last executing test programs: 27.880495736s ago: executing program 0 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 27.750539146s ago: executing program 0 (id=326): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000100), &(0x7f00000001c0)=r0}, 0x20) close(r0) 27.733754887s ago: executing program 0 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 27.652742374s ago: executing program 0 (id=329): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x2, 0x476, &(0x7f0000000540)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 27.496280917s ago: executing program 0 (id=333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) 27.276271764s ago: executing program 0 (id=339): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/110, 0x6e}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xffffff01}], 0x2, 0x0, 0x0) 27.276049764s ago: executing program 32 (id=339): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/110, 0x6e}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xffffff01}], 0x2, 0x0, 0x0) 26.839418499s ago: executing program 3 (id=360): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 26.791593173s ago: executing program 3 (id=361): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x21200}], 0x20}, 0x0) 26.761518686s ago: executing program 3 (id=362): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 26.556879672s ago: executing program 3 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 26.520919975s ago: executing program 3 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close(r2) 26.224525719s ago: executing program 3 (id=368): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) link(0x0, 0x0) 26.224257909s ago: executing program 33 (id=368): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) link(0x0, 0x0) 15.454882616s ago: executing program 2 (id=893): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 15.431589868s ago: executing program 2 (id=894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 15.295144808s ago: executing program 2 (id=909): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 15.226522794s ago: executing program 2 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 15.189884297s ago: executing program 2 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c08000140000000"], 0x25c}}, 0x0) 14.989834793s ago: executing program 2 (id=924): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 14.989588473s ago: executing program 34 (id=924): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.24019222s ago: executing program 1 (id=1419): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x3a) 1.169747086s ago: executing program 1 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000000000000000008000500ff0300000c0003800400010004000380"], 0x40}}, 0x0) 1.127297749s ago: executing program 6 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 1.101511151s ago: executing program 5 (id=1426): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.100784011s ago: executing program 1 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) 1.063495604s ago: executing program 4 (id=1428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1.040390376s ago: executing program 4 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 1.038400426s ago: executing program 6 (id=1439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@acl}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5b196a02}}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 982.52827ms ago: executing program 5 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040880) 981.82464ms ago: executing program 6 (id=1431): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) 956.846953ms ago: executing program 5 (id=1433): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000a80)={0x2c, 0x1, r3, 0xa, r0}, 0x10) 943.300024ms ago: executing program 7 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:cert_t:s0\x00', 0x1c) 909.875406ms ago: executing program 7 (id=1435): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000001740)=ANY=[], 0x0) 909.579537ms ago: executing program 4 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 906.549196ms ago: executing program 5 (id=1437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 782.664597ms ago: executing program 5 (id=1438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 781.570137ms ago: executing program 1 (id=1449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 781.025417ms ago: executing program 7 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) 745.65278ms ago: executing program 4 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000000000000000008000500ff0300000c0003800400010004000380"], 0x40}}, 0x0) 726.551251ms ago: executing program 5 (id=1441): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 643.548788ms ago: executing program 1 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 583.464993ms ago: executing program 1 (id=1443): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r1, 0xfffffffffffffa6f, 0xfffffffc}) 527.667497ms ago: executing program 7 (id=1444): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 352.098881ms ago: executing program 7 (id=1445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 334.547123ms ago: executing program 7 (id=1446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 119.50552ms ago: executing program 6 (id=1447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 109.887901ms ago: executing program 4 (id=1448): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") 6.020239ms ago: executing program 6 (id=1451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 723.549碌s ago: executing program 4 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 0s ago: executing program 6 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.834674][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 18.834689][ T29] audit: type=1400 audit(1754771404.881:57): avc: denied { transition } for pid=3201 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.838588][ T29] audit: type=1400 audit(1754771404.881:58): avc: denied { noatsecure } for pid=3201 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.841340][ T29] audit: type=1400 audit(1754771404.881:59): avc: denied { write } for pid=3201 comm="sh" path="pipe:[1515]" dev="pipefs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.844505][ T29] audit: type=1400 audit(1754771404.881:60): avc: denied { rlimitinh } for pid=3201 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.847192][ T29] audit: type=1400 audit(1754771404.881:61): avc: denied { siginh } for pid=3201 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 26.113390][ T29] audit: type=1400 audit(1754771412.161:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.114270][ T3293] cgroup: Unknown subsys name 'net' [ 26.136234][ T29] audit: type=1400 audit(1754771412.161:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.163475][ T29] audit: type=1400 audit(1754771412.191:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.319980][ T3293] cgroup: Unknown subsys name 'cpuset' [ 26.326160][ T3293] cgroup: Unknown subsys name 'rlimit' [ 26.415673][ T29] audit: type=1400 audit(1754771412.461:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.442582][ T29] audit: type=1400 audit(1754771412.461:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.463086][ T29] audit: type=1400 audit(1754771412.461:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.483425][ T29] audit: type=1400 audit(1754771412.461:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.490561][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.503748][ T29] audit: type=1400 audit(1754771412.471:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.537086][ T29] audit: type=1400 audit(1754771412.471:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.560332][ T29] audit: type=1400 audit(1754771412.561:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.574620][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.375353][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.424513][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.433149][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.448493][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.455663][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.462860][ T3302] bridge_slave_0: entered allmulticast mode [ 28.469205][ T3302] bridge_slave_0: entered promiscuous mode [ 28.497796][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.505069][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.513015][ T3302] bridge_slave_1: entered allmulticast mode [ 28.519459][ T3302] bridge_slave_1: entered promiscuous mode [ 28.563803][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.584827][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.608324][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.615416][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.622734][ T3308] bridge_slave_0: entered allmulticast mode [ 28.629144][ T3308] bridge_slave_0: entered promiscuous mode [ 28.636348][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.645530][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.652722][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.659888][ T3308] bridge_slave_1: entered allmulticast mode [ 28.666190][ T3308] bridge_slave_1: entered promiscuous mode [ 28.675250][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.684129][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.691273][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.698522][ T3304] bridge_slave_0: entered allmulticast mode [ 28.704854][ T3304] bridge_slave_0: entered promiscuous mode [ 28.726575][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.733819][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.741050][ T3304] bridge_slave_1: entered allmulticast mode [ 28.747360][ T3304] bridge_slave_1: entered promiscuous mode [ 28.775095][ T3302] team0: Port device team_slave_0 added [ 28.781526][ T3302] team0: Port device team_slave_1 added [ 28.792948][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.813984][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.827804][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.834767][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.860672][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.872368][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.893228][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.907596][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.914570][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.940556][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.961940][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.969049][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.976233][ T3303] bridge_slave_0: entered allmulticast mode [ 28.982773][ T3303] bridge_slave_0: entered promiscuous mode [ 28.991495][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.998573][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.005963][ T3303] bridge_slave_1: entered allmulticast mode [ 29.012563][ T3303] bridge_slave_1: entered promiscuous mode [ 29.019293][ T3308] team0: Port device team_slave_0 added [ 29.036793][ T3304] team0: Port device team_slave_0 added [ 29.048640][ T3308] team0: Port device team_slave_1 added [ 29.059875][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.066971][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.074220][ T3310] bridge_slave_0: entered allmulticast mode [ 29.080673][ T3310] bridge_slave_0: entered promiscuous mode [ 29.087447][ T3304] team0: Port device team_slave_1 added [ 29.107449][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.114552][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.121811][ T3310] bridge_slave_1: entered allmulticast mode [ 29.128223][ T3310] bridge_slave_1: entered promiscuous mode [ 29.141476][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.169117][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.178552][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.185571][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.211509][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.224300][ T3302] hsr_slave_0: entered promiscuous mode [ 29.230440][ T3302] hsr_slave_1: entered promiscuous mode [ 29.241328][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.248265][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.274238][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.285407][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.292459][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.318394][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.333346][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.340368][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.366255][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.386141][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.396614][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.419984][ T3303] team0: Port device team_slave_0 added [ 29.447801][ T3303] team0: Port device team_slave_1 added [ 29.459265][ T3310] team0: Port device team_slave_0 added [ 29.468144][ T3310] team0: Port device team_slave_1 added [ 29.497677][ T3308] hsr_slave_0: entered promiscuous mode [ 29.503862][ T3308] hsr_slave_1: entered promiscuous mode [ 29.509721][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 29.515433][ T3308] Cannot create hsr debugfs directory [ 29.527685][ T3304] hsr_slave_0: entered promiscuous mode [ 29.534317][ T3304] hsr_slave_1: entered promiscuous mode [ 29.540169][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 29.545996][ T3304] Cannot create hsr debugfs directory [ 29.551801][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.558831][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.584797][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.602146][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.609168][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.635082][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.651680][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.658627][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.684534][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.699790][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.706726][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.732639][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.813131][ T3310] hsr_slave_0: entered promiscuous mode [ 29.819662][ T3310] hsr_slave_1: entered promiscuous mode [ 29.825644][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 29.831782][ T3310] Cannot create hsr debugfs directory [ 29.846835][ T3303] hsr_slave_0: entered promiscuous mode [ 29.852784][ T3303] hsr_slave_1: entered promiscuous mode [ 29.858514][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 29.864292][ T3303] Cannot create hsr debugfs directory [ 29.947890][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.966146][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.976861][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.992366][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.039295][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.050451][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.065034][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.074593][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.104350][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.114140][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.127549][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.136744][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.166169][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.176434][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.186263][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.196961][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.216869][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.244424][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.256335][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.263524][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.274008][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.282623][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.292300][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.302652][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.317364][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.324448][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.345538][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.364947][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.388716][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.395788][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.404754][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.411816][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.437130][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.493283][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.504434][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.513211][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.539219][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.556111][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.565369][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572474][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.581383][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.588413][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.610164][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.617293][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.632281][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.639352][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.653037][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.668836][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.679246][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.709833][ T2818] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.716911][ T2818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.728249][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.735431][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.753493][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.781673][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.795059][ T3302] veth0_vlan: entered promiscuous mode [ 30.814396][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.824829][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.848019][ T3302] veth1_vlan: entered promiscuous mode [ 30.866339][ T3302] veth0_macvtap: entered promiscuous mode [ 30.878971][ T3302] veth1_macvtap: entered promiscuous mode [ 30.903323][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.916229][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.944502][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.962385][ T3304] veth0_vlan: entered promiscuous mode [ 30.972048][ T294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.984773][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.995063][ T3304] veth1_vlan: entered promiscuous mode [ 31.010258][ T294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036305][ T3304] veth0_macvtap: entered promiscuous mode [ 31.045600][ T294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.055861][ T3304] veth1_macvtap: entered promiscuous mode [ 31.077641][ T3308] veth0_vlan: entered promiscuous mode [ 31.083939][ T2818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107738][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.118455][ T3308] veth1_vlan: entered promiscuous mode [ 31.130814][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.138944][ T3303] veth0_vlan: entered promiscuous mode [ 31.155911][ T3303] veth1_vlan: entered promiscuous mode [ 31.164647][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.164660][ T29] audit: type=1400 audit(1754771417.211:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.177895][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.209047][ T3308] veth0_macvtap: entered promiscuous mode [ 31.222652][ T3308] veth1_macvtap: entered promiscuous mode [ 31.232797][ T29] audit: type=1400 audit(1754771417.211:91): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.256802][ T29] audit: type=1400 audit(1754771417.211:92): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.282269][ T29] audit: type=1400 audit(1754771417.251:93): avc: denied { create } for pid=3468 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.301316][ T29] audit: type=1400 audit(1754771417.271:94): avc: denied { bind } for pid=3468 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.320205][ T29] audit: type=1400 audit(1754771417.271:95): avc: denied { setopt } for pid=3468 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.338875][ T3303] veth0_macvtap: entered promiscuous mode [ 31.339310][ T29] audit: type=1400 audit(1754771417.281:96): avc: denied { write } for pid=3468 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.347604][ T3303] veth1_macvtap: entered promiscuous mode [ 31.371478][ T29] audit: type=1400 audit(1754771417.291:97): avc: denied { map_create } for pid=3471 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.390236][ T29] audit: type=1400 audit(1754771417.291:98): avc: denied { map_read map_write } for pid=3471 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.409669][ T29] audit: type=1400 audit(1754771417.291:99): avc: denied { prog_load } for pid=3471 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.424117][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.438038][ T294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.465937][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.473728][ T294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.485978][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.500675][ T3310] veth0_vlan: entered promiscuous mode [ 31.508549][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.517009][ T294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.551254][ T294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554028][ T3476] loop1: detected capacity change from 0 to 128 [ 31.574811][ T3310] veth1_vlan: entered promiscuous mode [ 31.577534][ T3476] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.588209][ T3476] FAT-fs (loop1): Filesystem has been set read-only [ 31.595035][ T3476] syz.1.8: attempt to access beyond end of device [ 31.595035][ T3476] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 31.597522][ T294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.608807][ T3476] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.619477][ T294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.625095][ T3476] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.633890][ T294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.650829][ T294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.665344][ T3476] syz.1.8: attempt to access beyond end of device [ 31.665344][ T3476] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.675999][ T294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.715898][ T294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726127][ T3310] veth0_macvtap: entered promiscuous mode [ 31.732895][ T3476] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.751618][ T291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.759612][ T3476] syz.1.8: attempt to access beyond end of device [ 31.759612][ T3476] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 31.768999][ T291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.785340][ T3310] veth1_macvtap: entered promiscuous mode [ 31.798586][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.817574][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.830716][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.844108][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.854015][ T3476] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.861919][ T3476] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.885595][ T3483] loop3: detected capacity change from 0 to 512 [ 31.894922][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.894975][ T3479] syz.1.8: attempt to access beyond end of device [ 31.894975][ T3479] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 31.916833][ T3479] Buffer I/O error on dev loop1, logical block 2065, async page read [ 31.932666][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.990547][ T3483] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.4: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 32.008524][ T3479] syz.1.8: attempt to access beyond end of device [ 32.008524][ T3479] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 32.021760][ T3479] Buffer I/O error on dev loop1, logical block 2066, async page read [ 32.033703][ T3479] syz.1.8: attempt to access beyond end of device [ 32.033703][ T3479] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 32.033869][ T3483] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.4: Bad quota inode: 3, type: 0 [ 32.047387][ T3479] Buffer I/O error on dev loop1, logical block 2067, async page read [ 32.065416][ T3483] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 32.073969][ T3479] syz.1.8: attempt to access beyond end of device [ 32.073969][ T3479] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 32.090121][ T3483] EXT4-fs (loop3): mount failed [ 32.093826][ T3479] Buffer I/O error on dev loop1, logical block 2068, async page read [ 32.107617][ T3479] syz.1.8: attempt to access beyond end of device [ 32.107617][ T3479] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 32.120976][ T3479] Buffer I/O error on dev loop1, logical block 2069, async page read [ 32.132833][ T3479] syz.1.8: attempt to access beyond end of device [ 32.132833][ T3479] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 32.145852][ T3479] Buffer I/O error on dev loop1, logical block 2070, async page read [ 32.154672][ T3479] syz.1.8: attempt to access beyond end of device [ 32.154672][ T3479] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 32.167673][ T3479] Buffer I/O error on dev loop1, logical block 2071, async page read [ 32.176165][ T3479] Buffer I/O error on dev loop1, logical block 2072, async page read [ 32.184378][ T3479] Buffer I/O error on dev loop1, logical block 2065, async page read [ 32.207597][ T3499] loop0: detected capacity change from 0 to 512 [ 32.227299][ T3479] Buffer I/O error on dev loop1, logical block 2066, async page read [ 32.250250][ T3501] loop2: detected capacity change from 0 to 512 [ 32.278615][ T3501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.309809][ T3501] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.368763][ T3500] syz.2.12 (3500) used greatest stack depth: 10896 bytes left [ 32.399609][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.450222][ T3503] Zero length message leads to an empty skb [ 32.550349][ T3511] vhci_hcd: invalid port number 96 [ 32.555489][ T3511] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 33.413911][ T3578] loop3: detected capacity change from 0 to 1024 [ 33.441097][ T3578] EXT4-fs: Ignoring removed bh option [ 33.446609][ T3578] EXT4-fs: inline encryption not supported [ 33.457605][ T3578] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.506614][ T3578] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.45: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.539593][ T3578] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.45: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.605060][ T3578] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.45: Failed to acquire dquot type 0 [ 33.651211][ T3578] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 33.693369][ T3578] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.45: mark_inode_dirty error [ 33.738137][ T3578] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 33.764008][ T2993] udevd[2993]: worker [3508] terminated by signal 33 (Unknown signal 33) [ 33.775628][ T3578] EXT4-fs (loop3): 1 orphan inode deleted [ 33.788893][ T3578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.861706][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.917519][ T3603] process 'syz.2.54' launched '/dev/fd/5' with NULL argv: empty string added [ 33.960365][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 34.004200][ T3578] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 34.041896][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.100974][ T3618] syz.1.62 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.101751][ T3629] 9pnet_fd: Insufficient options for proto=fd [ 36.110463][ T3633] loop1: detected capacity change from 0 to 2048 [ 36.141850][ T3633] Alternate GPT is invalid, using primary GPT. [ 36.148327][ T3633] loop1: p2 p3 p7 [ 36.183751][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 36.183765][ T29] audit: type=1326 audit(1754771422.231:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 36.237109][ T29] audit: type=1326 audit(1754771422.231:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 36.260376][ T29] audit: type=1326 audit(1754771422.231:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 36.283682][ T29] audit: type=1326 audit(1754771422.231:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0aaa55ec23 code=0x7ffc0000 [ 36.306845][ T29] audit: type=1326 audit(1754771422.231:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0aaa55d69f code=0x7ffc0000 [ 36.329863][ T29] audit: type=1326 audit(1754771422.231:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0aaa55ec77 code=0x7ffc0000 [ 36.352894][ T29] audit: type=1326 audit(1754771422.231:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0aaa55d550 code=0x7ffc0000 [ 36.376549][ T29] audit: type=1326 audit(1754771422.231:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0aaa55e7eb code=0x7ffc0000 [ 36.399818][ T29] audit: type=1326 audit(1754771422.231:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0aaa55e7eb code=0x7ffc0000 [ 36.423084][ T29] audit: type=1326 audit(1754771422.231:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0aaa5914a5 code=0x7ffc0000 [ 36.457744][ T3645] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.627330][ T3683] loop2: detected capacity change from 0 to 1024 [ 36.634874][ T3683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.693461][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.706228][ T3701] loop3: detected capacity change from 0 to 1024 [ 36.714184][ T3701] EXT4-fs: Ignoring removed orlov option [ 36.722270][ T3703] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 36.785402][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.810603][ T3701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.943047][ T3723] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 36.991753][ T3729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 37.105560][ T3701] syz.3.100 (3701) used greatest stack depth: 10760 bytes left [ 37.148830][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.209868][ T3757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.125'. [ 37.218919][ T3750] loop3: detected capacity change from 0 to 512 [ 37.232003][ T3759] loop4: detected capacity change from 0 to 1024 [ 37.249095][ T3757] IPVS: Error connecting to the multicast addr [ 37.249607][ T3750] ======================================================= [ 37.249607][ T3750] WARNING: The mand mount option has been deprecated and [ 37.249607][ T3750] and is ignored by this kernel. Remove the mand [ 37.249607][ T3750] option from the mount to silence this warning. [ 37.249607][ T3750] ======================================================= [ 37.312968][ T3750] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.337515][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.350206][ T3750] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 37.379923][ T3750] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.119: inode #15: comm syz.3.119: iget: illegal inode # [ 37.404879][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 37.414840][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 37.424037][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 37.433110][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 37.455749][ T3750] EXT4-fs (loop3): Remounting filesystem read-only [ 37.458431][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.462627][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.556003][ T3377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3377 comm=kworker/1:3 [ 37.568922][ T3779] loop2: detected capacity change from 0 to 2048 [ 37.570363][ T3750] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 37.627053][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.663159][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.703143][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.718301][ T3793] loop1: detected capacity change from 0 to 1024 [ 37.750876][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.781703][ T3793] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 37.854901][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.932328][ T3823] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 37.962379][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 38.021213][ T3837] netlink: 332 bytes leftover after parsing attributes in process `syz.3.159'. [ 38.031332][ T3839] mmap: syz.4.152 (3839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.117669][ T3847] loop0: detected capacity change from 0 to 512 [ 38.125245][ T3847] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.132977][ T3847] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.142992][ T3846] loop3: detected capacity change from 0 to 132 [ 38.174791][ T3847] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.205217][ T3847] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.228088][ T3847] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.164: Invalid block bitmap block 0 in block_group 0 [ 38.258028][ T3847] EXT4-fs (loop0): Remounting filesystem read-only [ 38.264808][ T3847] EXT4-fs (loop0): 1 orphan inode deleted [ 38.283846][ T3847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.328124][ T3847] syz.0.164 (3847) used greatest stack depth: 9592 bytes left [ 38.338049][ T3870] netlink: 96 bytes leftover after parsing attributes in process `syz.4.174'. [ 38.351260][ T3872] atomic_op ffff888103511128 conn xmit_atomic 0000000000000000 [ 38.365702][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.387018][ T3876] loop3: detected capacity change from 0 to 512 [ 38.399240][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.420061][ T3882] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 38.455888][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.538287][ T3899] loop4: detected capacity change from 0 to 512 [ 38.545912][ T3894] netlink: 300 bytes leftover after parsing attributes in process `syz.1.184'. [ 38.567149][ T3899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.591069][ T3899] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.700663][ T3918] loop1: detected capacity change from 0 to 128 [ 38.745054][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.803490][ T3921] loop0: detected capacity change from 0 to 1024 [ 38.822878][ T3921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.133500][ T3921] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 39.184084][ T3961] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 39.261168][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.371400][ T3971] SELinux: failed to load policy [ 39.920459][ T4014] loop2: detected capacity change from 0 to 1024 [ 39.931281][ T4014] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 39.940942][ T4014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.953309][ T4014] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.971132][ T4014] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.231: lblock 3 mapped to illegal pblock 3 (length 13) [ 39.985632][ T4014] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 39.998026][ T4014] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.998026][ T4014] [ 40.014965][ T4020] vlan2: entered allmulticast mode [ 40.020227][ T4020] macvlan0: entered allmulticast mode [ 40.025781][ T4020] veth1_vlan: entered allmulticast mode [ 40.032485][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.123955][ T4031] SELinux: ebitmap: truncated map [ 40.131511][ T4031] SELinux: failed to load policy [ 40.143789][ T4033] loop2: detected capacity change from 0 to 512 [ 40.151865][ T4033] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.170350][ T4033] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.178639][ T4035] loop1: detected capacity change from 0 to 1024 [ 40.178658][ T4033] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.184051][ T4033] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.238: corrupted inode contents [ 40.190863][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.191756][ T4033] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.238: mark_inode_dirty error [ 40.226419][ T4033] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.238: corrupted inode contents [ 40.238359][ T4033] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.238: mark_inode_dirty error [ 40.250692][ T4033] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.238: corrupted inode contents [ 40.266319][ T4033] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 40.275134][ T4033] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.238: corrupted inode contents [ 40.287290][ T4033] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.238: mark_inode_dirty error [ 40.303624][ T4033] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 40.313080][ T4033] EXT4-fs (loop2): 1 truncate cleaned up [ 40.322965][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 40.349507][ T4044] loop0: detected capacity change from 0 to 512 [ 40.365787][ T4033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.381619][ T4044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.405778][ T4044] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.423707][ T4035] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 40.454862][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.482893][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.493425][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.588998][ T4069] loop3: detected capacity change from 0 to 2048 [ 40.631336][ T4069] Alternate GPT is invalid, using primary GPT. [ 40.638256][ T4069] loop3: p2 p3 p7 [ 40.721933][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.729993][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.737978][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.746149][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.754108][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.761931][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.769792][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.777688][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.785490][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.793285][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 40.803543][ T3384] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.863346][ T4109] loop0: detected capacity change from 0 to 512 [ 40.896184][ T4109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.988004][ T4124] loop1: detected capacity change from 0 to 1024 [ 40.995527][ T4109] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.012005][ T4124] ext4: Unknown parameter 'uid<00000000000000000000' [ 41.071025][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.157904][ T4144] wg2: entered promiscuous mode [ 41.162916][ T4144] wg2: entered allmulticast mode [ 41.300217][ T4156] netlink: 'syz.2.291': attribute type 9 has an invalid length. [ 41.321479][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 41.321494][ T29] audit: type=1400 audit(1754771427.371:508): avc: denied { execute } for pid=4152 comm="syz.1.290" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 41.354935][ T4156] netlink: 'syz.2.291': attribute type 9 has an invalid length. [ 41.369469][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.378805][ T2818] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.425364][ T2818] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.447810][ T2818] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.500008][ T29] audit: type=1400 audit(1754771427.541:509): avc: denied { create } for pid=4178 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.536230][ T29] audit: type=1400 audit(1754771427.581:510): avc: denied { connect } for pid=4178 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.549135][ T4182] loop2: detected capacity change from 0 to 1024 [ 41.556033][ T29] audit: type=1400 audit(1754771427.581:511): avc: denied { write } for pid=4178 comm="syz.4.302" path="socket:[6960]" dev="sockfs" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.589575][ T4182] EXT4-fs: inline encryption not supported [ 41.640030][ T4182] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 41.661222][ T29] audit: type=1326 audit(1754771427.711:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f03edebe9 code=0x7ffc0000 [ 41.684581][ T29] audit: type=1326 audit(1754771427.711:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f03edebe9 code=0x7ffc0000 [ 41.710600][ T29] audit: type=1326 audit(1754771427.711:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f03edebe9 code=0x7ffc0000 [ 41.733896][ T29] audit: type=1326 audit(1754771427.711:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f03edebe9 code=0x7ffc0000 [ 41.757119][ T29] audit: type=1326 audit(1754771427.711:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f03edebe9 code=0x7ffc0000 [ 41.780343][ T29] audit: type=1326 audit(1754771427.741:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f03edebe9 code=0x7ffc0000 [ 41.855790][ T4204] loop0: detected capacity change from 0 to 512 [ 41.985190][ T4227] loop1: detected capacity change from 0 to 1024 [ 41.992181][ T4227] EXT4-fs: Ignoring removed orlov option [ 42.006185][ T4233] batman_adv: batadv0: Adding interface: ipvlan2 [ 42.012650][ T4233] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.030669][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.038111][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.060766][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.071050][ T4233] batman_adv: batadv0: Interface activated: ipvlan2 [ 42.099219][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.130219][ T4244] __nla_validate_parse: 5 callbacks suppressed [ 42.130308][ T4244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'. [ 42.145461][ T4244] netlink: 108 bytes leftover after parsing attributes in process `syz.0.327'. [ 42.145480][ T4237] loop3: detected capacity change from 0 to 8192 [ 42.155695][ T4244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'. [ 42.170043][ T4244] netlink: 108 bytes leftover after parsing attributes in process `syz.0.327'. [ 42.179051][ T4244] netlink: 84 bytes leftover after parsing attributes in process `syz.0.327'. [ 42.213681][ T4248] loop0: detected capacity change from 0 to 512 [ 42.220798][ T4250] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 42.231758][ T4248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 42.239936][ T4248] System zones: 1-12 [ 42.251084][ T4248] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.329: error while reading EA inode 32 err=-116 [ 42.263866][ T4248] EXT4-fs (loop0): Remounting filesystem read-only [ 42.270441][ T4248] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.283458][ T4248] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.303503][ T4258] loop1: detected capacity change from 0 to 512 [ 42.306992][ T4248] EXT4-fs (loop0): 1 orphan inode deleted [ 42.316057][ T4248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.316579][ T4258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.338160][ T4258] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.332: corrupted in-inode xattr: overlapping e_value [ 42.353162][ T4258] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.332: couldn't read orphan inode 15 (err -117) [ 42.365872][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.470931][ T4268] loop3: detected capacity change from 0 to 2048 [ 42.481635][ T4268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.494297][ T4268] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.518859][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.531607][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.608580][ T4276] ref_ctr_offset mismatch. inode: 0x16b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 42.623436][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.648893][ T4280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.342'. [ 42.740296][ T4297] netlink: 5 bytes leftover after parsing attributes in process `syz.2.346'. [ 42.754737][ T4297] 0{X功: renamed from gretap0 (while UP) [ 42.764059][ T4297] 0{X功: entered allmulticast mode [ 42.771441][ T4297] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 42.861723][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 42.931294][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.938375][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.946246][ T4277] bridge_slave_0: entered allmulticast mode [ 42.955037][ T4277] bridge_slave_0: entered promiscuous mode [ 42.959644][ T4332] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.358'. [ 42.962101][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.976978][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.984921][ T4277] bridge_slave_1: entered allmulticast mode [ 42.991466][ T4277] bridge_slave_1: entered promiscuous mode [ 43.019106][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.045252][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.102609][ T4277] team0: Port device team_slave_0 added [ 43.109802][ T4277] team0: Port device team_slave_1 added [ 43.115669][ T4326] loop4: detected capacity change from 0 to 32768 [ 43.127667][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.134710][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.160682][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.173181][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.179654][ T4326] loop4: p1 p3 < > [ 43.180237][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.209858][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.239184][ T4277] hsr_slave_0: entered promiscuous mode [ 43.245465][ T4277] hsr_slave_1: entered promiscuous mode [ 43.251583][ T4277] debugfs: 'hsr0' already exists in 'hsr' [ 43.257302][ T4277] Cannot create hsr debugfs directory [ 43.342511][ T4277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.358857][ T4277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.376193][ T4277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.397025][ T4277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.445714][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.458913][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.469452][ T2818] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.476645][ T2818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.490184][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.497305][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.576591][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.601237][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.642916][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.676215][ T4372] netlink: 'syz.4.370': attribute type 3 has an invalid length. [ 43.732779][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.758502][ T4277] veth0_vlan: entered promiscuous mode [ 43.777152][ T4277] veth1_vlan: entered promiscuous mode [ 43.784564][ T4377] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.805698][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.816231][ T4377] SELinux: failed to load policy [ 43.845765][ T4277] veth0_macvtap: entered promiscuous mode [ 43.887269][ T4398] netlink: 'syz.1.376': attribute type 21 has an invalid length. [ 43.897572][ T4277] veth1_macvtap: entered promiscuous mode [ 43.929282][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.947023][ T51] bridge_slave_1: left allmulticast mode [ 43.952777][ T51] bridge_slave_1: left promiscuous mode [ 43.958493][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.979124][ T51] bridge_slave_0: left allmulticast mode [ 43.984989][ T51] bridge_slave_0: left promiscuous mode [ 43.990718][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.020074][ T4413] netlink: 3 bytes leftover after parsing attributes in process `syz.1.382'. [ 44.111615][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.121643][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.131408][ T51] bond0 (unregistering): Released all slaves [ 44.146140][ T4413] batadv1: entered promiscuous mode [ 44.151394][ T4413] batadv1: entered allmulticast mode [ 44.165766][ T4426] loop4: detected capacity change from 0 to 1024 [ 44.169939][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.183038][ T294] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.204072][ T294] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.216009][ T51] hsr_slave_0: left promiscuous mode [ 44.217176][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.233938][ T51] hsr_slave_1: left promiscuous mode [ 44.239830][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.247312][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.252489][ T4426] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 44.271233][ T4426] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 44.283522][ T4426] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.283522][ T4426] [ 44.293213][ T4426] EXT4-fs (loop4): Total free blocks count 0 [ 44.299196][ T4426] EXT4-fs (loop4): Free/Dirty block details [ 44.305134][ T4426] EXT4-fs (loop4): free_blocks=20480 [ 44.310548][ T4426] EXT4-fs (loop4): dirty_blocks=16 [ 44.315663][ T4426] EXT4-fs (loop4): Block reservation details [ 44.321757][ T4426] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 44.328008][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.335486][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.345979][ T51] veth1_macvtap: left promiscuous mode [ 44.351626][ T51] veth0_macvtap: left promiscuous mode [ 44.357263][ T51] veth1_vlan: left promiscuous mode [ 44.358172][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.362897][ T51] veth0_vlan: left promiscuous mode [ 44.446043][ T51] team0 (unregistering): Port device team_slave_1 removed [ 44.457533][ T51] team0 (unregistering): Port device team_slave_0 removed [ 44.501313][ T294] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.512940][ T4435] can0: slcan on ttyS3. [ 44.527460][ T294] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.589495][ T4439] can0 (unregistered): slcan off ttyS3. [ 44.612092][ T4439] Falling back ldisc for ttyS3. [ 44.634335][ T4378] chnl_net:caif_netlink_parms(): no params data found [ 44.683833][ T4462] netlink: 264 bytes leftover after parsing attributes in process `syz.1.399'. [ 44.702595][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.709839][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.717187][ T4378] bridge_slave_0: entered allmulticast mode [ 44.725480][ T4378] bridge_slave_0: entered promiscuous mode [ 44.737651][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.744792][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.753574][ T4378] bridge_slave_1: entered allmulticast mode [ 44.760411][ T4378] bridge_slave_1: entered promiscuous mode [ 44.781214][ T4378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.792369][ T4378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.831683][ T4378] team0: Port device team_slave_0 added [ 44.838539][ T4378] team0: Port device team_slave_1 added [ 44.865804][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.873237][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.899169][ T4378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.912861][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.919891][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.945845][ T4378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.984593][ T4378] hsr_slave_0: entered promiscuous mode [ 44.993169][ T4378] hsr_slave_1: entered promiscuous mode [ 45.002792][ T4378] debugfs: 'hsr0' already exists in 'hsr' [ 45.008544][ T4378] Cannot create hsr debugfs directory [ 45.097771][ T4378] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 45.108164][ T4378] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 45.117481][ T4378] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 45.134220][ T4378] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 45.143664][ T4490] vhci_hcd: invalid port number 96 [ 45.148927][ T4490] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 45.149911][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.163034][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.170312][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.177411][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.208079][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.249127][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.262354][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.275272][ T4378] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.299564][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.306748][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.337206][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.344315][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.448766][ T4378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.523994][ T4528] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 45.670446][ T4378] veth0_vlan: entered promiscuous mode [ 45.689001][ T4378] veth1_vlan: entered promiscuous mode [ 45.728321][ T4378] veth0_macvtap: entered promiscuous mode [ 45.744572][ T922] hid_parser_main: 33 callbacks suppressed [ 45.744592][ T922] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 45.752708][ T4378] veth1_macvtap: entered promiscuous mode [ 45.758264][ T922] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 45.784039][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.791336][ T922] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 45.803204][ T922] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 45.815281][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.845295][ T4568] dummy0: entered allmulticast mode [ 45.861009][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.871932][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.904097][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.915528][ T4568] dummy0: left allmulticast mode [ 45.932722][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.061778][ T4590] vhci_hcd: invalid port number 96 [ 46.066915][ T4590] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 46.137843][ T4597] SELinux: failed to load policy [ 46.153534][ T4601] loop4: detected capacity change from 0 to 512 [ 46.173718][ T4601] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.209741][ T4601] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.451: Failed to acquire dquot type 1 [ 46.271384][ T1038] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.297995][ T4601] EXT4-fs (loop4): 1 truncate cleaned up [ 46.308982][ T1038] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.326595][ T4601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.370955][ T4624] 0{X功: renamed from gretap0 (while UP) [ 46.381241][ T4624] 0{X功: entered allmulticast mode [ 46.387346][ T4624] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 46.420818][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.557218][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 46.557234][ T29] audit: type=1326 audit(1754771432.601:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.586789][ T29] audit: type=1326 audit(1754771432.601:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.620673][ T29] audit: type=1326 audit(1754771432.601:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.644151][ T29] audit: type=1326 audit(1754771432.601:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.667528][ T29] audit: type=1326 audit(1754771432.601:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.691034][ T29] audit: type=1326 audit(1754771432.601:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.714325][ T29] audit: type=1326 audit(1754771432.601:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.737602][ T29] audit: type=1326 audit(1754771432.601:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.760966][ T29] audit: type=1326 audit(1754771432.601:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.784222][ T29] audit: type=1326 audit(1754771432.611:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaa55ebe9 code=0x7ffc0000 [ 46.834860][ T4655] pim6reg: entered allmulticast mode [ 46.864799][ T4655] pim6reg: left allmulticast mode [ 47.071370][ T4689] syz_tun: entered allmulticast mode [ 47.080708][ T4684] syz_tun: left allmulticast mode [ 47.089031][ T4691] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.195607][ T4709] IPv6: Can't replace route, no match found [ 47.264770][ T4719] capability: warning: `syz.6.505' uses 32-bit capabilities (legacy support in use) [ 47.315043][ T4727] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.357836][ T4734] random: crng reseeded on system resumption [ 47.396948][ T4740] loop6: detected capacity change from 0 to 512 [ 47.414691][ T4740] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 47.438163][ T4740] EXT4-fs (loop6): 1 truncate cleaned up [ 47.445346][ T4740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.465827][ T4752] __nla_validate_parse: 2 callbacks suppressed [ 47.465900][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 47.480975][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 47.495307][ T4378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.566700][ T4766] geneve2: entered promiscuous mode [ 47.572065][ T4766] geneve2: entered allmulticast mode [ 47.620738][ T4774] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.654822][ T4779] netlink: 552 bytes leftover after parsing attributes in process `syz.6.532'. [ 47.663877][ T4779] netlink: 16 bytes leftover after parsing attributes in process `syz.6.532'. [ 47.793863][ T4801] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.800798][ T4806] loop5: detected capacity change from 0 to 512 [ 47.819938][ T4806] EXT4-fs: Ignoring removed oldalloc option [ 47.849023][ T4806] EXT4-fs (loop5): 1 truncate cleaned up [ 47.863283][ T4806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.912469][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.952190][ T4833] loop5: detected capacity change from 0 to 128 [ 47.987649][ T4833] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.044553][ T4842] loop2: detected capacity change from 0 to 512 [ 48.073935][ T4833] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.099275][ T4842] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.562: corrupted in-inode xattr: invalid ea_ino [ 48.140907][ T4842] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.562: couldn't read orphan inode 15 (err -117) [ 48.173678][ T4277] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.197858][ T4842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.254603][ T4860] geneve2: entered promiscuous mode [ 48.260046][ T4860] geneve2: entered allmulticast mode [ 48.284690][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.301927][ T4857] SELinux: failed to load policy [ 48.319120][ T4866] Driver unsupported XDP return value 0 on prog (id 404) dev N/A, expect packet loss! [ 48.547463][ T4914] loop6: detected capacity change from 0 to 512 [ 48.565156][ T4914] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 48.589498][ T4914] EXT4-fs (loop6): failed to initialize system zone (-117) [ 48.596763][ T4914] EXT4-fs (loop6): mount failed [ 48.708497][ T4939] syzkaller1: entered promiscuous mode [ 48.714043][ T4939] syzkaller1: entered allmulticast mode [ 48.714308][ T4935] loop6: detected capacity change from 0 to 4096 [ 48.730917][ T4935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.757490][ T4378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.811288][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.608'. [ 48.848510][ T4953] bridge0: entered promiscuous mode [ 48.858806][ T4953] macsec1: entered allmulticast mode [ 48.864194][ T4953] bridge0: entered allmulticast mode [ 48.870945][ T4953] bridge0: port 3(macsec1) entered blocking state [ 48.877392][ T4953] bridge0: port 3(macsec1) entered disabled state [ 48.886398][ T4953] bridge0: left allmulticast mode [ 48.891472][ T4953] bridge0: left promiscuous mode [ 48.901130][ T4965] loop2: detected capacity change from 0 to 1024 [ 48.910507][ T4965] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 48.921257][ T4965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.933576][ T4965] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.949607][ T4965] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.617: lblock 3 mapped to illegal pblock 3 (length 13) [ 48.968076][ T4965] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 48.980548][ T4965] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.980548][ T4965] [ 49.008898][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.137730][ T4999] SELinux: failed to load policy [ 49.192806][ T5005] SELinux: policydb version 0 does not match my version range 15-35 [ 49.200964][ T5005] SELinux: failed to load policy [ 49.218949][ T3377] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 49.226435][ T3377] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.233869][ T3377] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.241288][ T3377] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.248655][ T3377] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.256261][ T3377] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.264242][ T3377] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 49.324938][ T5012] loop6: detected capacity change from 0 to 4096 [ 49.334747][ T5012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.357991][ T4378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.388901][ T5019] loop5: detected capacity change from 0 to 512 [ 49.397740][ T5019] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.405772][ T5019] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 49.417484][ T5019] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 49.421374][ T5023] loop6: detected capacity change from 0 to 1024 [ 49.425674][ T5019] EXT4-fs (loop5): orphan cleanup on readonly fs [ 49.432431][ T5023] EXT4-fs: Ignoring removed oldalloc option [ 49.439800][ T5019] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.641: Invalid block bitmap block 0 in block_group 0 [ 49.445255][ T5023] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 49.459973][ T5019] EXT4-fs (loop5): Remounting filesystem read-only [ 49.471059][ T5023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.474743][ T5019] EXT4-fs (loop5): 1 orphan inode deleted [ 49.493989][ T5019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.516969][ T4378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.545134][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.590396][ T5035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.653146][ T5040] loop5: detected capacity change from 0 to 512 [ 49.681486][ T5040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.696240][ T5040] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.726479][ T5045] netlink: 332 bytes leftover after parsing attributes in process `syz.1.651'. [ 49.848490][ T5052] netlink: 'syz.1.654': attribute type 16 has an invalid length. [ 49.856372][ T5052] netlink: 'syz.1.654': attribute type 3 has an invalid length. [ 49.864042][ T5052] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.654'. [ 49.922127][ T5057] netlink: 88 bytes leftover after parsing attributes in process `syz.1.657'. [ 49.984011][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.671'. [ 50.008340][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.028052][ T5074] SELinux: policydb version 0 does not match my version range 15-35 [ 50.037796][ T5074] SELinux: failed to load policy [ 50.038821][ T5068] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 50.059835][ T5080] loop4: detected capacity change from 0 to 512 [ 50.066369][ T5068] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 50.084861][ T5080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.111937][ T5080] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.243232][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.297297][ T5107] loop1: detected capacity change from 0 to 512 [ 50.335455][ T5107] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.480190][ T5133] netlink: 'syz.4.689': attribute type 16 has an invalid length. [ 50.488086][ T5133] netlink: 'syz.4.689': attribute type 3 has an invalid length. [ 50.495928][ T5133] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.689'. [ 50.524927][ T5139] openvswitch: netlink: Message has 6 unknown bytes. [ 50.572157][ T5145] loop4: detected capacity change from 0 to 1024 [ 50.579090][ T5145] EXT4-fs: Ignoring removed oldalloc option [ 50.596560][ T5145] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.784871][ T5180] loop6: detected capacity change from 0 to 1024 [ 50.803068][ T5180] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.109575][ T5221] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 51.132191][ T5221] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 51.296864][ T5226] loop2: detected capacity change from 0 to 512 [ 51.351923][ T5226] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.390466][ T5232] loop5: detected capacity change from 0 to 4096 [ 51.524165][ T5243] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 51.578347][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 51.578362][ T29] audit: type=1400 audit(1754771437.621:1059): avc: denied { read write } for pid=5251 comm="syz.5.739" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.622292][ T29] audit: type=1400 audit(1754771437.621:1060): avc: denied { open } for pid=5251 comm="syz.5.739" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.645865][ T29] audit: type=1400 audit(1754771437.661:1061): avc: denied { mounton } for pid=5255 comm="syz.2.741" path="/133/bus" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.669048][ T5260] loop2: detected capacity change from 0 to 512 [ 51.710569][ T5260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.730566][ T29] audit: type=1400 audit(1754771437.751:1062): avc: denied { mounton } for pid=5255 comm="syz.2.741" path="/133/bus" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.773734][ T5260] EXT4-fs (loop2): failed to initialize system zone (-117) [ 51.871413][ T5260] EXT4-fs (loop2): mount failed [ 51.911381][ T29] audit: type=1400 audit(1754771437.961:1063): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 51.951289][ T29] audit: type=1400 audit(1754771438.001:1064): avc: denied { read } for pid=5273 comm="syz.5.757" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.975456][ T29] audit: type=1400 audit(1754771438.001:1065): avc: denied { open } for pid=5273 comm="syz.5.757" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.052050][ T5278] loop2: detected capacity change from 0 to 4096 [ 52.062325][ T29] audit: type=1400 audit(1754771438.061:1066): avc: denied { ioctl } for pid=5273 comm="syz.5.757" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.096398][ T29] audit: type=1326 audit(1754771438.141:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 52.133383][ T29] audit: type=1326 audit(1754771438.171:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 52.237388][ T5302] batadv1: entered promiscuous mode [ 52.242853][ T5302] batadv1: entered allmulticast mode [ 52.313909][ T5314] loop6: detected capacity change from 0 to 128 [ 52.322954][ T5314] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.509135][ T5338] geneve2: entered promiscuous mode [ 52.514540][ T5338] geneve2: entered allmulticast mode [ 52.582361][ T5354] __nla_validate_parse: 4 callbacks suppressed [ 52.582379][ T5354] netlink: 3 bytes leftover after parsing attributes in process `syz.6.782'. [ 52.621263][ T5354] batadv1: entered promiscuous mode [ 52.626549][ T5354] batadv1: entered allmulticast mode [ 52.645662][ T5363] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 52.666867][ T5362] loop4: detected capacity change from 0 to 1024 [ 52.677671][ T5362] EXT4-fs: Ignoring removed orlov option [ 52.683430][ T5362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.796824][ T5383] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 52.941305][ T5395] netlink: 552 bytes leftover after parsing attributes in process `syz.2.804'. [ 52.950465][ T5395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 53.022952][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 53.031860][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 53.167950][ T5426] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.315391][ T5449] IPv6: Can't replace route, no match found [ 53.383920][ T5458] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.664077][ T5491] random: crng reseeded on system resumption [ 53.771339][ T5506] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.834117][ T5515] pim6reg: entered allmulticast mode [ 53.842500][ T5515] pim6reg: left allmulticast mode [ 53.928482][ T1038] hid_parser_main: 26 callbacks suppressed [ 53.928500][ T1038] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.952317][ T1038] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.201937][ T5564] pim6reg: entered allmulticast mode [ 54.221608][ T5564] pim6reg: left allmulticast mode [ 54.306796][ T5576] SELinux: failed to load policy [ 54.318365][ T5580] netlink: 'syz.2.900': attribute type 3 has an invalid length. [ 54.333831][ T922] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.347044][ T922] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.642846][ T5605] SELinux: ebitmap: truncated map [ 54.660889][ T5605] SELinux: failed to load policy [ 54.828949][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.839294][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.906355][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.916720][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.964527][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.974922][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.033157][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.043553][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.172806][ T5651] chnl_net:caif_netlink_parms(): no params data found [ 55.204915][ T51] bridge_slave_1: left allmulticast mode [ 55.210629][ T51] bridge_slave_1: left promiscuous mode [ 55.216301][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.225537][ T51] bridge_slave_0: left allmulticast mode [ 55.231481][ T51] bridge_slave_0: left promiscuous mode [ 55.237149][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.353253][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.364297][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.374793][ T51] bond0 (unregistering): Released all slaves [ 55.383338][ T51] bond1 (unregistering): Released all slaves [ 55.413026][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.420235][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.427564][ T5651] bridge_slave_0: entered allmulticast mode [ 55.434129][ T5651] bridge_slave_0: entered promiscuous mode [ 55.442356][ T51] hsr_slave_0: left promiscuous mode [ 55.448032][ T51] hsr_slave_1: left promiscuous mode [ 55.453869][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.461256][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.468727][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.476191][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.485936][ T51] veth1_macvtap: left promiscuous mode [ 55.491439][ T51] veth0_macvtap: left promiscuous mode [ 55.496968][ T51] veth1_vlan: left promiscuous mode [ 55.502280][ T51] veth0_vlan: left promiscuous mode [ 55.554917][ T51] team0 (unregistering): Port device team_slave_1 removed [ 55.564980][ T51] team0 (unregistering): Port device team_slave_0 removed [ 55.609443][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.616556][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.632925][ T5651] bridge_slave_1: entered allmulticast mode [ 55.654456][ T5651] bridge_slave_1: entered promiscuous mode [ 55.691076][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.715026][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.730653][ T5722] netlink: 5 bytes leftover after parsing attributes in process `syz.4.953'. [ 55.741347][ T5722] 0{X功: renamed from gretap0 (while UP) [ 55.742040][ T5721] ref_ctr_offset mismatch. inode: 0x491 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 55.767788][ T5722] 0{X功: entered allmulticast mode [ 55.774543][ T5722] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 55.799799][ T5651] team0: Port device team_slave_0 added [ 55.806699][ T5651] team0: Port device team_slave_1 added [ 55.841072][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.848058][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.874049][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.891206][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.898187][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.924163][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.996651][ T5651] hsr_slave_0: entered promiscuous mode [ 56.013068][ T5651] hsr_slave_1: entered promiscuous mode [ 56.020923][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 56.026670][ T5651] Cannot create hsr debugfs directory [ 56.173361][ T5651] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.191181][ T5651] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.212829][ T5651] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.225138][ T5651] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.258434][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.265544][ T5651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.272879][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.279964][ T5651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.308120][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.323620][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.333163][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.347436][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.361728][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.368867][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.393868][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.401007][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.460855][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.494094][ T5651] veth0_vlan: entered promiscuous mode [ 56.502625][ T5651] veth1_vlan: entered promiscuous mode [ 56.519351][ T5651] veth0_macvtap: entered promiscuous mode [ 56.529229][ T5651] veth1_macvtap: entered promiscuous mode [ 56.542539][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.559260][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.570703][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.585777][ T294] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.594858][ T294] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.614694][ T294] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.615118][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 56.615132][ T29] audit: type=1400 audit(1754771442.661:1310): avc: denied { mounton } for pid=5651 comm="syz-executor" path="/root/syzkaller.nkfoGM/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 56.669859][ T29] audit: type=1400 audit(1754771442.681:1311): avc: denied { mount } for pid=5651 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.692012][ T29] audit: type=1400 audit(1754771442.681:1312): avc: denied { mounton } for pid=5651 comm="syz-executor" path="/root/syzkaller.nkfoGM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.718843][ T29] audit: type=1400 audit(1754771442.681:1313): avc: denied { mounton } for pid=5651 comm="syz-executor" path="/root/syzkaller.nkfoGM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.746507][ T29] audit: type=1400 audit(1754771442.711:1314): avc: denied { mounton } for pid=5651 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.769589][ T29] audit: type=1400 audit(1754771442.711:1315): avc: denied { mount } for pid=5651 comm="syz-executor" name="/" dev="gadgetfs" ino=3689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.796860][ T29] audit: type=1400 audit(1754771442.841:1316): avc: denied { mount } for pid=5802 comm="syz.5.979" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.849778][ T5816] 9pnet_fd: Insufficient options for proto=fd [ 56.872563][ T29] audit: type=1400 audit(1754771442.841:1317): avc: denied { unmount } for pid=5802 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.892549][ T29] audit: type=1400 audit(1754771442.911:1318): avc: denied { name_connect } for pid=5817 comm="syz.7.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 56.921558][ T5825] vlan2: entered allmulticast mode [ 56.926733][ T5825] macvlan0: entered allmulticast mode [ 56.932221][ T5825] veth1_vlan: entered allmulticast mode [ 56.993820][ T5833] netlink: 'syz.4.993': attribute type 9 has an invalid length. [ 57.001584][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 57.017707][ T294] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.027943][ T294] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.037425][ T5833] netlink: 'syz.4.993': attribute type 9 has an invalid length. [ 57.045115][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 57.057603][ T294] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.067352][ T294] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.255072][ T5846] SELinux: ebitmap: truncated map [ 57.268677][ T5846] SELinux: failed to load policy [ 57.362734][ T5861] vlan2: entered allmulticast mode [ 57.367875][ T5861] macvlan0: entered allmulticast mode [ 57.373301][ T5861] veth1_vlan: entered allmulticast mode [ 57.388072][ T29] audit: type=1326 audit(1754771443.431:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1563beebe9 code=0x7ffc0000 [ 57.520632][ T5876] SELinux: ebitmap: truncated map [ 57.527809][ T5876] SELinux: failed to load policy [ 57.551409][ T5881] loop7: detected capacity change from 0 to 1024 [ 57.561395][ T5881] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 57.573257][ T5881] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.604117][ T5881] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.1015: lblock 3 mapped to illegal pblock 3 (length 13) [ 57.632564][ T5881] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 57.645102][ T5881] EXT4-fs (loop7): This should not happen!! Data will be lost [ 57.645102][ T5881] [ 57.728785][ T5901] loop7: detected capacity change from 0 to 2048 [ 57.762363][ T5901] Alternate GPT is invalid, using primary GPT. [ 57.768773][ T5901] loop7: p2 p3 p7 [ 57.856080][ T5910] vlan2: entered allmulticast mode [ 57.861354][ T5910] macvlan0: entered allmulticast mode [ 57.866805][ T5910] veth1_vlan: entered allmulticast mode [ 57.880443][ T5908] loop7: detected capacity change from 0 to 512 [ 58.060262][ T5934] syz.5.1039 (5934) used greatest stack depth: 9440 bytes left [ 58.326548][ T5950] vlan2: entered allmulticast mode [ 58.331760][ T5950] macvlan0: entered allmulticast mode [ 58.337216][ T5950] veth1_vlan: entered allmulticast mode [ 58.705324][ T5996] vhci_hcd: invalid port number 96 [ 58.710612][ T5996] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 58.855774][ T6015] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 59.322229][ T6045] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 59.370259][ T3377] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 59.377938][ T3377] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 59.388127][ T6048] loop7: detected capacity change from 0 to 512 [ 59.394522][ T3377] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 59.405427][ T3377] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 59.424843][ T6048] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.593138][ T6082] syz_tun: entered allmulticast mode [ 59.607291][ T6081] syz_tun: left allmulticast mode [ 59.828902][ T6114] geneve2: entered promiscuous mode [ 59.834200][ T6114] geneve2: entered allmulticast mode [ 59.922480][ T6128] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1122'. [ 59.937801][ T6128] 0{X功: renamed from gretap0 (while UP) [ 59.951586][ T6128] 0{X功: entered allmulticast mode [ 59.978107][ T6128] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 60.064482][ T6155] geneve2: entered promiscuous mode [ 60.069856][ T6155] geneve2: entered allmulticast mode [ 60.113118][ T6162] loop7: detected capacity change from 0 to 512 [ 60.132540][ T6162] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.180264][ T6175] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1141'. [ 60.193661][ T6175] 0{X功: renamed from gretap0 (while UP) [ 60.203884][ T6175] 0{X功: entered allmulticast mode [ 60.210414][ T6175] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 60.263795][ T6180] vhci_hcd: invalid port number 96 [ 60.268678][ T6182] SELinux: failed to load policy [ 60.268965][ T6180] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 60.482029][ T6199] geneve2: entered promiscuous mode [ 60.487270][ T6199] geneve2: entered allmulticast mode [ 60.879818][ T6206] syzkaller1: entered promiscuous mode [ 60.885324][ T6206] syzkaller1: entered allmulticast mode [ 60.895943][ T6211] loop7: detected capacity change from 0 to 512 [ 60.903047][ T6211] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 60.938282][ T6211] EXT4-fs (loop7): 1 truncate cleaned up [ 61.055127][ T6222] vhci_hcd: invalid port number 96 [ 61.060298][ T6222] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 61.268937][ T6230] batadv_slave_1: entered promiscuous mode [ 61.286479][ T6229] batadv_slave_1: left promiscuous mode [ 61.334416][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 61.341890][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.349333][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.356749][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.364621][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.373994][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.381705][ T3384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.390445][ T3384] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.655446][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 61.655460][ T29] audit: type=1400 audit(1754771447.701:1417): avc: denied { connect } for pid=6256 comm="syz.7.1179" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.759267][ T29] audit: type=1326 audit(1754771447.801:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 61.782761][ T29] audit: type=1326 audit(1754771447.801:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 61.806464][ T29] audit: type=1326 audit(1754771447.801:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 61.829871][ T29] audit: type=1326 audit(1754771447.801:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 61.853276][ T29] audit: type=1326 audit(1754771447.801:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 61.988284][ T29] audit: type=1326 audit(1754771447.901:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 62.011955][ T29] audit: type=1326 audit(1754771447.901:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 62.035526][ T29] audit: type=1326 audit(1754771447.901:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 62.059064][ T29] audit: type=1326 audit(1754771447.901:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.7.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1f91ebe9 code=0x7ffc0000 [ 62.296834][ T6304] tipc: Started in network mode [ 62.301856][ T6304] tipc: Node identity ac14140f, cluster identity 4711 [ 62.322520][ T6304] tipc: New replicast peer: 255.255.255.255 [ 62.328677][ T6304] tipc: Enabled bearer , priority 10 [ 62.490791][ T6319] ALSA: seq fatal error: cannot create timer (-22) [ 62.625109][ T6341] pim6reg1: entered promiscuous mode [ 62.630516][ T6341] pim6reg1: entered allmulticast mode [ 62.664199][ T6347] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1219'. [ 62.781732][ T6359] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 62.789583][ T6359] SELinux: failed to load policy [ 63.439454][ T10] tipc: Node number set to 2886997007 [ 63.501950][ T6373] vhci_hcd: invalid port number 96 [ 63.507088][ T6373] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 63.514693][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1233'. [ 63.577764][ T6391] capability: warning: `syz.7.1238' uses deprecated v2 capabilities in a way that may be insecure [ 63.610714][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.644991][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.007581][ T6446] loop1: detected capacity change from 0 to 1024 [ 64.017422][ T6446] EXT4-fs: Ignoring removed orlov option [ 64.046931][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 64.127328][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 64.136335][ T6466] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1273'. [ 64.146111][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 64.352994][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1284'. [ 64.572019][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 65.227988][ T6584] __nla_validate_parse: 2 callbacks suppressed [ 65.228003][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 65.301089][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 65.529761][ T291] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 66.008752][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1343'. [ 66.086492][ T6646] loop7: detected capacity change from 0 to 1024 [ 66.093440][ T6646] EXT4-fs: Ignoring removed orlov option [ 67.040360][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 67.040375][ T29] audit: type=1400 audit(1754771453.091:1630): avc: denied { read write } for pid=6682 comm="syz.1.1376" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.042072][ T3404] hid_parser_main: 25 callbacks suppressed [ 67.042089][ T3404] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 67.076004][ T29] audit: type=1400 audit(1754771453.091:1631): avc: denied { open } for pid=6682 comm="syz.1.1376" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.087940][ T6683] loop1: detected capacity change from 0 to 1024 [ 67.130909][ T6683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.139423][ T6683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.148288][ T3404] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.159814][ T29] audit: type=1400 audit(1754771453.161:1632): avc: denied { create } for pid=6684 comm="syz.7.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.162463][ T6683] EXT4-fs mount: 28 callbacks suppressed [ 67.162477][ T6683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.180519][ T29] audit: type=1400 audit(1754771453.161:1633): avc: denied { write } for pid=6684 comm="syz.7.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.244397][ T29] audit: type=1400 audit(1754771453.291:1634): avc: denied { write } for pid=6682 comm="syz.1.1376" name="hidraw0" dev="devtmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.291549][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.324108][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 67.332079][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.346355][ T6703] loop7: detected capacity change from 0 to 1024 [ 67.365876][ T6703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.385232][ T6703] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.407022][ T6710] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.1374'. [ 67.407305][ T6703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.456219][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 67.474077][ T29] audit: type=1326 audit(1754771453.501:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.6.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 67.497738][ T29] audit: type=1326 audit(1754771453.501:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.6.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 67.521165][ T29] audit: type=1326 audit(1754771453.501:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.6.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 67.521601][ T5651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.544690][ T29] audit: type=1326 audit(1754771453.501:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.6.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 67.577055][ T29] audit: type=1326 audit(1754771453.521:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.6.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f123faeebe9 code=0x7ffc0000 [ 67.730958][ T3384] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.752264][ T3384] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.816621][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 67.850623][ T6757] loop7: detected capacity change from 0 to 512 [ 67.850774][ T6760] netlink: 'syz.5.1400': attribute type 4 has an invalid length. [ 67.858600][ T6757] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 67.893864][ T6757] EXT4-fs (loop7): 1 truncate cleaned up [ 67.903356][ T6757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.910146][ T6762] infiniband syz2: set active [ 67.920614][ T6762] infiniband syz2: added bond0 [ 67.931506][ T6762] RDS/IB: syz2: added [ 67.935672][ T6762] smc: adding ib device syz2 with port count 1 [ 67.941962][ T6762] smc: ib device syz2 port 1 has pnetid [ 67.959140][ T5651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.985103][ T6768] loop7: detected capacity change from 0 to 1024 [ 67.993446][ T6768] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.005218][ T6768] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.1403: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.022416][ T6768] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1403: Failed to acquire dquot type 0 [ 68.034017][ T6768] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.1403: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.050002][ T6768] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1403: Invalid inode bitmap blk 0 in block_group 0 [ 68.062856][ T6768] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 68.071630][ T31] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.072384][ T6768] EXT4-fs (loop7): 1 orphan inode deleted [ 68.086252][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 68.104679][ T6768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.134213][ T5651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.575909][ T6781] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.1409'. [ 68.608788][ T6799] bridge0: entered promiscuous mode [ 68.615369][ T6799] bridge0: port 3(macsec1) entered blocking state [ 68.621851][ T6799] bridge0: port 3(macsec1) entered disabled state [ 68.629691][ T6799] macsec1: entered allmulticast mode [ 68.635060][ T6799] bridge0: entered allmulticast mode [ 68.645731][ T6799] macsec1: left allmulticast mode [ 68.650855][ T6799] bridge0: left allmulticast mode [ 68.666351][ T6799] bridge0: left promiscuous mode [ 68.736944][ T6814] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 68.858057][ T6825] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1429'. [ 68.951768][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 68.984166][ T6844] bridge0: entered promiscuous mode [ 68.997510][ T6844] bridge0: port 3(macsec1) entered blocking state [ 69.004132][ T6844] bridge0: port 3(macsec1) entered disabled state [ 69.013671][ T6844] macsec1: entered allmulticast mode [ 69.018977][ T6844] bridge0: entered allmulticast mode [ 69.025332][ T6844] macsec1: left allmulticast mode [ 69.030488][ T6844] bridge0: left allmulticast mode [ 69.036211][ T6844] bridge0: left promiscuous mode [ 69.958331][ T6854] ================================================================== [ 69.966443][ T6854] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 69.975047][ T6854] [ 69.977364][ T6854] write to 0xffff88811f470be8 of 8 bytes by task 6860 on cpu 0: [ 69.984993][ T6854] shmem_file_splice_read+0x470/0x600 [ 69.990379][ T6854] splice_direct_to_actor+0x26f/0x680 [ 69.995758][ T6854] do_splice_direct+0xda/0x150 [ 70.000524][ T6854] do_sendfile+0x380/0x650 [ 70.004959][ T6854] __x64_sys_sendfile64+0x105/0x150 [ 70.010191][ T6854] x64_sys_call+0x2bb0/0x2ff0 [ 70.014876][ T6854] do_syscall_64+0xd2/0x200 [ 70.019392][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.025372][ T6854] [ 70.027701][ T6854] write to 0xffff88811f470be8 of 8 bytes by task 6854 on cpu 1: [ 70.035330][ T6854] shmem_file_splice_read+0x470/0x600 [ 70.040711][ T6854] splice_direct_to_actor+0x26f/0x680 [ 70.046085][ T6854] do_splice_direct+0xda/0x150 [ 70.050844][ T6854] do_sendfile+0x380/0x650 [ 70.055266][ T6854] __x64_sys_sendfile64+0x105/0x150 [ 70.060478][ T6854] x64_sys_call+0x2bb0/0x2ff0 [ 70.065152][ T6854] do_syscall_64+0xd2/0x200 [ 70.069670][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.075562][ T6854] [ 70.077882][ T6854] value changed: 0x000000000000a5fd -> 0x000000000000a600 [ 70.084984][ T6854] [ 70.087300][ T6854] Reported by Kernel Concurrency Sanitizer on: [ 70.093462][ T6854] CPU: 1 UID: 0 PID: 6854 Comm: syz.5.1441 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 70.105617][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.115666][ T6854] ==================================================================