last executing test programs: 5.648488423s ago: executing program 3 (id=514): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5.511606476s ago: executing program 3 (id=530): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 5.424729307s ago: executing program 3 (id=524): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.025608826s ago: executing program 4 (id=606): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1.828723699s ago: executing program 4 (id=610): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x3, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000180)='./file1\x00', 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x6}, 0x18) preadv2(r1, &(0x7f0000000400)=[{&(0x7f00000046c0)=""/4113, 0x1011}], 0x1, 0x0, 0x0, 0x0) 1.16647537s ago: executing program 3 (id=613): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r0, 0xffffffffffffffff, 0x0) 1.1662888s ago: executing program 4 (id=615): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000004c0)={0x7, 0x0, "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"}) 1.117926871s ago: executing program 0 (id=617): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7bffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @local}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.099256982s ago: executing program 0 (id=619): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.067234082s ago: executing program 1 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 1.046137833s ago: executing program 1 (id=621): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9}, 0x90) r0 = syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x64b7, 0x20000, 0x0, 0x0, 0x0) 1.018358233s ago: executing program 1 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 986.137424ms ago: executing program 3 (id=626): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 853.743906ms ago: executing program 1 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 834.939786ms ago: executing program 1 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 806.642097ms ago: executing program 2 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 805.557447ms ago: executing program 1 (id=631): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x2000c041) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 748.767967ms ago: executing program 0 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 699.563899ms ago: executing program 2 (id=633): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x1) 662.886899ms ago: executing program 2 (id=634): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x5000) 436.465703ms ago: executing program 0 (id=635): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 436.291643ms ago: executing program 2 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x200, 0x0, 0x959, 0x0}) 416.317673ms ago: executing program 2 (id=637): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 213.975867ms ago: executing program 0 (id=638): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") unlink(&(0x7f0000000080)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) read(r1, &(0x7f0000001400)=""/4096, 0x1000) 211.471687ms ago: executing program 2 (id=648): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000004c0)={0x7, 0x0, "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"}) 210.340277ms ago: executing program 4 (id=649): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 131.677358ms ago: executing program 3 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 79.999489ms ago: executing program 0 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 52.00012ms ago: executing program 4 (id=641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=642): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 20.632515][ T29] audit: type=1400 audit(1753291543.959:62): avc: denied { mounton } for pid=3274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.633330][ T3274] cgroup: Unknown subsys name 'net' [ 20.655239][ T29] audit: type=1400 audit(1753291543.959:63): avc: denied { mount } for pid=3274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.682612][ T29] audit: type=1400 audit(1753291543.989:64): avc: denied { unmount } for pid=3274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.839298][ T3274] cgroup: Unknown subsys name 'cpuset' [ 20.845333][ T3274] cgroup: Unknown subsys name 'rlimit' [ 20.993906][ T29] audit: type=1400 audit(1753291544.319:65): avc: denied { setattr } for pid=3274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.018636][ T29] audit: type=1400 audit(1753291544.319:66): avc: denied { create } for pid=3274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.025228][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.039094][ T29] audit: type=1400 audit(1753291544.319:67): avc: denied { write } for pid=3274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.068031][ T29] audit: type=1400 audit(1753291544.319:68): avc: denied { read } for pid=3274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.088269][ T29] audit: type=1400 audit(1753291544.319:69): avc: denied { mounton } for pid=3274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.113189][ T29] audit: type=1400 audit(1753291544.319:70): avc: denied { mount } for pid=3274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.114438][ T3274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.136408][ T29] audit: type=1400 audit(1753291544.369:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.281543][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 22.321078][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 22.356163][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 22.399185][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.406260][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.413432][ T3302] bridge_slave_0: entered allmulticast mode [ 22.419884][ T3302] bridge_slave_0: entered promiscuous mode [ 22.427646][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 22.440275][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.447321][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.454524][ T3307] bridge_slave_0: entered allmulticast mode [ 22.460837][ T3307] bridge_slave_0: entered promiscuous mode [ 22.471602][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.478648][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.485765][ T3302] bridge_slave_1: entered allmulticast mode [ 22.492113][ T3302] bridge_slave_1: entered promiscuous mode [ 22.504276][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.511353][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.518480][ T3307] bridge_slave_1: entered allmulticast mode [ 22.525492][ T3307] bridge_slave_1: entered promiscuous mode [ 22.568706][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.581345][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.593005][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.606499][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.625490][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 22.657435][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.664518][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.672373][ T3303] bridge_slave_0: entered allmulticast mode [ 22.678733][ T3303] bridge_slave_0: entered promiscuous mode [ 22.685653][ T3302] team0: Port device team_slave_0 added [ 22.691439][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.698567][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.705780][ T3309] bridge_slave_0: entered allmulticast mode [ 22.712812][ T3309] bridge_slave_0: entered promiscuous mode [ 22.719234][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.726250][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.734021][ T3309] bridge_slave_1: entered allmulticast mode [ 22.740391][ T3309] bridge_slave_1: entered promiscuous mode [ 22.754411][ T3307] team0: Port device team_slave_0 added [ 22.760942][ T3307] team0: Port device team_slave_1 added [ 22.770572][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.777682][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.784958][ T3303] bridge_slave_1: entered allmulticast mode [ 22.791417][ T3303] bridge_slave_1: entered promiscuous mode [ 22.797956][ T3302] team0: Port device team_slave_1 added [ 22.828618][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.835598][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.861710][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.881530][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.890880][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.897852][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.923795][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.936415][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.943375][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.969472][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.981115][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.993355][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.003376][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.010346][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.036318][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.053696][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.074117][ T3309] team0: Port device team_slave_0 added [ 23.098202][ T3309] team0: Port device team_slave_1 added [ 23.108770][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.115882][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.124044][ T3306] bridge_slave_0: entered allmulticast mode [ 23.130384][ T3306] bridge_slave_0: entered promiscuous mode [ 23.137943][ T3303] team0: Port device team_slave_0 added [ 23.153727][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.160932][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.168076][ T3306] bridge_slave_1: entered allmulticast mode [ 23.174426][ T3306] bridge_slave_1: entered promiscuous mode [ 23.184687][ T3303] team0: Port device team_slave_1 added [ 23.200754][ T3307] hsr_slave_0: entered promiscuous mode [ 23.206614][ T3307] hsr_slave_1: entered promiscuous mode [ 23.213428][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.220452][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.246453][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.272465][ T3302] hsr_slave_0: entered promiscuous mode [ 23.278483][ T3302] hsr_slave_1: entered promiscuous mode [ 23.284208][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.291833][ T3302] Cannot create hsr debugfs directory [ 23.297522][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.304501][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.330402][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.342259][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.357384][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.364371][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.390381][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.409442][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.418818][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.425744][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.451707][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.493305][ T3309] hsr_slave_0: entered promiscuous mode [ 23.499345][ T3309] hsr_slave_1: entered promiscuous mode [ 23.505030][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.512628][ T3309] Cannot create hsr debugfs directory [ 23.521360][ T3306] team0: Port device team_slave_0 added [ 23.544585][ T3306] team0: Port device team_slave_1 added [ 23.567132][ T3303] hsr_slave_0: entered promiscuous mode [ 23.573149][ T3303] hsr_slave_1: entered promiscuous mode [ 23.578979][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.586515][ T3303] Cannot create hsr debugfs directory [ 23.610607][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.617588][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.643516][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.669443][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.676407][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.702413][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.785845][ T3306] hsr_slave_0: entered promiscuous mode [ 23.791807][ T3306] hsr_slave_1: entered promiscuous mode [ 23.797530][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.805095][ T3306] Cannot create hsr debugfs directory [ 23.833372][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.843967][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.862892][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.875870][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.913100][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.921526][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.933310][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.951846][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.982073][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.997441][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.011772][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.030384][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.039779][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.048043][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.060659][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.070663][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.085257][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.095842][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.102941][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.114813][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.140589][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.147695][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.187025][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.197163][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.211332][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.220311][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.229935][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.241819][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.252661][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.265976][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.273080][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.305890][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.316336][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.329522][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.336630][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.355639][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.364975][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.387108][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.394201][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.418298][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.425435][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.458269][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.474821][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.493152][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.511447][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.518509][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.527970][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.535038][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.544960][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.554981][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.562213][ T3302] veth0_vlan: entered promiscuous mode [ 24.575286][ T3302] veth1_vlan: entered promiscuous mode [ 24.591067][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.598211][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.633006][ T3302] veth0_macvtap: entered promiscuous mode [ 24.648126][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.655294][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.674455][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.688606][ T3302] veth1_macvtap: entered promiscuous mode [ 24.726152][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.734965][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.751253][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.765913][ T3307] veth0_vlan: entered promiscuous mode [ 24.778394][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.800458][ T3307] veth1_vlan: entered promiscuous mode [ 24.817691][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.826468][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.835286][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.844086][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.870056][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.877833][ T3303] veth0_vlan: entered promiscuous mode [ 24.899470][ T3307] veth0_macvtap: entered promiscuous mode [ 24.905910][ T3303] veth1_vlan: entered promiscuous mode [ 24.926586][ T3307] veth1_macvtap: entered promiscuous mode [ 24.947001][ T3303] veth0_macvtap: entered promiscuous mode [ 24.954710][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.983566][ T3303] veth1_macvtap: entered promiscuous mode [ 24.991475][ T3309] veth0_vlan: entered promiscuous mode [ 24.999481][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.017016][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.030541][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.039431][ T3309] veth1_vlan: entered promiscuous mode [ 25.049877][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.058596][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.067823][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.076847][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.087102][ T3472] xt_TPROXY: Can be used only with -p tcp or -p udp [ 25.101964][ T3309] veth0_macvtap: entered promiscuous mode [ 25.113254][ T3309] veth1_macvtap: entered promiscuous mode [ 25.134529][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.152928][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.161800][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.170543][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.179259][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.196897][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.237262][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.248662][ T3306] veth0_vlan: entered promiscuous mode [ 25.269330][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.278062][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.286888][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.295634][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.326995][ T3306] veth1_vlan: entered promiscuous mode [ 25.395483][ T3306] veth0_macvtap: entered promiscuous mode [ 25.411293][ T3494] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11'. [ 25.421618][ T3306] veth1_macvtap: entered promiscuous mode [ 25.443751][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 25.459569][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 25.471202][ T3494] bond0 (unregistering): Released all slaves [ 25.485786][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.494565][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.509089][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.516036][ T3503] loop3: detected capacity change from 0 to 1024 [ 25.524512][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.535386][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.544345][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.553273][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.561798][ T3503] ======================================================= [ 25.561798][ T3503] WARNING: The mand mount option has been deprecated and [ 25.561798][ T3503] and is ignored by this kernel. Remove the mand [ 25.561798][ T3503] option from the mount to silence this warning. [ 25.561798][ T3503] ======================================================= [ 25.562213][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.607092][ T3503] EXT4-fs: Ignoring removed oldalloc option [ 25.607993][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.613181][ T3503] EXT4-fs: Ignoring removed bh option [ 25.635368][ T3505] loop2: detected capacity change from 0 to 2048 [ 25.641482][ T3503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.655820][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 25.655830][ T29] audit: type=1400 audit(1753291548.979:124): avc: denied { mount } for pid=3501 comm="syz.3.15" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.669348][ T3294] Alternate GPT is invalid, using primary GPT. [ 25.685518][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.689713][ T3294] loop2: p1 p2 p3 [ 25.698236][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.724981][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.743971][ T29] audit: type=1400 audit(1753291549.059:125): avc: denied { add_name } for pid=3501 comm="syz.3.15" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.746527][ T3505] Alternate GPT is invalid, using primary GPT. [ 25.766279][ T29] audit: type=1400 audit(1753291549.059:126): avc: denied { create } for pid=3501 comm="syz.3.15" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.772640][ T3505] loop2: p1 p2 p3 [ 25.794033][ T29] audit: type=1400 audit(1753291549.059:127): avc: denied { read append open } for pid=3501 comm="syz.3.15" path="/4/file1/file0/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.801209][ T29] audit: type=1400 audit(1753291549.129:128): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.870893][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.879761][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.890593][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.900145][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 26.008067][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 26.021833][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 26.036696][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 26.052003][ T3527] loop4: detected capacity change from 0 to 764 [ 26.070433][ T3529] loop0: detected capacity change from 0 to 764 [ 26.077436][ T29] audit: type=1400 audit(1753291549.399:129): avc: denied { mount } for pid=3526 comm="syz.4.22" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 26.111554][ T3527] Symlink component flag not implemented [ 26.118993][ T3527] Symlink component flag not implemented (101) [ 26.173317][ T29] audit: type=1400 audit(1753291549.449:130): avc: denied { mounton } for pid=3528 comm="syz.0.21" path="/5/file1/file0" dev="loop0" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 26.196339][ T29] audit: type=1400 audit(1753291549.459:131): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 26.197136][ T3531] syz.3.23 (3531) used greatest stack depth: 10016 bytes left [ 26.216371][ T29] audit: type=1400 audit(1753291549.459:132): avc: denied { create } for pid=3530 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.216394][ T29] audit: type=1400 audit(1753291549.459:133): avc: denied { setopt } for pid=3530 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.576380][ T3570] Zero length message leads to an empty skb [ 26.601173][ T3572] loop3: detected capacity change from 0 to 512 [ 26.610654][ T3572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.632247][ T3572] EXT4-fs (loop3): 1 orphan inode deleted [ 26.647622][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.660685][ T336] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 26.672920][ T3572] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.743608][ T3582] loop4: detected capacity change from 0 to 128 [ 26.782370][ T3582] syz.4.45: attempt to access beyond end of device [ 26.782370][ T3582] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 26.823833][ T3582] syz.4.45: attempt to access beyond end of device [ 26.823833][ T3582] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 26.837160][ T3582] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 26.872642][ T3582] syz.4.45: attempt to access beyond end of device [ 26.872642][ T3582] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 26.885967][ T3582] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 26.917881][ T3582] syz.4.45: attempt to access beyond end of device [ 26.917881][ T3582] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 26.931325][ T3582] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 26.962815][ T3582] syz.4.45: attempt to access beyond end of device [ 26.962815][ T3582] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 26.976216][ T3582] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 26.988756][ T3582] syz.4.45: attempt to access beyond end of device [ 26.988756][ T3582] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 27.002035][ T3582] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 27.028955][ T3582] syz.4.45: attempt to access beyond end of device [ 27.028955][ T3582] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 27.042205][ T3582] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 27.051030][ T3582] syz.4.45: attempt to access beyond end of device [ 27.051030][ T3582] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 27.064336][ T3582] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 27.079458][ T3582] syz.4.45: attempt to access beyond end of device [ 27.079458][ T3582] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 27.092710][ T3582] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 27.102518][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.104360][ T3582] syz.4.45: attempt to access beyond end of device [ 27.104360][ T3582] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 27.124894][ T3582] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 27.133990][ T3582] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 27.134057][ T3595] loop1: detected capacity change from 0 to 2048 [ 27.163973][ T3595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.212035][ T3595] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.232071][ T3601] smc: net device bond0 applied user defined pnetid SYZ [ 27.248958][ T3601] smc: net device bond0 erased user defined pnetid SYZ [ 27.259661][ T3593] cgroup: No subsys list or none specified [ 27.273595][ T3603] loop3: detected capacity change from 0 to 1024 [ 27.307885][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.332453][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.366512][ T3603] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.53: Allocating blocks 385-513 which overlap fs metadata [ 27.385928][ T3603] EXT4-fs (loop3): pa ffff888106edc000: logic 16, phys. 129, len 24 [ 27.394108][ T3603] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 27.445731][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.567452][ T3636] netlink: 'syz.0.67': attribute type 10 has an invalid length. [ 27.591260][ T3636] team0: Port device dummy0 added [ 27.990641][ T3678] futex_wake_op: syz.3.87 tries to shift op by -1; fix this program [ 28.042348][ T3684] loop3: detected capacity change from 0 to 512 [ 28.051428][ T3684] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.061382][ T3684] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 28.078759][ T3684] netlink: zone id is out of range [ 28.083898][ T3684] netlink: zone id is out of range [ 28.089090][ T3684] netlink: zone id is out of range [ 28.094224][ T3684] netlink: zone id is out of range [ 28.099393][ T3684] netlink: zone id is out of range [ 28.104488][ T3684] netlink: zone id is out of range [ 28.109697][ T3684] netlink: zone id is out of range [ 28.114835][ T3684] netlink: zone id is out of range [ 28.120043][ T3684] netlink: zone id is out of range [ 28.125302][ T3684] netlink: zone id is out of range [ 28.207063][ T3691] FAT-fs (loop1): unable to read boot sector [ 28.453202][ T3719] pim6reg1: entered promiscuous mode [ 28.458545][ T3719] pim6reg1: entered allmulticast mode [ 28.625284][ T3738] loop3: detected capacity change from 0 to 128 [ 28.812418][ T3762] process 'syz.2.126' launched './file1' with NULL argv: empty string added [ 29.164745][ T3772] loop2: detected capacity change from 0 to 512 [ 29.173755][ T3772] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.180356][ T3772] EXT4-fs: Ignoring removed bh option [ 29.192755][ T3772] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.211732][ T3772] EXT4-fs (loop2): 1 truncate cleaned up [ 29.233954][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.249618][ T3799] loop4: detected capacity change from 0 to 2048 [ 29.285601][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.376039][ T3811] SELinux: Context system_u:object_r:var_t:s0 is not valid (left unmapped). [ 29.376703][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.439668][ T3815] loop3: detected capacity change from 0 to 1024 [ 29.486550][ T3815] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 29.497553][ T3815] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 29.515648][ T3815] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 29.526380][ T3815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840e11c, mo2=0002] [ 29.535152][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.554809][ T3815] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 29.624732][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.916657][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.205403][ T3881] rdma_op ffff88811b40f180 conn xmit_rdma 0000000000000000 [ 30.217346][ T3883] loop2: detected capacity change from 0 to 4096 [ 30.231185][ T3883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.346727][ T3895] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 30.453299][ T3905] rdma_op ffff88811b40f180 conn xmit_rdma 0000000000000000 [ 30.484885][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.493946][ T3903] loop1: detected capacity change from 0 to 8192 [ 30.597046][ T3917] loop1: detected capacity change from 0 to 1024 [ 30.611370][ T3917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.655681][ T3917] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.195: Allocating blocks 449-513 which overlap fs metadata [ 30.661366][ T3925] veth0_vlan: entered allmulticast mode [ 30.695883][ T3916] EXT4-fs (loop1): pa ffff888106edc0e0: logic 48, phys. 177, len 21 [ 30.704087][ T3916] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 30.715959][ T3925] veth0_vlan: left promiscuous mode [ 30.721377][ T3925] veth0_vlan: entered promiscuous mode [ 30.748744][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.772714][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 30.772728][ T29] audit: type=1326 audit(30.751:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.2.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5962de9a9 code=0x0 [ 30.834615][ T3863] syz.0.171 (3863) used greatest stack depth: 10008 bytes left [ 30.867083][ T3929] loop4: detected capacity change from 0 to 2048 [ 30.903070][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.915301][ T3938] loop0: detected capacity change from 0 to 2048 [ 30.931139][ T29] audit: type=1400 audit(30.911:315): avc: denied { remount } for pid=3928 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.982603][ T3938] Alternate GPT is invalid, using primary GPT. [ 30.988976][ T3938] loop0: p2 p3 p7 [ 30.992727][ T3929] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.021176][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.098458][ T3950] __nla_validate_parse: 6 callbacks suppressed [ 31.098473][ T3950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 31.126731][ T29] audit: type=1400 audit(31.101:316): avc: denied { create } for pid=3953 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.151331][ T3955] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 31.172855][ T29] audit: type=1400 audit(31.101:317): avc: denied { write } for pid=3953 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.191969][ T29] audit: type=1400 audit(31.111:318): avc: denied { ioctl } for pid=3953 comm="syz.3.209" path="socket:[5629]" dev="sockfs" ino=5629 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.241835][ T29] audit: type=1326 audit(31.221:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f84e9a9 code=0x7ffc0000 [ 31.265549][ T29] audit: type=1326 audit(31.221:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fc24f84e9a9 code=0x7ffc0000 [ 31.288070][ T29] audit: type=1326 audit(31.221:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f84e9a9 code=0x7ffc0000 [ 31.310750][ T29] audit: type=1326 audit(31.221:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fc24f84e9a9 code=0x7ffc0000 [ 31.333363][ T29] audit: type=1326 audit(31.221:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f84e9a9 code=0x7ffc0000 [ 31.673393][ T4002] loop4: detected capacity change from 0 to 164 [ 31.695266][ T4003] wireguard0: entered promiscuous mode [ 31.700856][ T4003] wireguard0: entered allmulticast mode [ 31.717573][ T4002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 31.739387][ T4008] loop3: detected capacity change from 0 to 128 [ 31.807273][ T4008] EXT4-fs: Ignoring removed nobh option [ 31.837809][ T4008] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.857380][ T4010] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 32.010686][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.182138][ T4051] loop1: detected capacity change from 0 to 1024 [ 32.231107][ T4051] EXT4-fs: inline encryption not supported [ 32.243832][ T4051] EXT4-fs: Ignoring removed bh option [ 32.294860][ T4051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.438153][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.665069][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 33.423234][ T4121] syzkaller1: entered promiscuous mode [ 33.429442][ T4121] syzkaller1: entered allmulticast mode [ 33.536990][ T4129] loop4: detected capacity change from 0 to 512 [ 33.614900][ T4129] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.287: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 33.655094][ T4129] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.287: Bad quota inode: 3, type: 0 [ 33.691547][ T4129] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 33.740636][ T4129] EXT4-fs (loop4): mount failed [ 33.779679][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 33.795493][ T4143] IPVS: Error joining to the multicast group [ 33.905826][ T4145] SELinux: ebitmap: truncated map [ 33.935584][ T4145] SELinux: failed to load policy [ 34.034147][ T4157] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 34.322861][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.330104][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.406229][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.416746][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.459549][ T4176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.468600][ T4176] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.477705][ T4176] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.486798][ T4176] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.543134][ T4195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 34.552058][ T4195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 34.659728][ T4205] loop2: detected capacity change from 0 to 128 [ 34.675680][ T4205] EXT4-fs: Ignoring removed nobh option [ 34.680876][ T4210] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 34.689904][ T4210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.322'. [ 34.703598][ T4210] dummy0: entered promiscuous mode [ 34.709972][ T4212] loop3: detected capacity change from 0 to 512 [ 34.713745][ T4205] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.729316][ T4212] EXT4-fs: inline encryption not supported [ 34.737441][ T4210] team0: Port device dummy0 removed [ 34.742978][ T4212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.755760][ T4210] bridge0: port 3(dummy0) entered blocking state [ 34.762940][ T4210] bridge0: port 3(dummy0) entered disabled state [ 34.770060][ T4210] dummy0: entered allmulticast mode [ 34.895900][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.938117][ T4221] netlink: 2 bytes leftover after parsing attributes in process `syz.0.327'. [ 34.974084][ T4223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.048200][ T4223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.087829][ T4242] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 35.096199][ T4242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.334'. [ 35.125313][ T4223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.191449][ T4223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.268230][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.343'. [ 35.321982][ T4223] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.361089][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.348'. [ 35.385024][ T4223] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.404279][ T4223] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.432648][ T4223] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.462417][ T4230] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.534234][ T4230] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.583231][ T4230] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.657623][ T4230] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.730436][ T4324] loop3: detected capacity change from 0 to 2048 [ 35.740947][ T4324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.765459][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.845220][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 35.845236][ T29] audit: type=1326 audit(35.821:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 35.878304][ T29] audit: type=1326 audit(35.861:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 35.901554][ T29] audit: type=1326 audit(35.861:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 35.924448][ T29] audit: type=1326 audit(35.861:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 35.947642][ T29] audit: type=1326 audit(35.861:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 35.970309][ T29] audit: type=1326 audit(35.861:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 35.993645][ T29] audit: type=1326 audit(35.861:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 36.016256][ T29] audit: type=1326 audit(35.861:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 36.039459][ T29] audit: type=1326 audit(35.861:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 36.062167][ T29] audit: type=1326 audit(35.861:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed366e9a9 code=0x7ffc0000 [ 36.090454][ T4345] netlink: 'syz.3.380': attribute type 21 has an invalid length. [ 36.108552][ T4345] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 36.116360][ T4345] netlink: 144 bytes leftover after parsing attributes in process `syz.3.380'. [ 36.189893][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 36.201610][ T4351] bridge0: entered promiscuous mode [ 36.220240][ T4351] bridge0: port 3(macvlan2) entered blocking state [ 36.226841][ T4351] bridge0: port 3(macvlan2) entered disabled state [ 36.240079][ T4351] macvlan2: entered allmulticast mode [ 36.245483][ T4351] bridge0: entered allmulticast mode [ 36.252788][ T4351] macvlan2: left allmulticast mode [ 36.257987][ T4351] bridge0: left allmulticast mode [ 36.270354][ T4351] bridge0: left promiscuous mode [ 36.402304][ T4379] loop4: detected capacity change from 0 to 512 [ 36.413327][ T4379] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 36.422130][ T4379] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.396: iget: bad i_size value: 12154757448730 [ 36.434986][ T4379] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.396: couldn't read orphan inode 13 (err -117) [ 36.447792][ T4379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.476404][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.510089][ T4388] syz.4.399 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.593558][ T4401] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 36.623305][ T4406] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 36.631070][ T4406] netlink: 224 bytes leftover after parsing attributes in process `syz.4.409'. [ 36.667754][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 36.685510][ T4417] mmap: syz.4.413 (4417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.685725][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 36.816961][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 36.840682][ T4437] random: crng reseeded on system resumption [ 36.851966][ T4437] Restarting kernel threads ... [ 36.855203][ T4435] syzkaller0: entered promiscuous mode [ 36.862943][ T4435] syzkaller0: entered allmulticast mode [ 36.877163][ T4437] Done restarting kernel threads. [ 37.012877][ T4448] loop0: detected capacity change from 0 to 164 [ 37.182163][ T4471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.281460][ T4473] loop3: detected capacity change from 0 to 8192 [ 37.294493][ T4473] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.383462][ T4492] netlink: 92 bytes leftover after parsing attributes in process `syz.4.448'. [ 37.392395][ T4492] netem: unknown loss type 0 [ 37.420940][ T4496] loop4: detected capacity change from 0 to 1024 [ 37.427727][ T4496] EXT4-fs: Ignoring removed oldalloc option [ 37.434831][ T4496] EXT4-fs: Ignoring removed bh option [ 37.450037][ T4496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.486623][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.538049][ T4507] loop4: detected capacity change from 0 to 2048 [ 37.560013][ T3532] Alternate GPT is invalid, using primary GPT. [ 37.566283][ T3532] loop4: p1 p2 p3 [ 37.581158][ T4507] Alternate GPT is invalid, using primary GPT. [ 37.587393][ T4507] loop4: p1 p2 p3 [ 37.647522][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 37.664503][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 37.675547][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 37.694917][ T4519] loop4: detected capacity change from 0 to 256 [ 37.720751][ T4519] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 37.728466][ T4519] netlink: 224 bytes leftover after parsing attributes in process `syz.4.457'. [ 38.219663][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 38.228476][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 38.804549][ T4592] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.909873][ T4580] netlink: 'syz.0.487': attribute type 13 has an invalid length. [ 38.922023][ T4580] net_ratelimit: 64 callbacks suppressed [ 38.922032][ T4580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.036870][ T4609] loop1: detected capacity change from 0 to 1024 [ 39.050464][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.069951][ T4609] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.498: Allocating blocks 385-513 which overlap fs metadata [ 39.085838][ T4609] EXT4-fs (loop1): pa ffff888106ead070: logic 16, phys. 129, len 24 [ 39.094268][ T4609] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 39.110903][ T4230] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.121933][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.122758][ T4230] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.147487][ T4230] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.172877][ T4230] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.202304][ T4617] loop2: detected capacity change from 0 to 512 [ 39.210289][ T4617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.220266][ T4617] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 39.234423][ T4617] netlink: zone id is out of range [ 39.240229][ T4617] netlink: zone id is out of range [ 39.245335][ T4617] netlink: zone id is out of range [ 39.250478][ T4617] netlink: zone id is out of range [ 39.255622][ T4617] netlink: zone id is out of range [ 39.260753][ T4617] netlink: zone id is out of range [ 39.265847][ T4617] netlink: zone id is out of range [ 39.271353][ T4617] netlink: zone id is out of range [ 39.276573][ T4617] netlink: zone id is out of range [ 39.441486][ T4637] futex_wake_op: syz.1.513 tries to shift op by -1; fix this program [ 39.444270][ T4639] loop3: detected capacity change from 0 to 2048 [ 39.461926][ T4639] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.488323][ T4639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.531269][ T4639] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.585604][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.692704][ T4664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.740153][ T4668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.770948][ T4664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.801016][ T4668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.831089][ T4664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.872050][ T4668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.901711][ T4664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.931529][ T4668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.973810][ T4664] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.984789][ T4664] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.998214][ T4664] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.009889][ T4668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.020914][ T4668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.031706][ T4668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.042273][ T4664] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.053475][ T4668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.063492][ T4669] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.103581][ T4671] smc: net device bond0 applied user defined pnetid SYZ [ 40.112068][ T4669] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.113346][ T4671] smc: net device bond0 erased user defined pnetid SYZ [ 40.180925][ T4669] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.201527][ T4681] bio_check_eod: 10 callbacks suppressed [ 40.201541][ T4681] syz.1.532: attempt to access beyond end of device [ 40.201541][ T4681] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 40.220442][ T4681] FAT-fs (loop3): unable to read boot sector [ 40.240159][ T4669] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.252677][ T4687] loop1: detected capacity change from 0 to 512 [ 40.270691][ T4687] EXT4-fs (loop1): 1 orphan inode deleted [ 40.277260][ T4687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.290671][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 40.417312][ T4696] loop4: detected capacity change from 0 to 1024 [ 40.426045][ T4696] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.440959][ T4696] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.538: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.455355][ T4696] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.538: Failed to acquire dquot type 0 [ 40.467213][ T4696] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.538: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.480935][ T4696] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.538: Invalid inode bitmap blk 0 in block_group 0 [ 40.495394][ T4696] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 40.510506][ T336] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.526214][ T4696] EXT4-fs (loop4): 1 orphan inode deleted [ 40.534476][ T4696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.569232][ T336] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 40.569814][ C1] hrtimer: interrupt took 41383 ns [ 40.592158][ T4701] loop0: detected capacity change from 0 to 128 [ 40.601020][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.611280][ T4696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.663599][ T4705] loop1: detected capacity change from 0 to 512 [ 40.699861][ T4705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.728400][ T4705] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.541: corrupted inode contents [ 40.754774][ T4705] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.541: mark_inode_dirty error [ 40.779228][ T4705] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.541: corrupted inode contents [ 40.817139][ T4715] loop4: detected capacity change from 0 to 2048 [ 40.844245][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.861308][ T3532] loop4: p1 < > p4 [ 40.871477][ T3532] loop4: p4 size 8388608 extends beyond EOD, truncated [ 40.882839][ T4715] loop4: p1 < > p4 [ 40.888359][ T4715] loop4: p4 size 8388608 extends beyond EOD, truncated [ 40.909789][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 40.909803][ T29] audit: type=1400 audit(40.891:584): avc: denied { mounton } for pid=4714 comm="syz.4.545" path="/144/bus" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.981462][ T29] audit: type=1400 audit(40.891:585): avc: denied { mount } for pid=4718 comm="syz.1.547" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.051252][ T4728] loop2: detected capacity change from 0 to 256 [ 41.085350][ T4728] FAT-fs (loop2): Directory bread(block 64) failed [ 41.105311][ T4728] FAT-fs (loop2): Directory bread(block 65) failed [ 41.113253][ T4728] FAT-fs (loop2): Directory bread(block 66) failed [ 41.121054][ T51] kworker/u8:3: attempt to access beyond end of device [ 41.121054][ T51] loop0: rw=1, sector=209, nr_sectors = 832 limit=128 [ 41.137767][ T4728] FAT-fs (loop2): Directory bread(block 67) failed [ 41.144537][ T51] kworker/u8:3: attempt to access beyond end of device [ 41.144537][ T51] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 41.159417][ T4728] FAT-fs (loop2): Directory bread(block 68) failed [ 41.166004][ T4728] FAT-fs (loop2): Directory bread(block 69) failed [ 41.173557][ T4728] FAT-fs (loop2): Directory bread(block 70) failed [ 41.180450][ T4728] FAT-fs (loop2): Directory bread(block 71) failed [ 41.187058][ T4728] FAT-fs (loop2): Directory bread(block 72) failed [ 41.195095][ T4728] FAT-fs (loop2): Directory bread(block 73) failed [ 41.283229][ T29] audit: type=1326 audit(41.261:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5962de9a9 code=0x7ffc0000 [ 41.306469][ T29] audit: type=1326 audit(41.261:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7ff5962de9a9 code=0x7ffc0000 [ 41.329892][ T29] audit: type=1326 audit(41.261:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5962de9a9 code=0x7ffc0000 [ 41.352464][ T29] audit: type=1326 audit(41.261:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5962de9a9 code=0x7ffc0000 [ 41.385927][ T2994] loop4: p1 < > p4 [ 41.392474][ T2994] loop4: p4 size 8388608 extends beyond EOD, truncated [ 41.403300][ T29] audit: type=1400 audit(41.381:590): avc: denied { override_creds } for pid=4738 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.464025][ T4744] loop4: detected capacity change from 0 to 1024 [ 41.484810][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.504288][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.511628][ T4744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.589925][ T29] audit: type=1400 audit(41.571:591): avc: denied { remove_name } for pid=4743 comm="syz.4.557" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.612288][ T29] audit: type=1400 audit(41.571:592): avc: denied { unlink } for pid=4743 comm="syz.4.557" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.661231][ T4763] loop1: detected capacity change from 0 to 1024 [ 41.663873][ T29] audit: type=1326 audit(41.631:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353baee9a9 code=0x7ffc0000 [ 41.681667][ T4761] loop2: detected capacity change from 0 to 164 [ 41.722052][ T4763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.735636][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.750145][ T4761] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.786008][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.111673][ T4808] loop1: detected capacity change from 0 to 2048 [ 42.134255][ T4812] loop2: detected capacity change from 0 to 1024 [ 42.142542][ T4812] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 42.142988][ T3532] Alternate GPT is invalid, using primary GPT. [ 42.153481][ T4812] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 42.159779][ T3532] loop1: p2 p3 p7 [ 42.175546][ T4812] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.185843][ T4808] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 42.206951][ T4812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840e11c, mo2=0002] [ 42.216622][ T4812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.241276][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 42.242318][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 42.251846][ T4812] EXT4-fs (loop2): Online resizing not supported with sparse_super2 [ 42.262436][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 42.290749][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.376619][ T4820] loop2: detected capacity change from 0 to 2048 [ 42.401401][ T4820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.417287][ T4820] cgroup: No subsys list or none specified [ 42.428640][ T4825] loop1: detected capacity change from 0 to 1024 [ 42.439845][ T4825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.451638][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.587: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.465849][ T4825] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.587: Failed to acquire dquot type 0 [ 42.477702][ T4825] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.587: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.491356][ T4825] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.587: Invalid inode bitmap blk 0 in block_group 0 [ 42.504131][ T4825] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 42.512955][ T31] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.527806][ T4825] EXT4-fs (loop1): 1 orphan inode deleted [ 42.534044][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 42.534362][ T4825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.560857][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.598995][ T4825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.651806][ T4832] sd 0:0:1:0: device reset [ 42.667426][ T4834] __nla_validate_parse: 3 callbacks suppressed [ 42.667438][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 42.685556][ T4834] bridge0: entered promiscuous mode [ 42.692613][ T4834] bridge0: port 3(macvlan2) entered blocking state [ 42.699258][ T4834] bridge0: port 3(macvlan2) entered disabled state [ 42.721261][ T4834] macvlan2: entered allmulticast mode [ 42.726668][ T4834] bridge0: entered allmulticast mode [ 42.735856][ T4834] macvlan2: left allmulticast mode [ 42.741378][ T4834] bridge0: left allmulticast mode [ 42.749260][ T4840] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 42.757008][ T4840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.595'. [ 42.757163][ T4836] loop1: detected capacity change from 0 to 2048 [ 42.769080][ T4834] bridge0: left promiscuous mode [ 42.783470][ T4840] dummy0: entered promiscuous mode [ 42.789543][ T4840] bridge0: port 3(dummy0) entered blocking state [ 42.790772][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.795985][ T4840] bridge0: port 3(dummy0) entered disabled state [ 42.815726][ T4840] dummy0: entered allmulticast mode [ 42.822120][ T4840] bridge0: port 3(dummy0) entered blocking state [ 42.828540][ T4840] bridge0: port 3(dummy0) entered forwarding state [ 42.837073][ T4836] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.886792][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.902537][ T4846] syz.4.596 uses obsolete (PF_INET,SOCK_PACKET) [ 43.021771][ T4861] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 43.029537][ T4861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.605'. [ 43.029874][ T4865] loop0: detected capacity change from 0 to 1024 [ 43.095679][ T4865] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.116663][ T4875] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 43.124498][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.608'. [ 43.129720][ T4865] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.604: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.135191][ T4875] dummy0: entered promiscuous mode [ 43.152614][ T4865] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.604: Failed to acquire dquot type 0 [ 43.159158][ T4875] bridge0: port 3(dummy0) entered blocking state [ 43.170273][ T4875] bridge0: port 3(dummy0) entered disabled state [ 43.177016][ T4875] dummy0: entered allmulticast mode [ 43.182052][ T4865] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.604: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.183483][ T4875] bridge0: port 3(dummy0) entered blocking state [ 43.199100][ T4865] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.604: Invalid inode bitmap blk 0 in block_group 0 [ 43.201829][ T4875] bridge0: port 3(dummy0) entered forwarding state [ 43.215526][ T4865] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 43.256800][ T4879] loop4: detected capacity change from 0 to 1024 [ 43.285365][ T31] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.306119][ T4865] EXT4-fs (loop0): 1 orphan inode deleted [ 43.312814][ T4865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.326817][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 43.356455][ T4888] loop2: detected capacity change from 0 to 164 [ 43.357803][ T4879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.390425][ T4888] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.405792][ T4879] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.610: Allocating blocks 385-513 which overlap fs metadata [ 43.420476][ T4865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.423273][ T4878] EXT4-fs (loop4): pa ffff888106edc150: logic 16, phys. 129, len 24 [ 43.438040][ T4878] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 43.469177][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.864147][ T4669] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.875067][ T4669] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.885988][ T4669] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.896446][ T4669] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.923559][ T4894] loop4: detected capacity change from 0 to 512 [ 43.936469][ T4894] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.942972][ T4894] EXT4-fs: Ignoring removed bh option [ 43.969507][ T4894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.990846][ T4894] EXT4-fs (loop4): 1 truncate cleaned up [ 43.998077][ T4894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.074044][ T4915] loop2: detected capacity change from 0 to 1024 [ 44.085295][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 44.102339][ T4916] bridge0: entered promiscuous mode [ 44.109276][ T4916] bridge0: port 4(macvlan2) entered blocking state [ 44.115884][ T4916] bridge0: port 4(macvlan2) entered disabled state [ 44.123748][ T4916] macvlan2: entered allmulticast mode [ 44.129285][ T4916] bridge0: entered allmulticast mode [ 44.130627][ T4915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.148043][ T4916] macvlan2: left allmulticast mode [ 44.153850][ T4916] bridge0: left allmulticast mode [ 44.166237][ T4916] bridge0: left promiscuous mode [ 44.182301][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.668278][ T4946] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 44.676035][ T4946] netlink: 224 bytes leftover after parsing attributes in process `syz.2.637'. [ 44.847428][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.876540][ T4955] loop2: detected capacity change from 0 to 512 [ 44.886475][ T4953] loop0: detected capacity change from 0 to 1024 [ 44.887200][ T4955] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.899412][ T4955] EXT4-fs: Ignoring removed bh option [ 44.910998][ T4955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.927285][ T4955] EXT4-fs (loop2): 1 truncate cleaned up [ 44.934629][ T4955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.948940][ T4953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.965928][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 44.977983][ T4962] bridge0: entered promiscuous mode [ 44.984612][ T4962] bridge0: port 3(macvlan2) entered blocking state [ 44.991292][ T4962] bridge0: port 3(macvlan2) entered disabled state [ 44.998965][ T4962] macvlan2: entered allmulticast mode [ 45.004473][ T4962] bridge0: entered allmulticast mode [ 45.010599][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.030729][ T4962] macvlan2: left allmulticast mode [ 45.035933][ T4962] bridge0: left allmulticast mode [ 45.047153][ T4962] bridge0: left promiscuous mode [ 45.424342][ T31] ================================================================== [ 45.432426][ T31] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 45.441859][ T31] [ 45.444159][ T31] write to 0xffff8881261537f0 of 2 bytes by task 4967 on cpu 1: [ 45.451762][ T31] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 45.457631][ T31] generic_perform_write+0x2c2/0x490 [ 45.462895][ T31] ext4_buffered_write_iter+0x1ee/0x3c0 [ 45.468432][ T31] ext4_file_write_iter+0x383/0xf00 [ 45.473608][ T31] iter_file_splice_write+0x5f2/0x970 [ 45.478968][ T31] direct_splice_actor+0x156/0x2a0 [ 45.484081][ T31] splice_direct_to_actor+0x312/0x680 [ 45.489434][ T31] do_splice_direct+0xda/0x150 [ 45.494177][ T31] do_sendfile+0x380/0x650 [ 45.498576][ T31] __x64_sys_sendfile64+0x105/0x150 [ 45.503751][ T31] x64_sys_call+0xb39/0x2fb0 [ 45.508318][ T31] do_syscall_64+0xd2/0x200 [ 45.512800][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.518686][ T31] [ 45.520992][ T31] read to 0xffff888126153400 of 1024 bytes by task 31 on cpu 0: [ 45.528599][ T31] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 45.534469][ T31] generic_perform_write+0x2c2/0x490 [ 45.539728][ T31] shmem_file_write_iter+0xc5/0xf0 [ 45.544817][ T31] lo_rw_aio+0x6a0/0x760 [ 45.549039][ T31] loop_process_work+0x52d/0xa60 [ 45.553959][ T31] loop_workfn+0x31/0x40 [ 45.558186][ T31] process_scheduled_works+0x4cb/0x9d0 [ 45.563626][ T31] worker_thread+0x582/0x770 [ 45.568195][ T31] kthread+0x489/0x510 [ 45.572239][ T31] ret_from_fork+0xda/0x150 [ 45.576721][ T31] ret_from_fork_asm+0x1a/0x30 [ 45.581465][ T31] [ 45.583770][ T31] Reported by Kernel Concurrency Sanitizer on: [ 45.589904][ T31] CPU: 0 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 45.602290][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.612329][ T31] Workqueue: loop2 loop_workfn [ 45.617084][ T31] ================================================================== [ 45.784601][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.