last executing test programs: 2.828043548s ago: executing program 0 (id=1166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.883123572s ago: executing program 0 (id=1206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf2", 0x45}, {&(0x7f0000000f00)="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", 0x147}, {&(0x7f0000000180)="397d5f2e0000000004d3bbe87260a966573d06aec257ebf169e77257f308b498e5b41722dc2212d5cfd79f707d8d22178b63893ffe6c3c199000ad87db4897fdbed650fdfb1a05b71f6904f1daa32f2d92692e02c5e84349103f34a8c937ee3edf83b69d8dd6c68c46cea1bdde100046ffed2ce804241463fb", 0x79}, {0x0}], 0x5}}], 0x1, 0x20008000) 1.071183554s ago: executing program 0 (id=1229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 1.053343544s ago: executing program 0 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.034708995s ago: executing program 0 (id=1231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 833.195047ms ago: executing program 0 (id=1237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@usrquota}, {@data_err_ignore}, {@sysvgroups}, {@auto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000001a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 768.856779ms ago: executing program 2 (id=1240): fstat(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 719.481789ms ago: executing program 2 (id=1244): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffe7ffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x14c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x108, 0x2, {{}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_DELAY_DIST={0x3e, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8"}]}}}]}, 0x14c}}, 0x0) 674.65308ms ago: executing program 2 (id=1246): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) 671.08168ms ago: executing program 3 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/24, 0x18}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 625.568761ms ago: executing program 2 (id=1249): r0 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = dup(r0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000180)=[r0, r0], 0x2, 0x0, 0x0, {0x0, r4}}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0xdb2, 0x0, 0x42, 0x0, 0x0) 624.824111ms ago: executing program 1 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 570.504122ms ago: executing program 2 (id=1252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$eJzs281qE10cx/FfX56nb7aJVqutiH90o5uhjVcQSgtiQKmN+ALC1E40ZJqUTKhExHbn1q1XIBSX7gTxBrrxCly468ZlF+JIZ2KbtBGtoGOb72dz/uHML5yTcyacxczm7RdLpULgFNyaurtMvVK/tqS0utWjWFej7Y7q/9VsTZdHcx/P3bxz91o2l5uZM5vNzl/JmNnI+XePn76+8L42dOvNyNs+baTvb37OfNoY2xjf/Dr/qBhYMbBypWauLVQqNXfB92yxGJQcsxu+5waeFcuBV23pL/iV5eW6ueXF4cHlqhcE5pbrVvLqVqtYrVo396FbLJvjODY8KPxMfn1uzs0mPQr8WdVq1p2WNLGvJ7+eyIAAAECi2pz/1zj/dwrO/51g+/x/r3H/tuL8DwAAAAAAAAAAAAAAAAAAAADAYbAVhqkwDFPf2/+k6A2fsPF5QNKgpCFJxyQNSxqRlJKUlnRc0glJo5JOSjolaUzSaUlnJI03fVfSc8V+yaz/QJJTRhPu/87G+ne2phd3+6Wl5yv5lXzcxv3Zgory5WlSKX2J1rIhrmev5mYmLZLW2aXVRn51Jd/Tmp9SanvDtMtPxXlrzfdF+24nn1Fqe4PF2Zct+UzbfL8uXWzKO0rpwwNV5Gsx2pO7+WdTZtPXc3vyE9F1R51jO9qun+P8qD/OH2B/7Pl9ezXRm+zcIQX1JyXX970qBcVRKF7pnxjG4S+S/mfC37C76EmPBAAAAAAAAAAAAAAAAABwEL/7hGC4Gud/5eKk5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF7fAgAA//+tvV1C") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 570.137472ms ago: executing program 4 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 526.251902ms ago: executing program 4 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 497.018123ms ago: executing program 4 (id=1255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4cb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) 406.762844ms ago: executing program 1 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 406.165304ms ago: executing program 3 (id=1257): r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x8) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 405.576104ms ago: executing program 3 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 322.833505ms ago: executing program 4 (id=1259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 309.479516ms ago: executing program 1 (id=1260): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 226.969597ms ago: executing program 1 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 226.377437ms ago: executing program 4 (id=1262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x8001c8, 0xe2, 0xfe10, 0x3}], "", ['\x00']}, 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 196.897927ms ago: executing program 3 (id=1263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 196.230437ms ago: executing program 1 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000280)={[{@errors_remount}, {@discard}], [{@measure}]}, 0x1, 0x51c, &(0x7f0000000cc0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x200) 179.668418ms ago: executing program 4 (id=1265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 121.186768ms ago: executing program 3 (id=1266): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 98.105859ms ago: executing program 1 (id=1267): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 848.17µs ago: executing program 3 (id=1268): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x78, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "6220bab5a709d4291034568d39e16c8a5e14def7ee670a14f4cad2a55b179d45", "1c4c22145fa899e6e4f312f5acef2b1d", {"a298723188d6a49f76e36a238979a2a4", "1231d5e9312bcb7bf4b6631bfd351035"}}}}}}}, 0x0) 0s ago: executing program 2 (id=1278): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5f501, 0x22c5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8084) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts. [ 32.900599][ T29] audit: type=1400 audit(1752358447.420:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.901754][ T3295] cgroup: Unknown subsys name 'net' [ 32.923353][ T29] audit: type=1400 audit(1752358447.420:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.950853][ T29] audit: type=1400 audit(1752358447.460:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.047695][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.054035][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.205358][ T29] audit: type=1400 audit(1752358447.720:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.228815][ T29] audit: type=1400 audit(1752358447.720:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.249403][ T29] audit: type=1400 audit(1752358447.720:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.270254][ T29] audit: type=1400 audit(1752358447.720:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.290666][ T29] audit: type=1400 audit(1752358447.760:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.299575][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.315506][ T29] audit: type=1400 audit(1752358447.760:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.347415][ T29] audit: type=1400 audit(1752358447.850:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.377428][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.303093][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.393826][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.401056][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.408261][ T3304] bridge_slave_0: entered allmulticast mode [ 35.414747][ T3304] bridge_slave_0: entered promiscuous mode [ 35.436767][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.444115][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.451506][ T3304] bridge_slave_1: entered allmulticast mode [ 35.458091][ T3304] bridge_slave_1: entered promiscuous mode [ 35.484809][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.512431][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.525666][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.541478][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.570858][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.589311][ T3304] team0: Port device team_slave_0 added [ 35.602829][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.622917][ T3304] team0: Port device team_slave_1 added [ 35.643348][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.650539][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.657858][ T3305] bridge_slave_0: entered allmulticast mode [ 35.664277][ T3305] bridge_slave_0: entered promiscuous mode [ 35.685553][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.692696][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.700036][ T3305] bridge_slave_1: entered allmulticast mode [ 35.706510][ T3305] bridge_slave_1: entered promiscuous mode [ 35.732788][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.739921][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.765885][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.793656][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.800669][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.826622][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.850517][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.859730][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.866844][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.873993][ T3309] bridge_slave_0: entered allmulticast mode [ 35.880573][ T3309] bridge_slave_0: entered promiscuous mode [ 35.892237][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.899350][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.906604][ T3311] bridge_slave_0: entered allmulticast mode [ 35.913087][ T3311] bridge_slave_0: entered promiscuous mode [ 35.920809][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.930150][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.937247][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.944504][ T3311] bridge_slave_1: entered allmulticast mode [ 35.950930][ T3311] bridge_slave_1: entered promiscuous mode [ 35.957496][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.964595][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.971813][ T3309] bridge_slave_1: entered allmulticast mode [ 35.978392][ T3309] bridge_slave_1: entered promiscuous mode [ 36.031421][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.040819][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.047947][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.055195][ T3313] bridge_slave_0: entered allmulticast mode [ 36.061739][ T3313] bridge_slave_0: entered promiscuous mode [ 36.068913][ T3305] team0: Port device team_slave_0 added [ 36.074756][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.081850][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.089085][ T3313] bridge_slave_1: entered allmulticast mode [ 36.095476][ T3313] bridge_slave_1: entered promiscuous mode [ 36.103092][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.118367][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.129392][ T3304] hsr_slave_0: entered promiscuous mode [ 36.135374][ T3304] hsr_slave_1: entered promiscuous mode [ 36.142154][ T3305] team0: Port device team_slave_1 added [ 36.158538][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.183185][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.190226][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.216217][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.237523][ T3311] team0: Port device team_slave_0 added [ 36.253625][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.260683][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.286697][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.301451][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.311205][ T3311] team0: Port device team_slave_1 added [ 36.322558][ T3309] team0: Port device team_slave_0 added [ 36.329276][ T3309] team0: Port device team_slave_1 added [ 36.347746][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.385148][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.392221][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.418393][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.429879][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.436883][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.462923][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.476110][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.483111][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.509104][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.533921][ T3305] hsr_slave_0: entered promiscuous mode [ 36.540076][ T3305] hsr_slave_1: entered promiscuous mode [ 36.546041][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.553777][ T3305] Cannot create hsr debugfs directory [ 36.562338][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.569356][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.595379][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.606922][ T3313] team0: Port device team_slave_0 added [ 36.613826][ T3313] team0: Port device team_slave_1 added [ 36.648142][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.655230][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.681290][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.704736][ T3311] hsr_slave_0: entered promiscuous mode [ 36.710896][ T3311] hsr_slave_1: entered promiscuous mode [ 36.716958][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.724527][ T3311] Cannot create hsr debugfs directory [ 36.740258][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.747441][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.773503][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.811439][ T3309] hsr_slave_0: entered promiscuous mode [ 36.817811][ T3309] hsr_slave_1: entered promiscuous mode [ 36.823595][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.831225][ T3309] Cannot create hsr debugfs directory [ 36.872344][ T3313] hsr_slave_0: entered promiscuous mode [ 36.878502][ T3313] hsr_slave_1: entered promiscuous mode [ 36.884416][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.892072][ T3313] Cannot create hsr debugfs directory [ 36.963212][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.974513][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.985044][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.003998][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.075867][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.085211][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.101677][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.111707][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.141912][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.153324][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.169348][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.179098][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.215861][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.224899][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.234825][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.243754][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.262685][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.295375][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.313187][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.320332][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.338816][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.348027][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.359567][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.369028][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.376110][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.391209][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.415617][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.433422][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.443976][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.458548][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.474613][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.497382][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.504498][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.519791][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.533865][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.546654][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.553776][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.567275][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.591692][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.598802][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.607781][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.615168][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.628159][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.652001][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.659145][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.669452][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.676561][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.698357][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.710837][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.721329][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.764971][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.796116][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.828642][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.850624][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.857904][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.870129][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.877447][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.911116][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.922594][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.940711][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.002916][ T3305] veth0_vlan: entered promiscuous mode [ 38.027975][ T3305] veth1_vlan: entered promiscuous mode [ 38.063200][ T3305] veth0_macvtap: entered promiscuous mode [ 38.094985][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.105042][ T3304] veth0_vlan: entered promiscuous mode [ 38.111738][ T3305] veth1_macvtap: entered promiscuous mode [ 38.124544][ T3304] veth1_vlan: entered promiscuous mode [ 38.141505][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.157969][ T3311] veth0_vlan: entered promiscuous mode [ 38.171131][ T3311] veth1_vlan: entered promiscuous mode [ 38.180131][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.196331][ T3304] veth0_macvtap: entered promiscuous mode [ 38.208134][ T3309] veth0_vlan: entered promiscuous mode [ 38.214677][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.223590][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.232407][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.241206][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.257665][ T3304] veth1_macvtap: entered promiscuous mode [ 38.272751][ T3311] veth0_macvtap: entered promiscuous mode [ 38.280822][ T3311] veth1_macvtap: entered promiscuous mode [ 38.294824][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.310396][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.310411][ T29] audit: type=1400 audit(1752358452.830:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOajkV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.347657][ T3309] veth1_vlan: entered promiscuous mode [ 38.353500][ T29] audit: type=1400 audit(1752358452.830:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.375612][ T29] audit: type=1400 audit(1752358452.830:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOajkV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.391999][ T3309] veth0_macvtap: entered promiscuous mode [ 38.401020][ T29] audit: type=1400 audit(1752358452.830:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.413740][ T3309] veth1_macvtap: entered promiscuous mode [ 38.428533][ T29] audit: type=1400 audit(1752358452.830:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOajkV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.442751][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.460903][ T29] audit: type=1400 audit(1752358452.830:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOajkV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.471402][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.495392][ T29] audit: type=1400 audit(1752358452.830:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.511394][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.522119][ T29] audit: type=1400 audit(1752358452.870:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.533733][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.552039][ T29] audit: type=1400 audit(1752358452.870:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.583273][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.599884][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.620046][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.628990][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.637837][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.646647][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.663120][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.671979][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.681002][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.689858][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.697503][ T29] audit: type=1400 audit(1752358453.210:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.731443][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.740617][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.749487][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.758339][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.771111][ T3313] veth0_vlan: entered promiscuous mode [ 38.795466][ T3313] veth1_vlan: entered promiscuous mode [ 38.849571][ T3313] veth0_macvtap: entered promiscuous mode [ 38.857681][ T3313] veth1_macvtap: entered promiscuous mode [ 38.881899][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.894974][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.907864][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.916736][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.925625][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934385][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.947131][ T3480] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 38.947131][ T3480] program syz.1.6 not setting count and/or reply_len properly [ 38.966048][ T3483] loop4: detected capacity change from 0 to 512 [ 38.972896][ T3483] ======================================================= [ 38.972896][ T3483] WARNING: The mand mount option has been deprecated and [ 38.972896][ T3483] and is ignored by this kernel. Remove the mand [ 38.972896][ T3483] option from the mount to silence this warning. [ 38.972896][ T3483] ======================================================= [ 39.070903][ T3483] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5: bg 0: block 5: invalid block bitmap [ 39.154568][ T3483] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 39.188058][ T3500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.199132][ T3483] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5: invalid indirect mapped block 3 (level 2) [ 39.226766][ T3483] EXT4-fs (loop4): 2 truncates cleaned up [ 39.238066][ T3483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.274755][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.285604][ T3509] xt_CT: No such helper "pptp" [ 39.348565][ T3516] SELinux: failed to load policy [ 39.360886][ T3521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 39.435124][ T3526] netlink: 9 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.460711][ T3526] gretap0: entered promiscuous mode [ 39.484810][ T3526] netlink: 5 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.525064][ T3526] 0{X: renamed from gretap0 [ 39.546995][ T3526] 0{X: left promiscuous mode [ 39.552092][ T3526] 0{X: entered allmulticast mode [ 39.573716][ T3526] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 39.612946][ T3536] netlink: 96 bytes leftover after parsing attributes in process `syz.1.24'. [ 39.631715][ T3526] syz.3.18 (3526) used greatest stack depth: 10272 bytes left [ 39.641683][ T3538] netlink: 80 bytes leftover after parsing attributes in process `syz.4.25'. [ 39.653554][ T3519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17'. [ 39.702105][ T3543] loop4: detected capacity change from 0 to 512 [ 39.723837][ T3543] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.737177][ T3543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.753230][ T3543] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.767411][ T3543] EXT4-fs (loop4): 1 truncate cleaned up [ 39.774338][ T3543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.809684][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.896010][ T3553] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.29'. [ 39.915669][ T3548] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.29'. [ 39.932191][ T3555] loop4: detected capacity change from 0 to 1024 [ 39.968847][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.034790][ T3401] IPVS: starting estimator thread 0... [ 40.045970][ T3555] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.32: Allocating blocks 497-513 which overlap fs metadata [ 40.065730][ T3555] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117 [ 40.078220][ T3555] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.078220][ T3555] [ 40.097412][ T3571] loop3: detected capacity change from 0 to 164 [ 40.110343][ T3555] syz.4.32 (3555) used greatest stack depth: 9360 bytes left [ 40.118093][ T3572] capability: warning: `syz.1.35' uses 32-bit capabilities (legacy support in use) [ 40.119568][ T3571] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.138932][ T3566] IPVS: using max 2112 ests per chain, 105600 per kthread [ 40.157470][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.213827][ T3571] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.222918][ T3578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.39'. [ 40.234149][ T3578] netlink: 204 bytes leftover after parsing attributes in process `syz.4.39'. [ 40.239035][ T3571] Symlink component flag not implemented [ 40.248852][ T3571] Symlink component flag not implemented [ 40.255472][ T3571] Symlink component flag not implemented (7) [ 40.261603][ T3571] Symlink component flag not implemented (116) [ 40.360303][ T3500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.483213][ T3600] loop4: detected capacity change from 0 to 4096 [ 40.504011][ T3600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.539298][ T2995] udevd[2995]: worker [3293] terminated by signal 33 (Unknown signal 33) [ 40.548751][ T2995] udevd[2995]: worker [3293] failed while handling '/devices/virtual/block/loop3' [ 40.585750][ T3400] kernel write not supported for file /36/attr/exec (pid: 3400 comm: kworker/0:5) [ 40.607000][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.647281][ T3615] loop4: detected capacity change from 0 to 512 [ 40.682797][ T3615] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.56: corrupted in-inode xattr: invalid ea_ino [ 40.699194][ T3615] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.56: couldn't read orphan inode 15 (err -117) [ 40.711790][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.715645][ T3623] netlink: 'wޣ': attribute type 13 has an invalid length. [ 40.751038][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.770373][ T3623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.855767][ T3631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.868168][ T3631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.878368][ T3631] bond0 (unregistering): Released all slaves [ 40.964357][ T3638] loop3: detected capacity change from 0 to 2048 [ 40.971741][ T3638] ext4: Unknown parameter 'dont_appraise' [ 41.006302][ T3640] loop4: detected capacity change from 0 to 1024 [ 41.029293][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.052531][ T3640] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.116278][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 41.133549][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 41.145997][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.145997][ T12] [ 41.155717][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 41.162082][ T12] EXT4-fs (loop4): Free/Dirty block details [ 41.168048][ T12] EXT4-fs (loop4): free_blocks=4293918720 [ 41.173811][ T12] EXT4-fs (loop4): dirty_blocks=16 [ 41.179076][ T12] EXT4-fs (loop4): Block reservation details [ 41.185128][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 41.192174][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.504029][ T3500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.679459][ T3691] Zero length message leads to an empty skb [ 41.729849][ T3500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.783321][ T3500] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.805741][ T3705] loop1: detected capacity change from 0 to 164 [ 41.813965][ T3500] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.829408][ T3705] process 'syz.1.90' launched '/dev/fd/4' with NULL argv: empty string added [ 41.851027][ T3500] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.869106][ T3705] syz.1.90: attempt to access beyond end of device [ 41.869106][ T3705] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 41.888165][ T3500] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.897085][ T3705] syz.1.90: attempt to access beyond end of device [ 41.897085][ T3705] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.959045][ T3709] loop0: detected capacity change from 0 to 1024 [ 42.002621][ T3709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.080145][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.863070][ T3751] netlink: 'syz.2.110': attribute type 4 has an invalid length. [ 43.111668][ T3825] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.120587][ T3825] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.129592][ T3825] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.138625][ T3825] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.177821][ T3825] vxlan0: entered promiscuous mode [ 43.194037][ T3830] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 43.306931][ T3834] netlink: 'syz.0.118': attribute type 13 has an invalid length. [ 43.357512][ T3834] gretap0: refused to change device tx_queue_len [ 43.364126][ T3834] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.418729][ T3840] syz.4.120 uses obsolete (PF_INET,SOCK_PACKET) [ 43.440341][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 43.440355][ T29] audit: type=1400 audit(1752358457.960:228): avc: denied { ioctl } for pid=3839 comm="syz.4.120" path="socket:[5579]" dev="sockfs" ino=5579 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.495273][ T29] audit: type=1400 audit(1752358458.000:229): avc: denied { ioctl } for pid=3841 comm="syz.0.121" path="socket:[5064]" dev="sockfs" ino=5064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.523024][ T3844] loop3: detected capacity change from 0 to 128 [ 43.538533][ T29] audit: type=1400 audit(1752358458.060:230): avc: denied { mount } for pid=3843 comm="syz.3.122" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.609612][ T29] audit: type=1400 audit(1752358458.130:231): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.672692][ T29] audit: type=1326 audit(1752358458.190:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 43.696194][ T29] audit: type=1326 audit(1752358458.190:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 43.722814][ T29] audit: type=1326 audit(1752358458.240:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 43.746146][ T29] audit: type=1326 audit(1752358458.240:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 43.769489][ T29] audit: type=1326 audit(1752358458.240:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 43.803504][ T29] audit: type=1326 audit(1752358458.240:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 43.914118][ T3867] team_slave_0: entered promiscuous mode [ 43.919916][ T3867] team_slave_1: entered promiscuous mode [ 43.936971][ T3867] team_slave_0: left promiscuous mode [ 43.942438][ T3867] team_slave_1: left promiscuous mode [ 44.048882][ T3872] bridge0: port 3(macvlan2) entered blocking state [ 44.055544][ T3872] bridge0: port 3(macvlan2) entered disabled state [ 44.063720][ T3872] macvlan2: entered allmulticast mode [ 44.069261][ T3872] bridge0: entered allmulticast mode [ 44.077904][ T3872] macvlan2: left allmulticast mode [ 44.083172][ T3872] bridge0: left allmulticast mode [ 44.274377][ T3894] ref_ctr_offset mismatch. inode: 0x93 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 44.395268][ T3908] openvswitch: netlink: Message has 6 unknown bytes. [ 44.405766][ T3911] tipc: Started in network mode [ 44.410764][ T3911] tipc: Node identity 4, cluster identity 4711 [ 44.417179][ T3911] tipc: Node number set to 4 [ 44.602078][ T3931] loop2: detected capacity change from 0 to 1024 [ 44.652808][ T3931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.672998][ T3931] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.698279][ T3931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.714702][ T3931] EXT4-fs (loop2): Remounting filesystem read-only [ 44.722377][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 44.754360][ T3931] syz.2.158 (3931) used greatest stack depth: 9080 bytes left [ 44.772352][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.791876][ T3950] __nla_validate_parse: 6 callbacks suppressed [ 44.791893][ T3950] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 44.806624][ T3950] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 44.835705][ T3948] syzkaller0: entered promiscuous mode [ 44.841391][ T3948] syzkaller0: entered allmulticast mode [ 44.949254][ T3963] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 45.099573][ T3980] netlink: 96 bytes leftover after parsing attributes in process `syz.4.180'. [ 45.215692][ T3989] loop3: detected capacity change from 0 to 164 [ 45.395855][ T4010] loop3: detected capacity change from 0 to 256 [ 45.398350][ T4004] SELinux: failed to load policy [ 45.431687][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.439208][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.450017][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.457617][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.465118][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.472713][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.480288][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.487769][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.495229][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.502737][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.510197][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.517729][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.529586][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.537136][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.544705][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.552195][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.559881][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.567352][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.574822][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.582331][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.589975][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.597443][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.604977][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.612454][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.620018][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.627487][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.634922][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.718043][ T3386] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 45.877027][ T4029] fido_id[4029]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.913682][ T4042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.048247][ T4053] syz.2.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.122452][ T2995] udevd[2995]: worker [3855] terminated by signal 33 (Unknown signal 33) [ 46.277540][ T4088] netlink: 240 bytes leftover after parsing attributes in process `syz.0.217'. [ 46.312698][ T4092] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 46.434578][ T4106] SELinux: ebitmap: truncated map [ 46.440671][ T4106] SELinux: failed to load policy [ 46.527964][ T4118] rdma_op ffff8881195d1d80 conn xmit_rdma 0000000000000000 [ 46.604021][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 46.760070][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 46.918219][ T4140] loop1: detected capacity change from 0 to 164 [ 46.961579][ T4149] vlan2: entered allmulticast mode [ 46.972371][ T4149] dummy0: entered allmulticast mode [ 47.201003][ T4169] loop2: detected capacity change from 0 to 256 [ 47.342816][ T4184] loop1: detected capacity change from 0 to 512 [ 47.349821][ T4184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.357422][ T4184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.369707][ T4184] EXT4-fs (loop1): 1 truncate cleaned up [ 47.375883][ T4184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.434819][ T4188] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 47.445137][ T4188] team0: Device hsr_slave_0 failed to register rx_handler [ 47.458743][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.513690][ T4194] loop2: detected capacity change from 0 to 2048 [ 47.557197][ T4194] loop2: p1 < > p4 [ 47.561808][ T4194] loop2: p4 size 8388608 extends beyond EOD, truncated [ 47.661596][ T4208] netlink: 96 bytes leftover after parsing attributes in process `syz.2.282'. [ 47.872468][ T4223] loop0: detected capacity change from 0 to 2048 [ 47.883337][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.898461][ T4225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.905823][ T4223] EXT4-fs error (device loop0): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.0.289: path /41/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 47.936636][ T4223] EXT4-fs (loop0): Remounting filesystem read-only [ 47.984409][ T4225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.011374][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.072332][ T4225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.146742][ T4225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.254675][ T4225] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.286187][ T4225] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.318786][ T4225] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.350833][ T4225] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.500823][ T4267] loop3: detected capacity change from 0 to 2048 [ 48.537826][ T4267] loop3: p1 < > p4 [ 48.547620][ T4267] loop3: p4 size 8388608 extends beyond EOD, truncated [ 48.563726][ T4283] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 48.600287][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 48.600303][ T29] audit: type=1326 audit(1752358463.110:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.629911][ T29] audit: type=1326 audit(1752358463.110:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.653416][ T29] audit: type=1326 audit(1752358463.110:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.677390][ T29] audit: type=1326 audit(1752358463.120:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.700928][ T29] audit: type=1326 audit(1752358463.120:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.724487][ T29] audit: type=1326 audit(1752358463.120:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.748267][ T29] audit: type=1326 audit(1752358463.120:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.771716][ T29] audit: type=1326 audit(1752358463.120:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.795061][ T29] audit: type=1326 audit(1752358463.120:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.818489][ T29] audit: type=1326 audit(1752358463.120:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7fc00000 [ 48.885552][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.317'. [ 48.987540][ T1036] kernel write not supported for file /103/loginuid (pid: 1036 comm: kworker/0:2) [ 48.991851][ T4310] loop4: detected capacity change from 0 to 512 [ 49.003987][ T4310] EXT4-fs: Ignoring removed oldalloc option [ 49.012039][ T4310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.027299][ T4310] EXT4-fs (loop4): 1 truncate cleaned up [ 49.034072][ T4310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.070855][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.082216][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 49.550323][ T4361] loop1: detected capacity change from 0 to 1024 [ 49.568946][ T4361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.588837][ T4361] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 49.618572][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.966439][ T4411] vlan2: entered allmulticast mode [ 49.974308][ T4411] dummy0: entered allmulticast mode [ 50.101418][ T4429] SELinux: failed to load policy [ 50.206179][ T4442] loop3: detected capacity change from 0 to 512 [ 50.229552][ T4442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.244680][ T4442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.275324][ T4442] EXT4-fs (loop3): 1 truncate cleaned up [ 50.302009][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.369439][ T4462] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 50.377417][ T4462] __nla_validate_parse: 1 callbacks suppressed [ 50.377487][ T4462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.391'. [ 50.397127][ T4462] dummy0: entered promiscuous mode [ 50.403048][ T4462] bridge0: port 3(dummy0) entered blocking state [ 50.410626][ T4462] bridge0: port 3(dummy0) entered disabled state [ 50.419905][ T4462] bridge0: port 3(dummy0) entered blocking state [ 50.426394][ T4462] bridge0: port 3(dummy0) entered forwarding state [ 50.496738][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.550662][ T4479] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 50.570900][ T4479] team0 (unregistering): Port device team_slave_0 removed [ 50.600521][ T4489] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 50.610560][ T4479] team0 (unregistering): Port device team_slave_1 removed [ 50.883157][ T4533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 50.895465][ T4531] IPVS: stopping master sync thread 4533 ... [ 51.688958][ T4686] pim6reg1: entered promiscuous mode [ 51.694381][ T4686] pim6reg1: entered allmulticast mode [ 52.213013][ T4729] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 52.327052][ T4747] loop9: detected capacity change from 0 to 7 [ 52.374229][ T4757] netlink: 'syz.2.502': attribute type 4 has an invalid length. [ 52.449739][ T4768] netlink: 'syz.4.506': attribute type 3 has an invalid length. [ 52.494051][ T4774] netlink: 'syz.0.509': attribute type 3 has an invalid length. [ 52.513350][ T4782] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 52.601736][ T4791] netlink: 96 bytes leftover after parsing attributes in process `syz.3.517'. [ 52.648910][ T4799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.519'. [ 52.657948][ T4799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.519'. [ 52.685128][ T4801] loop4: detected capacity change from 0 to 512 [ 52.714013][ T4801] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.735566][ T4801] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.522: invalid indirect mapped block 2683928664 (level 1) [ 52.754142][ T4801] EXT4-fs (loop4): Remounting filesystem read-only [ 52.761249][ T4801] EXT4-fs (loop4): 1 truncate cleaned up [ 52.768898][ T4801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.798685][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.063414][ T4845] loop4: detected capacity change from 0 to 128 [ 53.075689][ T4845] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.089325][ T4845] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.135023][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.178571][ T4854] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.564725][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 53.595095][ T4886] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 53.619300][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 53.668764][ T4894] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 53.682342][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 53.682359][ T29] audit: type=1326 audit(1752358468.200:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.715389][ T29] audit: type=1326 audit(1752358468.200:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.725049][ T4894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.738965][ T29] audit: type=1326 audit(1752358468.200:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.768773][ T29] audit: type=1326 audit(1752358468.200:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.792076][ T29] audit: type=1326 audit(1752358468.200:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b130511e5 code=0x7ffc0000 [ 53.815426][ T29] audit: type=1326 audit(1752358468.200:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.838853][ T29] audit: type=1326 audit(1752358468.200:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.862251][ T29] audit: type=1326 audit(1752358468.200:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 53.918768][ T4904] loop0: detected capacity change from 0 to 128 [ 53.974289][ T4904] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.988636][ T4904] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.021628][ T29] audit: type=1326 audit(1752358468.530:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 54.045320][ T29] audit: type=1326 audit(1752358468.530:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2b1301e929 code=0x7ffc0000 [ 54.071002][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.080792][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.082304][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.100009][ T4909] random: crng reseeded on system resumption [ 54.227685][ T4916] loop2: detected capacity change from 0 to 2048 [ 54.250882][ T4916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.277171][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 54.284642][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.292175][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.299632][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.307207][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.314670][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.322191][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 54.329683][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.337164][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.344658][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.352177][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 54.359629][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.367137][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.374640][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 54.382236][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.389867][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.397376][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 54.404797][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.412276][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.419798][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.427284][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.434712][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.442291][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.449786][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.457231][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.464648][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.472100][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.479778][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.487246][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.494741][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.502206][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.509725][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.517281][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.524715][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.532233][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.539782][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.547229][ T36] hid-generic 0000:0000:0000.0002: item fetching failed at offset 41/43 [ 54.556517][ T36] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 54.594857][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.635192][ T4942] mmap: syz.0.582 (4942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.681604][ T4953] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 54.689494][ T4953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.586'. [ 54.801719][ T4971] loop4: detected capacity change from 0 to 128 [ 54.829410][ T4971] EXT4-fs: Ignoring removed nobh option [ 54.835608][ T4973] capability: warning: `syz.3.595' uses deprecated v2 capabilities in a way that may be insecure [ 54.876774][ T4971] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.889707][ T4971] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.931743][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 54.953113][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.004698][ T4993] loop3: detected capacity change from 0 to 512 [ 55.012259][ T4993] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.020850][ T4993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.037652][ T4993] EXT4-fs (loop3): 1 truncate cleaned up [ 55.047030][ T4993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.119552][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.161759][ T5004] vhci_hcd: invalid port number 96 [ 55.166956][ T5004] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 55.355396][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.368614][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.456382][ T5020] netlink: 'syz.2.615': attribute type 21 has an invalid length. [ 55.464370][ T5020] netlink: 156 bytes leftover after parsing attributes in process `syz.2.615'. [ 55.473978][ T5022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.616'. [ 55.732530][ T5047] loop2: detected capacity change from 0 to 512 [ 55.739599][ T5047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.751443][ T5047] EXT4-fs (loop2): 1 truncate cleaned up [ 55.757625][ T5047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.785119][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.136932][ T5100] Cannot find add_set index 0 as target [ 56.317612][ T5118] netlink: 36 bytes leftover after parsing attributes in process `syz.4.659'. [ 56.337589][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 56.346649][ T5118] netlink: 204 bytes leftover after parsing attributes in process `syz.4.659'. [ 56.355705][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 56.454797][ T5134] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 56.889984][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 56.905387][ T5161] bridge0: entered promiscuous mode [ 56.912918][ T5161] bridge0: port 3(macvlan2) entered blocking state [ 56.919614][ T5161] bridge0: port 3(macvlan2) entered disabled state [ 56.926663][ T5161] macvlan2: entered allmulticast mode [ 56.932073][ T5161] bridge0: entered allmulticast mode [ 56.938656][ T5161] macvlan2: left allmulticast mode [ 56.943833][ T5161] bridge0: left allmulticast mode [ 56.953808][ T5161] bridge0: left promiscuous mode [ 57.303492][ T5186] loop2: detected capacity change from 0 to 512 [ 57.349880][ T5186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.374049][ T5186] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.418062][ T5198] loop4: detected capacity change from 0 to 128 [ 57.476859][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.518651][ T4596] kworker/u8:15: attempt to access beyond end of device [ 57.518651][ T4596] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 57.660408][ T5231] rdma_op ffff8881195e3980 conn xmit_rdma 0000000000000000 [ 57.680600][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 57.695917][ T5232] netlink: 312 bytes leftover after parsing attributes in process `syz.1.707'. [ 57.705026][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 57.779836][ T5244] loop3: detected capacity change from 0 to 1024 [ 57.787598][ T5242] loop4: detected capacity change from 0 to 512 [ 57.795692][ T5242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.807926][ T5244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.823440][ T5242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.845046][ T5242] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.865332][ T5242] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.714: corrupted xattr block 19: overlapping e_value [ 57.869098][ T5244] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.715: Allocating blocks 449-513 which overlap fs metadata [ 57.894452][ T5242] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 57.904979][ T5242] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.714: corrupted xattr block 19: overlapping e_value [ 57.922475][ T5243] EXT4-fs (loop3): pa ffff888106992000: logic 48, phys. 177, len 21 [ 57.930673][ T5243] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 57.942624][ T5242] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 57.952232][ T5242] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.714: corrupted xattr block 19: overlapping e_value [ 57.990862][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.002314][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.522193][ T5316] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 58.530511][ T5315] IPVS: stopping master sync thread 5316 ... [ 58.811595][ T5343] loop2: detected capacity change from 0 to 512 [ 58.825899][ T5343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.833276][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 58.833291][ T29] audit: type=1326 audit(1752358473.350:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 58.862977][ T29] audit: type=1326 audit(1752358473.350:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 58.887648][ T29] audit: type=1326 audit(1752358473.410:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 58.911043][ T29] audit: type=1326 audit(1752358473.410:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 58.934493][ T29] audit: type=1326 audit(1752358473.410:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 58.957955][ T29] audit: type=1326 audit(1752358473.410:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 58.981381][ T29] audit: type=1326 audit(1752358473.410:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 59.004939][ T29] audit: type=1326 audit(1752358473.410:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 59.008066][ T5343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.038571][ T29] audit: type=1326 audit(1752358473.480:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 59.062087][ T29] audit: type=1326 audit(1752358473.480:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 59.102631][ T5343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.115884][ T5343] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.134279][ T5343] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 59.147828][ T5343] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 59.209373][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.271148][ T5366] netlink: 'syz.3.768': attribute type 3 has an invalid length. [ 59.365075][ T5373] loop2: detected capacity change from 0 to 256 [ 59.377220][ T5373] FAT-fs (loop2): bogus number of FAT sectors [ 59.383359][ T5373] FAT-fs (loop2): Can't find a valid FAT filesystem [ 59.584249][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 59.590761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.648994][ T5387] loop1: detected capacity change from 0 to 2048 [ 59.676841][ T5387] loop1: p1 < > p4 [ 59.681326][ T5387] loop1: p4 size 8388608 extends beyond EOD, truncated [ 59.856118][ T5398] loop1: detected capacity change from 0 to 1024 [ 59.863332][ T5398] EXT4-fs: Ignoring removed orlov option [ 59.869155][ T5398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.878497][ T5398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.103240][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.197961][ T5424] loop0: detected capacity change from 0 to 1024 [ 60.204853][ T5424] EXT4-fs: Ignoring removed nobh option [ 60.210521][ T5424] EXT4-fs: Ignoring removed bh option [ 60.243165][ T5424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.278187][ T5424] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.791: Allocating blocks 385-513 which overlap fs metadata [ 60.309874][ T5424] EXT4-fs (loop0): pa ffff888106a49620: logic 16, phys. 129, len 24 [ 60.318128][ T5424] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 60.331647][ T5424] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 60.344076][ T5424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.344076][ T5424] [ 60.353771][ T5424] EXT4-fs (loop0): Total free blocks count 0 [ 60.359892][ T5424] EXT4-fs (loop0): Free/Dirty block details [ 60.365979][ T5424] EXT4-fs (loop0): free_blocks=128 [ 60.371170][ T5424] EXT4-fs (loop0): dirty_blocks=0 [ 60.376302][ T5424] EXT4-fs (loop0): Block reservation details [ 60.382423][ T5424] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 60.494408][ T5460] __nla_validate_parse: 8 callbacks suppressed [ 60.494422][ T5460] netlink: 7 bytes leftover after parsing attributes in process `syz.1.802'. [ 60.519277][ T5460] netlink: 7 bytes leftover after parsing attributes in process `syz.1.802'. [ 60.624468][ T5470] loop2: detected capacity change from 0 to 1024 [ 60.672890][ T5470] EXT4-fs: Ignoring removed nobh option [ 60.678596][ T5470] EXT4-fs: Ignoring removed bh option [ 60.736392][ T5470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.781690][ T5470] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.812: Allocating blocks 385-513 which overlap fs metadata [ 60.826906][ T5470] EXT4-fs (loop2): pa ffff888106992000: logic 16, phys. 129, len 24 [ 60.834992][ T5470] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 60.850243][ T5470] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 60.862723][ T5470] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.862723][ T5470] [ 60.872610][ T5470] EXT4-fs (loop2): Total free blocks count 0 [ 60.878755][ T5470] EXT4-fs (loop2): Free/Dirty block details [ 60.884674][ T5470] EXT4-fs (loop2): free_blocks=128 [ 60.889946][ T5470] EXT4-fs (loop2): dirty_blocks=0 [ 60.895204][ T5470] EXT4-fs (loop2): Block reservation details [ 60.901275][ T5470] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 60.945204][ T5488] syzkaller1: entered promiscuous mode [ 60.950909][ T5488] syzkaller1: entered allmulticast mode [ 61.108231][ T5504] loop0: detected capacity change from 0 to 512 [ 61.114970][ T5504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.126566][ T5504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.186891][ T5504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.206809][ T5504] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.227929][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 61.236887][ T5513] netlink: 'syz.2.827': attribute type 15 has an invalid length. [ 61.254529][ T5504] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 61.286272][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.328324][ T5521] SELinux: syz.3.831 (5521) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 61.402980][ T5528] loop4: detected capacity change from 0 to 1024 [ 61.419128][ T5528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.450481][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.509460][ C0] hrtimer: interrupt took 47094 ns [ 61.979950][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 61.988927][ T5580] netlink: 212 bytes leftover after parsing attributes in process `syz.0.855'. [ 62.865536][ T5609] loop3: detected capacity change from 0 to 512 [ 62.908907][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.945552][ T5609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.040791][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.156538][ T5609] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.255102][ T5609] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 63.349620][ T5633] loop2: detected capacity change from 0 to 512 [ 63.400193][ T5633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.423147][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.426977][ T5633] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.484887][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.577811][ T5646] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 63.633590][ T5646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.697574][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 63.813241][ T5660] loop2: detected capacity change from 0 to 1024 [ 63.837214][ T5660] EXT4-fs: Ignoring removed orlov option [ 63.843019][ T5660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.901523][ T5660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.048938][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.067708][ T5672] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 64.075786][ T5672] netlink: 224 bytes leftover after parsing attributes in process `syz.3.887'. [ 64.209795][ T5683] loop0: detected capacity change from 0 to 1024 [ 64.251838][ T5683] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.252245][ T5684] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 64.273204][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 64.273238][ T29] audit: type=1400 audit(1752358478.790:1124): avc: denied { append } for pid=5681 comm="syz.0.892" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.393600][ T29] audit: type=1400 audit(1752358478.890:1125): avc: denied { create } for pid=5693 comm="syz.0.895" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.414713][ T29] audit: type=1400 audit(1752358478.890:1126): avc: denied { write } for pid=5693 comm="syz.0.895" name="file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.437240][ T29] audit: type=1400 audit(1752358478.890:1127): avc: denied { open } for pid=5693 comm="syz.0.895" path="/159/file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.462989][ T29] audit: type=1400 audit(1752358478.990:1128): avc: denied { ioctl } for pid=5693 comm="syz.0.895" path="/159/file0" dev="tmpfs" ino=841 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.502128][ T29] audit: type=1400 audit(1752358479.020:1129): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.538753][ T5697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 64.554911][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 64.569938][ T29] audit: type=1400 audit(1752358479.060:1130): avc: denied { write } for pid=5696 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.590082][ T29] audit: type=1400 audit(1752358479.060:1131): avc: denied { nlmsg_write } for pid=5696 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.619152][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 64.657613][ T29] audit: type=1400 audit(1752358479.170:1132): avc: denied { create } for pid=5707 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.694214][ T29] audit: type=1400 audit(1752358479.200:1133): avc: denied { connect } for pid=5707 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.917710][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 64.925191][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.932725][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.933105][ T5748] netlink: 'syz.1.913': attribute type 15 has an invalid length. [ 64.940321][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.952379][ T5748] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.955610][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.963906][ T5748] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.971463][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.979702][ T5748] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.987079][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 64.995249][ T5748] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.002752][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.013319][ T5748] vxlan0: entered promiscuous mode [ 65.018505][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.031252][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.038958][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 65.046440][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.054018][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.061475][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 65.068901][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.076498][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.083905][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 65.091403][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.098871][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.106344][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.113843][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.121259][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.128793][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.136233][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.144243][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.152073][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.159578][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.167024][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.174515][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.182458][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.190013][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.197514][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.204990][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.212476][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.219960][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.227417][ T3386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.234898][ T3386] hid-generic 0000:0000:0000.0003: item fetching failed at offset 41/43 [ 65.243904][ T3386] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 65.278376][ T5753] loop4: detected capacity change from 0 to 512 [ 65.285680][ T5753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.296036][ T5754] loop0: detected capacity change from 0 to 512 [ 65.297122][ T5753] EXT4-fs (loop4): 1 truncate cleaned up [ 65.305917][ T5754] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.314831][ T5754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.328203][ T5754] EXT4-fs (loop0): 1 truncate cleaned up [ 65.448207][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 65.454689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.501777][ T5765] 9pnet: p9_errstr2errno: server reported unknown error pAʼn}dϲ#=M{t&ࡺ'<ףdgCQ, [ 65.638775][ T5775] random: crng reseeded on system resumption [ 65.741712][ T5789] __nla_validate_parse: 4 callbacks suppressed [ 65.741730][ T5789] netlink: 240 bytes leftover after parsing attributes in process `syz.1.933'. [ 65.757105][ T5789] netlink: 72 bytes leftover after parsing attributes in process `syz.1.933'. [ 65.804953][ T5793] loop1: detected capacity change from 0 to 1024 [ 65.813857][ T5793] EXT4-fs: Ignoring removed nobh option [ 65.819721][ T5793] EXT4-fs: Ignoring removed bh option [ 65.834804][ T5793] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.934: Allocating blocks 385-513 which overlap fs metadata [ 65.872419][ T5793] EXT4-fs (loop1): pa ffff888106a49700: logic 16, phys. 129, len 24 [ 65.880568][ T5793] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 65.898510][ T5798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.936'. [ 65.912959][ T5798] netlink: 204 bytes leftover after parsing attributes in process `syz.0.936'. [ 65.933682][ T5801] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 65.946106][ T5801] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.946106][ T5801] [ 65.955895][ T5801] EXT4-fs (loop1): Total free blocks count 0 [ 65.961989][ T5801] EXT4-fs (loop1): Free/Dirty block details [ 65.967987][ T5801] EXT4-fs (loop1): free_blocks=128 [ 65.973259][ T5801] EXT4-fs (loop1): dirty_blocks=0 [ 65.978380][ T5801] EXT4-fs (loop1): Block reservation details [ 65.984452][ T5801] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 66.060875][ T5807] loop1: detected capacity change from 0 to 512 [ 66.085874][ T5807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.097375][ T5811] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 66.131422][ T5807] EXT4-fs (loop1): 1 truncate cleaned up [ 66.157958][ T5814] loop2: detected capacity change from 0 to 256 [ 66.170747][ T5818] loop3: detected capacity change from 0 to 512 [ 66.238786][ T5825] netlink: 96 bytes leftover after parsing attributes in process `syz.2.947'. [ 66.254931][ T5826] loop1: detected capacity change from 0 to 1024 [ 66.262050][ T5826] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 66.270517][ T5818] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.352398][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 66.383476][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 66.395747][ T5842] 9p: Unknown access argument : -22 [ 66.423839][ T5844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'. [ 66.467784][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 66.476825][ T5844] netlink: 204 bytes leftover after parsing attributes in process `syz.3.955'. [ 66.510505][ T5849] loop4: detected capacity change from 0 to 512 [ 66.557564][ T5849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.590016][ T5849] EXT4-fs (loop4): 1 truncate cleaned up [ 67.780760][ T5907] Cannot find add_set index 0 as target [ 67.802013][ T5911] loop0: detected capacity change from 0 to 512 [ 67.809234][ T5911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.820761][ T5911] EXT4-fs (loop0): 1 truncate cleaned up [ 67.823590][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.836177][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.846332][ T5914] random: crng reseeded on system resumption [ 67.872045][ T5917] geneve2: entered promiscuous mode [ 67.890369][ T5917] syz.0.985 (5917) used greatest stack depth: 8904 bytes left [ 67.908530][ T5921] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.918808][ T5922] loop0: detected capacity change from 0 to 512 [ 67.932089][ T5921] wireguard0: entered promiscuous mode [ 67.937954][ T5921] wireguard0: entered allmulticast mode [ 67.950426][ T5922] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.074528][ T5943] bridge0: port 4(batadv1) entered blocking state [ 68.081153][ T5943] bridge0: port 4(batadv1) entered disabled state [ 68.087902][ T5943] batadv1: entered allmulticast mode [ 68.093754][ T5943] batadv1: entered promiscuous mode [ 68.109333][ T5945] vhci_hcd: invalid port number 96 [ 68.114601][ T5945] vhci_hcd: default hub control req: 2000 vfffc i0060 l0 [ 68.169480][ T5955] loop1: detected capacity change from 0 to 512 [ 68.188905][ T5955] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.398662][ T5981] loop3: detected capacity change from 0 to 4096 [ 68.441209][ T5981] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.657650][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 68.664264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 68.672162][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 68.680081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 68.689677][ T4649] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 68.698966][ T4649] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 68.893016][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.901637][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.911465][ T6012] random: crng reseeded on system resumption [ 69.061998][ T6034] loop2: detected capacity change from 0 to 512 [ 69.082034][ T6034] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.093634][ T6034] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 69.104012][ T6034] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1033: Corrupt directory, running e2fsck is recommended [ 69.118652][ T6034] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 69.127153][ T6034] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1033: corrupted in-inode xattr: bad e_name length [ 69.142895][ T6034] EXT4-fs (loop2): Remounting filesystem read-only [ 69.150314][ T6032] loop1: detected capacity change from 0 to 2048 [ 69.161523][ T6034] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.328598][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 69.328635][ T29] audit: type=1400 audit(1752358483.850:1220): avc: denied { read } for pid=6039 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.519362][ T3305] EXT4-fs unmount: 25 callbacks suppressed [ 69.519381][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.690336][ T6065] 9pnet: p9_errstr2errno: server reported unknown error [ 69.812198][ T6074] loop1: detected capacity change from 0 to 2048 [ 69.823903][ T29] audit: type=1400 audit(1752358484.340:1221): avc: denied { listen } for pid=6075 comm="syz.2.1046" path=2F3230312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 69.873374][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.891475][ T6081] bridge0: entered promiscuous mode [ 69.899554][ T6081] bridge0: port 3(macvlan2) entered blocking state [ 69.906178][ T6081] bridge0: port 3(macvlan2) entered disabled state [ 69.932686][ T6081] macvlan2: entered allmulticast mode [ 69.938292][ T6081] bridge0: entered allmulticast mode [ 69.944564][ T6081] macvlan2: left allmulticast mode [ 69.949831][ T6081] bridge0: left allmulticast mode [ 69.959437][ T6085] loop0: detected capacity change from 0 to 512 [ 69.966319][ T6081] bridge0: left promiscuous mode [ 69.974445][ T6085] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 69.993908][ T6085] EXT4-fs: error: could not find journal device path [ 70.038869][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.100393][ T6089] loop4: detected capacity change from 0 to 512 [ 70.128817][ T6089] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1054: casefold flag without casefold feature [ 70.151941][ T6089] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1054: couldn't read orphan inode 15 (err -117) [ 70.164596][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.234178][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.282039][ T6108] unsupported nla_type 65024 [ 70.293841][ T6110] hub 9-0:1.0: USB hub found [ 70.299101][ T6110] hub 9-0:1.0: 8 ports detected [ 70.401503][ T29] audit: type=1400 audit(1752358484.920:1222): avc: denied { write } for pid=6125 comm="syz.3.1069" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.599991][ T6141] hub 6-0:1.0: USB hub found [ 70.604734][ T6141] hub 6-0:1.0: 8 ports detected [ 70.649095][ T29] audit: type=1400 audit(1752358485.170:1223): avc: denied { read } for pid=6146 comm="syz.1.1078" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.672368][ T29] audit: type=1400 audit(1752358485.170:1224): avc: denied { open } for pid=6146 comm="syz.1.1078" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.998104][ T6153] __nla_validate_parse: 18 callbacks suppressed [ 70.998122][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 71.214536][ T6162] pimreg: entered allmulticast mode [ 71.328044][ T4600] pimreg (unregistering): left allmulticast mode [ 71.353766][ T29] audit: type=1400 audit(1752358485.870:1225): avc: denied { write } for pid=6182 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.453766][ T6192] only policy match revision 0 supported [ 71.453783][ T6192] unable to load match [ 71.466332][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.474040][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.488369][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.496014][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.503580][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.511371][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.518941][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.526378][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.533856][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.541423][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.548928][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.556388][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.565596][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.573144][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.580746][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.588219][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.595776][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.603369][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.611027][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.618517][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.626100][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.633552][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.641015][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.648423][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.655879][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.663291][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.670780][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.678719][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 71.944583][ T6234] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 71.973934][ T6234] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 72.044293][ T6245] loop2: detected capacity change from 0 to 1024 [ 72.052822][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'. [ 72.078647][ T6248] loop4: detected capacity change from 0 to 1024 [ 72.085167][ T29] audit: type=1400 audit(1752358486.590:1226): avc: denied { bind } for pid=6246 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.105680][ T29] audit: type=1400 audit(1752358486.590:1227): avc: denied { setopt } for pid=6246 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.127012][ T6251] netlink: 376 bytes leftover after parsing attributes in process `syz.0.1122'. [ 72.148941][ T6245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.162127][ T6248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.183966][ T29] audit: type=1326 audit(1752358486.700:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9abe929 code=0x7ffc0000 [ 72.212166][ T6260] loop0: detected capacity change from 0 to 512 [ 72.219742][ T6260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.243589][ T6245] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1120: Allocating blocks 449-513 which overlap fs metadata [ 72.259906][ T29] audit: type=1326 audit(1752358486.730:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd8e9abe929 code=0x7ffc0000 [ 72.296841][ T6260] EXT4-fs (loop0): 1 truncate cleaned up [ 72.305290][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.323809][ T6244] EXT4-fs (loop2): pa ffff888106a497e0: logic 48, phys. 177, len 21 [ 72.332068][ T6244] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 72.343115][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.399136][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.417922][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.434098][ T6265] loop0: detected capacity change from 0 to 128 [ 72.445958][ T6267] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.611696][ T6289] ALSA: seq fatal error: cannot create timer (-22) [ 72.750284][ T6300] loop4: detected capacity change from 0 to 512 [ 72.793158][ T6300] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.809048][ T6307] loop2: detected capacity change from 0 to 256 [ 72.845191][ T6307] FAT-fs (loop2): Directory bread(block 64) failed [ 72.859548][ T6307] FAT-fs (loop2): Directory bread(block 65) failed [ 72.870021][ T6307] FAT-fs (loop2): Directory bread(block 66) failed [ 72.872173][ T6300] EXT4-fs (loop4): 1 truncate cleaned up [ 72.876723][ T6307] FAT-fs (loop2): Directory bread(block 67) failed [ 72.889325][ T6307] FAT-fs (loop2): Directory bread(block 68) failed [ 72.895950][ T6307] FAT-fs (loop2): Directory bread(block 69) failed [ 72.902688][ T6307] FAT-fs (loop2): Directory bread(block 70) failed [ 72.909516][ T6307] FAT-fs (loop2): Directory bread(block 71) failed [ 72.917216][ T6307] FAT-fs (loop2): Directory bread(block 72) failed [ 72.923880][ T6307] FAT-fs (loop2): Directory bread(block 73) failed [ 72.927103][ T6300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.954977][ T6307] syz.2.1147: attempt to access beyond end of device [ 72.954977][ T6307] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 72.998863][ T6300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.016607][ T6307] syz.2.1147: attempt to access beyond end of device [ 73.016607][ T6307] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 73.160423][ T6330] batadv_slave_1: entered promiscuous mode [ 73.178026][ T6330] batadv_slave_1: left promiscuous mode [ 73.267092][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 73.276168][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 73.285335][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 73.285746][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 73.303608][ T6349] netlink: 'syz.3.1165': attribute type 6 has an invalid length. [ 73.402508][ T6365] loop3: detected capacity change from 0 to 512 [ 73.409932][ T6365] EXT4-fs: Ignoring removed nobh option [ 73.419426][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 73.429339][ T6365] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1171: bg 0: block 393: padding at end of block bitmap is not set [ 73.444333][ T6365] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 73.453510][ T6365] EXT4-fs (loop3): 2 truncates cleaned up [ 73.462845][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.493957][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.540576][ T6372] loop2: detected capacity change from 0 to 8192 [ 73.549938][ T6372] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.593910][ T6378] loop2: detected capacity change from 0 to 512 [ 73.608777][ T6378] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 73.624459][ T6378] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 73.636742][ T6378] EXT4-fs (loop2): 1 truncate cleaned up [ 73.643147][ T6378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.657477][ T6378] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.682625][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.787953][ T6399] SELinux: ebitmap: truncated map [ 73.794190][ T6399] SELinux: failed to load policy [ 73.834329][ T6406] loop2: detected capacity change from 0 to 512 [ 73.845583][ T6406] EXT4-fs: Ignoring removed i_version option [ 73.851876][ T6406] EXT4-fs: Ignoring removed nobh option [ 73.870248][ T6406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.884329][ T6406] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.903455][ T6408] loop4: detected capacity change from 0 to 8192 [ 73.917522][ T6408] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.970068][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.030599][ T6429] serio: Serial port ptm0 [ 74.181163][ T6445] smc: net device bond0 applied user defined pnetid SYZ0 [ 74.188642][ T6445] smc: net device bond0 erased user defined pnetid SYZ0 [ 74.275197][ T6457] pimreg: entered allmulticast mode [ 74.437944][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 74.437959][ T29] audit: type=1326 audit(1752358488.960:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7ffc0000 [ 74.468999][ T6485] wireguard0: entered promiscuous mode [ 74.492958][ T29] audit: type=1326 audit(1752358488.970:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f254ffee929 code=0x7ffc0000 [ 74.516490][ T29] audit: type=1326 audit(1752358488.970:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7ffc0000 [ 74.540022][ T29] audit: type=1326 audit(1752358488.970:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254ffee929 code=0x7ffc0000 [ 74.820713][ T6505] loop4: detected capacity change from 0 to 1024 [ 74.838202][ T6505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.969182][ T6505] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 75.014171][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.129801][ T29] audit: type=1326 audit(1752358489.650:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 75.165841][ T29] audit: type=1326 audit(1752358489.650:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 75.189398][ T29] audit: type=1326 audit(1752358489.650:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 75.213386][ T29] audit: type=1326 audit(1752358489.650:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 75.237162][ T29] audit: type=1326 audit(1752358489.650:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 75.260854][ T29] audit: type=1326 audit(1752358489.650:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4547ae929 code=0x7ffc0000 [ 75.268782][ T6524] usb usb8: usbfs: process 6524 (syz.2.1235) did not claim interface 0 before use [ 75.334310][ T6538] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 75.343813][ T6538] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 75.557038][ T6564] pim6reg1: entered promiscuous mode [ 75.562421][ T6564] pim6reg1: entered allmulticast mode [ 75.581483][ T6570] loop2: detected capacity change from 0 to 128 [ 75.620737][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.620737][ T6570] loop2: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 75.634277][ T6570] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 75.648990][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.648990][ T6570] loop2: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 75.662542][ T6570] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 75.715869][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.715869][ T6570] loop2: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 75.729980][ T6570] Buffer I/O error on dev loop2, logical block 139, lost async page write [ 75.758747][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.758747][ T6570] loop2: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 75.772384][ T6570] Buffer I/O error on dev loop2, logical block 140, lost async page write [ 75.796596][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.796596][ T6570] loop2: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 75.810125][ T6570] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 75.823762][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.823762][ T6570] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 75.837269][ T6570] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 75.884465][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.884465][ T6570] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 75.898114][ T6570] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 75.916804][ T6570] syz.2.1252: attempt to access beyond end of device [ 75.916804][ T6570] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 75.930391][ T6570] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 75.970221][ T6594] loop1: detected capacity change from 0 to 512 [ 75.997093][ T6594] ext4: Unknown parameter 'measure' [ 76.005760][ T6570] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 76.034830][ T6570] Buffer I/O error on dev loop2, logical block 148, lost async page write [ 76.163378][ T6544] ================================================================== [ 76.171517][ T6544] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 76.180135][ T6544] [ 76.182472][ T6544] write to 0xffff8881161f0768 of 8 bytes by task 6536 on cpu 1: [ 76.190118][ T6544] shmem_file_splice_read+0x470/0x600 [ 76.195543][ T6544] splice_direct_to_actor+0x26c/0x680 [ 76.201037][ T6544] do_splice_direct+0xda/0x150 [ 76.205920][ T6544] do_sendfile+0x380/0x650 [ 76.210384][ T6544] __x64_sys_sendfile64+0x105/0x150 [ 76.215662][ T6544] x64_sys_call+0xb39/0x2fb0 [ 76.220391][ T6544] do_syscall_64+0xd2/0x200 [ 76.224926][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.230857][ T6544] [ 76.233194][ T6544] write to 0xffff8881161f0768 of 8 bytes by task 6544 on cpu 0: [ 76.240929][ T6544] shmem_file_splice_read+0x470/0x600 [ 76.246328][ T6544] splice_direct_to_actor+0x26c/0x680 [ 76.251739][ T6544] do_splice_direct+0xda/0x150 [ 76.256532][ T6544] do_sendfile+0x380/0x650 [ 76.260975][ T6544] __x64_sys_sendfile64+0x105/0x150 [ 76.266188][ T6544] x64_sys_call+0xb39/0x2fb0 [ 76.270801][ T6544] do_syscall_64+0xd2/0x200 [ 76.275322][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.281232][ T6544] [ 76.283576][ T6544] value changed: 0x000000000000778a -> 0x000000000000778b [ 76.290698][ T6544] [ 76.293082][ T6544] Reported by Kernel Concurrency Sanitizer on: [ 76.299273][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.0.1237 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 76.311720][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.321901][ T6544] ==================================================================