.275502][ T29] audit: type=1326 audit(1756931024.361:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ec6d5adb9 code=0x7ffc0000 [ 67.298866][ T29] audit: type=1326 audit(1756931024.361:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec6db5ba7 code=0x7ffc0000 [ 67.322520][ T29] audit: type=1326 audit(1756931024.361:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ec6d5adb9 code=0x7ffc0000 [ 67.345984][ T29] audit: type=1326 audit(1756931024.361:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 67.369544][ T29] audit: type=1326 audit(1756931024.371:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 67.392997][ T29] audit: type=1326 audit(1756931024.371:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec6dbebe9 code=0x7ffc0000 [ 67.416491][ T29] audit: type=1326 audit(1756931024.371:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec6db5ba7 code=0x7ffc0000 [ 67.439839][ T29] audit: type=1326 audit(1756931024.371:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ec6d5adb9 code=0x7ffc0000 [ 67.463361][ T29] audit: type=1326 audit(1756931024.371:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ec6db5ba7 code=0x7ffc0000 [ 67.495888][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.665659][ T6617] rdma_op ffff88811bfb4580 conn xmit_rdma 0000000000000000 [ 67.674518][ T6598] SELinux: failed to load policy [ 67.906752][ T6647] loop1: detected capacity change from 0 to 1024 [ 67.928762][ T6650] random: crng reseeded on system resumption [ 67.937601][ T6647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.964676][ T6650] Restarting kernel threads ... [ 67.980264][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.989498][ T6650] Done restarting kernel threads. [ 68.218047][ T6661] loop1: detected capacity change from 0 to 256 [ 68.244144][ T6661] FAT-fs (loop1): Directory bread(block 64) failed [ 68.259739][ T6661] FAT-fs (loop1): Directory bread(block 65) failed [ 68.266350][ T6661] FAT-fs (loop1): Directory bread(block 66) failed [ 68.276436][ T6661] FAT-fs (loop1): Directory bread(block 67) failed [ 68.289574][ T6661] FAT-fs (loop1): Directory bread(block 68) failed [ 68.296096][ T6661] FAT-fs (loop1): Directory bread(block 69) failed [ 68.304453][ T6661] FAT-fs (loop1): Directory bread(block 70) failed [ 68.315529][ T6661] FAT-fs (loop1): Directory bread(block 71) failed [ 68.323210][ T6661] FAT-fs (loop1): Directory bread(block 72) failed [ 68.329898][ T6661] FAT-fs (loop1): Directory bread(block 73) failed [ 68.347953][ T6661] syz.1.1326: attempt to access beyond end of device [ 68.347953][ T6661] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 68.434711][ T6677] loop3: detected capacity change from 0 to 512 [ 68.441766][ T6677] EXT4-fs: Ignoring removed nobh option [ 68.449627][ T6677] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.458971][ T6677] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.466342][ T6677] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1333: bad orphan inode 15 [ 68.476797][ T6682] netlink: 'syz.0.1335': attribute type 27 has an invalid length. [ 68.485206][ T6677] ext4_test_bit(bit=14, block=18) = 1 [ 68.490628][ T6677] is_bad_inode(inode)=0 [ 68.494845][ T6677] NEXT_ORPHAN(inode)=1023 [ 68.499169][ T6677] max_ino=32 [ 68.502447][ T6677] i_nlink=0 [ 68.512527][ T6677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1333: bg 0: block 161: padding at end of block bitmap is not set [ 68.526858][ T6682] 1{X: left allmulticast mode [ 68.533220][ T6677] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 68.545577][ T6677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.571350][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.578630][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.647467][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.675137][ T5050] IPVS: starting estimator thread 0... [ 68.696858][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.709257][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.756964][ T6682] ip6tnl1: left promiscuous mode [ 68.763436][ T6682] hsr1: left promiscuous mode [ 68.768155][ T6682] hsr1: left allmulticast mode [ 68.769589][ T6693] IPVS: using max 3456 ests per chain, 172800 per kthread [ 68.773131][ T6682] bond0: left allmulticast mode [ 68.785228][ T6682] bond_slave_0: left allmulticast mode [ 68.790853][ T6682] bond_slave_1: left allmulticast mode [ 68.796399][ T6682] dummy0: left allmulticast mode [ 68.802716][ T4935] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.822038][ T4935] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.831580][ T4935] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.862313][ T4935] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.941379][ T6704] loop1: detected capacity change from 0 to 512 [ 68.962036][ T6708] __nla_validate_parse: 14 callbacks suppressed [ 68.962051][ T6708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1346'. [ 69.021642][ T6704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.036071][ T6704] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.104440][ T6700] Set syz1 is full, maxelem 65536 reached [ 69.120354][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.191282][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 69.200814][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 69.213885][ T6733] loop1: detected capacity change from 0 to 164 [ 69.223477][ T6733] syz.1.1357: attempt to access beyond end of device [ 69.223477][ T6733] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.244289][ T6733] syz.1.1357: attempt to access beyond end of device [ 69.244289][ T6733] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.304766][ T6741] loop3: detected capacity change from 0 to 256 [ 69.322156][ T6745] loop2: detected capacity change from 0 to 512 [ 69.337969][ T6741] FAT-fs (loop3): Directory bread(block 64) failed [ 69.342369][ T6749] random: crng reseeded on system resumption [ 69.345392][ T6741] FAT-fs (loop3): Directory bread(block 65) failed [ 69.357855][ T6741] FAT-fs (loop3): Directory bread(block 66) failed [ 69.366225][ T6745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.373390][ T6749] Restarting kernel threads ... [ 69.379066][ T6745] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.383982][ T6741] FAT-fs (loop3): Directory bread(block 67) failed [ 69.394648][ T6749] Done restarting kernel threads. [ 69.422747][ T6741] FAT-fs (loop3): Directory bread(block 68) failed [ 69.430503][ T6741] FAT-fs (loop3): Directory bread(block 69) failed [ 69.430897][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.437072][ T6741] FAT-fs (loop3): Directory bread(block 70) failed [ 69.452655][ T6741] FAT-fs (loop3): Directory bread(block 71) failed [ 69.459707][ T6741] FAT-fs (loop3): Directory bread(block 72) failed [ 69.466344][ T6741] FAT-fs (loop3): Directory bread(block 73) failed [ 69.485820][ T6756] loop2: detected capacity change from 0 to 1024 [ 69.494404][ T6756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.496957][ T6741] syz.3.1361: attempt to access beyond end of device [ 69.496957][ T6741] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 69.530457][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.569679][ T6761] loop3: detected capacity change from 0 to 512 [ 69.578902][ T6761] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.586665][ T6761] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1368: bg 0: block 248: padding at end of block bitmap is not set [ 69.602990][ T6761] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1368: Failed to acquire dquot type 1 [ 69.615304][ T6761] EXT4-fs (loop3): 1 truncate cleaned up [ 69.616938][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 69.630656][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.657848][ T6761] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 69.670732][ T6771] serio: Serial port ptm1 [ 69.681015][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 69.704460][ T6761] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 69.726154][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.773498][ T6785] ================================================================== [ 69.781610][ T6785] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 69.788222][ T6785] [ 69.790542][ T6785] write to 0xffff88810c6f9718 of 136 bytes by task 3310 on cpu 1: [ 69.798342][ T6785] __bpf_get_stackid+0x761/0x800 [ 69.803289][ T6785] bpf_get_stackid+0xee/0x120 [ 69.807969][ T6785] bpf_get_stackid_raw_tp+0xf6/0x120 [ 69.813251][ T6785] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 69.818697][ T6785] bpf_trace_run2+0x104/0x1c0 [ 69.823365][ T6785] kfree+0x27b/0x320 [ 69.827249][ T6785] security_sk_free+0x38/0x80 [ 69.831920][ T6785] __sk_destruct+0x392/0x4c0 [ 69.836496][ T6785] __sk_free+0x227/0x270 [ 69.840723][ T6785] sk_free+0x39/0x80 [ 69.844605][ T6785] tcp_close+0x8d/0xd0 [ 69.848667][ T6785] inet_release+0xcb/0xf0 [ 69.852983][ T6785] sock_close+0x6b/0x150 [ 69.857221][ T6785] __fput+0x29b/0x650 [ 69.861196][ T6785] fput_close_sync+0x6e/0x120 [ 69.865868][ T6785] __x64_sys_close+0x56/0xf0 [ 69.870439][ T6785] x64_sys_call+0x2738/0x2ff0 [ 69.875102][ T6785] do_syscall_64+0xd2/0x200 [ 69.879597][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.885477][ T6785] [ 69.887787][ T6785] read to 0xffff88810c6f9760 of 8 bytes by task 6785 on cpu 0: [ 69.895312][ T6785] bcmp+0x23/0x90 [ 69.898943][ T6785] __bpf_get_stackid+0x371/0x800 [ 69.903871][ T6785] bpf_get_stackid+0xee/0x120 [ 69.908537][ T6785] bpf_get_stackid_raw_tp+0xf6/0x120 [ 69.913810][ T6785] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 69.919253][ T6785] bpf_trace_run2+0x104/0x1c0 [ 69.923916][ T6785] kfree+0x27b/0x320 [ 69.927799][ T6785] krealloc_noprof+0x136/0x2d0 [ 69.932553][ T6785] copy_array+0x63/0xf0 [ 69.936703][ T6785] copy_verifier_state+0x67/0x560 [ 69.941718][ T6785] do_check+0x2819/0x7a10 [ 69.946039][ T6785] do_check_common+0xc3a/0x12a0 [ 69.950879][ T6785] bpf_check+0x942b/0xd9e0 [ 69.955283][ T6785] bpf_prog_load+0xedd/0x1070 [ 69.959953][ T6785] __sys_bpf+0x462/0x7b0 [ 69.964185][ T6785] __x64_sys_bpf+0x41/0x50 [ 69.968596][ T6785] x64_sys_call+0x2aea/0x2ff0 [ 69.973261][ T6785] do_syscall_64+0xd2/0x200 [ 69.977756][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.983635][ T6785] [ 69.985942][ T6785] value changed: 0xffffffff816417eb -> 0xffffffff84a5e8bb [ 69.993030][ T6785] [ 69.995335][ T6785] Reported by Kernel Concurrency Sanitizer on: [ 70.001466][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.1.1378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.011174][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.021213][ T6785] ================================================================== [ 70.053405][ T6787] netlink: 'syz.4.1389': attribute type 21 has an invalid length. [ 70.061419][ T6787] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1389'. [ 70.072406][ T6787] netlink: 'syz.4.1389': attribute type 5 has an invalid length. [ 70.080224][ T6787] netlink: 'syz.4.1389': attribute type 6 has an invalid length. [ 70.087963][ T6787] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1389'. [ 70.108122][ T6785] tipc: Started in network mode [ 70.113052][ T6785] tipc: Node identity 9a735c96919b, cluster identity 4711 [ 70.120264][ T6785] tipc: Enabled bearer , priority 0 [ 70.128909][ T6785] tipc: Disabling bearer