last executing test programs: 1.203432912s ago: executing program 0 (id=670): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x5) r2 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.073229053s ago: executing program 4 (id=667): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)) 1.072931553s ago: executing program 4 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 1.022188593s ago: executing program 4 (id=675): perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x17e7b0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x18a1, 0x3fd, 0x200, 0x8, 0x4, 0x7ff, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 969.371704ms ago: executing program 3 (id=680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg\x00', 0x4) shutdown(r0, 0x1) 905.070854ms ago: executing program 3 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 904.877014ms ago: executing program 3 (id=683): r0 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 885.560374ms ago: executing program 4 (id=684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x64142, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2}}, 0x48) 849.942605ms ago: executing program 4 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0x0, 0x0, 0x0}) 763.455705ms ago: executing program 2 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 723.124166ms ago: executing program 2 (id=694): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x1843, 0x0, 0x0, 0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0xecf86c37d53049cc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002040), 0x288, r0}, 0x38) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb9}}, {@grpjquota, 0x22}, {@nodelalloc}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x476, &(0x7f0000000940)="$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") 516.365197ms ago: executing program 1 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x64142, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2}}, 0x48) 516.227947ms ago: executing program 4 (id=697): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 467.051747ms ago: executing program 1 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5d14, &(0x7f0000000340)={0x0, 0x2999, 0x400, 0x3, 0x20}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 335.017138ms ago: executing program 1 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x1000000) 334.646648ms ago: executing program 0 (id=700): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x2000) 314.858938ms ago: executing program 0 (id=701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000380)=[{0xfc, 0x0, 0x0, 0x8, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0xe, {0x6, 0xfd}, {0x1, 0x1}, @control={0x7, 0x9fa, 0x6}}], 0x38) 289.561258ms ago: executing program 3 (id=702): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7c7, &(0x7f0000001540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) 288.999619ms ago: executing program 2 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffffe]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 228.018309ms ago: executing program 1 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) 227.612219ms ago: executing program 0 (id=704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 227.288469ms ago: executing program 2 (id=705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 173.008599ms ago: executing program 1 (id=706): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x3c, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 172.760759ms ago: executing program 2 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="000000d6"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 165.099109ms ago: executing program 0 (id=708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0xa6, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x20000000}}}}, 0x30}}, 0x0) 153.075869ms ago: executing program 2 (id=709): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000580)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 127.92828ms ago: executing program 0 (id=710): r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) r3 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) 81.04239ms ago: executing program 1 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x5) 60.97301ms ago: executing program 3 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='(.\'\x00', 0x0) 0s ago: executing program 3 (id=714): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x222000, 0x1000, 0x10, 0x1}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x26, r0}, 0x10) kernel console output (not intermixed with test programs): [ 21.887597][ T30] audit: type=1400 audit(1741856232.274:81): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 25.912474][ T30] audit: type=1400 audit(1741856236.284:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.913518][ T3287] cgroup: Unknown subsys name 'net' [ 25.935213][ T30] audit: type=1400 audit(1741856236.284:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.962662][ T30] audit: type=1400 audit(1741856236.324:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.094484][ T3287] cgroup: Unknown subsys name 'cpuset' [ 26.100667][ T3287] cgroup: Unknown subsys name 'rlimit' [ 26.212542][ T30] audit: type=1400 audit(1741856236.584:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.235896][ T30] audit: type=1400 audit(1741856236.594:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.256455][ T30] audit: type=1400 audit(1741856236.594:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.276882][ T30] audit: type=1400 audit(1741856236.594:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.289937][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.297242][ T30] audit: type=1400 audit(1741856236.594:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.330760][ T30] audit: type=1400 audit(1741856236.594:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.354248][ T30] audit: type=1400 audit(1741856236.694:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.385087][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.459358][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.580556][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.594414][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.601507][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.609605][ T3300] bridge_slave_0: entered allmulticast mode [ 27.616933][ T3300] bridge_slave_0: entered promiscuous mode [ 27.625934][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.635246][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 27.652864][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.659979][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.667254][ T3300] bridge_slave_1: entered allmulticast mode [ 27.673886][ T3300] bridge_slave_1: entered promiscuous mode [ 27.688138][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.730140][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.752435][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.801956][ T3300] team0: Port device team_slave_0 added [ 27.824146][ T3300] team0: Port device team_slave_1 added [ 27.830130][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.837548][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.844801][ T3314] bridge_slave_0: entered allmulticast mode [ 27.851145][ T3314] bridge_slave_0: entered promiscuous mode [ 27.860169][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.867326][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.874658][ T3299] bridge_slave_0: entered allmulticast mode [ 27.881227][ T3299] bridge_slave_0: entered promiscuous mode [ 27.887815][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.894913][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.902637][ T3307] bridge_slave_0: entered allmulticast mode [ 27.909117][ T3307] bridge_slave_0: entered promiscuous mode [ 27.920545][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.927812][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.936149][ T3314] bridge_slave_1: entered allmulticast mode [ 27.942562][ T3314] bridge_slave_1: entered promiscuous mode [ 27.953854][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.961000][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.968178][ T3299] bridge_slave_1: entered allmulticast mode [ 27.974802][ T3299] bridge_slave_1: entered promiscuous mode [ 27.981053][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.988177][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.995506][ T3307] bridge_slave_1: entered allmulticast mode [ 28.001937][ T3307] bridge_slave_1: entered promiscuous mode [ 28.021941][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.029161][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.036476][ T3305] bridge_slave_0: entered allmulticast mode [ 28.042953][ T3305] bridge_slave_0: entered promiscuous mode [ 28.063981][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.070950][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.096947][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.112420][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.119584][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.126765][ T3305] bridge_slave_1: entered allmulticast mode [ 28.133187][ T3305] bridge_slave_1: entered promiscuous mode [ 28.140555][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.155858][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.165231][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.172297][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.198297][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.210076][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.229918][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.245294][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.257969][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.268337][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.283271][ T3299] team0: Port device team_slave_0 added [ 28.299066][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.314330][ T3314] team0: Port device team_slave_0 added [ 28.320676][ T3299] team0: Port device team_slave_1 added [ 28.350810][ T3314] team0: Port device team_slave_1 added [ 28.362611][ T3307] team0: Port device team_slave_0 added [ 28.369260][ T3307] team0: Port device team_slave_1 added [ 28.375788][ T3305] team0: Port device team_slave_0 added [ 28.396584][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.403553][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.429916][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.441531][ T3305] team0: Port device team_slave_1 added [ 28.459257][ T3300] hsr_slave_0: entered promiscuous mode [ 28.465449][ T3300] hsr_slave_1: entered promiscuous mode [ 28.476141][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.483118][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.509103][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.530858][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.537891][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.564008][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.576565][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.583702][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.610101][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.624248][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.631217][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.657288][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.670649][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.677681][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.703987][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.715070][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.722018][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.747959][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.759224][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.766294][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.792485][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.832408][ T3305] hsr_slave_0: entered promiscuous mode [ 28.838487][ T3305] hsr_slave_1: entered promiscuous mode [ 28.844451][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.852046][ T3305] Cannot create hsr debugfs directory [ 28.870614][ T3307] hsr_slave_0: entered promiscuous mode [ 28.876832][ T3307] hsr_slave_1: entered promiscuous mode [ 28.882690][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.890370][ T3307] Cannot create hsr debugfs directory [ 28.926502][ T3314] hsr_slave_0: entered promiscuous mode [ 28.932519][ T3314] hsr_slave_1: entered promiscuous mode [ 28.938379][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.946038][ T3314] Cannot create hsr debugfs directory [ 28.961017][ T3299] hsr_slave_0: entered promiscuous mode [ 28.967187][ T3299] hsr_slave_1: entered promiscuous mode [ 28.973058][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.980665][ T3299] Cannot create hsr debugfs directory [ 29.150128][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.161247][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.177668][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.188306][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.210301][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.227188][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.235931][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.246493][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.274947][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.284290][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.298840][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.307711][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.332869][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.341910][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.351034][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.362593][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.398249][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.421406][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.430597][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.439657][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.450303][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.459369][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.482023][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.506427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.513538][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.536369][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.545127][ T794] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.552282][ T794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.587923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.595052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.612245][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.628708][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.640706][ T794] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.647894][ T794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.659974][ T794] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.667075][ T794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.679417][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.690484][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.700063][ T794] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.707318][ T794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.720698][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.730728][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.766702][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.773901][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.784461][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.795999][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.803179][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.820486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.827627][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.843370][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.861807][ T1784] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.868952][ T1784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.880320][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.946699][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.963130][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.998518][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.051090][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.089322][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.142863][ T3300] veth0_vlan: entered promiscuous mode [ 30.182339][ T3300] veth1_vlan: entered promiscuous mode [ 30.193540][ T3307] veth0_vlan: entered promiscuous mode [ 30.205310][ T3305] veth0_vlan: entered promiscuous mode [ 30.218554][ T3307] veth1_vlan: entered promiscuous mode [ 30.228077][ T3305] veth1_vlan: entered promiscuous mode [ 30.236991][ T3300] veth0_macvtap: entered promiscuous mode [ 30.250526][ T3299] veth0_vlan: entered promiscuous mode [ 30.265825][ T3300] veth1_macvtap: entered promiscuous mode [ 30.275991][ T3299] veth1_vlan: entered promiscuous mode [ 30.283046][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.294106][ T3307] veth0_macvtap: entered promiscuous mode [ 30.310124][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.318316][ T3307] veth1_macvtap: entered promiscuous mode [ 30.337326][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.346248][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.355068][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.363808][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.374370][ T3314] veth0_vlan: entered promiscuous mode [ 30.382580][ T3299] veth0_macvtap: entered promiscuous mode [ 30.389669][ T3305] veth0_macvtap: entered promiscuous mode [ 30.402570][ T3314] veth1_vlan: entered promiscuous mode [ 30.409203][ T3299] veth1_macvtap: entered promiscuous mode [ 30.417521][ T3305] veth1_macvtap: entered promiscuous mode [ 30.429141][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.439821][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.450553][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.461901][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.472424][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.482343][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.492952][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.504150][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.513103][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.524202][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.535197][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.554597][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.565097][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.574981][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.585491][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.595460][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.605904][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.617503][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.626683][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.626837][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.635574][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.659170][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.667961][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.678961][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.689630][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.699520][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.710017][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.720485][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.731465][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.741990][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.751885][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.762399][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.772240][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.782765][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.794208][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.804233][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.813063][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.821823][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.830569][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.841878][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.850702][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.859467][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.868302][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.907918][ T3314] veth0_macvtap: entered promiscuous mode [ 30.922909][ T3314] veth1_macvtap: entered promiscuous mode [ 30.950842][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 30.950862][ T30] audit: type=1400 audit(1741856241.324:128): avc: denied { create } for pid=3441 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.976686][ T30] audit: type=1400 audit(1741856241.324:129): avc: denied { bind } for pid=3441 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.987858][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.996168][ T30] audit: type=1400 audit(1741856241.324:130): avc: denied { setopt } for pid=3441 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.006589][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.006605][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.006621][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.006633][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.006648][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.006715][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.006730][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.010365][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.026625][ T30] audit: type=1400 audit(1741856241.324:131): avc: denied { write } for pid=3441 comm="syz.4.6" path="socket:[4552]" dev="sockfs" ino=4552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.040376][ T3444] netlink: 'syz.4.7': attribute type 1 has an invalid length. [ 31.082064][ T30] audit: type=1400 audit(1741856241.464:132): avc: denied { create } for pid=3445 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.088672][ T3444] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.7'. [ 31.098621][ T30] audit: type=1400 audit(1741856241.464:133): avc: denied { setopt } for pid=3445 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.156046][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.164957][ T30] audit: type=1400 audit(1741856241.464:134): avc: denied { read } for pid=3445 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.184122][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.223668][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.234118][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.243973][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.254448][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.264430][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.275030][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.288951][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.340345][ T3457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 31.355633][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.364533][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.373326][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.377942][ T30] audit: type=1400 audit(1741856241.574:135): avc: denied { write } for pid=3445 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.382112][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.401338][ T30] audit: type=1400 audit(1741856241.674:136): avc: denied { create } for pid=3449 comm="syz.4.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.431018][ T30] audit: type=1400 audit(1741856241.674:137): avc: denied { write } for pid=3448 comm="syz.1.2" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.461749][ T3460] loop1: detected capacity change from 0 to 512 [ 31.472577][ T3460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.495210][ T3461] syz_tun: entered allmulticast mode [ 31.509177][ T3461] syz_tun: left allmulticast mode [ 31.556531][ T3460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.582209][ T3460] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.663091][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.760502][ T3493] loop1: detected capacity change from 0 to 1024 [ 31.781215][ T3493] ======================================================= [ 31.781215][ T3493] WARNING: The mand mount option has been deprecated and [ 31.781215][ T3493] and is ignored by this kernel. Remove the mand [ 31.781215][ T3493] option from the mount to silence this warning. [ 31.781215][ T3493] ======================================================= [ 31.828411][ T3493] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.857633][ T3503] mmap: syz.4.28 (3503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.875063][ T3493] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.19: Invalid block bitmap block 0 in block_group 0 [ 31.888914][ T3493] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.19: Failed to acquire dquot type 0 [ 31.901597][ T3493] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.19: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.917757][ T3493] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.19: Invalid inode bitmap blk 0 in block_group 0 [ 31.933775][ T54] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 0 [ 31.938920][ T3493] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 31.959868][ T3493] EXT4-fs (loop1): 1 orphan inode deleted [ 31.966637][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.996541][ T3493] EXT4-fs (loop1): shut down requested (1) [ 32.024468][ T3513] loop2: detected capacity change from 0 to 512 [ 32.058203][ T3493] syz.1.19 (3493) used greatest stack depth: 9520 bytes left [ 32.066225][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.077780][ T3513] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.32: bg 0: block 248: padding at end of block bitmap is not set [ 32.094599][ T3513] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.32: Failed to acquire dquot type 1 [ 32.106466][ T3513] EXT4-fs (loop2): 1 truncate cleaned up [ 32.112657][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.128033][ T3513] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.139090][ T3513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.185061][ T3513] syz.2.32 (3513) used greatest stack depth: 9352 bytes left [ 32.416005][ T3546] loop0: detected capacity change from 0 to 2048 [ 32.465441][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.554803][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.625228][ T3562] syz.0.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.740231][ T3574] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 32.918205][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 32.931932][ T3589] netlink: 'syz.3.65': attribute type 13 has an invalid length. [ 32.939796][ T3589] netlink: 152 bytes leftover after parsing attributes in process `syz.3.65'. [ 32.966471][ T3592] loop4: detected capacity change from 0 to 512 [ 32.994205][ T3589] syz_tun: refused to change device tx_queue_len [ 33.000696][ T3589] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 33.035081][ T3592] EXT4-fs (loop4): too many log groups per flexible block group [ 33.042989][ T3592] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 33.087383][ T3592] EXT4-fs (loop4): mount failed [ 33.247869][ T3621] loop2: detected capacity change from 0 to 512 [ 33.285450][ T3621] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.295884][ T3615] loop4: detected capacity change from 0 to 2048 [ 33.303982][ T3621] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.81: bg 0: block 248: padding at end of block bitmap is not set [ 33.321801][ T3621] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.81: Failed to acquire dquot type 1 [ 33.335035][ T3621] EXT4-fs (loop2): 1 truncate cleaned up [ 33.346921][ T3625] process 'syz.0.82' launched '/dev/fd/6' with NULL argv: empty string added [ 33.362360][ T3615] Alternate GPT is invalid, using primary GPT. [ 33.368786][ T3615] loop4: p1 p2 p3 [ 33.374008][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.412258][ T3002] Alternate GPT is invalid, using primary GPT. [ 33.418720][ T3002] loop4: p1 p2 p3 [ 33.454129][ T3621] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 33.518494][ T3621] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 33.542825][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.556351][ T3621] syz.2.81 (3621) used greatest stack depth: 9272 bytes left [ 33.556670][ T3454] udevd[3454]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.584906][ T3453] udevd[3453]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.613515][ T3642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 33.627068][ T3454] udevd[3454]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.642929][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.687499][ T3650] loop3: detected capacity change from 0 to 512 [ 33.734185][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.751394][ T3650] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.772115][ T3650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.810094][ T3668] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 33.810094][ T3668] program syz.1.98 not setting count and/or reply_len properly [ 34.116120][ T3685] Zero length message leads to an empty skb [ 34.171066][ T3690] loop3: detected capacity change from 0 to 512 [ 34.189019][ T3690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.202661][ T3690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 34.219321][ T3690] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.227432][ T3690] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 34.242667][ T3690] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 34.250831][ T3690] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.269932][ T3690] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.108: couldn't read orphan inode 13 (err -117) [ 34.282569][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.299190][ T3690] EXT4-fs (loop3): shut down requested (1) [ 34.327250][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.385696][ T3700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.112'. [ 34.395432][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.402647][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.718486][ T3729] syz.2.126 uses obsolete (PF_INET,SOCK_PACKET) [ 34.739821][ T3732] hub 9-0:1.0: USB hub found [ 34.753932][ T3732] hub 9-0:1.0: 8 ports detected [ 34.847469][ T3744] netem: change failed [ 34.978230][ T3763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.142'. [ 35.012232][ T3767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 35.021229][ T3767] netlink: 'syz.2.144': attribute type 7 has an invalid length. [ 35.028985][ T3767] netlink: 'syz.2.144': attribute type 8 has an invalid length. [ 35.036792][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 35.145028][ T3775] team0: No ports can be present during mode change [ 35.171337][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 35.194264][ T3779] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 35.212050][ T3775] team0 (unregistering): Port device team_slave_0 removed [ 35.295809][ T3775] team0 (unregistering): Port device team_slave_1 removed [ 35.482592][ T3796] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 35.837244][ T3822] IPVS: Error connecting to the multicast addr [ 35.861360][ T3823] loop4: detected capacity change from 0 to 512 [ 35.916385][ T3823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.954668][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.967314][ T3823] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.014476][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.037240][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 36.037258][ T30] audit: type=1400 audit(1741856246.414:296): avc: denied { connect } for pid=3834 comm="syz.2.173" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.082429][ T30] audit: type=1400 audit(1741856246.454:297): avc: denied { create } for pid=3837 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.117633][ T3842] __nla_validate_parse: 1 callbacks suppressed [ 36.117648][ T3842] netlink: 268 bytes leftover after parsing attributes in process `syz.0.177'. [ 36.133135][ T3842] unsupported nla_type 65024 [ 36.135368][ T30] audit: type=1400 audit(1741856246.494:298): avc: denied { write } for pid=3837 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.157019][ T30] audit: type=1400 audit(1741856246.494:299): avc: denied { write } for pid=3841 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.177007][ T30] audit: type=1400 audit(1741856246.494:300): avc: denied { nlmsg_write } for pid=3841 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.224184][ T3849] 9pnet: p9_errstr2errno: server reported unknown error l0&I0(|9QM- [ 36.239988][ T3833] loop1: detected capacity change from 0 to 512 [ 36.256850][ T3833] EXT4-fs error (device loop1): ext4_quota_enable:7101: comm syz.1.172: inode #33554432: comm syz.1.172: iget: illegal inode # [ 36.275894][ T3833] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.172: Bad quota inode: 33554432, type: 2 [ 36.289430][ T3833] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 36.310724][ T3833] EXT4-fs (loop1): mount failed [ 36.313732][ T30] audit: type=1326 audit(1741856246.684:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 36.339249][ T30] audit: type=1326 audit(1741856246.684:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 36.382139][ T3856] xt_hashlimit: max too large, truncated to 1048576 [ 36.443851][ T30] audit: type=1326 audit(1741856246.724:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 36.467442][ T30] audit: type=1326 audit(1741856246.724:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 36.490752][ T30] audit: type=1326 audit(1741856246.724:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 36.607825][ T3865] bridge0: entered promiscuous mode [ 36.626446][ T3865] bridge0: port 3(macsec1) entered blocking state [ 36.632950][ T3865] bridge0: port 3(macsec1) entered disabled state [ 36.660613][ T3865] macsec1: entered allmulticast mode [ 36.666100][ T3865] bridge0: entered allmulticast mode [ 36.698174][ T3865] macsec1: left allmulticast mode [ 36.703386][ T3865] bridge0: left allmulticast mode [ 36.705364][ T3885] SELinux: syz.2.196 (3885) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 36.739022][ T3865] bridge0: left promiscuous mode [ 36.837482][ T3897] SELinux: failed to load policy [ 36.952620][ T3914] loop2: detected capacity change from 0 to 256 [ 36.970220][ T3909] loop1: detected capacity change from 0 to 1024 [ 36.981207][ T3914] vfat: Unknown parameter 'ut' [ 36.987530][ T3909] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.998524][ T3909] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 37.018806][ T3909] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.047587][ T3909] EXT4-fs (loop1): invalid journal inode [ 37.053377][ T3909] EXT4-fs (loop1): can't get journal size [ 37.060164][ T3909] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.209: blocks 2-2 from inode overlap system zone [ 37.078369][ T3909] EXT4-fs (loop1): failed to initialize system zone (-117) [ 37.088630][ T3909] EXT4-fs (loop1): mount failed [ 37.186979][ T3938] team_slave_0: entered promiscuous mode [ 37.192713][ T3938] team_slave_1: entered promiscuous mode [ 37.199007][ T3938] macsec1: entered promiscuous mode [ 37.204417][ T3938] team0: entered promiscuous mode [ 37.209907][ T3938] macsec1: entered allmulticast mode [ 37.215245][ T3938] team0: entered allmulticast mode [ 37.220450][ T3938] team_slave_0: entered allmulticast mode [ 37.226275][ T3938] team_slave_1: entered allmulticast mode [ 37.239928][ T3938] team0: Device macsec1 is already an upper device of the team interface [ 37.249072][ T3938] team0: left allmulticast mode [ 37.254027][ T3938] team_slave_0: left allmulticast mode [ 37.259704][ T3938] team_slave_1: left allmulticast mode [ 37.265502][ T3938] team0: left promiscuous mode [ 37.270619][ T3938] team_slave_0: left promiscuous mode [ 37.276054][ T3938] team_slave_1: left promiscuous mode [ 37.291870][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 37.475904][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 37.506247][ T3969] loop0: detected capacity change from 0 to 512 [ 37.560487][ T3969] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.234: corrupted in-inode xattr: invalid ea_ino [ 37.602685][ T3971] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 37.613185][ T3971] SELinux: failed to load policy [ 37.629812][ T3969] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.234: couldn't read orphan inode 15 (err -117) [ 37.644440][ T3983] loop1: detected capacity change from 0 to 2048 [ 37.667879][ T3969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.686417][ T3983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.785379][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.802745][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.820800][ T3996] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 37.842315][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 37.898271][ T4008] loop4: detected capacity change from 0 to 256 [ 37.942704][ T4001] bond1: entered promiscuous mode [ 37.948141][ T4001] bond1: entered allmulticast mode [ 37.949208][ T4008] FAT-fs (loop4): Directory bread(block 64) failed [ 37.954539][ T4001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.006131][ T4008] FAT-fs (loop4): Directory bread(block 65) failed [ 38.044948][ T4008] FAT-fs (loop4): Directory bread(block 66) failed [ 38.076577][ T4008] FAT-fs (loop4): Directory bread(block 67) failed [ 38.098804][ T4008] FAT-fs (loop4): Directory bread(block 68) failed [ 38.101990][ T4018] loop1: detected capacity change from 0 to 512 [ 38.113638][ T4008] FAT-fs (loop4): Directory bread(block 69) failed [ 38.120989][ T4008] FAT-fs (loop4): Directory bread(block 70) failed [ 38.130647][ T4008] FAT-fs (loop4): Directory bread(block 71) failed [ 38.146288][ T4018] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.157108][ T4008] FAT-fs (loop4): Directory bread(block 72) failed [ 38.178641][ T4008] FAT-fs (loop4): Directory bread(block 73) failed [ 38.205978][ T4018] EXT4-fs (loop1): 1 orphan inode deleted [ 38.226733][ T381] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 38.232848][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.245830][ T4027] loop0: detected capacity change from 0 to 2048 [ 38.260687][ T4018] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.309921][ T4027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.356412][ T4027] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.388189][ T4038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.394592][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.410493][ T4038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 38.420363][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.422931][ T4038] vlan2: entered promiscuous mode [ 38.434711][ T4038] gretap0: entered promiscuous mode [ 38.447814][ T4038] gretap0: left promiscuous mode [ 38.506261][ T4046] loop4: detected capacity change from 0 to 2048 [ 38.512839][ T4044] loop1: detected capacity change from 0 to 2048 [ 38.541196][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.555639][ T4044] Alternate GPT is invalid, using primary GPT. [ 38.562047][ T4044] loop1: p1 p2 p3 [ 38.585266][ T3002] Alternate GPT is invalid, using primary GPT. [ 38.591555][ T3002] loop1: p1 p2 p3 [ 38.600742][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.630430][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.631628][ T3454] udevd[3454]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.660827][ T4056] loop9: detected capacity change from 0 to 7 [ 38.671171][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.677562][ T4056] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.696299][ T4056] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.704386][ T4056] loop9: unable to read partition table [ 38.712444][ T3454] udevd[3454]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.714890][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.726864][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.750869][ T4056] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 38.750869][ T4056] U) failed (rc=-5) [ 38.765816][ T4060] loop3: detected capacity change from 0 to 1024 [ 38.782780][ T4060] EXT4-fs: Ignoring removed nobh option [ 38.812269][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.879682][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.957848][ T4083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 39.100324][ T4096] tipc: Started in network mode [ 39.105323][ T4096] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 39.117910][ T4096] tipc: Enabled bearer , priority 10 [ 39.138438][ T4098] Non-string source [ 39.277396][ T4110] bond1: entered promiscuous mode [ 39.282573][ T4110] bond1: entered allmulticast mode [ 39.290367][ T4110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.305581][ T4110] bond1 (unregistering): Released all slaves [ 39.317811][ T4115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4115 comm=syz.0.296 [ 39.495611][ T4129] 9pnet: p9_errstr2errno: server reported unknown error l0&I0(|9QM-ttVKr-j":a) [ 39.539556][ T4135] program syz.1.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.549711][ T4135] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 39.599173][ T4138] netem: change failed [ 39.617971][ T4140] loop1: detected capacity change from 0 to 1024 [ 39.641199][ T4142] bridge0: entered promiscuous mode [ 39.646940][ T4140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e01c, mo2=0002] [ 39.648340][ T4142] bridge0: port 3(macsec1) entered blocking state [ 39.656788][ T4140] System zones: 0-1, 3-12 [ 39.661625][ T4142] bridge0: port 3(macsec1) entered disabled state [ 39.672695][ T4142] macsec1: entered allmulticast mode [ 39.678258][ T4142] bridge0: entered allmulticast mode [ 39.684429][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.696968][ T4142] macsec1: left allmulticast mode [ 39.702103][ T4142] bridge0: left allmulticast mode [ 39.707629][ T4142] bridge0: left promiscuous mode [ 39.729669][ T4140] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.308' sets config #1030057058 [ 39.754772][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.844523][ T4146] loop1: detected capacity change from 0 to 1024 [ 39.851392][ T4146] EXT4-fs: Ignoring removed orlov option [ 39.857200][ T4146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.877489][ T4148] loop2: detected capacity change from 0 to 8192 [ 39.929909][ T4146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.965214][ T4152] 9pnet: Could not find request transport: 0xffffffffffffffff [ 40.031138][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.116838][ T4166] loop1: detected capacity change from 0 to 256 [ 40.151267][ T4165] loop4: detected capacity change from 0 to 512 [ 40.165310][ T4165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.178684][ T4165] EXT4-fs (loop4): 1 truncate cleaned up [ 40.187198][ T4165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.213893][ T3357] kernel write not supported for file /156/net/sockstat6 (pid: 3357 comm: kworker/1:2) [ 40.214549][ T4165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.234142][ T3357] tipc: Node number set to 4269801502 [ 40.388126][ T4182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.751698][ T4229] loop0: detected capacity change from 0 to 4096 [ 40.820256][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.854696][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.080230][ T30] kauditd_printk_skb: 246 callbacks suppressed [ 41.080245][ T30] audit: type=1400 audit(1741856251.454:551): avc: denied { setopt } for pid=4265 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.109302][ T30] audit: type=1400 audit(1741856251.494:552): avc: denied { bind } for pid=4265 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.129028][ T30] audit: type=1400 audit(1741856251.494:553): avc: denied { read } for pid=4265 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.160342][ T4270] 9pnet_fd: Insufficient options for proto=fd [ 41.194898][ T30] audit: type=1326 audit(1741856251.564:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.218505][ T30] audit: type=1326 audit(1741856251.564:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.244307][ T30] audit: type=1326 audit(1741856251.594:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.267696][ T30] audit: type=1326 audit(1741856251.594:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.291072][ T30] audit: type=1326 audit(1741856251.594:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.314507][ T30] audit: type=1326 audit(1741856251.614:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.337745][ T30] audit: type=1326 audit(1741856251.614:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebbded169 code=0x7ffc0000 [ 41.402206][ T4284] loop1: detected capacity change from 0 to 512 [ 41.430073][ T4284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.441000][ T4284] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.372: invalid block [ 41.454917][ T4284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.372: invalid indirect mapped block 4294967295 (level 1) [ 41.471022][ T4284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.372: invalid indirect mapped block 4294967295 (level 1) [ 41.485644][ T4284] EXT4-fs (loop1): 2 truncates cleaned up [ 41.491736][ T4284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.543009][ T4284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.372: bg 0: block 5: invalid block bitmap [ 41.563500][ T4300] netlink: 'syz.2.379': attribute type 4 has an invalid length. [ 41.578846][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.590104][ T4300] netlink: 'syz.2.379': attribute type 4 has an invalid length. [ 41.616803][ T4303] io-wq is not configured for unbound workers [ 41.768335][ T4325] loop4: detected capacity change from 0 to 2048 [ 41.786474][ T4325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.813659][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.873269][ T4335] loop4: detected capacity change from 0 to 512 [ 41.880383][ T4335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.891690][ T4335] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.394: invalid block [ 41.906953][ T4335] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.394: invalid indirect mapped block 4294967295 (level 1) [ 41.921425][ T4335] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.394: invalid indirect mapped block 4294967295 (level 1) [ 41.936509][ T4335] EXT4-fs (loop4): 2 truncates cleaned up [ 41.942621][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.961838][ T4335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.394: bg 0: block 5: invalid block bitmap [ 41.985094][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.404517][ T4359] loop4: detected capacity change from 0 to 1024 [ 42.411572][ T4360] loop3: detected capacity change from 0 to 2048 [ 42.412368][ T4359] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.430750][ T4359] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.406: Invalid block bitmap block 0 in block_group 0 [ 42.444644][ T4359] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.406: Failed to acquire dquot type 0 [ 42.446122][ T4360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.457115][ T4359] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.406: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.482162][ T4359] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.406: Invalid inode bitmap blk 0 in block_group 0 [ 42.495039][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 42.495449][ T4359] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 42.515646][ T4359] EXT4-fs (loop4): 1 orphan inode deleted [ 42.522448][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.567156][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.586629][ T4359] EXT4-fs (loop4): shut down requested (1) [ 42.596497][ T4370] netem: change failed [ 42.605388][ T4371] loop0: detected capacity change from 0 to 1024 [ 42.612252][ T4371] EXT4-fs: Ignoring removed nobh option [ 42.619898][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.651996][ T4371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.699721][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.776407][ T4396] loop0: detected capacity change from 0 to 512 [ 42.794295][ T4396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.807012][ T4401] loop3: detected capacity change from 0 to 1024 [ 42.807422][ T4396] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 42.814989][ T4401] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.823205][ T4396] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.833762][ T4401] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.423: Invalid block bitmap block 0 in block_group 0 [ 42.839222][ T4396] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.851653][ T4401] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.423: Failed to acquire dquot type 0 [ 42.876261][ T4396] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 42.877843][ T4401] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.423: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.886466][ T4396] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.421: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.906310][ T4401] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.423: Invalid inode bitmap blk 0 in block_group 0 [ 42.917687][ T4396] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.421: couldn't read orphan inode 13 (err -117) [ 42.929139][ T4401] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 42.942619][ T1855] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 42.961887][ T4401] EXT4-fs (loop3): 1 orphan inode deleted [ 42.968646][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.982971][ T4396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.998707][ T4405] SELinux: syz.1.424 (4405) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 43.020088][ T4401] EXT4-fs (loop3): shut down requested (1) [ 43.047214][ T4396] EXT4-fs (loop0): shut down requested (1) [ 43.054336][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.084682][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.108969][ T4413] loop0: detected capacity change from 0 to 512 [ 43.124107][ T4411] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 43.132381][ T4411] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 43.149638][ T4413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.169422][ T4413] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.180754][ T4413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.316452][ T4433] loop1: detected capacity change from 0 to 2048 [ 43.365928][ T4433] Alternate GPT is invalid, using primary GPT. [ 43.372264][ T4433] loop1: p1 p2 p3 [ 43.555356][ T4445] loop4: detected capacity change from 0 to 512 [ 43.563337][ T4445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.589083][ T4445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 43.607081][ T4445] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.620582][ T4445] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.653889][ T4445] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 43.660795][ T4450] capability: warning: `syz.0.442' uses deprecated v2 capabilities in a way that may be insecure [ 43.675534][ T4445] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.440: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.737001][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.440: couldn't read orphan inode 13 (err -117) [ 43.769212][ T4445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.808012][ T4445] EXT4-fs (loop4): shut down requested (1) [ 43.856770][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.112011][ T4479] loop2: detected capacity change from 0 to 512 [ 44.178112][ T4487] team0: No ports can be present during mode change [ 44.187290][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 44.210476][ T4487] team0 (unregistering): Port device team_slave_0 removed [ 44.210577][ T4491] loop3: detected capacity change from 0 to 1024 [ 44.225631][ T4487] team0 (unregistering): Port device team_slave_1 removed [ 44.235117][ T4491] EXT4-fs: Ignoring removed orlov option [ 44.240888][ T4491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.309520][ T4491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.359768][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.395253][ T4516] IPVS: Error connecting to the multicast addr [ 44.482104][ T4531] loop0: detected capacity change from 0 to 512 [ 44.493334][ T4531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.541320][ T4542] loop2: detected capacity change from 0 to 1024 [ 44.551082][ T4542] EXT4-fs: Ignoring removed orlov option [ 44.556902][ T4542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.568219][ T4531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.583526][ T4550] team0: No ports can be present during mode change [ 44.586430][ T4531] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.600975][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 44.615717][ T4550] team0 (unregistering): Port device team_slave_0 removed [ 44.625094][ T4550] team0 (unregistering): Port device team_slave_1 removed [ 44.627021][ T4542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.669176][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.680010][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.826312][ T4573] hub 9-0:1.0: USB hub found [ 44.831114][ T4573] hub 9-0:1.0: 8 ports detected [ 44.841443][ T4577] bridge0: port 3(vlan2) entered blocking state [ 44.848127][ T4577] bridge0: port 3(vlan2) entered disabled state [ 44.855747][ T4577] vlan2: entered allmulticast mode [ 44.875170][ T4577] vlan2: left allmulticast mode [ 44.899353][ T4583] loop1: detected capacity change from 0 to 512 [ 44.916838][ T4583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.927717][ T4590] loop4: detected capacity change from 0 to 512 [ 44.948224][ T4583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.969354][ T4590] EXT4-fs error (device loop4): ext4_quota_enable:7101: comm syz.4.501: inode #33554432: comm syz.4.501: iget: illegal inode # [ 44.969812][ T4583] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.003646][ T4590] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.501: Bad quota inode: 33554432, type: 2 [ 45.006890][ T4596] team0: No ports can be present during mode change [ 45.027881][ T4590] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 45.039156][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 45.056975][ T4590] EXT4-fs (loop4): mount failed [ 45.068618][ T4596] team0 (unregistering): Port device team_slave_0 removed [ 45.078175][ T4596] team0 (unregistering): Port device team_slave_1 removed [ 45.091282][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.338410][ T4630] hub 9-0:1.0: USB hub found [ 45.357177][ T4630] hub 9-0:1.0: 8 ports detected [ 45.422708][ T4639] team0: No ports can be present during mode change [ 45.439129][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 45.475353][ T4639] team0 (unregistering): Port device team_slave_0 removed [ 45.494717][ T4655] netlink: 'syz.3.531': attribute type 8 has an invalid length. [ 45.495920][ T4654] loop2: detected capacity change from 0 to 1024 [ 45.510858][ T4639] team0 (unregistering): Port device team_slave_1 removed [ 45.513090][ T4654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.776387][ T4677] bridge0: entered promiscuous mode [ 45.783134][ T4677] bridge0: port 3(macsec1) entered blocking state [ 45.789698][ T4677] bridge0: port 3(macsec1) entered disabled state [ 45.797124][ T4677] macsec1: entered allmulticast mode [ 45.802505][ T4677] bridge0: entered allmulticast mode [ 45.825400][ T4677] macsec1: left allmulticast mode [ 45.830552][ T4677] bridge0: left allmulticast mode [ 45.848293][ T4677] bridge0: left promiscuous mode [ 46.006529][ T4689] netlink: 112 bytes leftover after parsing attributes in process `syz.3.547'. [ 46.137364][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 46.137397][ T30] audit: type=1400 audit(1741856256.514:825): avc: denied { cpu } for pid=4702 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.353284][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.433374][ T4721] loop3: detected capacity change from 0 to 1024 [ 46.458968][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.467613][ T30] audit: type=1400 audit(1741856256.834:826): avc: denied { read write } for pid=4722 comm="syz.4.563" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.491257][ T30] audit: type=1400 audit(1741856256.834:827): avc: denied { open } for pid=4722 comm="syz.4.563" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.491575][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.514621][ T30] audit: type=1400 audit(1741856256.834:828): avc: denied { ioctl } for pid=4722 comm="syz.4.563" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.593455][ T4721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.621558][ T4721] SELinux: syz.3.561 (4721) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.723542][ T4741] loop2: detected capacity change from 0 to 2048 [ 46.733263][ T30] audit: type=1326 audit(1741856257.084:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f78d169 code=0x7ffc0000 [ 46.756685][ T30] audit: type=1326 audit(1741856257.084:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f78d169 code=0x7ffc0000 [ 46.780122][ T30] audit: type=1326 audit(1741856257.084:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f558f78d169 code=0x7ffc0000 [ 46.803774][ T30] audit: type=1326 audit(1741856257.084:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f78d169 code=0x7ffc0000 [ 46.829132][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.852453][ T4741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.884837][ T30] audit: type=1400 audit(1741856257.264:833): avc: denied { append } for pid=4739 comm="syz.2.569" path="/117/file1/freezer.state" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.913055][ T30] audit: type=1400 audit(1741856257.284:834): avc: denied { map } for pid=4739 comm="syz.2.569" path="/117/file1/freezer.state" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.945990][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 234: padding at end of block bitmap is not set [ 46.975963][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 46.988437][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.988437][ T12] [ 47.009841][ T4759] loop7: detected capacity change from 0 to 16384 [ 47.044812][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.243668][ T4760] loop7: detected capacity change from 16384 to 0 [ 47.262741][ T4772] bridge0: entered promiscuous mode [ 47.287937][ T4772] bridge0: port 3(macsec1) entered blocking state [ 47.294483][ T4772] bridge0: port 3(macsec1) entered disabled state [ 47.320928][ T4772] macsec1: entered allmulticast mode [ 47.326340][ T4772] bridge0: entered allmulticast mode [ 47.347919][ T4772] macsec1: left allmulticast mode [ 47.353028][ T4772] bridge0: left allmulticast mode [ 47.370385][ T4772] bridge0: left promiscuous mode [ 47.408717][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 47.409980][ T4787] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 47.456264][ T4791] loop3: detected capacity change from 0 to 512 [ 47.485881][ T4795] netlink: 'syz.0.593': attribute type 8 has an invalid length. [ 47.525714][ T4791] EXT4-fs (loop3): 1 orphan inode deleted [ 47.543411][ T4806] loop2: detected capacity change from 0 to 1024 [ 47.543992][ T4791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.564497][ T1784] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 47.582755][ T4791] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.598422][ T4806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.623174][ T4806] SELinux: syz.2.597 (4806) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 47.644253][ T4791] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.590: deleted inode referenced: 16 [ 47.669308][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.693181][ T4823] bridge0: entered promiscuous mode [ 47.715828][ T4823] bridge0: port 3(macsec1) entered blocking state [ 47.722364][ T4823] bridge0: port 3(macsec1) entered disabled state [ 47.729243][ T4823] macsec1: entered allmulticast mode [ 47.734680][ T4823] bridge0: entered allmulticast mode [ 47.751863][ T4823] macsec1: left allmulticast mode [ 47.757002][ T4823] bridge0: left allmulticast mode [ 47.762750][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.774323][ T4831] vhci_hcd: invalid port number 15 [ 47.779508][ T4831] vhci_hcd: invalid port number 15 [ 47.784803][ T4823] bridge0: left promiscuous mode [ 47.842909][ T4841] loop0: detected capacity change from 0 to 256 [ 47.861029][ T4841] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 47.868981][ T4841] FAT-fs (loop0): Filesystem has been set read-only [ 47.923304][ T4854] loop3: detected capacity change from 0 to 512 [ 47.942791][ T4854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.958000][ T4854] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.971509][ T4854] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #18: comm syz.3.618: corrupted inode contents [ 47.985105][ T4854] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #18: comm syz.3.618: mark_inode_dirty error [ 48.005071][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 48.014251][ T4854] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #18: comm syz.3.618: corrupted inode contents [ 48.026576][ T4854] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #18: comm syz.3.618: mark_inode_dirty error [ 48.072646][ T4854] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #18: comm syz.3.618: mark inode dirty (error -117) [ 48.082308][ T4872] loop2: detected capacity change from 0 to 256 [ 48.096482][ T4854] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 48.111809][ T4872] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 48.119802][ T4872] FAT-fs (loop2): Filesystem has been set read-only [ 48.133371][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.201419][ T4884] bridge0: port 3(macsec1) entered blocking state [ 48.208121][ T4884] bridge0: port 3(macsec1) entered disabled state [ 48.227780][ T4884] macsec1: entered allmulticast mode [ 48.233332][ T4884] bridge0: entered allmulticast mode [ 48.240153][ T4884] macsec1: left allmulticast mode [ 48.245292][ T4884] bridge0: left allmulticast mode [ 48.339308][ T4909] vhci_hcd: invalid port number 15 [ 48.344561][ T4909] vhci_hcd: invalid port number 15 [ 48.476305][ T4929] Invalid ELF header magic: != ELF [ 48.481302][ T4930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.543517][ T4938] loop2: detected capacity change from 0 to 1024 [ 48.550142][ T4935] loop4: detected capacity change from 0 to 4096 [ 48.551105][ T4938] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.567627][ T4938] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 48.577699][ T4938] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.578963][ T4935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.601806][ T4938] EXT4-fs (loop2): invalid journal inode [ 48.607608][ T4938] EXT4-fs (loop2): can't get journal size [ 48.623898][ T4938] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.666: blocks 2-2 from inode overlap system zone [ 48.639094][ T4938] EXT4-fs (loop2): failed to initialize system zone (-117) [ 48.647601][ T4938] EXT4-fs (loop2): mount failed [ 48.650909][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.788276][ T4963] ALSA: seq fatal error: cannot create timer (-22) [ 48.853238][ T4977] loop2: detected capacity change from 0 to 764 [ 48.962332][ T4995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.971159][ T4995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.175161][ T5020] bridge0: entered promiscuous mode [ 49.181857][ T5020] bridge0: port 3(macsec1) entered blocking state [ 49.188498][ T5020] bridge0: port 3(macsec1) entered disabled state [ 49.195395][ T5020] macsec1: entered allmulticast mode [ 49.200772][ T5020] bridge0: entered allmulticast mode [ 49.212964][ T5021] loop2: detected capacity change from 0 to 512 [ 49.220999][ T5021] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.694: iget: special inode unallocated [ 49.234562][ T5020] macsec1: left allmulticast mode [ 49.239723][ T5020] bridge0: left allmulticast mode [ 49.246249][ T5021] EXT4-fs (loop2): Remounting filesystem read-only [ 49.252888][ T5021] EXT4-fs (loop2): no journal found [ 49.258150][ T5021] EXT4-fs (loop2): can't get journal size [ 49.293126][ T5020] bridge0: left promiscuous mode [ 49.298595][ T5021] EXT4-fs (loop2): get root inode failed [ 49.304350][ T5021] EXT4-fs (loop2): mount failed [ 49.383043][ T5025] loop4: detected capacity change from 0 to 1024 [ 49.404197][ T5025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.650401][ T5043] loop3: detected capacity change from 0 to 764 [ 49.679658][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 49.784146][ T5059] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 49.790720][ T5059] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.798838][ T5059] vhci_hcd vhci_hcd.0: Device attached [ 49.808618][ T5060] vhci_hcd: connection closed [ 49.809010][ T12] vhci_hcd: stop threads [ 49.818076][ T12] vhci_hcd: release socket [ 49.822606][ T12] vhci_hcd: disconnect device [ 50.030724][ T5030] ================================================================== [ 50.038970][ T5030] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 50.046149][ T5030] [ 50.048493][ T5030] write to 0xffff8881066aeb24 of 4 bytes by task 5025 on cpu 0: [ 50.056143][ T5030] xas_set_mark+0x131/0x150 [ 50.060686][ T5030] __folio_start_writeback+0x1e8/0x430 [ 50.066190][ T5030] ext4_bio_write_folio+0x591/0x9d0 [ 50.071461][ T5030] mpage_process_page_bufs+0x486/0x5d0 [ 50.076969][ T5030] mpage_prepare_extent_to_map+0x788/0xb80 [ 50.082821][ T5030] ext4_do_writepages+0xa20/0x2130 [ 50.088066][ T5030] ext4_writepages+0x159/0x2e0 [ 50.092846][ T5030] do_writepages+0x1d8/0x480 [ 50.097476][ T5030] file_write_and_wait_range+0x168/0x2f0 [ 50.103173][ T5030] generic_buffers_fsync_noflush+0x46/0x120 [ 50.109102][ T5030] ext4_sync_file+0x1ff/0x6c0 [ 50.113945][ T5030] vfs_fsync_range+0x116/0x130 [ 50.118756][ T5030] ext4_buffered_write_iter+0x358/0x3c0 [ 50.124360][ T5030] ext4_file_write_iter+0x383/0xf20 [ 50.129592][ T5030] iter_file_splice_write+0x5f1/0x980 [ 50.135001][ T5030] direct_splice_actor+0x160/0x2c0 [ 50.140158][ T5030] splice_direct_to_actor+0x302/0x670 [ 50.145571][ T5030] do_splice_direct+0xd7/0x150 [ 50.150376][ T5030] do_sendfile+0x398/0x660 [ 50.154821][ T5030] __x64_sys_sendfile64+0x110/0x150 [ 50.160054][ T5030] x64_sys_call+0xfbd/0x2dc0 [ 50.164680][ T5030] do_syscall_64+0xc9/0x1c0 [ 50.169221][ T5030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.175135][ T5030] [ 50.177464][ T5030] read to 0xffff8881066aeb24 of 4 bytes by task 5030 on cpu 1: [ 50.185012][ T5030] xas_find_marked+0x608/0x650 [ 50.189805][ T5030] find_get_entry+0x54/0x390 [ 50.194404][ T5030] filemap_get_folios_tag+0x9e/0x210 [ 50.199710][ T5030] mpage_prepare_extent_to_map+0x329/0xb80 [ 50.205531][ T5030] ext4_do_writepages+0x6ea/0x2130 [ 50.210680][ T5030] ext4_writepages+0x159/0x2e0 [ 50.215459][ T5030] do_writepages+0x1d8/0x480 [ 50.220068][ T5030] file_write_and_wait_range+0x168/0x2f0 [ 50.227681][ T5030] generic_buffers_fsync_noflush+0x46/0x120 [ 50.233797][ T5030] ext4_sync_file+0x1ff/0x6c0 [ 50.238508][ T5030] vfs_fsync_range+0x116/0x130 [ 50.243341][ T5030] ext4_buffered_write_iter+0x358/0x3c0 [ 50.248918][ T5030] ext4_file_write_iter+0x383/0xf20 [ 50.254142][ T5030] iter_file_splice_write+0x5f1/0x980 [ 50.259531][ T5030] direct_splice_actor+0x160/0x2c0 [ 50.264667][ T5030] splice_direct_to_actor+0x302/0x670 [ 50.270062][ T5030] do_splice_direct+0xd7/0x150 [ 50.274847][ T5030] do_sendfile+0x398/0x660 [ 50.279274][ T5030] __x64_sys_sendfile64+0x110/0x150 [ 50.284504][ T5030] x64_sys_call+0xfbd/0x2dc0 [ 50.289122][ T5030] do_syscall_64+0xc9/0x1c0 [ 50.293647][ T5030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.299651][ T5030] [ 50.301981][ T5030] value changed: 0x0a000021 -> 0x04000021 [ 50.307705][ T5030] [ 50.310059][ T5030] Reported by Kernel Concurrency Sanitizer on: [ 50.316227][ T5030] CPU: 1 UID: 0 PID: 5030 Comm: syz.4.697 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 50.326912][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.336979][ T5030] ================================================================== [ 50.429994][ T5030] syz.4.697 (5030) used greatest stack depth: 8952 bytes left [ 50.442200][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.