last executing test programs: 1.975177821s ago: executing program 2 (id=530): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.821533792s ago: executing program 0 (id=544): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r2 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 1.820845563s ago: executing program 2 (id=532): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80642, 0x0) r0 = io_uring_setup(0x3d11, &(0x7f0000000000)={0x0, 0x8200000}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') close(r0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r2, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/178, 0xb2) 1.777198473s ago: executing program 4 (id=534): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x10079ac, 0x1000, 0x3, 0x1d5}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1.711675854s ago: executing program 4 (id=537): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.421723179s ago: executing program 1 (id=557): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.35649985s ago: executing program 3 (id=548): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.251089401s ago: executing program 1 (id=549): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc08c}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 1.228051472s ago: executing program 3 (id=550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 956.505406ms ago: executing program 0 (id=551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 956.221956ms ago: executing program 1 (id=552): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000100), 0x1, 0x55a, &(0x7f0000000b80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 955.948896ms ago: executing program 2 (id=553): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x100) chdir(&(0x7f00000000c0)='./bus\x00') pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwrite64(r2, &(0x7f0000000140)='+', 0x1, 0xf896) 955.783716ms ago: executing program 3 (id=554): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r2) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x808, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0808"], 0x0) 866.508477ms ago: executing program 3 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000900)='\x00\x96\xa5\x93 \xd3\xf9\x831\x92\xf48\xfcU\xb2\xfe\xafri\xf1\xad\x8e\x88d\x14e*FcQ\x1c\xcc\xdf\xa4\xdbf\xfc&\xf4F\x00\x00\x00\x00\x00\x00\x00\b\x00'/62, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)="69e384", 0x3) close(r1) 866.007447ms ago: executing program 3 (id=556): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 850.333277ms ago: executing program 4 (id=558): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 801.324988ms ago: executing program 2 (id=559): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$unix(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 798.083448ms ago: executing program 1 (id=560): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 751.824179ms ago: executing program 4 (id=561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, r1, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x200000c0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 748.937729ms ago: executing program 0 (id=571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000100), 0x1, 0x55a, &(0x7f0000000b80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 664.66419ms ago: executing program 4 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000140)=@keyring) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 646.46953ms ago: executing program 2 (id=563): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000540)=""/101, 0x0, 0x65, 0x1, 0xfffffff9}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 360.545595ms ago: executing program 2 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r2 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 359.567024ms ago: executing program 0 (id=575): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 250.839876ms ago: executing program 4 (id=565): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80642, 0x0) r0 = io_uring_setup(0x3d11, &(0x7f0000000000)={0x0, 0x8200000}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') close(r0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r2, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/178, 0xb2) 223.213067ms ago: executing program 0 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff0b8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 172.373597ms ago: executing program 0 (id=567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)={[{@usrquota}, {@noquota}, {@grpid}]}, 0x1, 0x4c4, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4100, 0x105e) 152.683738ms ago: executing program 1 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x5460, &(0x7f0000000300)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 90.499779ms ago: executing program 1 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000001cc0)={0x64, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x3, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7c9}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x0, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x0, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x0, 0x1, 0x1, 0x0, 0xa}, @NFACCT_FILTER_MASK={0x0, 0x1, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_MASK, @NFACCT_FILTER_MASK={0x0, 0x1, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x0, 0x1, 0x1, 0x0, 0x4c}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_FLAGS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) 0s ago: executing program 3 (id=570): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 27.603294][ T29] audit: type=1400 audit(1752483926.951:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.604505][ T3294] cgroup: Unknown subsys name 'net' [ 27.626165][ T29] audit: type=1400 audit(1752483926.951:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.653684][ T29] audit: type=1400 audit(1752483926.991:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.874373][ T3294] cgroup: Unknown subsys name 'cpuset' [ 27.880777][ T3294] cgroup: Unknown subsys name 'rlimit' [ 28.051736][ T29] audit: type=1400 audit(1752483927.401:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.075137][ T29] audit: type=1400 audit(1752483927.401:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.095628][ T29] audit: type=1400 audit(1752483927.401:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.116023][ T29] audit: type=1400 audit(1752483927.401:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.124877][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.136301][ T29] audit: type=1400 audit(1752483927.411:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.169689][ T29] audit: type=1400 audit(1752483927.411:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.193096][ T29] audit: type=1400 audit(1752483927.511:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.222326][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.055282][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.073089][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.155015][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.162098][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.169293][ T3305] bridge_slave_0: entered allmulticast mode [ 30.175846][ T3305] bridge_slave_0: entered promiscuous mode [ 30.182503][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.189691][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.196899][ T3305] bridge_slave_1: entered allmulticast mode [ 30.203339][ T3305] bridge_slave_1: entered promiscuous mode [ 30.241298][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 30.254890][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.262068][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.269616][ T3311] bridge_slave_0: entered allmulticast mode [ 30.276126][ T3311] bridge_slave_0: entered promiscuous mode [ 30.296757][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.305863][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.313061][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.320454][ T3311] bridge_slave_1: entered allmulticast mode [ 30.327031][ T3311] bridge_slave_1: entered promiscuous mode [ 30.334430][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.359513][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.391782][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.416154][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.443846][ T3305] team0: Port device team_slave_0 added [ 30.449690][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.459124][ T3311] team0: Port device team_slave_0 added [ 30.467934][ T3311] team0: Port device team_slave_1 added [ 30.479944][ T3305] team0: Port device team_slave_1 added [ 30.516065][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.523266][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.530598][ T3314] bridge_slave_0: entered allmulticast mode [ 30.536930][ T3314] bridge_slave_0: entered promiscuous mode [ 30.548081][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.555239][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.562457][ T3306] bridge_slave_0: entered allmulticast mode [ 30.569022][ T3306] bridge_slave_0: entered promiscuous mode [ 30.586173][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.593424][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.600550][ T3314] bridge_slave_1: entered allmulticast mode [ 30.607381][ T3314] bridge_slave_1: entered promiscuous mode [ 30.618918][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.626140][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.652076][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.663078][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.670211][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.677443][ T3306] bridge_slave_1: entered allmulticast mode [ 30.684027][ T3306] bridge_slave_1: entered promiscuous mode [ 30.690386][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.697447][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.723496][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.741778][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.748785][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.774775][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.791100][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.798091][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.824031][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.841888][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.854559][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.869137][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.892560][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.921227][ T3314] team0: Port device team_slave_0 added [ 30.931477][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.938633][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.945788][ T3312] bridge_slave_0: entered allmulticast mode [ 30.952234][ T3312] bridge_slave_0: entered promiscuous mode [ 30.970799][ T3305] hsr_slave_0: entered promiscuous mode [ 30.976945][ T3305] hsr_slave_1: entered promiscuous mode [ 30.983463][ T3314] team0: Port device team_slave_1 added [ 30.994824][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.001947][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.009378][ T3312] bridge_slave_1: entered allmulticast mode [ 31.015908][ T3312] bridge_slave_1: entered promiscuous mode [ 31.024274][ T3311] hsr_slave_0: entered promiscuous mode [ 31.030327][ T3311] hsr_slave_1: entered promiscuous mode [ 31.036220][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.043796][ T3311] Cannot create hsr debugfs directory [ 31.069013][ T3306] team0: Port device team_slave_0 added [ 31.097039][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.104080][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.130286][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.144133][ T3306] team0: Port device team_slave_1 added [ 31.161955][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.168937][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.194872][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.216095][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.228573][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.259731][ T3312] team0: Port device team_slave_0 added [ 31.277251][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.284375][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.310337][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.321912][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.328992][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.355034][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.373138][ T3312] team0: Port device team_slave_1 added [ 31.406668][ T3314] hsr_slave_0: entered promiscuous mode [ 31.412776][ T3314] hsr_slave_1: entered promiscuous mode [ 31.418713][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.426374][ T3314] Cannot create hsr debugfs directory [ 31.437440][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.444517][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.470492][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.483766][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.490788][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.516887][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.566368][ T3306] hsr_slave_0: entered promiscuous mode [ 31.573337][ T3306] hsr_slave_1: entered promiscuous mode [ 31.579182][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.586806][ T3306] Cannot create hsr debugfs directory [ 31.601007][ T3312] hsr_slave_0: entered promiscuous mode [ 31.607256][ T3312] hsr_slave_1: entered promiscuous mode [ 31.613019][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.620706][ T3312] Cannot create hsr debugfs directory [ 31.691421][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.716880][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.725579][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.736972][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.801340][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.827371][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.836266][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.848038][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.858976][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.868872][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.885982][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.896753][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.922857][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.931586][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.941162][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.950702][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.991811][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.004210][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.017206][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.027300][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.036218][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.049179][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.074605][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.099279][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.106385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.115217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.122348][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.149446][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.168307][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.175410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.188627][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.199434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.206572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.238322][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.265813][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.275544][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.282612][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.292469][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.299586][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.317282][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.332054][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.342539][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.356158][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.382657][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.393131][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.410859][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.419873][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.430948][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.438054][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.449595][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.456801][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.487042][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.494198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.529883][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.543562][ T1773] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.550756][ T1773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.600957][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.624670][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.635411][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.736247][ T3305] veth0_vlan: entered promiscuous mode [ 32.756017][ T3305] veth1_vlan: entered promiscuous mode [ 32.779654][ T3306] veth0_vlan: entered promiscuous mode [ 32.806894][ T3314] veth0_vlan: entered promiscuous mode [ 32.812990][ T3311] veth0_vlan: entered promiscuous mode [ 32.821609][ T3306] veth1_vlan: entered promiscuous mode [ 32.833171][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.844064][ T3314] veth1_vlan: entered promiscuous mode [ 32.854308][ T3311] veth1_vlan: entered promiscuous mode [ 32.861099][ T3305] veth0_macvtap: entered promiscuous mode [ 32.882051][ T3306] veth0_macvtap: entered promiscuous mode [ 32.896781][ T3305] veth1_macvtap: entered promiscuous mode [ 32.909843][ T3311] veth0_macvtap: entered promiscuous mode [ 32.919510][ T3311] veth1_macvtap: entered promiscuous mode [ 32.926451][ T3306] veth1_macvtap: entered promiscuous mode [ 32.937945][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.959005][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.968945][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.980024][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.992840][ T3314] veth0_macvtap: entered promiscuous mode [ 33.003016][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.010951][ T3314] veth1_macvtap: entered promiscuous mode [ 33.018204][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.027023][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035756][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.044496][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.062157][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.070052][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.078999][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.087846][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096595][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.120711][ T3312] veth0_vlan: entered promiscuous mode [ 33.130903][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.139727][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148524][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.157256][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.172914][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.185349][ T3312] veth1_vlan: entered promiscuous mode [ 33.189820][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.189837][ T29] audit: type=1400 audit(1752483932.541:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tVOGik/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.199396][ T3312] veth0_macvtap: entered promiscuous mode [ 33.221270][ T29] audit: type=1400 audit(1752483932.541:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.229244][ T3312] veth1_macvtap: entered promiscuous mode [ 33.249043][ T29] audit: type=1400 audit(1752483932.541:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tVOGik/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.280068][ T29] audit: type=1400 audit(1752483932.541:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.301981][ T29] audit: type=1400 audit(1752483932.541:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tVOGik/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.328659][ T29] audit: type=1400 audit(1752483932.541:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tVOGik/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.356060][ T29] audit: type=1400 audit(1752483932.541:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.382377][ T29] audit: type=1400 audit(1752483932.741:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.388053][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.405153][ T29] audit: type=1400 audit(1752483932.741:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.441908][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.467386][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.477394][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.486307][ T29] audit: type=1400 audit(1752483932.831:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.486352][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.486384][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.486414][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.550870][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.598141][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.606974][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.615770][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624729][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725874][ T3488] pimreg: entered allmulticast mode [ 33.769110][ T3488] pimreg: left allmulticast mode [ 33.792942][ T3494] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 33.800724][ T3494] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.9'. [ 33.926322][ T3507] SELinux: policydb version 0 does not match my version range 15-34 [ 33.945191][ T3507] SELinux: failed to load policy [ 34.103428][ T3517] Zero length message leads to an empty skb [ 34.260761][ T3532] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.459329][ C1] hrtimer: interrupt took 34089 ns [ 34.530443][ T3553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.35'. [ 34.717250][ T3563] loop0: detected capacity change from 0 to 1024 [ 34.743279][ T3563] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz.0.40: casefold flag without casefold feature [ 34.776270][ T3563] EXT4-fs (loop0): get root inode failed [ 34.782008][ T3563] EXT4-fs (loop0): mount failed [ 34.856422][ T3572] netlink: 'syz.4.43': attribute type 7 has an invalid length. [ 34.864095][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 34.885236][ T3573] loop1: detected capacity change from 0 to 128 [ 34.948108][ T3579] netlink: 'syz.4.46': attribute type 4 has an invalid length. [ 34.968080][ T3573] syz.1.42: attempt to access beyond end of device [ 34.968080][ T3573] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 34.987844][ T3582] loop2: detected capacity change from 0 to 128 [ 34.987833][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 35.018239][ T3582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.026142][ T3582] FAT-fs (loop2): Filesystem has been set read-only [ 35.045968][ T3582] syz.2.47: attempt to access beyond end of device [ 35.045968][ T3582] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 35.068729][ T3582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.077025][ T3582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.099806][ T3582] syz.2.47: attempt to access beyond end of device [ 35.099806][ T3582] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 35.125867][ T3593] process 'syz.0.53' launched './file0' with NULL argv: empty string added [ 35.168868][ T3582] syz.2.47 (3582) used greatest stack depth: 10920 bytes left [ 35.323533][ T3614] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 35.332118][ T3616] SELinux: failed to load policy [ 35.365396][ T3618] netlink: 96 bytes leftover after parsing attributes in process `syz.4.63'. [ 35.462571][ T3634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 35.793727][ T3656] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 35.802072][ T3656] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 36.029003][ T3675] ref_ctr increment failed for inode: 0x5c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119934780 [ 36.046835][ T3674] uprobe: syz.2.85:3674 failed to unregister, leaking uprobe [ 36.122478][ T3686] syz.3.90 uses obsolete (PF_INET,SOCK_PACKET) [ 36.403110][ T3709] syzkaller0: entered allmulticast mode [ 36.418364][ T3709] syzkaller0: entered promiscuous mode [ 36.422101][ T3711] loop4: detected capacity change from 0 to 2048 [ 36.434755][ T3713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.95'. [ 36.450657][ T3709] syzkaller0 (unregistering): left allmulticast mode [ 36.457448][ T3709] syzkaller0 (unregistering): left promiscuous mode [ 36.484899][ T3711] loop4: p1 < > p4 [ 36.494351][ T3711] loop4: p4 size 8388608 extends beyond EOD, truncated [ 36.563401][ T3686] syz.3.90 (3686) used greatest stack depth: 10888 bytes left [ 36.677595][ T3724] loop2: detected capacity change from 0 to 128 [ 36.697415][ T3724] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 36.805772][ T3728] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 36.813823][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.821087][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.834133][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.841250][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.848590][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.855673][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.857133][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 36.867404][ T3728] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 36.887449][ T3731] bridge_slave_1: left allmulticast mode [ 36.893789][ T3731] bridge_slave_1: left promiscuous mode [ 36.899531][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.924311][ T3731] bridge_slave_0: left allmulticast mode [ 36.930026][ T3731] bridge_slave_0: left promiscuous mode [ 36.935888][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.953520][ T3731] bond0: (slave bridge0): Releasing backup interface [ 37.093353][ T3747] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 37.577716][ T3728] syz.3.102 (3728) used greatest stack depth: 10856 bytes left [ 37.761451][ T3850] IPv4: Oversized IP packet from 127.202.26.0 [ 38.122566][ T3877] loop4: detected capacity change from 0 to 1024 [ 38.155955][ T3877] EXT4-fs: inline encryption not supported [ 38.195131][ T3877] EXT4-fs: Ignoring removed bh option [ 38.218165][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.239628][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 38.239645][ T29] audit: type=1400 audit(1752483937.591:261): avc: denied { mount } for pid=3876 comm="syz.4.138" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.268964][ T29] audit: type=1400 audit(1752483937.621:262): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.292645][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.384479][ T29] audit: type=1400 audit(1752483937.741:263): avc: denied { write } for pid=3896 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.442556][ T29] audit: type=1400 audit(1752483937.791:264): avc: denied { getopt } for pid=3900 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.503713][ T3903] wg2: entered promiscuous mode [ 38.508707][ T3903] wg2: entered allmulticast mode [ 38.568535][ T29] audit: type=1400 audit(1752483937.921:265): avc: denied { bind } for pid=3918 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.589074][ T29] audit: type=1400 audit(1752483937.921:266): avc: denied { setopt } for pid=3918 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.710260][ T29] audit: type=1400 audit(1752483938.061:267): avc: denied { mount } for pid=3930 comm="syz.0.159" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.888621][ T3957] loop3: detected capacity change from 0 to 1024 [ 38.907696][ T3957] EXT4-fs: Ignoring removed orlov option [ 38.927990][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.953256][ T29] audit: type=1400 audit(1752483938.301:268): avc: denied { add_name } for pid=3956 comm="syz.3.166" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.975831][ T29] audit: type=1400 audit(1752483938.301:269): avc: denied { create } for pid=3956 comm="syz.3.166" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.049043][ T3968] loop2: detected capacity change from 0 to 1024 [ 39.119766][ T3968] ======================================================= [ 39.119766][ T3968] WARNING: The mand mount option has been deprecated and [ 39.119766][ T3968] and is ignored by this kernel. Remove the mand [ 39.119766][ T3968] option from the mount to silence this warning. [ 39.119766][ T3968] ======================================================= [ 39.166631][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.178944][ T29] audit: type=1400 audit(1752483938.351:270): avc: denied { read append open } for pid=3956 comm="syz.3.166" path="/30/file1/memory.events.local" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.293018][ T3968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.348269][ T3982] loop3: detected capacity change from 0 to 128 [ 39.422166][ T3968] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.170: Allocating blocks 449-513 which overlap fs metadata [ 39.445931][ T3967] EXT4-fs (loop2): pa ffff888106da3070: logic 48, phys. 177, len 21 [ 39.454148][ T3967] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 39.467216][ T3968] syz.2.170 (3968) used greatest stack depth: 10312 bytes left [ 39.497486][ T3985] vhci_hcd: invalid port number 96 [ 39.502640][ T3985] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.527727][ T3971] Set syz1 is full, maxelem 65536 reached [ 39.537801][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.630929][ T3996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3996 comm=syz.1.180 [ 39.766903][ T4007] loop4: detected capacity change from 0 to 512 [ 39.778965][ T4007] EXT4-fs: Ignoring removed nobh option [ 39.793768][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 39.804163][ T4007] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.865862][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.183: corrupted inode contents [ 39.888591][ T4021] loop0: detected capacity change from 0 to 128 [ 39.900420][ T4007] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.183: mark_inode_dirty error [ 39.951432][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.183: corrupted inode contents [ 40.003610][ T4007] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.183: mark_inode_dirty error [ 40.022486][ T4007] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.183: Failed to acquire dquot type 0 [ 40.056040][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.183: corrupted inode contents [ 40.075837][ T4007] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.183: mark_inode_dirty error [ 40.098058][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.183: corrupted inode contents [ 40.124565][ T4007] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.183: mark_inode_dirty error [ 40.147262][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.183: corrupted inode contents [ 40.173807][ T4007] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 40.185382][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.183: corrupted inode contents [ 40.198202][ T4007] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.183: mark_inode_dirty error [ 40.219379][ T4007] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 40.231540][ T4007] EXT4-fs (loop4): 1 truncate cleaned up [ 40.238758][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.252298][ T4007] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.281369][ T4007] syz.4.183 (4007) used greatest stack depth: 9768 bytes left [ 40.289899][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.361959][ T4046] uprobe: syz.3.198:4046 failed to unregister, leaking uprobe [ 40.451797][ T4059] syz_tun: entered allmulticast mode [ 40.460565][ T4057] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 40.470213][ T4058] syz_tun: left allmulticast mode [ 40.477480][ T4061] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 40.513021][ T4063] batadv_slave_1: entered promiscuous mode [ 40.522455][ T4063] batadv_slave_1: left promiscuous mode [ 40.557799][ T4069] loop2: detected capacity change from 0 to 164 [ 40.594886][ T3767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.603930][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.612654][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.629442][ T4069] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.659630][ T4069] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.684326][ T4069] rock: directory entry would overflow storage [ 40.690655][ T4069] rock: sig=0x4f50, size=4, remaining=3 [ 40.696293][ T4069] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.719897][ T4080] loop4: detected capacity change from 0 to 164 [ 40.747280][ T4080] syz.4.211: attempt to access beyond end of device [ 40.747280][ T4080] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 40.764213][ T4080] syz.4.211: attempt to access beyond end of device [ 40.764213][ T4080] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.834739][ T3767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.843474][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.853964][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.940105][ T4099] __nla_validate_parse: 3 callbacks suppressed [ 40.940140][ T4099] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.215'. [ 40.993949][ T4102] vlan2: entered allmulticast mode [ 40.999199][ T4102] macvtap0: entered allmulticast mode [ 41.004636][ T4102] veth0_macvtap: entered allmulticast mode [ 41.049400][ T4105] loop4: detected capacity change from 0 to 1024 [ 41.097404][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.127826][ T4113] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.223'. [ 41.175346][ T4105] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.221: Allocating blocks 497-513 which overlap fs metadata [ 41.178122][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 41.198893][ T4119] netlink: 'syz.2.226': attribute type 30 has an invalid length. [ 41.202303][ T4118] netlink: 'syz.0.225': attribute type 7 has an invalid length. [ 41.210328][ T4119] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.214390][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 41.231213][ T4104] EXT4-fs (loop4): pa ffff888106da3070: logic 304, phys. 449, len 4 [ 41.232525][ T4119] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.240563][ T4104] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 41.250120][ T4119] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.268274][ T4119] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.279276][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 41.288150][ T4119] netlink: 'syz.2.226': attribute type 30 has an invalid length. [ 41.312610][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.386945][ T4122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 41.404585][ T4126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.525603][ T4136] loop2: detected capacity change from 0 to 512 [ 41.548844][ T4136] EXT4-fs: Ignoring removed orlov option [ 41.569520][ T4126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.586136][ T4136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.616103][ T4136] EXT4-fs (loop2): 1 orphan inode deleted [ 41.621918][ T4136] EXT4-fs (loop2): 1 truncate cleaned up [ 41.645793][ T4136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.678773][ T4136] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.232: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 41.702209][ T4136] EXT4-fs (loop2): Remounting filesystem read-only [ 41.727979][ T4126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.739986][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.784231][ T4148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.808465][ T4126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.923440][ T4162] loop1: detected capacity change from 0 to 1024 [ 41.936421][ T4126] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.947977][ T4162] EXT4-fs: Ignoring removed oldalloc option [ 41.958212][ T4126] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.967474][ T4162] EXT4-fs: Ignoring removed orlov option [ 41.978592][ T4162] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 41.999461][ T4162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.012813][ T4126] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.025970][ T4126] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.054991][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.077676][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 42.213288][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.220629][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.271173][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.281608][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.312985][ T4182] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.321652][ T4182] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.330147][ T4182] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.338657][ T4182] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.443287][ T4201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.451994][ T4201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.913760][ T3387] net_ratelimit: 12 callbacks suppressed [ 42.913776][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.039665][ T4221] syzkaller0: entered allmulticast mode [ 43.061447][ T4221] syzkaller0: entered promiscuous mode [ 43.073688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.082142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.102774][ T4221] syzkaller0 (unregistering): left allmulticast mode [ 43.109644][ T4221] syzkaller0 (unregistering): left promiscuous mode [ 43.158211][ T4228] syz.3.271 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.236351][ T4236] loop0: detected capacity change from 0 to 512 [ 43.322938][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.365398][ T4236] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.388931][ T4236] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.275: corrupted inode contents [ 43.389002][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 43.389019][ T29] audit: type=1400 audit(1752483942.741:422): avc: denied { create } for pid=4235 comm="syz.0.275" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.474230][ T4236] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.275: mark_inode_dirty error [ 43.619893][ T4236] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.275: corrupted inode contents [ 43.637361][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.675556][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119700c00: rx timeout, send abort [ 43.683865][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119700c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.733957][ T4203] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 43.763729][ T29] audit: type=1400 audit(1752483943.061:423): avc: denied { read } for pid=2979 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.785787][ T29] audit: type=1400 audit(1752483943.061:424): avc: denied { search } for pid=2979 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.807342][ T29] audit: type=1400 audit(1752483943.061:425): avc: denied { search } for pid=2979 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.829013][ T29] audit: type=1400 audit(1752483943.061:426): avc: denied { add_name } for pid=2979 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.849866][ T29] audit: type=1400 audit(1752483943.061:427): avc: denied { create } for pid=2979 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.870508][ T29] audit: type=1400 audit(1752483943.061:428): avc: denied { append open } for pid=2979 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.893806][ T29] audit: type=1400 audit(1752483943.061:429): avc: denied { getattr } for pid=2979 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.946647][ T4234] Set syz1 is full, maxelem 65536 reached [ 43.954559][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.983704][ T4236] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.275: mark_inode_dirty error [ 44.015034][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.080053][ T29] audit: type=1400 audit(1752483943.431:430): avc: denied { mount } for pid=4261 comm="syz.1.283" name="/" dev="ramfs" ino=6789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.351676][ T4270] loop2: detected capacity change from 0 to 512 [ 44.404111][ T4270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 44.420863][ T4270] System zones: 1-12 [ 44.434134][ T4270] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.285: corrupted in-inode xattr: invalid ea_ino [ 44.463874][ T4270] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.285: couldn't read orphan inode 15 (err -117) [ 44.504548][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.526151][ T3786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.535063][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.546130][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.556265][ T4281] loop1: detected capacity change from 0 to 2048 [ 44.568999][ T4281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.655297][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.684787][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.698741][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.819144][ T29] audit: type=1400 audit(1752483944.171:431): avc: denied { create } for pid=4297 comm="syz.3.297" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.956473][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 45.058106][ T4314] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.301'. [ 45.067317][ T4314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'. [ 45.501048][ T4345] pim6reg1: entered promiscuous mode [ 45.506469][ T4345] pim6reg1: entered allmulticast mode [ 45.973685][ T4381] capability: warning: `syz.2.334' uses 32-bit capabilities (legacy support in use) [ 46.249964][ T4411] loop1: detected capacity change from 0 to 512 [ 46.259414][ T4411] ext4: Unknown parameter 'usrquota"data' [ 46.266195][ T4409] __nla_validate_parse: 4 callbacks suppressed [ 46.266207][ T4409] netlink: 96 bytes leftover after parsing attributes in process `syz.2.346'. [ 46.325087][ T4414] loop3: detected capacity change from 0 to 1024 [ 46.379899][ T4414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.419015][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.479239][ T4426] SELinux: failed to load policy [ 46.496680][ T4428] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.568355][ T4436] loop3: detected capacity change from 0 to 256 [ 46.595655][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 46.655325][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 46.888396][ T4457] loop3: detected capacity change from 0 to 512 [ 46.915744][ T4462] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4462 comm=syz.4.369 [ 46.929359][ T4462] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4462 comm=syz.4.369 [ 46.946289][ T4457] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.367: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 46.975526][ T4457] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.367: Bad quota inode: 3, type: 0 [ 46.999464][ T4457] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.031025][ T4457] EXT4-fs (loop3): mount failed [ 47.116469][ T4473] netlink: 96 bytes leftover after parsing attributes in process `syz.2.373'. [ 47.275892][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 47.287627][ T4481] syz_tun: entered promiscuous mode [ 47.296224][ T4481] syz_tun: left promiscuous mode [ 47.467023][ T4486] vlan2: entered allmulticast mode [ 47.550458][ T4491] loop2: detected capacity change from 0 to 1024 [ 47.557464][ T4491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.586309][ T4491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.639855][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.807935][ T4513] loop1: detected capacity change from 0 to 128 [ 47.837108][ T4513] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 47.989978][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 48.004260][ T4527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.040752][ T4526] ip6gre1: entered allmulticast mode [ 48.086862][ T4527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.118793][ T1035] net_ratelimit: 15 callbacks suppressed [ 48.118810][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.146792][ T4527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.194029][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.207538][ T4527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.217253][ T4537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.226353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.296509][ T4527] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.324737][ T4527] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.336550][ T4527] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.348532][ T4527] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.411357][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 48.411374][ T29] audit: type=1400 audit(1752483947.761:628): avc: denied { read write } for pid=4544 comm="syz.3.403" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.457786][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 48.472486][ T29] audit: type=1400 audit(1752483947.761:629): avc: denied { open } for pid=4544 comm="syz.3.403" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.535970][ T4550] ref_ctr increment failed for inode: 0x1aa offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881045d4200 [ 48.542857][ T29] audit: type=1400 audit(1752483947.891:630): avc: denied { kexec_image_load } for pid=4552 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 48.605334][ T29] audit: type=1400 audit(1752483947.961:631): avc: denied { execute } for pid=4559 comm="syz.0.409" name="file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.632196][ T29] audit: type=1400 audit(1752483947.961:632): avc: denied { execute_no_trans } for pid=4559 comm="syz.0.409" path="/60/file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.765772][ T29] audit: type=1400 audit(1752483948.121:633): avc: denied { remount } for pid=4573 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.804956][ T4576] ÿ: renamed from bond_slave_0 (while UP) [ 48.830306][ T4578] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 48.851083][ T4578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.852039][ T29] audit: type=1400 audit(1752483948.201:634): avc: denied { associate } for pid=4580 comm="syz.0.419" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 48.899343][ T4578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.906789][ T4578] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 48.918330][ T4578] bond1: (slave vti0): Error -95 calling set_mac_address [ 48.948458][ T29] audit: type=1400 audit(1752483948.301:635): avc: denied { create } for pid=4584 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.973830][ T29] audit: type=1400 audit(1752483948.301:636): avc: denied { write } for pid=4584 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.984661][ T4585] infiniband syz1: set down [ 48.998457][ T4585] infiniband syz1: added veth0_to_bridge [ 49.040880][ T4585] RDS/IB: syz1: added [ 49.057118][ T4585] smc: adding ib device syz1 with port count 1 [ 49.074268][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 49.087619][ T4593] bridge_slave_1: left allmulticast mode [ 49.093357][ T4593] bridge_slave_1: left promiscuous mode [ 49.099088][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.106402][ T4585] smc: ib device syz1 port 1 has pnetid [ 49.114840][ T4593] bridge_slave_0: left promiscuous mode [ 49.120483][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.163843][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.258726][ T4602] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.426'. [ 49.306225][ T4607] loop1: detected capacity change from 0 to 764 [ 49.320990][ T4607] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 49.367820][ T4611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 49.374395][ T4611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.381976][ T4611] vhci_hcd vhci_hcd.0: Device attached [ 49.403769][ T4611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.412008][ T4611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.420605][ T4611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.500186][ T29] audit: type=1400 audit(1752483948.851:637): avc: denied { ioctl } for pid=4618 comm="syz.1.433" path="socket:[8416]" dev="sockfs" ino=8416 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.581249][ T4611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.611583][ T4611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.624404][ T36] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 49.636337][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 49.646860][ T4612] vhci_hcd: connection reset by peer [ 49.652492][ T3767] vhci_hcd: stop threads [ 49.657493][ T3767] vhci_hcd: release socket [ 49.661944][ T3767] vhci_hcd: disconnect device [ 49.703688][ T4625] loop3: detected capacity change from 0 to 4096 [ 49.713302][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.720153][ T4629] SELinux: failed to load policy [ 49.959772][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.977176][ T4704] vhci_hcd: invalid port number 236 [ 50.982458][ T4704] vhci_hcd: invalid port number 236 [ 51.221883][ T4734] netlink: 'syz.0.471': attribute type 13 has an invalid length. [ 51.288024][ T4740] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.436743][ T4760] loop4: detected capacity change from 0 to 764 [ 51.448397][ T4760] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.532849][ T4779] __nla_validate_parse: 1 callbacks suppressed [ 51.532904][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 51.558521][ T4779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 51.619920][ T4786] netlink: 'syz.4.479': attribute type 4 has an invalid length. [ 51.687372][ T4801] loop4: detected capacity change from 0 to 512 [ 51.701780][ T4801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.739654][ T4801] EXT4-fs (loop4): failed to initialize system zone (-117) [ 51.757590][ T4801] EXT4-fs (loop4): mount failed [ 51.893982][ T3387] IPVS: starting estimator thread 0... [ 51.993664][ T4836] IPVS: using max 2112 ests per chain, 105600 per kthread [ 52.053096][ T4868] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 52.059727][ T4868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.067407][ T4868] vhci_hcd vhci_hcd.0: Device attached [ 52.089121][ T4873] loop3: detected capacity change from 0 to 1024 [ 52.160191][ T4873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.234637][ T4870] vhci_hcd: connection closed [ 52.234963][ T3786] vhci_hcd: stop threads [ 52.244025][ T3786] vhci_hcd: release socket [ 52.248485][ T3786] vhci_hcd: disconnect device [ 52.253351][ T2960] vhci_hcd: vhci_device speed not set [ 52.271909][ T4873] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.486: Allocating blocks 449-513 which overlap fs metadata [ 52.322173][ T4872] EXT4-fs (loop3): pa ffff88810049b620: logic 48, phys. 177, len 21 [ 52.330287][ T4872] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 52.353509][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.478976][ T4915] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 52.655224][ T4923] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.492'. [ 52.931206][ T4944] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 52.939653][ T4944] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 53.010857][ T4941] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 53.025698][ T4941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.032905][ T4941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.043157][ T4941] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.050352][ T4941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.057736][ T4941] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.064849][ T4941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.074073][ T4941] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 53.108512][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 53.178723][ T4941] bridge_slave_1: left allmulticast mode [ 53.185341][ T4941] bridge_slave_1: left promiscuous mode [ 53.191188][ T4941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.297968][ T4941] bridge_slave_0: left allmulticast mode [ 53.303808][ T4941] bridge_slave_0: left promiscuous mode [ 53.309467][ T4941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.325188][ T23] net_ratelimit: 17 callbacks suppressed [ 53.325204][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.652422][ T4943] Set syz1 is full, maxelem 65536 reached [ 53.673894][ T4941] bond0: (slave bridge0): Releasing backup interface [ 53.889693][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.898291][ T3387] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.016188][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881196d1600: rx timeout, send abort [ 54.024534][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881196d1600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 54.040207][ T4937] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 54.114624][ T4976] loop2: detected capacity change from 0 to 512 [ 54.148309][ T4976] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.512: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.167859][ T4976] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.512: Bad quota inode: 3, type: 0 [ 54.179410][ T4976] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.195637][ T4976] EXT4-fs (loop2): mount failed [ 54.234504][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 54.234519][ T29] audit: type=1326 audit(1752483953.591:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.274757][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.284446][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.294095][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.299508][ T29] audit: type=1326 audit(1752483953.621:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.326300][ T29] audit: type=1326 audit(1752483953.621:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.349695][ T29] audit: type=1326 audit(1752483953.621:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.373664][ T29] audit: type=1326 audit(1752483953.621:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.397698][ T29] audit: type=1326 audit(1752483953.621:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.418576][ T4985] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 54.420896][ T29] audit: type=1326 audit(1752483953.621:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.452660][ T29] audit: type=1326 audit(1752483953.621:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a27fe929 code=0x7ffc0000 [ 54.476874][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.527254][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 54.676717][ T36] usb 5-1: enqueue for inactive port 0 [ 54.689241][ T36] usb 5-1: enqueue for inactive port 0 [ 54.764739][ T36] vhci_hcd: vhci_device speed not set [ 54.912118][ T5010] loop1: detected capacity change from 0 to 1024 [ 54.925541][ T5010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.955075][ T5010] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.522: Allocating blocks 449-513 which overlap fs metadata [ 54.978167][ T5009] EXT4-fs (loop1): pa ffff88810049b690: logic 48, phys. 177, len 21 [ 54.986371][ T5009] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 55.008439][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.500325][ T5037] loop1: detected capacity change from 0 to 764 [ 55.533858][ T29] audit: type=1400 audit(1752483954.881:693): avc: denied { read } for pid=5032 comm="syz.1.540" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.557098][ T29] audit: type=1400 audit(1752483954.881:694): avc: denied { open } for pid=5032 comm="syz.1.540" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.581108][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.690429][ T5053] loop3: detected capacity change from 0 to 128 [ 55.779263][ T5053] syz.3.536: attempt to access beyond end of device [ 55.779263][ T5053] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 55.808761][ T3810] kworker/u8:64: attempt to access beyond end of device [ 55.808761][ T3810] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 55.959578][ T5069] loop1: detected capacity change from 0 to 128 [ 56.011875][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.011875][ T3767] loop1: rw=1, sector=137, nr_sectors = 8 limit=128 [ 56.026253][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.026253][ T3767] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 56.034437][ T3810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.040059][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.040059][ T3767] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 56.062426][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.071585][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.071827][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.071827][ T3767] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 56.094470][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.094470][ T3767] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 56.107952][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.107952][ T3767] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 56.121848][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.121848][ T3767] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 56.135964][ T3767] kworker/u8:21: attempt to access beyond end of device [ 56.135964][ T3767] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 56.493278][ T5088] loop1: detected capacity change from 0 to 1024 [ 56.506938][ T5092] loop2: detected capacity change from 0 to 1024 [ 56.527433][ T5092] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.544450][ T5088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.596305][ T5092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.642514][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.660188][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.669757][ T5104] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.556'. [ 56.719428][ T5110] loop0: detected capacity change from 0 to 1024 [ 56.757531][ T5110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.817069][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.828133][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 57.337644][ T5136] loop0: detected capacity change from 0 to 512 [ 57.356630][ T5136] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.567: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 57.394287][ T5136] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.567: Bad quota inode: 3, type: 0 [ 57.424096][ T5136] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.451407][ T5136] EXT4-fs (loop0): mount failed [ 57.539096][ C1] ================================================================== [ 57.547232][ C1] BUG: KCSAN: data-race in do_select / pollwake [ 57.553495][ C1] [ 57.555819][ C1] read to 0xffffc90011ae39e0 of 4 bytes by task 5142 on cpu 0: [ 57.563357][ C1] do_select+0xe48/0xf50 [ 57.567616][ C1] core_sys_select+0x3d7/0x6e0 [ 57.572406][ C1] __se_sys_pselect6+0x216/0x280 [ 57.577360][ C1] __x64_sys_pselect6+0x78/0x90 [ 57.582224][ C1] x64_sys_call+0x1caa/0x2fb0 [ 57.586904][ C1] do_syscall_64+0xd2/0x200 [ 57.591410][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.597306][ C1] [ 57.599633][ C1] write to 0xffffc90011ae39e0 of 4 bytes by interrupt on cpu 1: [ 57.607364][ C1] pollwake+0xb6/0x100 [ 57.611432][ C1] __wake_up+0x66/0xb0 [ 57.615513][ C1] bpf_ringbuf_notify+0x22/0x30 [ 57.620387][ C1] irq_work_run+0xe2/0x2d0 [ 57.624822][ C1] __sysvec_irq_work+0x22/0x170 [ 57.629680][ C1] sysvec_irq_work+0x66/0x80 [ 57.634287][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 57.639270][ C1] native_apic_msr_write+0x3d/0x60 [ 57.644406][ C1] x2apic_send_IPI_self+0x10/0x20 [ 57.649454][ C1] arch_irq_work_raise+0x46/0x50 [ 57.654412][ C1] __irq_work_queue_local+0x10f/0x2c0 [ 57.659799][ C1] irq_work_queue+0x70/0x100 [ 57.664422][ C1] bpf_ringbuf_submit+0xce/0xf0 [ 57.669307][ C1] bpf_prog_a526332ed0a73e3c+0x4b/0x4f [ 57.674788][ C1] bpf_trace_run2+0x104/0x1c0 [ 57.679494][ C1] __bpf_trace_sys_enter+0x10/0x30 [ 57.684617][ C1] trace_sys_enter+0x86/0x110 [ 57.689314][ C1] syscall_trace_enter+0x13e/0x1e0 [ 57.694445][ C1] do_syscall_64+0xac/0x200 [ 57.698963][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.704866][ C1] [ 57.707193][ C1] value changed: 0x00000001 -> 0x00000000 [ 57.712915][ C1] [ 57.715251][ C1] Reported by Kernel Concurrency Sanitizer on: [ 57.721441][ C1] CPU: 1 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 57.731693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.741767][ C1] ================================================================== [ 57.839772][ T5143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'. [ 57.849311][ T5143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'. [ 58.754094][ T4957] net_ratelimit: 5 callbacks suppressed [ 58.754114][ T4957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.244655][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.803924][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.353734][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.514803][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.835667][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.873840][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.924493][ T4957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.074806][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.554079][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.954023][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.993912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.002079][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.033861][ T4957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.594367][ T2960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.074106][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog