last executing test programs: 2.361859549s ago: executing program 0 (id=956): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20620, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socket$phonet(0x23, 0x2, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) 2.187623136s ago: executing program 2 (id=957): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 2.169950947s ago: executing program 2 (id=958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) tee(r3, r5, 0x4e, 0x0) 1.464270757s ago: executing program 0 (id=970): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000004, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0x6, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.451839028s ago: executing program 0 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc441}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.330928003s ago: executing program 0 (id=972): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) open_by_handle_at(r1, &(0x7f0000000300)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x3, 0x80000000}, {0x9, 0x6, 0xf3}}}, 0x800002) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x111, 0x58bd2c, 0x25dfdbff, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 1.287695515s ago: executing program 2 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.225781808s ago: executing program 2 (id=976): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x70000}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}, 0x0]) 1.225158198s ago: executing program 0 (id=977): unshare(0x68040200) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.088463833s ago: executing program 2 (id=980): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x8) 846.596604ms ago: executing program 3 (id=989): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r0, 0x2340, 0x6d49, 0x54, 0x0, 0x0) 796.519796ms ago: executing program 3 (id=990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x27a, &(0x7f0000000440)="$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") creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) statfs(&(0x7f0000000200)='.\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000004, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) 698.72316ms ago: executing program 4 (id=992): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") socketpair$unix(0x1, 0x1, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000bfff000009"], 0x48) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700"/23, 0x17}], 0x15, 0x2009c00, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f00000003c0)=0x400, 0x12) 568.439645ms ago: executing program 4 (id=994): socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 509.006188ms ago: executing program 3 (id=995): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x18, 0x0, 0x0, 0xfffffffffdffffff}) 491.763749ms ago: executing program 0 (id=996): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 428.425302ms ago: executing program 1 (id=997): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xb, 0x30, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 413.812152ms ago: executing program 2 (id=998): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x702, @mcast1, 0x6d589036}}, 0x9}, &(0x7f0000000080)=0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffffc, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x800, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6]}, &(0x7f0000000000)=0x100) 404.630212ms ago: executing program 1 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 353.467265ms ago: executing program 4 (id=1000): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 353.148935ms ago: executing program 1 (id=1001): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) 207.524861ms ago: executing program 4 (id=1002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x898, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x6, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x3, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0xffffffb8, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x18, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x1, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xfc, 0x8, 0x2c1efe9, 0x4, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x80000010, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 206.772241ms ago: executing program 1 (id=1012): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000600)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 150.813243ms ago: executing program 4 (id=1003): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) finit_module(r3, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0) 150.164643ms ago: executing program 1 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 118.142915ms ago: executing program 1 (id=1004): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 116.503384ms ago: executing program 3 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001000000000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 68.408097ms ago: executing program 4 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x27a, &(0x7f0000000440)="$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") creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) statfs(&(0x7f0000000200)='.\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000004, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) 21.614269ms ago: executing program 3 (id=1007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0x288fa1cf, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="959a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 0s ago: executing program 3 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010b00000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 23.852061][ T29] audit: type=1400 audit(1764727692.381:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.874992][ T29] audit: type=1400 audit(1764727692.401:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.875732][ T3305] cgroup: Unknown subsys name 'net' [ 23.902623][ T29] audit: type=1400 audit(1764727692.431:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.019453][ T3305] cgroup: Unknown subsys name 'cpuset' [ 24.025455][ T3305] cgroup: Unknown subsys name 'rlimit' [ 24.234139][ T29] audit: type=1400 audit(1764727692.761:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.258769][ T29] audit: type=1400 audit(1764727692.761:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.279243][ T29] audit: type=1400 audit(1764727692.761:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.281824][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.299586][ T29] audit: type=1400 audit(1764727692.761:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.328333][ T29] audit: type=1400 audit(1764727692.771:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.353218][ T29] audit: type=1400 audit(1764727692.771:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.366705][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k Setting up swapspace version 1, size = 127995904 bytes [ 24.376416][ T29] audit: type=1400 audit(1764727692.841:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.524641][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 25.545744][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.599251][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 25.614701][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 25.677081][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.684213][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.691369][ T3317] bridge_slave_0: entered allmulticast mode [ 25.697856][ T3317] bridge_slave_0: entered promiscuous mode [ 25.710677][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.717723][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.724917][ T3316] bridge_slave_0: entered allmulticast mode [ 25.731238][ T3316] bridge_slave_0: entered promiscuous mode [ 25.740054][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.747103][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.754226][ T3317] bridge_slave_1: entered allmulticast mode [ 25.760678][ T3317] bridge_slave_1: entered promiscuous mode [ 25.772457][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.779602][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.786777][ T3316] bridge_slave_1: entered allmulticast mode [ 25.793390][ T3316] bridge_slave_1: entered promiscuous mode [ 25.825822][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.832952][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.840066][ T3326] bridge_slave_0: entered allmulticast mode [ 25.846409][ T3326] bridge_slave_0: entered promiscuous mode [ 25.854731][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.861825][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.868928][ T3326] bridge_slave_1: entered allmulticast mode [ 25.875384][ T3326] bridge_slave_1: entered promiscuous mode [ 25.887166][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.897300][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.906603][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 25.924846][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.934726][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.950917][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.957963][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.965138][ T3320] bridge_slave_0: entered allmulticast mode [ 25.971491][ T3320] bridge_slave_0: entered promiscuous mode [ 25.990659][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.999801][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.006842][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.014175][ T3320] bridge_slave_1: entered allmulticast mode [ 26.020507][ T3320] bridge_slave_1: entered promiscuous mode [ 26.041368][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.060548][ T3316] team0: Port device team_slave_0 added [ 26.067182][ T3317] team0: Port device team_slave_0 added [ 26.084018][ T3316] team0: Port device team_slave_1 added [ 26.090319][ T3317] team0: Port device team_slave_1 added [ 26.098513][ T3326] team0: Port device team_slave_0 added [ 26.105423][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.125356][ T3326] team0: Port device team_slave_1 added [ 26.132055][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.162367][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.169334][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.195220][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.206167][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.213148][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.239042][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.262311][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.269268][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.295163][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.306046][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.313059][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.339043][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.349778][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.356851][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.364136][ T3325] bridge_slave_0: entered allmulticast mode [ 26.370538][ T3325] bridge_slave_0: entered promiscuous mode [ 26.377030][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.383983][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.409968][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.421216][ T3320] team0: Port device team_slave_0 added [ 26.432067][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.439223][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.446496][ T3325] bridge_slave_1: entered allmulticast mode [ 26.452700][ T3325] bridge_slave_1: entered promiscuous mode [ 26.459109][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.466026][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.491987][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.503418][ T3320] team0: Port device team_slave_1 added [ 26.542009][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.561019][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.567959][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.593871][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.607648][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.614650][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.640629][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.652333][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.663157][ T3316] hsr_slave_0: entered promiscuous mode [ 26.669184][ T3316] hsr_slave_1: entered promiscuous mode [ 26.696676][ T3317] hsr_slave_0: entered promiscuous mode [ 26.702682][ T3317] hsr_slave_1: entered promiscuous mode [ 26.708383][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 26.714151][ T3317] Cannot create hsr debugfs directory [ 26.722226][ T3326] hsr_slave_0: entered promiscuous mode [ 26.728124][ T3326] hsr_slave_1: entered promiscuous mode [ 26.733976][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 26.739696][ T3326] Cannot create hsr debugfs directory [ 26.751514][ T3325] team0: Port device team_slave_0 added [ 26.777284][ T3325] team0: Port device team_slave_1 added [ 26.799168][ T3320] hsr_slave_0: entered promiscuous mode [ 26.805090][ T3320] hsr_slave_1: entered promiscuous mode [ 26.810982][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 26.816684][ T3320] Cannot create hsr debugfs directory [ 26.844974][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.851943][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.877863][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.895203][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.902253][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.928156][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.029322][ T3325] hsr_slave_0: entered promiscuous mode [ 27.035254][ T3325] hsr_slave_1: entered promiscuous mode [ 27.041160][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 27.046858][ T3325] Cannot create hsr debugfs directory [ 27.117764][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.126140][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.138506][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.149406][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.171665][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.180670][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.190194][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.201402][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.225510][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.235153][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.244246][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.255908][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.285143][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.297110][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.305875][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.318991][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.337789][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.350799][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.360363][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.370688][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.388372][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.417037][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.438092][ T2065] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.445447][ T2065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.462055][ T2065] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.469099][ T2065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.483535][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.506813][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.521141][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.534258][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.541379][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.560388][ T1861] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.567603][ T1861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.581472][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.591425][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.603232][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.610356][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.625546][ T2065] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.632680][ T2065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.649810][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.672569][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.685165][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.692288][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.700530][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.707747][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.734110][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.746724][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.789628][ T2065] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.796700][ T2065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.826933][ T2065] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.834025][ T2065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.875670][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.904064][ T3317] veth0_vlan: entered promiscuous mode [ 27.910814][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.923287][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.939423][ T3317] veth1_vlan: entered promiscuous mode [ 27.992743][ T3317] veth0_macvtap: entered promiscuous mode [ 28.010923][ T3317] veth1_macvtap: entered promiscuous mode [ 28.019993][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.064694][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.087741][ T3316] veth0_vlan: entered promiscuous mode [ 28.098522][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.112106][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.122592][ T3316] veth1_vlan: entered promiscuous mode [ 28.141838][ T3325] veth0_vlan: entered promiscuous mode [ 28.151126][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.172411][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.192193][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.208860][ T3316] veth0_macvtap: entered promiscuous mode [ 28.216115][ T3325] veth1_vlan: entered promiscuous mode [ 28.226607][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.233393][ T3325] veth0_macvtap: entered promiscuous mode [ 28.247903][ T3316] veth1_macvtap: entered promiscuous mode [ 28.262712][ T3326] veth0_vlan: entered promiscuous mode [ 28.280727][ T3325] veth1_macvtap: entered promiscuous mode [ 28.293036][ T3320] veth0_vlan: entered promiscuous mode [ 28.307723][ T3320] veth1_vlan: entered promiscuous mode [ 28.319110][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.334927][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.345240][ T3326] veth1_vlan: entered promiscuous mode [ 28.354027][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.366144][ T784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.376133][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.387119][ T3320] veth0_macvtap: entered promiscuous mode [ 28.400679][ T784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.409447][ T784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.421200][ T784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.436090][ T3320] veth1_macvtap: entered promiscuous mode [ 28.447286][ T784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.463188][ T784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.476571][ T784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.486483][ T3326] veth0_macvtap: entered promiscuous mode [ 28.501829][ T784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.524285][ T3326] veth1_macvtap: entered promiscuous mode [ 28.549301][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.568980][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.583529][ T2084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.612003][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.619798][ T2084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.633084][ T3501] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9'. [ 28.642701][ T2084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.653039][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.678418][ T2084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.693907][ T2084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.703867][ T2084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.728104][ T2084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.773115][ T2084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.822992][ T3519] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.14'. [ 28.859023][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 28.859038][ T29] audit: type=1400 audit(1764727697.391:120): avc: denied { getopt } for pid=3513 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.891845][ T29] audit: type=1400 audit(1764727697.391:121): avc: denied { connect } for pid=3513 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.911118][ T29] audit: type=1400 audit(1764727697.391:122): avc: denied { name_connect } for pid=3513 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 28.931056][ T29] audit: type=1400 audit(1764727697.421:123): avc: denied { read } for pid=3517 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.964550][ T29] audit: type=1326 audit(1764727697.441:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 28.987507][ T29] audit: type=1400 audit(1764727697.441:125): avc: denied { write } for pid=3513 comm="syz.1.2" lport=60319 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.009564][ T29] audit: type=1326 audit(1764727697.461:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 29.032601][ T29] audit: type=1326 audit(1764727697.461:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 29.055725][ T29] audit: type=1326 audit(1764727697.461:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 29.078833][ T29] audit: type=1326 audit(1764727697.461:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 29.128012][ T3527] loop0: detected capacity change from 0 to 2048 [ 29.169200][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.194979][ T3540] @0Ù: renamed from bond_slave_1 (while UP) [ 29.206733][ T3541] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.243504][ T3543] loop1: detected capacity change from 0 to 128 [ 29.297729][ T3316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 29.315428][ T3536] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19'. [ 29.361662][ T3316] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 29.371267][ T3545] loop4: detected capacity change from 0 to 512 [ 29.402999][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.423020][ T3545] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.497017][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.497017][ T12] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 29.522041][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.522041][ T12] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 29.543896][ T3545] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 29.552634][ T3545] FAT-fs (loop4): Filesystem has been set read-only [ 29.568927][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.568927][ T12] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 29.582958][ T3545] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 29.591313][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.591313][ T12] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 29.611267][ T3545] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 29.620306][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.620306][ T12] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 29.656974][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.656974][ T12] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 29.673626][ T3545] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 29.682713][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.682713][ T12] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 29.705244][ T3557] loop2: detected capacity change from 0 to 512 [ 29.734447][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.734447][ T12] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 29.738848][ T3557] EXT4-fs: Ignoring removed i_version option [ 29.753877][ T3557] EXT4-fs: Ignoring removed bh option [ 29.783230][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.783230][ T12] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 29.822989][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.839111][ T12] kworker/u8:0: attempt to access beyond end of device [ 29.839111][ T12] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 29.899489][ T3571] ======================================================= [ 29.899489][ T3571] WARNING: The mand mount option has been deprecated and [ 29.899489][ T3571] and is ignored by this kernel. Remove the mand [ 29.899489][ T3571] option from the mount to silence this warning. [ 29.899489][ T3571] ======================================================= [ 29.913589][ T3557] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.060989][ T3561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 30.111384][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.285700][ T3591] process 'syz.4.41' launched '/dev/fd/4' with NULL argv: empty string added [ 30.433521][ T3602] loop3: detected capacity change from 0 to 256 [ 30.494252][ T3602] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 30.501603][ T3602] FAT-fs (loop3): Filesystem has been set read-only [ 30.518448][ T3602] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 30.532838][ T3602] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 30.604178][ T3608] loop0: detected capacity change from 0 to 1024 [ 30.653463][ T3608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.665911][ T3608] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.699860][ T3608] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: comm syz.0.49: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.713565][ T3608] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 30.725958][ T3608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.725958][ T3608] [ 30.752780][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.869626][ T3631] loop3: detected capacity change from 0 to 2048 [ 30.900066][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.963623][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.567989][ T3684] SELinux: ebitmap: truncated map [ 31.576463][ T3684] SELinux: failed to load policy [ 31.586206][ T3762] loop1: detected capacity change from 0 to 512 [ 31.592885][ T3762] EXT4-fs: Ignoring removed nobh option [ 31.599349][ T3762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.621963][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.636559][ T3762] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.660200][ T3766] loop4: detected capacity change from 0 to 128 [ 31.702473][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.723437][ T3768] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 31.818945][ T3772] netlink: 'syz.1.68': attribute type 21 has an invalid length. [ 31.826768][ T3772] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 31.834381][ T3772] netlink: 144 bytes leftover after parsing attributes in process `syz.1.68'. [ 32.084694][ T3784] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.246960][ T3801] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660 [ 32.266765][ T3806] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 32.750108][ T3839] netlink: 'syz.3.93': attribute type 12 has an invalid length. [ 32.974570][ T3859] loop0: detected capacity change from 0 to 1024 [ 32.989846][ T3859] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.134672][ T3859] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.99: Invalid block bitmap block 0 in block_group 0 [ 33.159884][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.167206][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.182298][ T3859] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.99: Failed to acquire dquot type 0 [ 33.198352][ T3859] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.99: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.218953][ T3859] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.99: Invalid inode bitmap blk 0 in block_group 0 [ 33.241520][ T3752] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 0 [ 33.251366][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.261802][ T3859] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 33.273456][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.281355][ T3859] EXT4-fs (loop0): 1 orphan inode deleted [ 33.293250][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.342651][ T3866] bridge0: port 3(gretap0) entered blocking state [ 33.349363][ T3866] bridge0: port 3(gretap0) entered disabled state [ 33.366016][ T3866] gretap0: entered allmulticast mode [ 33.376464][ T3866] gretap0: entered promiscuous mode [ 33.382158][ T3866] bridge0: port 3(gretap0) entered blocking state [ 33.388637][ T3866] bridge0: port 3(gretap0) entered forwarding state [ 33.396215][ T3872] gretap0: left allmulticast mode [ 33.399496][ T3859] syz.0.99 (3859) used greatest stack depth: 9232 bytes left [ 33.401675][ T3872] gretap0: left promiscuous mode [ 33.413697][ T3872] bridge0: port 3(gretap0) entered disabled state [ 33.425901][ T3752] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.455179][ T3752] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.470367][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.510993][ T3752] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.554507][ T3752] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.640678][ T3889] netlink: 96 bytes leftover after parsing attributes in process `syz.3.110'. [ 33.861455][ T3912] netlink: 96 bytes leftover after parsing attributes in process `syz.4.118'. [ 33.872622][ T3912] netlink: 96 bytes leftover after parsing attributes in process `syz.4.118'. [ 33.935349][ T3914] bridge_slave_0: left allmulticast mode [ 33.941086][ T3914] bridge_slave_0: left promiscuous mode [ 33.946857][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.956756][ T3914] bridge_slave_1: left allmulticast mode [ 33.962864][ T3914] bridge_slave_1: left promiscuous mode [ 33.968519][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.977213][ T3922] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 33.985052][ T3922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.119'. [ 33.995210][ T3914] bond0: (slave bond_slave_0): Releasing backup interface [ 34.005038][ T3914] bond0: (slave bond_slave_1): Releasing backup interface [ 34.016486][ T3914] team0: Port device team_slave_0 removed [ 34.024668][ T3914] team0: Port device team_slave_1 removed [ 34.031364][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.039472][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.047863][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.055329][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.064427][ T3914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 34.130548][ T3922] batman_adv: batadv0: Adding interface: veth1_vlan [ 34.137200][ T3922] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.162989][ T3922] batman_adv: batadv0: Interface activated: veth1_vlan [ 34.197707][ T3927] netlink: 204 bytes leftover after parsing attributes in process `syz.1.123'. [ 34.220793][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 34.220805][ T29] audit: type=1400 audit(1764727702.751:281): avc: denied { create } for pid=3928 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 34.264047][ T29] audit: type=1400 audit(1764727702.791:282): avc: denied { setopt } for pid=3930 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.311571][ T29] audit: type=1400 audit(1764727702.791:283): avc: denied { ioctl } for pid=3928 comm="syz.1.124" path="socket:[6183]" dev="sockfs" ino=6183 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 34.336061][ T29] audit: type=1400 audit(1764727702.821:284): avc: denied { shutdown } for pid=3930 comm="syz.0.125" laddr=fe80::f lport=54819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.381492][ T3939] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 34.399197][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 34.408497][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 34.436112][ T29] audit: type=1400 audit(1764727702.961:285): avc: denied { mount } for pid=3942 comm="syz.0.130" name="/" dev="configfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 34.460718][ T29] audit: type=1400 audit(1764727702.961:286): avc: denied { search } for pid=3942 comm="syz.0.130" name="/" dev="configfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.483371][ T29] audit: type=1400 audit(1764727702.991:287): avc: denied { search } for pid=3942 comm="syz.0.130" name="/" dev="configfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.506050][ T29] audit: type=1400 audit(1764727702.991:288): avc: denied { read open } for pid=3942 comm="syz.0.130" path="/" dev="configfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.560119][ T3947] loop0: detected capacity change from 0 to 1024 [ 34.566863][ T3947] EXT4-fs: inline encryption not supported [ 34.567856][ T3949] loop3: detected capacity change from 0 to 512 [ 34.579732][ T3949] EXT4-fs: Ignoring removed nobh option [ 34.585662][ T3949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.598192][ T3947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.600393][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.638658][ T3949] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.671053][ T3958] loop1: detected capacity change from 0 to 256 [ 34.690865][ T29] audit: type=1400 audit(1764727703.221:289): avc: denied { mount } for pid=3957 comm="syz.1.135" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.745603][ T3958] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 34.752963][ T3958] FAT-fs (loop1): Filesystem has been set read-only [ 34.759806][ T3958] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 34.777059][ T3958] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 34.786950][ T3947] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 34.809904][ T29] audit: type=1400 audit(1764727703.341:290): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.860904][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.873104][ T3947] EXT4-fs (loop0): Remounting filesystem read-only [ 34.917718][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.951837][ T3974] netlink: 96 bytes leftover after parsing attributes in process `syz.0.141'. [ 34.961946][ T3974] netlink: 96 bytes leftover after parsing attributes in process `syz.0.141'. [ 35.015607][ T3978] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 35.040444][ T3978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.071713][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 35.129449][ T3978] bond1 (unregistering): Released all slaves [ 35.221179][ T3997] netlink: 'syz.3.148': attribute type 13 has an invalid length. [ 35.359376][ T3997] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.366608][ T3997] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.496550][ T3997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.520762][ T3997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.588686][ T4023] Zero length message leads to an empty skb [ 35.594638][ T4027] syz_tun: entered allmulticast mode [ 35.600429][ T3752] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.610083][ T3752] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.619307][ T3752] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.629730][ T3752] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.641060][ T3996] syz_tun: left allmulticast mode [ 35.713428][ T4072] loop4: detected capacity change from 0 to 1024 [ 35.731109][ T4072] EXT4-fs: inline encryption not supported [ 35.752702][ T4072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.964008][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.976325][ T4108] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.160759][ T4151] loop1: detected capacity change from 0 to 1024 [ 36.170849][ T4151] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.191685][ T4151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.167: Invalid block bitmap block 0 in block_group 0 [ 36.205620][ T4151] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.167: Failed to acquire dquot type 0 [ 36.217564][ T4151] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.167: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.231729][ T4151] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.167: Invalid inode bitmap blk 0 in block_group 0 [ 36.245055][ T4151] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 36.253662][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 36.253779][ T4151] EXT4-fs (loop1): 1 orphan inode deleted [ 36.271909][ T4151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.318426][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.467282][ T4170] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.800674][ T4203] Illegal XDP return value 4294967274 on prog (id 159) dev N/A, expect packet loss! [ 37.091092][ T4255] bridge_slave_0: left allmulticast mode [ 37.096784][ T4255] bridge_slave_0: left promiscuous mode [ 37.102497][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.119135][ T4255] bridge_slave_1: left allmulticast mode [ 37.124847][ T4255] bridge_slave_1: left promiscuous mode [ 37.130609][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.147285][ T4255] bond0: (slave bond_slave_0): Releasing backup interface [ 37.162477][ T4255] bond0: (slave bond_slave_1): Releasing backup interface [ 37.171783][ T4272] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 37.180446][ T4268] netlink: 'syz.0.196': attribute type 13 has an invalid length. [ 37.188457][ T4255] team0: Port device team_slave_0 removed [ 37.195026][ T4255] team0: Port device team_slave_1 removed [ 37.201923][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.210013][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.222484][ T4255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 37.251288][ T4272] veth1_vlan: left promiscuous mode [ 37.261592][ T4272] batman_adv: batadv0: Adding interface: veth1_vlan [ 37.268205][ T4272] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.300263][ T4272] batman_adv: batadv0: Interface activated: veth1_vlan [ 37.543163][ T4268] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 37.584546][ T4284] syz_tun: entered allmulticast mode [ 37.598887][ T3752] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.627539][ T4267] syz_tun: left allmulticast mode [ 37.648974][ T3752] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.668315][ T3752] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.684074][ T4340] loop1: detected capacity change from 0 to 512 [ 37.695283][ T3752] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.714879][ T4340] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.827770][ T4340] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 37.837176][ T4340] FAT-fs (loop1): Filesystem has been set read-only [ 37.858844][ T4340] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 37.898218][ T4340] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 37.907387][ T4340] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 38.153557][ T4397] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 38.168441][ T4401] loop1: detected capacity change from 0 to 1024 [ 38.180904][ T4401] EXT4-fs: inline encryption not supported [ 38.215686][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.316337][ T4391] loop0: detected capacity change from 0 to 128 [ 38.330737][ T4391] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 38.338604][ T4391] FAT-fs (loop0): Filesystem has been set read-only [ 38.398889][ T4401] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 38.431400][ T4401] EXT4-fs (loop1): Remounting filesystem read-only [ 38.479195][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.654540][ T4438] __nla_validate_parse: 16 callbacks suppressed [ 38.654562][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 38.789428][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 38.790510][ T4445] loop2: detected capacity change from 0 to 512 [ 38.798299][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 38.821209][ T4445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.833018][ T4449] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 38.904248][ T4454] loop3: detected capacity change from 0 to 1024 [ 38.930011][ T4454] EXT4-fs: inline encryption not supported [ 38.939474][ T4445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.952296][ T4445] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.970721][ T4454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.033894][ T4454] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.256: Allocating blocks 497-513 which overlap fs metadata [ 39.050488][ T4454] EXT4-fs (loop3): Remounting filesystem read-only [ 39.077330][ T4452] EXT4-fs (loop3): pa ffff888106e5c1c0: logic 48, phys. 177, len 21 [ 39.111485][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.330907][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 39.330920][ T29] audit: type=1326 audit(1764727707.861:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.419985][ T29] audit: type=1326 audit(1764727707.891:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.443313][ T29] audit: type=1326 audit(1764727707.891:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.466529][ T29] audit: type=1326 audit(1764727707.891:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.489773][ T29] audit: type=1326 audit(1764727707.891:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.513027][ T29] audit: type=1326 audit(1764727707.891:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.536383][ T29] audit: type=1326 audit(1764727707.891:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.559622][ T29] audit: type=1326 audit(1764727707.891:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.582983][ T29] audit: type=1326 audit(1764727707.891:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.606241][ T29] audit: type=1326 audit(1764727707.891:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 39.641768][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.870566][ T4503] netlink: 19 bytes leftover after parsing attributes in process `syz.1.267'. [ 40.057455][ T4527] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 40.309833][ T4582] loop2: detected capacity change from 0 to 1024 [ 40.347334][ T4582] EXT4-fs: inline encryption not supported [ 40.390815][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.466906][ T4582] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.276: Allocating blocks 497-513 which overlap fs metadata [ 40.629382][ T4582] EXT4-fs (loop2): Remounting filesystem read-only [ 40.692717][ T4580] EXT4-fs (loop2): pa ffff888106dc9150: logic 48, phys. 177, len 21 [ 40.743930][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.790260][ T4513] 9pnet_fd: p9_fd_create_tcp (4513): problem connecting socket to 127.0.0.1 [ 40.799442][ T4598] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 40.848824][ T4598] bond1: entered promiscuous mode [ 40.854028][ T4598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.883188][ T4598] bond1: (slave bridge1): making interface the new active one [ 40.890707][ T4598] bridge1: entered promiscuous mode [ 40.913109][ T4598] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 41.116678][ T4630] syzkaller0: entered promiscuous mode [ 41.122270][ T4630] syzkaller0: entered allmulticast mode [ 41.130689][ T4634] loop1: detected capacity change from 0 to 512 [ 41.138120][ T4634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.149357][ T2084] syzkaller0: tun_net_xmit 48 [ 41.163482][ T4634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.184997][ T4630] syzkaller0: tun_net_xmit 1280 [ 41.190038][ T4630] syzkaller0: create flow: hash 3648326886 index 1 [ 41.208506][ T4634] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.238473][ T4629] syzkaller0: delete flow: hash 3648326886 index 1 [ 41.313032][ T4645] loop4: detected capacity change from 0 to 4096 [ 41.327016][ T4645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.564473][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.734175][ T4674] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.782125][ T4674] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.823377][ T4682] syz.2.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.837825][ T4674] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.886946][ T4687] loop2: detected capacity change from 0 to 512 [ 41.904059][ T4687] EXT4-fs: inline encryption not supported [ 41.924513][ T4687] EXT4-fs (loop2): failed to initialize system zone (-117) [ 41.929633][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.934032][ T4687] EXT4-fs (loop2): mount failed [ 41.942364][ T4674] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.976405][ T4692] loop3: detected capacity change from 0 to 512 [ 41.987275][ T4692] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.020997][ T4692] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 42.029755][ T4692] FAT-fs (loop3): Filesystem has been set read-only [ 42.036725][ T4692] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 42.051937][ T4692] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 42.072370][ T4307] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.090875][ T4307] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.106845][ T4692] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 42.128052][ T4307] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.161045][ T4307] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.714917][ T4770] loop4: detected capacity change from 0 to 512 [ 42.737455][ T4770] EXT4-fs: inline encryption not supported [ 42.758446][ T4770] EXT4-fs (loop4): failed to initialize system zone (-117) [ 42.778943][ T4770] EXT4-fs (loop4): mount failed [ 43.051382][ T4779] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 43.303628][ T4802] loop4: detected capacity change from 0 to 512 [ 43.312447][ T4802] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.346309][ T4804] bridge: RTM_NEWNEIGH with invalid ether address [ 43.357493][ T4802] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 43.366872][ T4802] FAT-fs (loop4): Filesystem has been set read-only [ 43.382721][ T4802] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 43.435716][ T4802] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 43.444853][ T4802] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 43.491976][ T4811] loop0: detected capacity change from 0 to 256 [ 43.528408][ T4811] FAT-fs (loop0): Directory bread(block 64) failed [ 43.536472][ T4811] FAT-fs (loop0): Directory bread(block 65) failed [ 43.543614][ T4811] FAT-fs (loop0): Directory bread(block 66) failed [ 43.550215][ T4811] FAT-fs (loop0): Directory bread(block 67) failed [ 43.557756][ T4811] FAT-fs (loop0): Directory bread(block 68) failed [ 43.565189][ T4811] FAT-fs (loop0): Directory bread(block 69) failed [ 43.572763][ T4811] FAT-fs (loop0): Directory bread(block 70) failed [ 43.579756][ T4811] FAT-fs (loop0): Directory bread(block 71) failed [ 43.586388][ T4811] FAT-fs (loop0): Directory bread(block 72) failed [ 43.603092][ T4819] loop4: detected capacity change from 0 to 4096 [ 43.606141][ T4811] FAT-fs (loop0): Directory bread(block 73) failed [ 43.618260][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.641008][ T4821] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 43.641108][ T4811] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 43.657997][ T4811] FAT-fs (loop0): Filesystem has been set read-only [ 43.664873][ T4811] bio_check_eod: 102 callbacks suppressed [ 43.664887][ T4811] syz.0.352: attempt to access beyond end of device [ 43.664887][ T4811] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 43.684594][ T4811] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 43.693396][ T4811] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 43.702437][ T4811] syz.0.352: attempt to access beyond end of device [ 43.702437][ T4811] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 43.715722][ T4811] syz.0.352: attempt to access beyond end of device [ 43.715722][ T4811] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 43.729049][ T4811] syz.0.352: attempt to access beyond end of device [ 43.729049][ T4811] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 43.742488][ T4811] syz.0.352: attempt to access beyond end of device [ 43.742488][ T4811] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 43.823119][ T4831] bridge: RTM_NEWNEIGH with invalid ether address [ 43.879754][ T4833] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 43.936510][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.973611][ T4843] syz_tun: entered allmulticast mode [ 43.997768][ T4843] dvmrp8: entered allmulticast mode [ 44.026634][ T4840] syz_tun: left allmulticast mode [ 44.103740][ T4856] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.324694][ T4877] loop4: detected capacity change from 0 to 512 [ 44.336525][ T4877] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 44.337199][ T4879] syz_tun: entered allmulticast mode [ 44.352522][ T4877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 44.360973][ T4877] System zones: 1-12 [ 44.365302][ T4877] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.371800][ T4877] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.383: Inode bitmap for bg 0 marked uninitialized [ 44.388793][ T4877] EXT4-fs (loop4): Remounting filesystem read-only [ 44.396199][ T4877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.418275][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.462942][ T4879] dvmrp8: entered allmulticast mode [ 44.474113][ T4878] syz_tun: left allmulticast mode [ 44.603992][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 44.604004][ T29] audit: type=1400 audit(1764727713.131:556): avc: denied { setcheckreqprot } for pid=4900 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.609441][ T4901] loop0: detected capacity change from 0 to 512 [ 44.639720][ T4901] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.662659][ T4901] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.677604][ T4901] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.393: bg 0: block 248: padding at end of block bitmap is not set [ 44.693670][ T4901] Quota error (device loop0): write_blk: dquota write failed [ 44.701118][ T4901] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 44.711206][ T4901] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.393: Failed to acquire dquot type 1 [ 44.724114][ T4901] EXT4-fs (loop0): 1 truncate cleaned up [ 44.730449][ T4901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 44.744200][ T4901] syz.0.393 (4901) used greatest stack depth: 8976 bytes left [ 44.766709][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 45.018439][ T4918] syz_tun: entered allmulticast mode [ 45.036391][ T4918] dvmrp8: entered allmulticast mode [ 45.051707][ T4917] syz_tun: left allmulticast mode [ 45.208787][ T29] audit: type=1400 audit(1764727713.741:557): avc: denied { getopt } for pid=4923 comm="syz.2.401" lport=34295 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 45.238871][ T4926] sctp: [Deprecated]: syz.2.401 (pid 4926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.238871][ T4926] Use struct sctp_sack_info instead [ 45.271669][ C0] hrtimer: interrupt took 47080 ns [ 45.334474][ T4940] veth2: entered promiscuous mode [ 45.339708][ T4940] veth2: entered allmulticast mode [ 45.389033][ T29] audit: type=1400 audit(1764727713.911:558): avc: denied { bind } for pid=4942 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.408336][ T29] audit: type=1400 audit(1764727713.921:559): avc: denied { listen } for pid=4942 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.459382][ T29] audit: type=1400 audit(1764727713.971:560): avc: denied { setopt } for pid=4942 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.479494][ T29] audit: type=1400 audit(1764727713.971:561): avc: denied { write } for pid=4942 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.498823][ T29] audit: type=1400 audit(1764727713.971:562): avc: denied { accept } for pid=4942 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.518827][ T29] audit: type=1400 audit(1764727713.971:563): avc: denied { read } for pid=4942 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.549998][ T4959] syz_tun: entered allmulticast mode [ 45.570695][ T4962] netlink: 204 bytes leftover after parsing attributes in process `syz.3.413'. [ 45.581728][ T4959] dvmrp8: entered allmulticast mode [ 45.624172][ T4958] syz_tun: left allmulticast mode [ 45.806431][ T4994] loop3: detected capacity change from 0 to 2048 [ 45.849550][ T4994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.875161][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.073013][ T5050] syzkaller0: entered promiscuous mode [ 46.078672][ T5050] syzkaller0: entered allmulticast mode [ 46.085064][ T3742] syzkaller0: tun_net_xmit 48 [ 46.103624][ T5050] syzkaller0: tun_net_xmit 1280 [ 46.108563][ T5050] syzkaller0: create flow: hash 3648326886 index 1 [ 46.117891][ T5049] syzkaller0: delete flow: hash 3648326886 index 1 [ 47.335334][ T5141] loop4: detected capacity change from 0 to 512 [ 47.336719][ T5142] syz_tun: entered allmulticast mode [ 47.352810][ T5141] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.361250][ T5142] dvmrp8: entered allmulticast mode [ 47.375696][ T5143] loop2: detected capacity change from 0 to 4096 [ 47.380420][ T5140] syz_tun: left allmulticast mode [ 47.395641][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.429776][ T5143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.466931][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.488089][ T5152] loop3: detected capacity change from 0 to 128 [ 47.526569][ T5152] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.544773][ T3539] udevd[3539]: failed to send result of seq 8373 to main daemon: Connection refused [ 47.555654][ T3310] udevd[3310]: failed to send result of seq 8369 to main daemon: Transport endpoint is not connected [ 47.567939][ T3308] udevd[3308]: failed to send result of seq 8371 to main daemon: Transport endpoint is not connected [ 47.593091][ T5156] udevd[5156]: failed to send result of seq 8374 to main daemon: Transport endpoint is not connected [ 47.726158][ T5161] syzkaller0: entered promiscuous mode [ 47.731697][ T5161] syzkaller0: entered allmulticast mode [ 47.756242][ T4747] syzkaller0: tun_net_xmit 48 [ 47.772165][ T5169] loop4: detected capacity change from 0 to 7 [ 47.793908][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.802409][ T5169] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.822301][ T5169] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.830312][ T5169] loop4: unable to read partition table [ 47.849222][ T5169] loop_reread_partitions: partition scan of loop4 (úùƒåP=ý?ã}X‹ºÐ œëÜ%õ«) failed (rc=-5) [ 47.861793][ T5161] syzkaller0: tun_net_xmit 1280 [ 47.866717][ T5161] syzkaller0: create flow: hash 3648326886 index 1 [ 47.882236][ T5159] syzkaller0: delete flow: hash 3648326886 index 1 [ 47.921508][ T5182] loop2: detected capacity change from 0 to 512 [ 47.928259][ T5182] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 47.938772][ T5182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 47.946694][ T5182] System zones: 1-12 [ 47.951640][ T5182] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.958191][ T5182] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.451: Inode bitmap for bg 0 marked uninitialized [ 47.971680][ T5182] EXT4-fs (loop2): Remounting filesystem read-only [ 47.990999][ T5182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.019051][ T5188] netlink: 204 bytes leftover after parsing attributes in process `syz.0.460'. [ 48.090694][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.199282][ T5211] loop1: detected capacity change from 0 to 256 [ 48.211031][ T5211] FAT-fs (loop1): Directory bread(block 64) failed [ 48.218060][ T5211] FAT-fs (loop1): Directory bread(block 65) failed [ 48.232484][ T5211] FAT-fs (loop1): Directory bread(block 66) failed [ 48.240791][ T5211] FAT-fs (loop1): Directory bread(block 67) failed [ 48.252529][ T5216] loop2: detected capacity change from 0 to 512 [ 48.263540][ T5211] FAT-fs (loop1): Directory bread(block 68) failed [ 48.274188][ T5211] FAT-fs (loop1): Directory bread(block 69) failed [ 48.281401][ T5211] FAT-fs (loop1): Directory bread(block 70) failed [ 48.288537][ T5211] FAT-fs (loop1): Directory bread(block 71) failed [ 48.295299][ T5216] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.295375][ T5211] FAT-fs (loop1): Directory bread(block 72) failed [ 48.311558][ T5211] FAT-fs (loop1): Directory bread(block 73) failed [ 48.332024][ T5216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.365007][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.403535][ T5227] loop0: detected capacity change from 0 to 4096 [ 48.419655][ T5211] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 48.428229][ T5211] FAT-fs (loop1): Filesystem has been set read-only [ 48.435614][ T5211] syz.1.464: attempt to access beyond end of device [ 48.435614][ T5211] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 48.452682][ T5211] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 48.461642][ T5211] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 48.470498][ T5211] syz.1.464: attempt to access beyond end of device [ 48.470498][ T5211] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 48.485183][ T5211] syz.1.464: attempt to access beyond end of device [ 48.485183][ T5211] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 48.499245][ T5211] syz.1.464: attempt to access beyond end of device [ 48.499245][ T5211] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 48.512970][ T5211] syz.1.464: attempt to access beyond end of device [ 48.512970][ T5211] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 48.513266][ T5227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.587461][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.770765][ T5251] loop2: detected capacity change from 0 to 4096 [ 48.809417][ T5251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.846784][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.919497][ T5258] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.163507][ T5273] loop3: detected capacity change from 0 to 8192 [ 49.184713][ T5273] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.337850][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 49.352835][ T5308] team1: entered promiscuous mode [ 49.357893][ T5308] team1: entered allmulticast mode [ 49.586633][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 49.600953][ T5351] team2: entered promiscuous mode [ 49.606019][ T5351] team2: entered allmulticast mode [ 49.611739][ T5351] 8021q: adding VLAN 0 to HW filter on device team2 [ 49.673497][ T5364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5364 comm=syz.4.517 [ 49.680026][ T5363] loop1: detected capacity change from 0 to 2048 [ 49.687090][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.517'. [ 49.718422][ T5369] Bluetooth: hci0: Frame reassembly failed (-90) [ 49.726274][ T4750] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.732704][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.749847][ T5366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.837185][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 49.837268][ T29] audit: type=1400 audit(1764727718.361:680): avc: denied { bind } for pid=5377 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.863332][ T29] audit: type=1326 audit(1764727718.401:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.3.527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b7a8ff749 code=0x0 [ 49.894363][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.930632][ T5385] openvswitch: netlink: Missing key (keys=40, expected=80) [ 49.950968][ T29] audit: type=1400 audit(1764727718.481:682): avc: denied { write } for pid=5386 comm="syz.1.530" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.979519][ T5387] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.986829][ T5387] vhci_hcd: invalid port number 96 [ 49.992010][ T5387] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 50.458763][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 50.505985][ T29] audit: type=1400 audit(1764727719.031:683): avc: denied { write } for pid=5404 comm="syz.4.537" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.528934][ T29] audit: type=1400 audit(1764727719.031:684): avc: denied { open } for pid=5404 comm="syz.4.537" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.555562][ T29] audit: type=1400 audit(1764727719.031:685): avc: denied { ioctl } for pid=5404 comm="syz.4.537" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.758967][ T29] audit: type=1326 audit(1764727719.291:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7a8ff749 code=0x7ffc0000 [ 50.782553][ T29] audit: type=1326 audit(1764727719.291:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f3b7a8ff749 code=0x7ffc0000 [ 50.805797][ T29] audit: type=1326 audit(1764727719.291:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7a8ff749 code=0x7ffc0000 [ 50.829026][ T29] audit: type=1326 audit(1764727719.291:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3b7a8ff749 code=0x7ffc0000 [ 50.861768][ T5419] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.925086][ T5427] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 51.079154][ T5437] netlink: 'syz.3.551': attribute type 7 has an invalid length. [ 51.086802][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 51.127855][ T5441] loop3: detected capacity change from 0 to 128 [ 51.341661][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 51.719042][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.733861][ T5484] loop4: detected capacity change from 0 to 4096 [ 51.744562][ T5484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.803898][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.832559][ T5493] syzkaller1: entered promiscuous mode [ 51.838039][ T5493] syzkaller1: entered allmulticast mode [ 51.874369][ T5495] syzkaller0: entered promiscuous mode [ 51.879887][ T5495] syzkaller0: entered allmulticast mode [ 52.014020][ T5514] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 52.104845][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 52.115172][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 52.160627][ T5540] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 52.201267][ T5547] loop0: detected capacity change from 0 to 1024 [ 52.225541][ T5547] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.248651][ T5547] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #3: block 1: comm syz.0.595: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.273812][ T5547] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.595: Failed to acquire dquot type 0 [ 52.289504][ T5547] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.595: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.303135][ T5547] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.595: Invalid inode bitmap blk 0 in block_group 0 [ 52.315847][ T4738] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.336040][ T5547] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 52.344887][ T5547] EXT4-fs (loop0): 1 orphan inode deleted [ 52.351857][ T4738] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:40: Failed to release dquot type 0 [ 52.352529][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.394915][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.409833][ T4704] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.424475][ T4704] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 0 [ 52.564195][ T5585] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.605'. [ 52.570757][ T5576] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.573312][ T5585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 52.669871][ T5594] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 52.684651][ T5594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.726674][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.738803][ T5594] bond1: (slave batadv1): making interface the new active one [ 52.747568][ T5594] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 52.756581][ T5599] loop1: detected capacity change from 0 to 512 [ 52.764450][ T5599] EXT4-fs: dax option not supported [ 52.789266][ T5605] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 52.805129][ T5605] macvlan2: entered promiscuous mode [ 52.810515][ T5605] macvlan2: entered allmulticast mode [ 52.816290][ T5605] bond1: entered promiscuous mode [ 52.821567][ T5605] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 52.830014][ T5605] bond1: left promiscuous mode [ 53.152807][ T5629] mmap: syz.1.629 (5629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.234511][ T5635] capability: warning: `syz.1.632' uses 32-bit capabilities (legacy support in use) [ 53.343767][ T5641] macsec1: entered promiscuous mode [ 53.349120][ T5641] bridge0: entered promiscuous mode [ 53.355235][ T5641] bridge0: port 3(macsec1) entered blocking state [ 53.361907][ T5641] bridge0: port 3(macsec1) entered disabled state [ 53.368783][ T5641] macsec1: entered allmulticast mode [ 53.374091][ T5641] bridge0: entered allmulticast mode [ 53.380398][ T5641] macsec1: left allmulticast mode [ 53.385440][ T5641] bridge0: left allmulticast mode [ 53.391905][ T5641] bridge0: left promiscuous mode [ 53.469951][ T5650] ip6gre1: entered promiscuous mode [ 53.510989][ T5645] netlink: 'syz.4.637': attribute type 2 has an invalid length. [ 53.941113][ T5679] loop0: detected capacity change from 0 to 764 [ 54.223064][ T5701] syzkaller0: entered promiscuous mode [ 54.228595][ T5701] syzkaller0: entered allmulticast mode [ 54.378770][ T5710] __nla_validate_parse: 6 callbacks suppressed [ 54.378784][ T5710] netlink: 59060 bytes leftover after parsing attributes in process `syz.1.665'. [ 54.394533][ T5710] netlink: zone id is out of range [ 54.399712][ T5710] netlink: zone id is out of range [ 54.402550][ T5708] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.408472][ T5710] netlink: zone id is out of range [ 54.417269][ T5710] netlink: zone id is out of range [ 54.417779][ T5708] vhci_hcd: invalid port number 96 [ 54.422411][ T5710] netlink: zone id is out of range [ 54.427500][ T5708] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 54.432726][ T5710] netlink: zone id is out of range [ 54.444887][ T5710] netlink: zone id is out of range [ 54.450027][ T5710] netlink: zone id is out of range [ 54.455127][ T5710] netlink: zone id is out of range [ 54.480474][ T5717] loop3: detected capacity change from 0 to 1024 [ 54.509281][ T5717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.522631][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 54.605555][ T5731] loop2: detected capacity change from 0 to 1024 [ 54.615721][ T5731] EXT4-fs: Ignoring removed bh option [ 54.761139][ T5731] EXT4-fs: inline encryption not supported [ 54.773575][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.784198][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 54.793085][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 54.808930][ T5731] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.839061][ T5731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 54.847991][ T5731] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 2: comm syz.2.673: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.867448][ T5742] loop3: detected capacity change from 0 to 512 [ 54.891463][ T5731] __quota_error: 63 callbacks suppressed [ 54.891555][ T5731] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 54.938697][ T5731] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 48: comm syz.2.673: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.979886][ T29] audit: type=1400 audit(1764727723.491:749): avc: denied { connect } for pid=5747 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.016626][ T5731] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 55.025485][ T5731] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.673: Failed to acquire dquot type 0 [ 55.060384][ T5731] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 55.089692][ T5731] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.673: mark_inode_dirty error [ 55.104810][ T5731] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 55.115470][ T5731] EXT4-fs (loop2): 1 orphan inode deleted [ 55.121835][ T5731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.138168][ T4704] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.166346][ T4704] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 55.174870][ T4704] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 0 [ 55.205216][ T5758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.685'. [ 55.238221][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.247846][ T3317] EXT4-fs error (device loop2): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 55.268824][ T29] audit: type=1326 audit(1764727723.801:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 55.293523][ T3317] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 55.317198][ T3317] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 55.325098][ T29] audit: type=1326 audit(1764727723.801:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 55.351697][ T29] audit: type=1326 audit(1764727723.801:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 55.374965][ T29] audit: type=1326 audit(1764727723.801:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 55.398199][ T29] audit: type=1326 audit(1764727723.801:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 55.421479][ T29] audit: type=1326 audit(1764727723.801:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f5b91f749 code=0x7ffc0000 [ 55.621352][ T5790] loop0: detected capacity change from 0 to 1024 [ 55.628242][ T5790] EXT4-fs: Ignoring removed orlov option [ 55.634582][ T5785] netlink: 'syz.4.697': attribute type 10 has an invalid length. [ 55.642709][ T5785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.697'. [ 55.692485][ T5790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.775748][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.790007][ T5785] team0: Port device geneve1 added [ 55.813947][ T5800] net_ratelimit: 3495 callbacks suppressed [ 55.813962][ T5800] bond_slave_1: mtu less than device minimum [ 55.868834][ T5808] loop4: detected capacity change from 0 to 512 [ 55.883722][ T5808] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.896912][ T5808] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 55.949019][ T5817] pim6reg: entered allmulticast mode [ 55.955747][ T5817] pim6reg: left allmulticast mode [ 55.962145][ T5808] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.707: bg 0: block 255: padding at end of block bitmap is not set [ 55.977970][ T5808] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 55.986958][ T5808] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.707: invalid indirect mapped block 1 (level 1) [ 56.000463][ T5808] EXT4-fs (loop4): 1 truncate cleaned up [ 56.007140][ T5808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.008892][ T5820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.036818][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.040438][ T5820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.210363][ T5844] Cannot find add_set index 3 as target [ 56.244563][ T5852] tipc: Started in network mode [ 56.249488][ T5852] tipc: Node identity 56da924bf532, cluster identity 4711 [ 56.256726][ T5852] tipc: Enabled bearer , priority 0 [ 56.264221][ T5854] loop1: detected capacity change from 0 to 164 [ 56.264701][ T5852] +: renamed from syzkaller0 [ 56.276960][ T5852] tipc: Disabling bearer [ 56.283483][ T5854] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.296797][ T5854] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.305768][ T5854] rock: directory entry would overflow storage [ 56.312013][ T5854] rock: sig=0x4f50, size=4, remaining=3 [ 56.317572][ T5854] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.924378][ T5903] loop1: detected capacity change from 0 to 1024 [ 57.012306][ T5903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.049323][ T5918] loop3: detected capacity change from 0 to 512 [ 57.071623][ T5918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.091155][ T5903] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 57.121266][ T5918] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.141304][ T5918] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.750: bg 0: block 360: padding at end of block bitmap is not set [ 57.148980][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.211532][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.280148][ T5940] netlink: 64 bytes leftover after parsing attributes in process `syz.3.755'. [ 57.418145][ T5961] loop2: detected capacity change from 0 to 1024 [ 57.428773][ T5961] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.439673][ T5961] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.451034][ T5961] JBD2: no valid journal superblock found [ 57.456759][ T5961] EXT4-fs (loop2): Could not load journal inode [ 57.467033][ T5961] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 57.549033][ T5974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.560418][ T5976] netlink: 59060 bytes leftover after parsing attributes in process `syz.4.772'. [ 57.569972][ T5976] netlink: zone id is out of range [ 57.575238][ T5976] netlink: zone id is out of range [ 57.582244][ T5976] netlink: zone id is out of range [ 57.587353][ T5976] netlink: zone id is out of range [ 57.592490][ T5976] netlink: zone id is out of range [ 57.597664][ T5976] netlink: zone id is out of range [ 57.602859][ T5976] netlink: zone id is out of range [ 57.607959][ T5976] netlink: zone id is out of range [ 57.613080][ T5976] netlink: zone id is out of range [ 57.623476][ T5979] loop1: detected capacity change from 0 to 1024 [ 57.644853][ T5979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.658401][ T5974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.696243][ T5974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.713451][ T5985] loop4: detected capacity change from 0 to 1024 [ 57.724052][ T5985] EXT4-fs: Ignoring removed orlov option [ 57.730180][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.744230][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.744339][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 57.771697][ T5988] team1: entered promiscuous mode [ 57.776753][ T5988] team1: entered allmulticast mode [ 57.794386][ T5974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.828059][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.837424][ T5992] loop3: detected capacity change from 0 to 1024 [ 57.844275][ T5992] EXT4-fs: Ignoring removed bh option [ 57.850145][ T5992] EXT4-fs: inline encryption not supported [ 57.857754][ T5992] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.876814][ T4750] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.893527][ T4750] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.904468][ T5992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 57.906010][ T4750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.922782][ T5992] EXT4-fs error (device loop3): ext4_map_blocks:777: inode #3: block 2: comm syz.3.777: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.936810][ T5992] EXT4-fs error (device loop3): ext4_map_blocks:777: inode #3: block 48: comm syz.3.777: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.951152][ T4741] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.951186][ T5992] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.777: Failed to acquire dquot type 0 [ 57.970797][ T5992] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 57.980476][ T5992] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.777: mark_inode_dirty error [ 57.991825][ T5992] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 58.002352][ T5992] EXT4-fs (loop3): 1 orphan inode deleted [ 58.008522][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.021051][ T4750] EXT4-fs error (device loop3): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:50: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.036703][ T4750] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:50: Failed to release dquot type 0 [ 58.111613][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.121744][ T3325] EXT4-fs error (device loop3): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.135334][ T3325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 58.147193][ T3325] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 58.160981][ T6012] loop4: detected capacity change from 0 to 1024 [ 58.175078][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 58.200163][ T6012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.260416][ T6022] loop1: detected capacity change from 0 to 4096 [ 58.269606][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.313907][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.373231][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.467235][ T6053] loop3: detected capacity change from 0 to 4096 [ 58.532928][ T6061] loop4: detected capacity change from 0 to 8192 [ 58.540361][ T6061] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.559781][ T6067] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.567132][ T6067] vhci_hcd: invalid port number 96 [ 58.572341][ T6067] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 58.591800][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.612271][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.054212][ T6109] loop4: detected capacity change from 0 to 1024 [ 59.060867][ T6109] EXT4-fs: Ignoring removed bh option [ 59.066406][ T6109] EXT4-fs: inline encryption not supported [ 59.073524][ T6109] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.084626][ T6109] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 59.093746][ T6109] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #3: block 2: comm syz.4.826: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.108058][ T6109] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #3: block 48: comm syz.4.826: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.122334][ T6109] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.826: Failed to acquire dquot type 0 [ 59.133800][ T6109] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 59.143838][ T6109] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.826: mark_inode_dirty error [ 59.155140][ T6109] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 59.165788][ T6109] EXT4-fs (loop4): 1 orphan inode deleted [ 59.178768][ T4756] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.207923][ T4756] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 0 [ 59.225937][ T6114] loop2: detected capacity change from 0 to 1024 [ 59.231241][ T3326] EXT4-fs error (device loop4): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 59.245833][ T3326] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 59.255868][ T3326] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 59.370981][ T6121] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 59.425661][ T6121] team0: Port device geneve1 added [ 59.434283][ T6125] netlink: 'syz.1.830': attribute type 15 has an invalid length. [ 59.442233][ T6125] netlink: 'syz.1.830': attribute type 7 has an invalid length. [ 59.449883][ T6125] __nla_validate_parse: 3 callbacks suppressed [ 59.449896][ T6125] netlink: 52 bytes leftover after parsing attributes in process `syz.1.830'. [ 59.627312][ T6146] macsec1: entered promiscuous mode [ 59.632614][ T6146] bridge0: entered promiscuous mode [ 59.640046][ T6146] bridge0: port 1(macsec1) entered blocking state [ 59.646744][ T6146] bridge0: port 1(macsec1) entered disabled state [ 59.653856][ T6146] macsec1: entered allmulticast mode [ 59.659206][ T6146] bridge0: entered allmulticast mode [ 59.665479][ T6146] macsec1: left allmulticast mode [ 59.670629][ T6146] bridge0: left allmulticast mode [ 59.676545][ T6146] bridge0: left promiscuous mode [ 59.749800][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 59.765844][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 59.767319][ T6155] team3: entered promiscuous mode [ 59.780315][ T6155] team3: entered allmulticast mode [ 59.789214][ T6155] 8021q: adding VLAN 0 to HW filter on device team3 [ 59.828145][ T6164] loop0: detected capacity change from 0 to 164 [ 59.852646][ T6164] ISOFS: unable to read i-node block [ 59.859825][ T6164] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 59.924116][ T6177] netlink: 168 bytes leftover after parsing attributes in process `syz.4.853'. [ 59.924634][ T6176] macsec1: entered promiscuous mode [ 59.938344][ T6176] bridge0: entered promiscuous mode [ 59.958914][ T6176] bridge0: port 1(macsec1) entered blocking state [ 59.965385][ T6176] bridge0: port 1(macsec1) entered disabled state [ 59.975915][ T6182] loop2: detected capacity change from 0 to 1024 [ 59.982213][ T6176] macsec1: entered allmulticast mode [ 59.987579][ T6176] bridge0: entered allmulticast mode [ 59.993738][ T6176] macsec1: left allmulticast mode [ 59.998838][ T6176] bridge0: left allmulticast mode [ 60.004472][ T6176] bridge0: left promiscuous mode [ 60.038461][ T6182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.236391][ T6200] loop0: detected capacity change from 0 to 128 [ 60.501786][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.520179][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.547570][ T6211] loop0: detected capacity change from 0 to 512 [ 60.560114][ T6211] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.867: inode has both inline data and extents flags [ 60.585218][ T6211] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.867: couldn't read orphan inode 15 (err -117) [ 60.612014][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 60.612029][ T29] audit: type=1400 audit(1764727729.141:907): avc: denied { append } for pid=6210 comm="syz.0.867" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.656130][ T6217] loop0: detected capacity change from 0 to 1024 [ 60.695196][ T6217] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.917254][ T6237] syzkaller0: entered promiscuous mode [ 60.922843][ T6237] syzkaller0: entered allmulticast mode [ 61.006676][ T29] audit: type=1326 audit(1764727729.531:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.030677][ T29] audit: type=1326 audit(1764727729.531:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.053968][ T29] audit: type=1326 audit(1764727729.531:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.076983][ T29] audit: type=1326 audit(1764727729.531:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.100352][ T29] audit: type=1326 audit(1764727729.531:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.123739][ T29] audit: type=1326 audit(1764727729.531:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.146946][ T29] audit: type=1326 audit(1764727729.531:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.170343][ T29] audit: type=1326 audit(1764727729.531:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.193575][ T29] audit: type=1326 audit(1764727729.531:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1373bf749 code=0x7ffc0000 [ 61.203748][ T6246] loop1: detected capacity change from 0 to 512 [ 61.234066][ T6246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.251535][ T6246] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.374931][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 61.390533][ T6272] team1: entered promiscuous mode [ 61.395718][ T6272] team1: entered allmulticast mode [ 61.401461][ T6272] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.497323][ T6282] loop0: detected capacity change from 0 to 4096 [ 61.504412][ T6282] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.947383][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 61.963910][ T6306] team1: entered promiscuous mode [ 61.969048][ T6306] team1: entered allmulticast mode [ 61.974370][ T6306] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.992961][ T6308] loop0: detected capacity change from 0 to 512 [ 62.000211][ T6308] EXT4-fs: dax option not supported [ 62.117977][ T6320] loop0: detected capacity change from 0 to 4096 [ 62.285167][ T6333] syzkaller0: entered promiscuous mode [ 62.290728][ T6333] syzkaller0: entered allmulticast mode [ 62.323847][ T6335] random: crng reseeded on system resumption [ 62.680788][ T6345] loop2: detected capacity change from 0 to 4096 [ 62.687664][ T6345] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 62.752037][ T6350] loop0: detected capacity change from 0 to 512 [ 62.759772][ T6350] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.759794][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 62.949733][ T6367] loop4: detected capacity change from 0 to 128 [ 62.961109][ T6367] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 62.969046][ T6367] FAT-fs (loop4): Filesystem has been set read-only [ 62.975967][ T6367] syz.4.928: attempt to access beyond end of device [ 62.975967][ T6367] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 62.990324][ T6367] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 62.998311][ T6367] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 63.007273][ T6367] syz.4.928: attempt to access beyond end of device [ 63.007273][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.020997][ T6367] syz.4.928: attempt to access beyond end of device [ 63.020997][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.034815][ T6367] syz.4.928: attempt to access beyond end of device [ 63.034815][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.049370][ T6367] syz.4.928: attempt to access beyond end of device [ 63.049370][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.062602][ T6367] syz.4.928: attempt to access beyond end of device [ 63.062602][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.076122][ T6367] syz.4.928: attempt to access beyond end of device [ 63.076122][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.089428][ T6367] syz.4.928: attempt to access beyond end of device [ 63.089428][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.102808][ T6367] syz.4.928: attempt to access beyond end of device [ 63.102808][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.116306][ T6367] syz.4.928: attempt to access beyond end of device [ 63.116306][ T6367] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.263935][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'. [ 63.470379][ T6378] loop2: detected capacity change from 0 to 4096 [ 63.477955][ T6378] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.502667][ T6380] loop1: detected capacity change from 0 to 4096 [ 63.563264][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 63.575508][ T6386] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 63.610397][ T6386] bond1: (slave bridge2): making interface the new active one [ 63.618278][ T6386] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 63.632836][ T6392] loop1: detected capacity change from 0 to 128 [ 63.794096][ T6403] loop1: detected capacity change from 0 to 128 [ 63.982682][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 63.999413][ T6417] team2: entered promiscuous mode [ 64.004478][ T6417] team2: entered allmulticast mode [ 64.014669][ T6417] 8021q: adding VLAN 0 to HW filter on device team2 [ 64.025429][ T6420] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.562225][ T6448] netlink: 'syz.3.959': attribute type 15 has an invalid length. [ 64.570018][ T6448] netlink: 'syz.3.959': attribute type 7 has an invalid length. [ 64.577634][ T6448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.959'. [ 64.599489][ T6450] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 64.616646][ T6450] macvlan2: entered promiscuous mode [ 64.622041][ T6450] macvlan2: entered allmulticast mode [ 64.627969][ T6450] bond2: entered promiscuous mode [ 64.633276][ T6450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.641359][ T6450] bond2: left promiscuous mode [ 65.009836][ T6467] loop4: detected capacity change from 0 to 2048 [ 65.087303][ T6468] loop1: detected capacity change from 0 to 4096 [ 65.108295][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 65.209584][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 65.301799][ T6493] loop2: detected capacity change from 0 to 128 [ 65.558906][ T6508] lo: entered allmulticast mode [ 65.583924][ T6508] lo: entered promiscuous mode [ 65.588814][ T6508] lo: left allmulticast mode [ 65.649043][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 65.677142][ T6491] netlink: 'syz.0.977': attribute type 2 has an invalid length. [ 65.732117][ T6527] loop3: detected capacity change from 0 to 128 [ 65.740077][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 65.740091][ T29] audit: type=1400 audit(1764727734.271:1124): avc: denied { name_bind } for pid=6528 comm="syz.4.991" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 65.793417][ T6531] loop4: detected capacity change from 0 to 2048 [ 65.810401][ T6531] EXT4-fs mount: 28 callbacks suppressed [ 65.810417][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.831439][ T29] audit: type=1400 audit(1764727734.361:1125): avc: denied { read write open } for pid=6530 comm="syz.4.992" path="/178/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.855963][ T6535] loop1: detected capacity change from 0 to 128 [ 65.903759][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.924589][ T29] audit: type=1400 audit(1764727734.451:1126): avc: denied { create } for pid=6534 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.943974][ T29] audit: type=1400 audit(1764727734.451:1127): avc: denied { bind } for pid=6534 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.963152][ T29] audit: type=1400 audit(1764727734.451:1128): avc: denied { write } for pid=6534 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.030028][ T6543] loop3: detected capacity change from 0 to 512 [ 66.046345][ T6542] loop0: detected capacity change from 0 to 1024 [ 66.053097][ T6543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.068880][ T6542] EXT4-fs: Ignoring removed orlov option [ 66.080634][ T6542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.106762][ T6543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.131810][ T6543] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.181198][ T29] audit: type=1326 audit(1764727734.691:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 66.204703][ T29] audit: type=1326 audit(1764727734.691:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 66.228132][ T29] audit: type=1326 audit(1764727734.691:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 66.251616][ T29] audit: type=1326 audit(1764727734.691:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 66.275012][ T29] audit: type=1326 audit(1764727734.691:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3e30f749 code=0x7ffc0000 [ 66.365548][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 66.393791][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.441726][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 66.450650][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 66.463434][ T6573] loop4: detected capacity change from 0 to 128 [ 66.531954][ T6542] ================================================================== [ 66.540057][ T6542] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 66.547177][ T6542] [ 66.549495][ T6542] write to 0xffff88811b861c9c of 4 bytes by task 6562 on cpu 1: [ 66.557112][ T6542] xas_set_mark+0x12b/0x140 [ 66.561628][ T6542] __folio_start_writeback+0x155/0x390 [ 66.567079][ T6542] ext4_bio_write_folio+0x5ad/0x9f0 [ 66.572274][ T6542] mpage_process_page_bufs+0x4a1/0x620 [ 66.577725][ T6542] mpage_prepare_extent_to_map+0x781/0xbf0 [ 66.583522][ T6542] ext4_do_writepages+0xa05/0x2750 [ 66.588623][ T6542] ext4_writepages+0x176/0x300 [ 66.593374][ T6542] do_writepages+0x1c6/0x310 [ 66.597947][ T6542] file_write_and_wait_range+0x156/0x2c0 [ 66.603578][ T6542] generic_buffers_fsync_noflush+0x45/0x130 [ 66.609461][ T6542] ext4_sync_file+0x1ab/0x690 [ 66.614128][ T6542] vfs_fsync_range+0x10d/0x130 [ 66.618889][ T6542] ext4_buffered_write_iter+0x34f/0x3c0 [ 66.624420][ T6542] ext4_file_write_iter+0x387/0xf60 [ 66.629600][ T6542] iter_file_splice_write+0x66b/0xa20 [ 66.634957][ T6542] direct_splice_actor+0x156/0x2a0 [ 66.640050][ T6542] splice_direct_to_actor+0x312/0x680 [ 66.645413][ T6542] do_splice_direct+0xda/0x150 [ 66.650165][ T6542] do_sendfile+0x380/0x650 [ 66.654572][ T6542] __x64_sys_sendfile64+0x105/0x150 [ 66.659759][ T6542] x64_sys_call+0x2db1/0x3000 [ 66.664423][ T6542] do_syscall_64+0xd8/0x2a0 [ 66.668926][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.674804][ T6542] [ 66.677129][ T6542] read to 0xffff88811b861c9c of 4 bytes by task 6542 on cpu 0: [ 66.684662][ T6542] xas_find_marked+0x5dc/0x620 [ 66.689424][ T6542] find_get_entry+0x5d/0x380 [ 66.694004][ T6542] filemap_get_folios_tag+0x92/0x210 [ 66.699277][ T6542] mpage_prepare_extent_to_map+0x320/0xbf0 [ 66.705072][ T6542] ext4_do_writepages+0x708/0x2750 [ 66.710174][ T6542] ext4_writepages+0x176/0x300 [ 66.714937][ T6542] do_writepages+0x1c6/0x310 [ 66.719516][ T6542] file_write_and_wait_range+0x156/0x2c0 [ 66.725143][ T6542] generic_buffers_fsync_noflush+0x45/0x130 [ 66.731035][ T6542] ext4_sync_file+0x1ab/0x690 [ 66.735701][ T6542] vfs_fsync_range+0x10d/0x130 [ 66.740458][ T6542] ext4_buffered_write_iter+0x34f/0x3c0 [ 66.745993][ T6542] ext4_file_write_iter+0x387/0xf60 [ 66.751182][ T6542] iter_file_splice_write+0x66b/0xa20 [ 66.756556][ T6542] direct_splice_actor+0x156/0x2a0 [ 66.761658][ T6542] splice_direct_to_actor+0x312/0x680 [ 66.767020][ T6542] do_splice_direct+0xda/0x150 [ 66.771773][ T6542] do_sendfile+0x380/0x650 [ 66.776184][ T6542] __x64_sys_sendfile64+0x105/0x150 [ 66.781377][ T6542] x64_sys_call+0x2db1/0x3000 [ 66.786044][ T6542] do_syscall_64+0xd8/0x2a0 [ 66.790538][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.796417][ T6542] [ 66.798720][ T6542] value changed: 0x0a000021 -> 0x04000021 [ 66.804415][ T6542] [ 66.806720][ T6542] Reported by Kernel Concurrency Sanitizer on: [ 66.812861][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.0.996 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.822473][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.832510][ T6542] ================================================================== [ 66.963350][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.