last executing test programs: 2.23674354s ago: executing program 3 (id=541): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x5e}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 2.173072671s ago: executing program 3 (id=544): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="f1ecb7ac23f2", 'veth1_to_team\x00'}}, 0x1e) close(r0) 1.926114292s ago: executing program 3 (id=550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="0e8c", 0x2, 0x2404084c, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001040)="10", 0x1, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 1.438887104s ago: executing program 1 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 1.260236975s ago: executing program 1 (id=569): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = syz_io_uring_setup(0x4f1f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f5fc7}}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5425, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 1.034672916s ago: executing program 3 (id=565): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 1.003213676s ago: executing program 2 (id=570): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x5e}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 989.606446ms ago: executing program 2 (id=572): r0 = timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000bc0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000018500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) timerfd_gettime(r0, &(0x7f0000000040)) 919.165556ms ago: executing program 2 (id=587): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nouid32}, {@noload}]}, 0x1, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), 0x0, 0x361, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [], {0x4, 0xa}}, 0x24, 0x0) 866.013386ms ago: executing program 2 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 805.652837ms ago: executing program 0 (id=581): write$binfmt_script(0xffffffffffffffff, 0x0, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) 290.168329ms ago: executing program 4 (id=582): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4c0000001000370400003f939202df250000c248", @ANYRES32=r3, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f000200000008000300ac1414"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x20}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a80)=[{0x0}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x22}}}}], 0x20}}], 0x2, 0x80) 289.254189ms ago: executing program 0 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 266.803379ms ago: executing program 4 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 264.826369ms ago: executing program 1 (id=595): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000100)={[{@shortname_winnt}, {@shortname_winnt}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 264.390559ms ago: executing program 2 (id=584): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 177.977069ms ago: executing program 4 (id=585): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x5e}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 171.775679ms ago: executing program 3 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 166.437549ms ago: executing program 0 (id=588): r0 = timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000bc0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000018500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) timerfd_gettime(r0, &(0x7f0000000040)) 157.673679ms ago: executing program 4 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") lstat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000b00)) 155.147489ms ago: executing program 2 (id=590): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./bus\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x342, &(0x7f00000012c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x1a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 154.67676ms ago: executing program 0 (id=602): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="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"], 0x15e0}}], 0x2, 0x0) 120.4568ms ago: executing program 0 (id=591): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}}}, 0x0) 57.58842ms ago: executing program 4 (id=592): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="0e8c", 0x2, 0x2404084c, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001040)="10", 0x1, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 55.345219ms ago: executing program 1 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 54.816719ms ago: executing program 3 (id=594): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = syz_io_uring_setup(0x4f1f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f5fc7}}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5425, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 54.2809ms ago: executing program 0 (id=606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") lstat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000b00)) 36.65032ms ago: executing program 1 (id=596): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4c0000001000370400003f939202df250000c248", @ANYRES32=r3, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f000200000008000300ac1414"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x20}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a80)=[{0x0}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x22}}}}], 0x20}}], 0x2, 0x80) 14.38915ms ago: executing program 1 (id=597): write$binfmt_script(0xffffffffffffffff, 0x0, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 4 (id=598): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) kernel console output (not intermixed with test programs): ive=1 [ 15.015326][ T29] audit: type=1400 audit(1731449789.228:80): avc: denied { siginh } for pid=3193 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.960286][ T29] audit: type=1400 audit(1731449794.188:81): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 22.560309][ T29] audit: type=1400 audit(1731449796.788:82): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.561332][ T3302] cgroup: Unknown subsys name 'net' [ 22.583047][ T29] audit: type=1400 audit(1731449796.788:83): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.610378][ T29] audit: type=1400 audit(1731449796.818:84): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.786230][ T3302] cgroup: Unknown subsys name 'cpuset' [ 22.792243][ T3302] cgroup: Unknown subsys name 'rlimit' [ 22.919741][ T29] audit: type=1400 audit(1731449797.148:85): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.943057][ T29] audit: type=1400 audit(1731449797.148:86): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.963527][ T29] audit: type=1400 audit(1731449797.148:87): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.983886][ T29] audit: type=1400 audit(1731449797.148:88): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.004247][ T29] audit: type=1400 audit(1731449797.148:89): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.011845][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.029042][ T29] audit: type=1400 audit(1731449797.158:90): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.060945][ T29] audit: type=1400 audit(1731449797.268:91): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.094707][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.783502][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.801960][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.816476][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.829745][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.889263][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.896391][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.903588][ T3319] bridge_slave_0: entered allmulticast mode [ 24.910068][ T3319] bridge_slave_0: entered promiscuous mode [ 24.916733][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923771][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.930955][ T3319] bridge_slave_1: entered allmulticast mode [ 24.937373][ T3319] bridge_slave_1: entered promiscuous mode [ 24.956666][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.963877][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.971503][ T3318] bridge_slave_0: entered allmulticast mode [ 24.977763][ T3318] bridge_slave_0: entered promiscuous mode [ 24.996518][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.003632][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.010817][ T3318] bridge_slave_1: entered allmulticast mode [ 25.017256][ T3318] bridge_slave_1: entered promiscuous mode [ 25.036016][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.043155][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.050291][ T3314] bridge_slave_0: entered allmulticast mode [ 25.056670][ T3314] bridge_slave_0: entered promiscuous mode [ 25.077959][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.087098][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.094142][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.101354][ T3314] bridge_slave_1: entered allmulticast mode [ 25.107668][ T3314] bridge_slave_1: entered promiscuous mode [ 25.117939][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.125053][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.132215][ T3313] bridge_slave_0: entered allmulticast mode [ 25.138638][ T3313] bridge_slave_0: entered promiscuous mode [ 25.145805][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.154945][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.162026][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.169144][ T3313] bridge_slave_1: entered allmulticast mode [ 25.175502][ T3313] bridge_slave_1: entered promiscuous mode [ 25.182539][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.207615][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.221944][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.240946][ T3319] team0: Port device team_slave_0 added [ 25.254920][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.264731][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.279512][ T3319] team0: Port device team_slave_1 added [ 25.286139][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.295892][ T3318] team0: Port device team_slave_0 added [ 25.308047][ T3313] team0: Port device team_slave_0 added [ 25.322287][ T3318] team0: Port device team_slave_1 added [ 25.332837][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 25.341777][ T3313] team0: Port device team_slave_1 added [ 25.355824][ T3314] team0: Port device team_slave_0 added [ 25.366238][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.373255][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.399260][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.416418][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.423368][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.449284][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.460414][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.467386][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.493551][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.504841][ T3314] team0: Port device team_slave_1 added [ 25.515105][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.522077][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.548053][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.580951][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.587962][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.613847][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.625499][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.632486][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.658399][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.671475][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.678519][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.704431][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.720118][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.727170][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.753231][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.797195][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.804260][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.811460][ T3322] bridge_slave_0: entered allmulticast mode [ 25.817887][ T3322] bridge_slave_0: entered promiscuous mode [ 25.825967][ T3319] hsr_slave_0: entered promiscuous mode [ 25.831941][ T3319] hsr_slave_1: entered promiscuous mode [ 25.845290][ T3318] hsr_slave_0: entered promiscuous mode [ 25.851381][ T3318] hsr_slave_1: entered promiscuous mode [ 25.857194][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.864726][ T3318] Cannot create hsr debugfs directory [ 25.875133][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.882323][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.889600][ T3322] bridge_slave_1: entered allmulticast mode [ 25.896058][ T3322] bridge_slave_1: entered promiscuous mode [ 25.925501][ T3314] hsr_slave_0: entered promiscuous mode [ 25.931756][ T3314] hsr_slave_1: entered promiscuous mode [ 25.937872][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.945415][ T3314] Cannot create hsr debugfs directory [ 25.957109][ T3313] hsr_slave_0: entered promiscuous mode [ 25.963098][ T3313] hsr_slave_1: entered promiscuous mode [ 25.969039][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.976794][ T3313] Cannot create hsr debugfs directory [ 25.982986][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.011777][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.041027][ T3322] team0: Port device team_slave_0 added [ 26.047584][ T3322] team0: Port device team_slave_1 added [ 26.085314][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.092346][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.118254][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.148034][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.155081][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.181039][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.252793][ T3322] hsr_slave_0: entered promiscuous mode [ 26.259069][ T3322] hsr_slave_1: entered promiscuous mode [ 26.264988][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.272575][ T3322] Cannot create hsr debugfs directory [ 26.298047][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.308318][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.328736][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.340048][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.375186][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.388589][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.399076][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.410774][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.424216][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.436384][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.444799][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.453440][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.486634][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.495189][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.519050][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.529281][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.543941][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.563764][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.573309][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.581892][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.596732][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.619413][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.626551][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.633911][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.640998][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.651901][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.659841][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.676817][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.691971][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.704978][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.712076][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.720752][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.727799][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.750954][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.771699][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.782353][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.789544][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.799209][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.806261][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.831427][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.843056][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.863666][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.870836][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.883854][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.890937][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.917806][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.931881][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.939022][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.953253][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.962503][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.978263][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.004959][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.012101][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.020667][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.044689][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.051871][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.064231][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.071354][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.090440][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.102949][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.113349][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.151899][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.230811][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.249748][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.300224][ T3318] veth0_vlan: entered promiscuous mode [ 27.311876][ T3318] veth1_vlan: entered promiscuous mode [ 27.349582][ T3318] veth0_macvtap: entered promiscuous mode [ 27.356608][ T3319] veth0_vlan: entered promiscuous mode [ 27.367731][ T3314] veth0_vlan: entered promiscuous mode [ 27.382238][ T3318] veth1_macvtap: entered promiscuous mode [ 27.394671][ T3314] veth1_vlan: entered promiscuous mode [ 27.409481][ T3319] veth1_vlan: entered promiscuous mode [ 27.420982][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.431911][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.445371][ T3314] veth0_macvtap: entered promiscuous mode [ 27.453348][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.462243][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.471015][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.479753][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.490295][ T3313] veth0_vlan: entered promiscuous mode [ 27.498642][ T3314] veth1_macvtap: entered promiscuous mode [ 27.514957][ T3313] veth1_vlan: entered promiscuous mode [ 27.535938][ T3322] veth0_vlan: entered promiscuous mode [ 27.542339][ T3319] veth0_macvtap: entered promiscuous mode [ 27.559739][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.570318][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.576513][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.582149][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.607313][ T3313] veth0_macvtap: entered promiscuous mode [ 27.614089][ T3319] veth1_macvtap: entered promiscuous mode [ 27.621893][ T3322] veth1_vlan: entered promiscuous mode [ 27.623371][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 27.623385][ T29] audit: type=1400 audit(1731449801.848:118): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.633708][ T3322] veth0_macvtap: entered promiscuous mode [ 27.664986][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.675455][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.687310][ T29] audit: type=1400 audit(1731449801.908:119): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.700040][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.711485][ T29] audit: type=1400 audit(1731449801.918:120): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.754082][ T3313] veth1_macvtap: entered promiscuous mode [ 27.760013][ T29] audit: type=1400 audit(1731449801.978:121): avc: denied { map_create } for pid=3452 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.778370][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.778842][ T29] audit: type=1400 audit(1731449801.978:122): avc: denied { map_read map_write } for pid=3452 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.789201][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.789211][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.828990][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.841132][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.850005][ T3322] veth1_macvtap: entered promiscuous mode [ 27.863234][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.873793][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.883769][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.894310][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.904144][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.914617][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.925803][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.934495][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.943276][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.952159][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.960946][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.977410][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.987922][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.997816][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.008277][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.019022][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.027061][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.037553][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.047408][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.057915][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.067744][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.078168][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.088750][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.100813][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.109606][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.118320][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.127040][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.137496][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.147945][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.157882][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.168436][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.178250][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.188727][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.198690][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.209144][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.219877][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.227597][ T3319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.236442][ T3319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.245188][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.253978][ T3319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.271278][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.281850][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.291722][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.302144][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.312034][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.322449][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.332257][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.342679][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.353245][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.367164][ T3322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.375937][ T3322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.384659][ T3322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.393584][ T3322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.437930][ T29] audit: type=1400 audit(1731449802.658:123): avc: denied { prog_load } for pid=3455 comm="syz.2.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.456809][ T29] audit: type=1400 audit(1731449802.658:124): avc: denied { bpf } for pid=3455 comm="syz.2.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.467436][ T3460] loop2: detected capacity change from 0 to 2048 [ 28.477112][ T29] audit: type=1400 audit(1731449802.658:125): avc: denied { perfmon } for pid=3455 comm="syz.2.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.503962][ T29] audit: type=1400 audit(1731449802.658:126): avc: denied { prog_run } for pid=3455 comm="syz.2.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.532207][ T3460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.615887][ T29] audit: type=1400 audit(1731449802.798:127): avc: denied { mount } for pid=3459 comm="syz.2.5" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.655124][ T3470] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 28.680383][ T3470] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 28.733709][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.890323][ T3508] raw_sendmsg: syz.0.19 forgot to set AF_INET. Fix it! [ 28.957945][ T3516] loop3: detected capacity change from 0 to 512 [ 28.969593][ T3518] process 'syz.0.21' launched '/dev/fd/6' with NULL argv: empty string added [ 28.982722][ T3516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.011459][ T3516] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.064298][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.168742][ T3539] loop3: detected capacity change from 0 to 512 [ 29.177368][ T3539] ======================================================= [ 29.177368][ T3539] WARNING: The mand mount option has been deprecated and [ 29.177368][ T3539] and is ignored by this kernel. Remove the mand [ 29.177368][ T3539] option from the mount to silence this warning. [ 29.177368][ T3539] ======================================================= [ 29.238992][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.252337][ T3539] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.291870][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.337887][ T3567] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 29.482643][ T3596] modprobe (3596) used greatest stack depth: 10880 bytes left [ 29.493274][ T3598] Zero length message leads to an empty skb [ 29.543627][ T3602] syz.3.50[3602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.543821][ T3602] syz.3.50[3602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.559697][ T3602] syz.3.50[3602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.900512][ T3648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.361351][ T3740] loop3: detected capacity change from 0 to 128 [ 30.385351][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 30.392840][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.400353][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.407773][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.415237][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.422755][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430295][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 30.430340][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430370][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 30.430396][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430429][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430448][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430477][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430515][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 30.430540][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430559][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430578][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 30.430621][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430646][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430665][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430688][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430712][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430733][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430752][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430775][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430794][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430818][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430841][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430860][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430879][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430901][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430926][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430945][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430964][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430983][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.431003][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.431026][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.431048][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.431083][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.431106][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.466607][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 30.484003][ T3740] syz.3.69: attempt to access beyond end of device [ 30.484003][ T3740] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 30.572500][ T3756] loop4: detected capacity change from 0 to 128 [ 30.641921][ T3761] rdma_op ffff888116c42580 conn xmit_rdma 0000000000000000 [ 30.652707][ C1] hrtimer: interrupt took 35242 ns [ 30.929595][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 30.937096][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.944524][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.952010][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.959574][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.967061][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.974535][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 30.981992][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.989716][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 30.997162][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.004592][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.012003][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.019449][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.026945][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 31.034385][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.041960][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.049405][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 31.056844][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.064229][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.071714][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.079193][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.086708][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.094214][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.101636][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.109038][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.116502][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.123887][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.131308][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.138816][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.146498][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.153874][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.161300][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.168741][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.176198][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.183571][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.190971][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.198401][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.205802][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.213188][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.220680][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.228674][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 31.308953][ T3784] loop4: detected capacity change from 0 to 256 [ 31.459679][ T3800] loop4: detected capacity change from 0 to 512 [ 31.509034][ T3800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.526659][ T3800] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.582864][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.613259][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 31.614878][ T3812] loop1: detected capacity change from 0 to 256 [ 31.620741][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.634482][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.638871][ T3817] loop4: detected capacity change from 0 to 256 [ 31.641949][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.655713][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.663134][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.670561][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 31.678094][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.685490][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 31.692949][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.700433][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.707854][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.715483][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.723025][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 31.730463][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.737919][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.745398][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 31.753380][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.760882][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.768352][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.775930][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.783443][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.790878][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.798309][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.805721][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.813174][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.820588][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.828016][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.835658][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.843126][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.850596][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.858001][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.865449][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.872917][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.880381][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.888504][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.896047][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.903453][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.910892][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.918315][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 31.926726][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.317487][ T3840] loop1: detected capacity change from 0 to 256 [ 32.431724][ T3849] loop3: detected capacity change from 0 to 512 [ 32.437588][ T3848] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.447157][ T3848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 32.470342][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.483848][ T3849] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.512600][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.522166][ T3853] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 32.530705][ T3853] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 32.558793][ T3857] loop1: detected capacity change from 0 to 512 [ 32.583674][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.607879][ T3857] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.618809][ T3864] loop3: detected capacity change from 0 to 256 [ 32.630399][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 32.630412][ T29] audit: type=1326 audit(1731449806.858:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa58e68cfb7 code=0x7ffc0000 [ 32.668414][ T29] audit: type=1326 audit(1731449806.858:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa58e68feba code=0x7ffc0000 [ 32.692107][ T29] audit: type=1400 audit(1731449806.888:417): avc: denied { mount } for pid=3863 comm="syz.3.114" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.714370][ T29] audit: type=1326 audit(1731449806.888:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa58e68d0b0 code=0x7ffc0000 [ 32.737707][ T29] audit: type=1326 audit(1731449806.888:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa58e68d497 code=0x7ffc0000 [ 32.760968][ T29] audit: type=1326 audit(1731449806.888:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa58e68d0b0 code=0x7ffc0000 [ 32.784754][ T29] audit: type=1326 audit(1731449806.888:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e68e719 code=0x7ffc0000 [ 32.808618][ T29] audit: type=1326 audit(1731449806.888:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e68e719 code=0x7ffc0000 [ 32.844617][ T29] audit: type=1326 audit(1731449806.898:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa58e68e719 code=0x7ffc0000 [ 32.849330][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.868202][ T29] audit: type=1326 audit(1731449806.898:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e68e719 code=0x7ffc0000 [ 32.894564][ T3871] loop4: detected capacity change from 0 to 512 [ 32.908700][ T3871] EXT4-fs: Ignoring removed oldalloc option [ 32.914941][ T3871] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.928482][ T3871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.947749][ T3871] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 32.960791][ T3871] EXT4-fs (loop4): 1 truncate cleaned up [ 32.967169][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.008108][ T3882] xt_hashlimit: max too large, truncated to 1048576 [ 33.032909][ T3883] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.122'. [ 33.048096][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.060237][ T3887] loop0: detected capacity change from 0 to 512 [ 33.082307][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.116719][ T3887] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.197827][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.404220][ T3926] loop2: detected capacity change from 0 to 256 [ 33.443254][ T3932] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.469712][ T3934] loop0: detected capacity change from 0 to 512 [ 33.504116][ T3934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.517875][ T3934] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.578783][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.633008][ T3949] loop0: detected capacity change from 0 to 512 [ 33.644659][ T3949] EXT4-fs: Ignoring removed oldalloc option [ 33.658332][ T3949] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.675386][ T3949] EXT4-fs (loop0): 1 truncate cleaned up [ 33.681527][ T3949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.730675][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.802472][ T3963] loop1: detected capacity change from 0 to 512 [ 33.820205][ T3964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 33.838095][ T3963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.855786][ T3963] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.896109][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.979665][ T3980] loop1: detected capacity change from 0 to 256 [ 34.007081][ T3976] netlink: 11 bytes leftover after parsing attributes in process `syz.3.152'. [ 34.065106][ T3987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.108983][ T3987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.159465][ T3987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.208744][ T3987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.260849][ T3987] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.271497][ T3987] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.282181][ T3987] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.292968][ T3987] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.364262][ T4001] loop2: detected capacity change from 0 to 512 [ 34.378100][ T4001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.390997][ T4001] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.414487][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.434927][ T4008] Illegal XDP return value 4294967274 on prog (id 116) dev syz_tun, expect packet loss! [ 34.525848][ T4016] loop4: detected capacity change from 0 to 164 [ 34.538846][ T4016] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 34.551399][ T4016] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 34.564190][ T4016] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 34.605463][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 34.617235][ T4019] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.667093][ T4019] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.717818][ T4019] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.767698][ T4019] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.998076][ T4065] loop2: detected capacity change from 0 to 256 [ 35.076077][ T4078] dvmrp1: entered allmulticast mode [ 35.086067][ T4078] dvmrp1: left allmulticast mode [ 35.237158][ T4105] netlink: 'syz.2.194': attribute type 2 has an invalid length. [ 35.274781][ T4108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4108 comm=syz.0.195 [ 35.313617][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 35.315690][ T4115] loop1: detected capacity change from 0 to 2048 [ 35.349562][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.402416][ T4128] loop2: detected capacity change from 0 to 512 [ 35.430992][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.447817][ T4128] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.489249][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.562750][ T4133] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.579021][ T4133] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 35.591424][ T4133] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.591424][ T4133] [ 35.601150][ T4133] EXT4-fs (loop1): Total free blocks count 0 [ 35.607171][ T4133] EXT4-fs (loop1): Free/Dirty block details [ 35.613136][ T4133] EXT4-fs (loop1): free_blocks=2415919104 [ 35.618966][ T4133] EXT4-fs (loop1): dirty_blocks=8224 [ 35.624262][ T4133] EXT4-fs (loop1): Block reservation details [ 35.630303][ T4133] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 35.652216][ T4133] syz.1.197 (4133) used greatest stack depth: 9512 bytes left [ 35.668469][ T3696] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 35.852512][ T4203] loop2: detected capacity change from 0 to 2048 [ 35.869041][ T4205] dvmrp1: entered allmulticast mode [ 35.876719][ T4205] dvmrp1: left allmulticast mode [ 35.901284][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.008503][ T4218] netlink: 'syz.3.207': attribute type 2 has an invalid length. [ 36.099204][ T4214] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.115475][ T4214] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 36.127828][ T4214] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.127828][ T4214] [ 36.137572][ T4214] EXT4-fs (loop2): Total free blocks count 0 [ 36.143567][ T4214] EXT4-fs (loop2): Free/Dirty block details [ 36.149543][ T4214] EXT4-fs (loop2): free_blocks=2415919104 [ 36.155268][ T4214] EXT4-fs (loop2): dirty_blocks=8224 [ 36.160584][ T4214] EXT4-fs (loop2): Block reservation details [ 36.166574][ T4214] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 36.197475][ T416] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 36.273386][ T4238] syz.3.217[4238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.273469][ T4238] syz.3.217[4238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.285138][ T4238] syz.3.217[4238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.342691][ T4241] ebtables: ebtables: counters copy to user failed while replacing table [ 36.971703][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 37.000173][ T4379] syz.1.228[4379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.000230][ T4379] syz.1.228[4379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.012802][ T4379] syz.1.228[4379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.101276][ T4400] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.120584][ T4394] ebtables: ebtables: counters copy to user failed while replacing table [ 37.257613][ T4432] loop2: detected capacity change from 0 to 128 [ 37.298659][ T4439] loop1: detected capacity change from 0 to 1024 [ 37.305440][ T4439] EXT4-fs: Ignoring removed oldalloc option [ 37.312194][ T4439] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 37.338239][ T4439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.368269][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.397784][ T4445] loop1: detected capacity change from 0 to 256 [ 37.436133][ T4445] FAT-fs (loop1): Directory bread(block 64) failed [ 37.446448][ T4445] FAT-fs (loop1): Directory bread(block 65) failed [ 37.453079][ T4445] FAT-fs (loop1): Directory bread(block 66) failed [ 37.459705][ T4445] FAT-fs (loop1): Directory bread(block 67) failed [ 37.466306][ T4445] FAT-fs (loop1): Directory bread(block 68) failed [ 37.472931][ T4445] FAT-fs (loop1): Directory bread(block 69) failed [ 37.474350][ T4450] ebtables: ebtables: counters copy to user failed while replacing table [ 37.479518][ T4445] FAT-fs (loop1): Directory bread(block 70) failed [ 37.479539][ T4445] FAT-fs (loop1): Directory bread(block 71) failed [ 37.479559][ T4445] FAT-fs (loop1): Directory bread(block 72) failed [ 37.512336][ T4445] FAT-fs (loop1): Directory bread(block 73) failed [ 37.539683][ T4445] Process accounting resumed [ 37.544439][ T4445] syz.1.240: attempt to access beyond end of device [ 37.544439][ T4445] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 37.991399][ T4019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.010619][ T4019] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.032460][ T4019] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.043394][ T4541] serio: Serial port ptm0 [ 38.051392][ T4019] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.091574][ T4550] loop4: detected capacity change from 0 to 128 [ 38.138537][ T4557] loop0: detected capacity change from 0 to 1024 [ 38.152986][ T4557] EXT4-fs: Ignoring removed oldalloc option [ 38.159468][ T4557] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 38.178086][ T4557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.205385][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.255058][ T4572] loop4: detected capacity change from 0 to 1024 [ 38.289484][ T4572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.318544][ T4572] EXT4-fs error (device loop4): ext4_lookup:1813: inode #14: comm syz.4.254: iget: immutable or append flags not allowed on symlinks [ 38.335936][ T4572] EXT4-fs (loop4): Remounting filesystem read-only [ 38.349264][ T4572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.372221][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 38.372233][ T29] audit: type=1400 audit(1731449812.598:632): avc: denied { write } for pid=4592 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.398256][ T29] audit: type=1400 audit(1731449812.608:633): avc: denied { getopt } for pid=4570 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.435096][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.521443][ T4615] loop1: detected capacity change from 0 to 2048 [ 38.562189][ T29] audit: type=1400 audit(1731449812.778:634): avc: denied { connect } for pid=4620 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.581635][ T29] audit: type=1400 audit(1731449812.778:635): avc: denied { ioctl } for pid=4622 comm="syz.4.257" path="socket:[5796]" dev="sockfs" ino=5796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.623051][ T29] audit: type=1400 audit(1731449812.848:636): avc: denied { read } for pid=4630 comm="syz.4.271" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.630400][ T4615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.645649][ T29] audit: type=1400 audit(1731449812.848:637): avc: denied { open } for pid=4630 comm="syz.4.271" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.680724][ T29] audit: type=1400 audit(1731449812.848:638): avc: denied { ioctl } for pid=4630 comm="syz.4.271" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.707320][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 38.723620][ T4627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.762049][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.762648][ T4639] loop2: detected capacity change from 0 to 1024 [ 38.778147][ T4639] EXT4-fs: Ignoring removed oldalloc option [ 38.779173][ T4643] serio: Serial port ptm0 [ 38.784906][ T4639] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 38.807999][ T4645] loop1: detected capacity change from 0 to 128 [ 38.809006][ T4639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.827540][ T4627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.869394][ T4627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.870038][ T29] audit: type=1400 audit(1731449813.098:639): avc: denied { name_connect } for pid=4651 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 38.885143][ T4650] loop3: detected capacity change from 0 to 1024 [ 38.907833][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.918278][ T4650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.932775][ T4650] EXT4-fs error (device loop3): ext4_lookup:1813: inode #14: comm syz.3.267: iget: immutable or append flags not allowed on symlinks [ 38.947060][ T4650] EXT4-fs (loop3): Remounting filesystem read-only [ 38.957984][ T4627] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.968641][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.010927][ T4627] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.021480][ T4627] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.032016][ T4627] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.042649][ T4627] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083922][ T29] audit: type=1326 audit(1731449813.308:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 39.107231][ T29] audit: type=1326 audit(1731449813.308:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 39.216091][ T4692] serio: Serial port ptm0 [ 39.240390][ T4696] loop3: detected capacity change from 0 to 128 [ 39.267759][ T4705] loop3: detected capacity change from 0 to 1024 [ 39.276851][ T4705] EXT4-fs: Ignoring removed oldalloc option [ 39.290667][ T4705] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 39.310684][ T4715] loop1: detected capacity change from 0 to 1024 [ 39.329526][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.353909][ T4715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.367640][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.373247][ T4715] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz.1.284: iget: immutable or append flags not allowed on symlinks [ 39.390530][ T4715] EXT4-fs (loop1): Remounting filesystem read-only [ 39.421273][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.440718][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 39.458703][ T4740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.498692][ T4740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.560440][ T4740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.599174][ T4740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.649015][ T4740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668515][ T4740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.690216][ T4740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.713576][ T4740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.739478][ T4797] loop3: detected capacity change from 0 to 128 [ 39.787160][ T4808] netlink: 14569 bytes leftover after parsing attributes in process `syz.4.294'. [ 39.792280][ T4807] loop3: detected capacity change from 0 to 1024 [ 39.803801][ T4807] EXT4-fs: Ignoring removed oldalloc option [ 39.821979][ T4807] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 39.848339][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.887274][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.071785][ T4876] loop3: detected capacity change from 0 to 1024 [ 40.078889][ T4876] EXT4-fs: Ignoring removed oldalloc option [ 40.085276][ T4876] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.107218][ T4876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.131566][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.172530][ T4894] syz.0.315[4894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.172589][ T4894] syz.0.315[4894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.184398][ T4894] syz.0.315[4894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.813543][ T5009] loop1: detected capacity change from 0 to 512 [ 40.816252][ T5014] bond1: entered promiscuous mode [ 40.836275][ T5014] bond1: entered allmulticast mode [ 40.842199][ T5014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.848436][ T5009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.861998][ T5009] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.873903][ T5014] bond1 (unregistering): Released all slaves [ 40.903674][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.031763][ T5059] loop2: detected capacity change from 0 to 1024 [ 41.045266][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 41.058276][ T5059] EXT4-fs: Ignoring removed oldalloc option [ 41.068383][ T5059] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 41.087675][ T5070] loop3: detected capacity change from 0 to 164 [ 41.088318][ T5059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.116765][ T5070] syz.3.325: attempt to access beyond end of device [ 41.116765][ T5070] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 41.130808][ T5070] syz.3.325: attempt to access beyond end of device [ 41.130808][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.131498][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.144467][ T5070] syz.3.325: attempt to access beyond end of device [ 41.144467][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.166671][ T5070] syz.3.325: attempt to access beyond end of device [ 41.166671][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.180349][ T5070] syz.3.325: attempt to access beyond end of device [ 41.180349][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.193811][ T5070] syz.3.325: attempt to access beyond end of device [ 41.193811][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.207380][ T5070] syz.3.325: attempt to access beyond end of device [ 41.207380][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.221053][ T5070] syz.3.325: attempt to access beyond end of device [ 41.221053][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.235650][ T5070] syz.3.325: attempt to access beyond end of device [ 41.235650][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.620608][ T5085] loop2: detected capacity change from 0 to 1024 [ 41.623807][ T5086] loop4: detected capacity change from 0 to 512 [ 41.637839][ T5086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.651917][ T5086] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.666363][ T5085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.682714][ T5085] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.699386][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.734714][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.799828][ T5101] loop4: detected capacity change from 0 to 164 [ 41.892925][ T5108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 42.049265][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 42.049495][ T5133] loop0: detected capacity change from 0 to 512 [ 42.059147][ T5135] loop4: detected capacity change from 0 to 1024 [ 42.093412][ T5133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.100655][ T5135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.106241][ T5133] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.119605][ T5135] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.161284][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.161424][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.238424][ T5163] loop3: detected capacity change from 0 to 164 [ 42.353758][ T5186] syz.3.357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.366327][ T5191] loop0: detected capacity change from 0 to 164 [ 42.420400][ T5201] loop4: detected capacity change from 0 to 1024 [ 42.435440][ T5201] EXT4-fs: Ignoring removed oldalloc option [ 42.457504][ T5201] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 42.498124][ T5201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.532543][ T5218] loop3: detected capacity change from 0 to 1024 [ 42.545562][ T5191] bio_check_eod: 33293 callbacks suppressed [ 42.545579][ T5191] syz.0.356: attempt to access beyond end of device [ 42.545579][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.585962][ T5191] syz.0.356: attempt to access beyond end of device [ 42.585962][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.587323][ T5218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.599543][ T5191] syz.0.356: attempt to access beyond end of device [ 42.599543][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.626108][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.642806][ T5218] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.720191][ T5227] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.729964][ T5191] syz.0.356: attempt to access beyond end of device [ 42.729964][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.752599][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.760397][ T5191] syz.0.356: attempt to access beyond end of device [ 42.760397][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.775322][ T5191] syz.0.356: attempt to access beyond end of device [ 42.775322][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.795676][ T5191] syz.0.356: attempt to access beyond end of device [ 42.795676][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.809301][ T5191] syz.0.356: attempt to access beyond end of device [ 42.809301][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.822983][ T5191] syz.0.356: attempt to access beyond end of device [ 42.822983][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.836473][ T5191] syz.0.356: attempt to access beyond end of device [ 42.836473][ T5191] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.898236][ T5268] loop1: detected capacity change from 0 to 164 [ 43.356907][ T5322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5322 comm=syz.2.381 [ 43.380098][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 43.380111][ T29] audit: type=1326 audit(1731449817.608:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa04b6956e7 code=0x7ffc0000 [ 43.409603][ T29] audit: type=1326 audit(1731449817.608:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa04b63a099 code=0x7ffc0000 [ 43.433481][ T29] audit: type=1326 audit(1731449817.608:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa04b69e719 code=0x7ffc0000 [ 43.456942][ T29] audit: type=1326 audit(1731449817.618:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa04b6956e7 code=0x7ffc0000 [ 43.480097][ T29] audit: type=1326 audit(1731449817.618:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa04b63a099 code=0x7ffc0000 [ 43.503302][ T29] audit: type=1326 audit(1731449817.618:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa04b69e719 code=0x7ffc0000 [ 43.526730][ T29] audit: type=1326 audit(1731449817.618:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa04b6956e7 code=0x7ffc0000 [ 43.549974][ T29] audit: type=1326 audit(1731449817.618:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa04b63a099 code=0x7ffc0000 [ 43.573246][ T29] audit: type=1326 audit(1731449817.618:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa04b69e719 code=0x7ffc0000 [ 43.596496][ T29] audit: type=1326 audit(1731449817.638:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa04b6956e7 code=0x7ffc0000 [ 44.099275][ T5439] loop1: detected capacity change from 0 to 164 [ 44.142556][ T5447] capability: warning: `syz.3.394' uses 32-bit capabilities (legacy support in use) [ 44.241462][ T1042] IPVS: starting estimator thread 0... [ 44.345555][ T5458] IPVS: using max 2880 ests per chain, 144000 per kthread [ 45.017858][ T5584] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.115247][ T3388] IPVS: starting estimator thread 0... [ 45.149176][ T5619] syz.2.419 uses obsolete (PF_INET,SOCK_PACKET) [ 45.205582][ T5613] IPVS: using max 2880 ests per chain, 144000 per kthread [ 45.250648][ T5628] loop2: detected capacity change from 0 to 164 [ 45.370857][ T5646] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.480541][ T5663] netlink: 'syz.1.432': attribute type 3 has an invalid length. [ 45.544782][ T5674] sctp: [Deprecated]: syz.3.435 (pid 5674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.544782][ T5674] Use struct sctp_sack_info instead [ 46.226010][ T5790] syz.2.440[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.226132][ T5790] syz.2.440[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.238560][ T5790] syz.2.440[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.331155][ T5811] netlink: 'syz.3.445': attribute type 3 has an invalid length. [ 46.395979][ T5820] sctp: [Deprecated]: syz.0.449 (pid 5820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.395979][ T5820] Use struct sctp_sack_info instead [ 46.437521][ T5832] sctp: [Deprecated]: syz.1.465 (pid 5832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.437521][ T5832] Use struct sctp_sack_info instead [ 46.474516][ T5836] syz.3.457[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.474579][ T5836] syz.3.457[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.486291][ T5836] syz.3.457[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.558982][ T5843] loop4: detected capacity change from 0 to 512 [ 46.578260][ T5843] EXT4-fs: Ignoring removed bh option [ 46.584174][ T5843] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.595728][ T5843] EXT4-fs (loop4): 1 truncate cleaned up [ 46.601815][ T5843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.680344][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.229693][ T5865] loop0: detected capacity change from 0 to 512 [ 47.231242][ T5869] sctp: [Deprecated]: syz.2.468 (pid 5869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.231242][ T5869] Use struct sctp_sack_info instead [ 47.237551][ T5865] EXT4-fs: Ignoring removed bh option [ 47.263744][ T5865] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 47.272965][ T5865] EXT4-fs (loop0): 1 truncate cleaned up [ 47.280077][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.319830][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.732690][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 47.741685][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 47.750589][ T5896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.482'. [ 47.791913][ T5902] loop0: detected capacity change from 0 to 512 [ 47.820928][ T5902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.838121][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 47.847002][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 47.847534][ T5902] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.855961][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 47.933943][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.974330][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 47.975049][ T5927] loop0: detected capacity change from 0 to 2048 [ 47.983235][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 47.998476][ T5928] netlink: 2 bytes leftover after parsing attributes in process `syz.4.496'. [ 48.028471][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.037610][ T5933] loop1: detected capacity change from 0 to 512 [ 48.051359][ T5933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.509: corrupted xattr block 255: invalid header [ 48.072569][ T5933] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 48.083610][ T5933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.096665][ T5933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.509: corrupted xattr block 255: invalid header [ 48.097496][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.110565][ T5933] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 48.127924][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.188289][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 48.250419][ T5957] loop1: detected capacity change from 0 to 512 [ 48.250935][ T5955] loop4: detected capacity change from 0 to 512 [ 48.264607][ T5957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.280522][ T5957] EXT4-fs (loop1): 1 truncate cleaned up [ 48.287186][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.296269][ T5955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.311953][ T5955] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.312401][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.360716][ T5967] loop2: detected capacity change from 0 to 2048 [ 48.376451][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.385951][ T29] kauditd_printk_skb: 1138 callbacks suppressed [ 48.385964][ T29] audit: type=1326 audit(1731449822.618:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa58e6856e7 code=0x7ffc0000 [ 48.416739][ T5967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.432407][ T29] audit: type=1326 audit(1731449822.618:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa58e62a099 code=0x7ffc0000 [ 48.455742][ T29] audit: type=1326 audit(1731449822.618:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa58e68e719 code=0x7ffc0000 [ 48.479064][ T29] audit: type=1326 audit(1731449822.618:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.502370][ T29] audit: type=1326 audit(1731449822.618:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.525738][ T29] audit: type=1326 audit(1731449822.618:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.549090][ T29] audit: type=1326 audit(1731449822.618:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.572404][ T29] audit: type=1326 audit(1731449822.618:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.595771][ T29] audit: type=1326 audit(1731449822.618:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.619136][ T29] audit: type=1326 audit(1731449822.618:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bf50e719 code=0x7ffc0000 [ 48.657803][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.727609][ T6008] ebtables: ebtables: counters copy to user failed while replacing table [ 48.732059][ T6017] loop3: detected capacity change from 0 to 512 [ 48.752769][ T6017] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.521: corrupted xattr block 255: invalid header [ 48.766312][ T6017] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 48.777078][ T6017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.789721][ T6017] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.521: corrupted xattr block 255: invalid header [ 48.803341][ T6017] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 48.810516][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.842633][ T6027] loop4: detected capacity change from 0 to 512 [ 48.850315][ T6027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.864204][ T6027] EXT4-fs (loop4): 1 truncate cleaned up [ 48.870640][ T6027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.900196][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.922411][ T6038] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 48.937279][ T6042] wireguard0: entered promiscuous mode [ 48.942822][ T6042] wireguard0: entered allmulticast mode [ 49.787385][ T6083] ipip0: entered promiscuous mode [ 49.794417][ T6082] ebtables: ebtables: counters copy to user failed while replacing table [ 49.809627][ T6087] loop4: detected capacity change from 0 to 512 [ 49.828824][ T6087] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.535: corrupted xattr block 255: invalid header [ 49.831610][ T6093] loop2: detected capacity change from 0 to 512 [ 49.852391][ T6087] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 49.867564][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.881841][ T6087] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.535: corrupted xattr block 255: invalid header [ 49.895492][ T6087] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 49.902564][ T6093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.914713][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.920021][ T6102] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 49.939206][ T6093] EXT4-fs (loop2): 1 truncate cleaned up [ 50.189833][ T6147] wireguard0: entered promiscuous mode [ 50.195424][ T6147] wireguard0: entered allmulticast mode [ 50.626250][ T6151] ipip0: entered promiscuous mode [ 50.652108][ T6153] ebtables: ebtables: counters copy to user failed while replacing table [ 50.827434][ T6164] loop2: detected capacity change from 0 to 512 [ 50.837368][ T6164] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.556: corrupted xattr block 255: invalid header [ 50.855023][ T6170] loop0: detected capacity change from 0 to 512 [ 50.855723][ T6164] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 50.866227][ T6170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.870862][ T6164] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.556: corrupted xattr block 255: invalid header [ 50.891214][ T6170] EXT4-fs (loop0): 1 truncate cleaned up [ 50.893316][ T6164] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 50.925186][ T6178] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 50.954386][ T6181] loop4: detected capacity change from 0 to 256 [ 50.983921][ T6187] loop0: detected capacity change from 0 to 512 [ 51.002053][ T6187] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.575: corrupted xattr block 255: invalid header [ 51.015855][ T6187] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 51.024836][ T6187] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.575: corrupted xattr block 255: invalid header [ 51.039088][ T6187] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 51.080285][ T6195] ipip0: entered promiscuous mode [ 51.137366][ T6207] loop0: detected capacity change from 0 to 512 [ 51.145852][ T6207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.157521][ T6207] EXT4-fs (loop0): 1 truncate cleaned up [ 51.194485][ T6214] loop2: detected capacity change from 0 to 512 [ 51.201661][ T6214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.214443][ T6214] EXT4-fs (loop2): 1 truncate cleaned up [ 51.247005][ T6222] loop0: detected capacity change from 0 to 256 [ 51.248684][ T6221] loop2: detected capacity change from 0 to 512 [ 51.261974][ T6221] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.580: corrupted xattr block 255: invalid header [ 51.276067][ T6221] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 51.285183][ T6221] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.580: corrupted xattr block 255: invalid header [ 51.298823][ T6221] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 51.311395][ T6225] loop0: detected capacity change from 0 to 256 [ 51.324714][ T6225] FAT-fs (loop0): Directory bread(block 64) failed [ 51.332097][ T6225] FAT-fs (loop0): Directory bread(block 65) failed [ 51.338955][ T6225] FAT-fs (loop0): Directory bread(block 66) failed [ 51.345816][ T6225] FAT-fs (loop0): Directory bread(block 67) failed [ 51.352345][ T6225] FAT-fs (loop0): Directory bread(block 68) failed [ 51.358953][ T6225] FAT-fs (loop0): Directory bread(block 69) failed [ 51.365590][ T6225] FAT-fs (loop0): Directory bread(block 70) failed [ 51.372190][ T6225] FAT-fs (loop0): Directory bread(block 71) failed [ 51.378870][ T6225] FAT-fs (loop0): Directory bread(block 72) failed [ 51.385742][ T6225] FAT-fs (loop0): Directory bread(block 73) failed [ 51.824738][ T6229] ipip0: entered promiscuous mode [ 51.840573][ T6228] loop0: detected capacity change from 0 to 512 [ 51.850406][ T6228] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.593: corrupted xattr block 255: invalid header [ 51.865848][ T6228] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 51.867743][ T6235] loop1: detected capacity change from 0 to 256 [ 51.874949][ T6228] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.593: corrupted xattr block 255: invalid header [ 51.899764][ T6228] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 51.960996][ T6248] loop2: detected capacity change from 0 to 128 [ 51.969113][ T6248] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 51.970861][ T6247] loop4: detected capacity change from 0 to 512 [ 51.990380][ T6247] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.589: corrupted in-inode xattr: invalid ea_ino [ 52.027408][ T6247] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.589: couldn't read orphan inode 15 (err -117) [ 52.078938][ T6257] loop0: detected capacity change from 0 to 512 [ 52.092284][ T6257] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.606: corrupted in-inode xattr: invalid ea_ino [ 52.109918][ T6267] loop1: detected capacity change from 0 to 256 [ 52.117920][ T6257] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.606: couldn't read orphan inode 15 (err -117) [ 52.148387][ T6267] FAT-fs (loop1): Directory bread(block 64) failed [ 52.155242][ T6267] FAT-fs (loop1): Directory bread(block 65) failed [ 52.161900][ T6267] FAT-fs (loop1): Directory bread(block 66) failed [ 52.169026][ T6267] FAT-fs (loop1): Directory bread(block 67) failed [ 52.176087][ T6267] FAT-fs (loop1): Directory bread(block 68) failed [ 52.182773][ T6267] FAT-fs (loop1): Directory bread(block 69) failed [ 52.189518][ T6267] FAT-fs (loop1): Directory bread(block 70) failed [ 52.196129][ T6267] FAT-fs (loop1): Directory bread(block 71) failed [ 52.202709][ T6267] FAT-fs (loop1): Directory bread(block 72) failed [ 52.209616][ T6267] FAT-fs (loop1): Directory bread(block 73) failed [ 52.396991][ T6248] ================================================================== [ 52.405103][ T6248] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 52.412852][ T6248] [ 52.415178][ T6248] write to 0xffff888106f1f814 of 4 bytes by task 6258 on cpu 0: [ 52.422810][ T6248] xas_set_mark+0x131/0x150 [ 52.427331][ T6248] tag_pages_for_writeback+0xa5/0x2a0 [ 52.432718][ T6248] writeback_iter+0x351/0x830 [ 52.437409][ T6248] write_cache_pages+0x4b/0x100 [ 52.442277][ T6248] mpage_writepages+0x72/0xf0 [ 52.446976][ T6248] fat_writepages+0x24/0x30 [ 52.451501][ T6248] do_writepages+0x1d8/0x480 [ 52.456105][ T6248] filemap_fdatawrite_wbc+0xdb/0x100 [ 52.461407][ T6248] file_write_and_wait_range+0xc4/0x250 [ 52.466970][ T6248] __generic_file_fsync+0x46/0x140 [ 52.472101][ T6248] fat_file_fsync+0x46/0x100 [ 52.476695][ T6248] vfs_fsync_range+0x116/0x130 [ 52.481483][ T6248] generic_file_write_iter+0x185/0x1c0 [ 52.486948][ T6248] iter_file_splice_write+0x5f1/0x980 [ 52.492337][ T6248] direct_splice_actor+0x160/0x2c0 [ 52.497466][ T6248] splice_direct_to_actor+0x302/0x670 [ 52.502854][ T6248] do_splice_direct+0xd7/0x150 [ 52.507653][ T6248] do_sendfile+0x39b/0x970 [ 52.512082][ T6248] __x64_sys_sendfile64+0x110/0x150 [ 52.517292][ T6248] x64_sys_call+0xed5/0x2d60 [ 52.521893][ T6248] do_syscall_64+0xc9/0x1c0 [ 52.526492][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.532400][ T6248] [ 52.534726][ T6248] read to 0xffff888106f1f814 of 4 bytes by task 6248 on cpu 1: [ 52.542273][ T6248] filemap_fdatawrite_wbc+0x5c/0x100 [ 52.547580][ T6248] file_write_and_wait_range+0xc4/0x250 [ 52.553137][ T6248] __generic_file_fsync+0x46/0x140 [ 52.558259][ T6248] fat_file_fsync+0x46/0x100 [ 52.562852][ T6248] vfs_fsync_range+0x116/0x130 [ 52.567627][ T6248] generic_file_write_iter+0x185/0x1c0 [ 52.573102][ T6248] iter_file_splice_write+0x5f1/0x980 [ 52.578488][ T6248] direct_splice_actor+0x160/0x2c0 [ 52.583615][ T6248] splice_direct_to_actor+0x302/0x670 [ 52.589005][ T6248] do_splice_direct+0xd7/0x150 [ 52.593774][ T6248] do_sendfile+0x39b/0x970 [ 52.598297][ T6248] __x64_sys_sendfile64+0x110/0x150 [ 52.603496][ T6248] x64_sys_call+0xed5/0x2d60 [ 52.608091][ T6248] do_syscall_64+0xc9/0x1c0 [ 52.612600][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.618514][ T6248] [ 52.620838][ T6248] value changed: 0x02000021 -> 0x0c000021 [ 52.626561][ T6248] [ 52.628884][ T6248] Reported by Kernel Concurrency Sanitizer on: [ 52.635041][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.2.590 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 52.645722][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.655782][ T6248] ================================================================== [ 52.833154][ T4190] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)