last executing test programs: 1.34611009s ago: executing program 3 (id=998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x20, r2, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @val={0x1d, 0x99, {0x8, 0x3a}}}}}, 0x20}}, 0x0) 1.32032695s ago: executing program 3 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 1.288357971s ago: executing program 3 (id=1003): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.271707431s ago: executing program 0 (id=1005): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.249947211s ago: executing program 2 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.232712662s ago: executing program 0 (id=1009): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) close(r0) 1.211238062s ago: executing program 2 (id=1010): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.174500282s ago: executing program 0 (id=1011): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 1.018497625s ago: executing program 2 (id=1022): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 953.509436ms ago: executing program 2 (id=1015): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 849.894018ms ago: executing program 2 (id=1019): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0x8}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 848.409488ms ago: executing program 0 (id=1029): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 825.460748ms ago: executing program 3 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 810.882708ms ago: executing program 1 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x48}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@random="48edbdecc59b", @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x3}}, {@can={0xc, {{0x1, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "f4c56a518e8196f8"}}}}, 0x0) 810.412438ms ago: executing program 0 (id=1033): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 715.297509ms ago: executing program 1 (id=1023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 702.435179ms ago: executing program 1 (id=1024): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 647.9475ms ago: executing program 3 (id=1026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) flock(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 647.83647ms ago: executing program 4 (id=1027): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 627.961351ms ago: executing program 1 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 608.055241ms ago: executing program 4 (id=1030): unshare(0x2c020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) flistxattr(r1, 0x0, 0x0) 578.114472ms ago: executing program 4 (id=1031): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r1, 0x0, 0x80001}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 577.491692ms ago: executing program 3 (id=1032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71", 0xc5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e4617", 0x6d}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 504.722842ms ago: executing program 1 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 482.122523ms ago: executing program 1 (id=1036): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x2a020400) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000083, &(0x7f00000000c0), 0x3, 0x4f0, &(0x7f0000000940)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 481.944743ms ago: executing program 4 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', 0x0) 449.436923ms ago: executing program 4 (id=1038): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x21cb, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r1, 0x1c, {0x9, 0x1}, 0x6}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.89003ms ago: executing program 2 (id=1039): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1.76722ms ago: executing program 4 (id=1040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 0s ago: executing program 0 (id=1049): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 21.642941][ T29] audit: type=1400 audit(1750674806.288:62): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.643788][ T3281] cgroup: Unknown subsys name 'net' [ 21.665665][ T29] audit: type=1400 audit(1750674806.288:63): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.692982][ T29] audit: type=1400 audit(1750674806.318:64): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.808761][ T3281] cgroup: Unknown subsys name 'cpuset' [ 21.814766][ T3281] cgroup: Unknown subsys name 'rlimit' [ 21.903883][ T29] audit: type=1400 audit(1750674806.548:65): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.928293][ T29] audit: type=1400 audit(1750674806.548:66): avc: denied { create } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.948815][ T29] audit: type=1400 audit(1750674806.548:67): avc: denied { write } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.969245][ T29] audit: type=1400 audit(1750674806.548:68): avc: denied { read } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.975790][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.989597][ T29] audit: type=1400 audit(1750674806.558:69): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.022880][ T29] audit: type=1400 audit(1750674806.558:70): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.046261][ T29] audit: type=1400 audit(1750674806.648:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.073840][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.129529][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 23.150205][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 23.169759][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 23.235431][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.242524][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.249839][ T3308] bridge_slave_0: entered allmulticast mode [ 23.256278][ T3308] bridge_slave_0: entered promiscuous mode [ 23.275754][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.283981][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.291153][ T3308] bridge_slave_1: entered allmulticast mode [ 23.297493][ T3308] bridge_slave_1: entered promiscuous mode [ 23.320935][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.328014][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.335235][ T3303] bridge_slave_0: entered allmulticast mode [ 23.341562][ T3303] bridge_slave_0: entered promiscuous mode [ 23.356209][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.367302][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.374374][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.381567][ T3303] bridge_slave_1: entered allmulticast mode [ 23.387812][ T3303] bridge_slave_1: entered promiscuous mode [ 23.402571][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.409721][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.416903][ T3302] bridge_slave_0: entered allmulticast mode [ 23.423368][ T3302] bridge_slave_0: entered promiscuous mode [ 23.443143][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.453271][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.462552][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.469616][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.476683][ T3302] bridge_slave_1: entered allmulticast mode [ 23.483119][ T3302] bridge_slave_1: entered promiscuous mode [ 23.490868][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 23.500287][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.510336][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.560406][ T3303] team0: Port device team_slave_0 added [ 23.566571][ T3303] team0: Port device team_slave_1 added [ 23.573000][ T3308] team0: Port device team_slave_0 added [ 23.579722][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.602883][ T3308] team0: Port device team_slave_1 added [ 23.609607][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.629405][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.636460][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.643629][ T3305] bridge_slave_0: entered allmulticast mode [ 23.649911][ T3305] bridge_slave_0: entered promiscuous mode [ 23.656320][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.663542][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.671376][ T3305] bridge_slave_1: entered allmulticast mode [ 23.677842][ T3305] bridge_slave_1: entered promiscuous mode [ 23.697578][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.704539][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.730468][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.741352][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.748337][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.774249][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.785652][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.792694][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.818713][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.840502][ T3302] team0: Port device team_slave_0 added [ 23.846329][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.853285][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.879209][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.906032][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.915654][ T3302] team0: Port device team_slave_1 added [ 23.932580][ T3308] hsr_slave_0: entered promiscuous mode [ 23.938550][ T3308] hsr_slave_1: entered promiscuous mode [ 23.953373][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.962508][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.969596][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.976745][ T3311] bridge_slave_0: entered allmulticast mode [ 23.983828][ T3311] bridge_slave_0: entered promiscuous mode [ 23.994587][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.001553][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.027473][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.045207][ T3303] hsr_slave_0: entered promiscuous mode [ 24.051384][ T3303] hsr_slave_1: entered promiscuous mode [ 24.057239][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.064883][ T3303] Cannot create hsr debugfs directory [ 24.078602][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.085727][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.092880][ T3311] bridge_slave_1: entered allmulticast mode [ 24.099278][ T3311] bridge_slave_1: entered promiscuous mode [ 24.105645][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.112627][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.138602][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.159741][ T3305] team0: Port device team_slave_0 added [ 24.184801][ T3305] team0: Port device team_slave_1 added [ 24.195917][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.221843][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.240511][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.247446][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.273436][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.286553][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.293535][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.319451][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.345656][ T3302] hsr_slave_0: entered promiscuous mode [ 24.351632][ T3302] hsr_slave_1: entered promiscuous mode [ 24.357485][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.365079][ T3302] Cannot create hsr debugfs directory [ 24.382573][ T3311] team0: Port device team_slave_0 added [ 24.389166][ T3311] team0: Port device team_slave_1 added [ 24.436560][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.443542][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.469546][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.482203][ T3305] hsr_slave_0: entered promiscuous mode [ 24.488382][ T3305] hsr_slave_1: entered promiscuous mode [ 24.494208][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.501773][ T3305] Cannot create hsr debugfs directory [ 24.516566][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.523530][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.549469][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.621229][ T3311] hsr_slave_0: entered promiscuous mode [ 24.627185][ T3311] hsr_slave_1: entered promiscuous mode [ 24.633053][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.640686][ T3311] Cannot create hsr debugfs directory [ 24.695918][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.704410][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.715000][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.727976][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.763351][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.784628][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.799122][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.807453][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.821190][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.830974][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.842994][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.851498][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.885661][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.894377][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.912545][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.923065][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.954965][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.967383][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.976406][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.989795][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.996903][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.007694][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.029255][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.047058][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.057472][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.072818][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.079871][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.089470][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.096504][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.121100][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.150730][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.163773][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.170842][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.189125][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.197564][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.204722][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.220019][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.233676][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.257839][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.268226][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.285173][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.292229][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.300925][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.307987][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.324655][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.333819][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.345368][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.365070][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.375494][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.392268][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.399380][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.407876][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.414999][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.433571][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.440704][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.457442][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.478838][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.485927][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.530650][ T3308] veth0_vlan: entered promiscuous mode [ 25.556879][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.567516][ T3308] veth1_vlan: entered promiscuous mode [ 25.586103][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.608594][ T3308] veth0_macvtap: entered promiscuous mode [ 25.627897][ T3308] veth1_macvtap: entered promiscuous mode [ 25.660178][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.677621][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.692211][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.715680][ T3305] veth0_vlan: entered promiscuous mode [ 25.730518][ T3305] veth1_vlan: entered promiscuous mode [ 25.738252][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.746962][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.755786][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.764542][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.784415][ T3305] veth0_macvtap: entered promiscuous mode [ 25.802832][ T3311] veth0_vlan: entered promiscuous mode [ 25.809583][ T3305] veth1_macvtap: entered promiscuous mode [ 25.829942][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.839098][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.847105][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.855857][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.864587][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.873279][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.888981][ T3311] veth1_vlan: entered promiscuous mode [ 25.914022][ T3302] veth0_vlan: entered promiscuous mode [ 25.931874][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.937448][ T3302] veth1_vlan: entered promiscuous mode [ 25.967051][ T3311] veth0_macvtap: entered promiscuous mode [ 25.986271][ T3302] veth0_macvtap: entered promiscuous mode [ 25.997789][ T3311] veth1_macvtap: entered promiscuous mode [ 26.007045][ T3302] veth1_macvtap: entered promiscuous mode [ 26.026657][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.041641][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.056998][ T3303] veth0_vlan: entered promiscuous mode [ 26.071103][ T3303] veth1_vlan: entered promiscuous mode [ 26.081102][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.090789][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.109617][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.118552][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.127245][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.136028][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.159604][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.168347][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.177058][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.185802][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.197862][ T3303] veth0_macvtap: entered promiscuous mode [ 26.213917][ T3303] veth1_macvtap: entered promiscuous mode [ 26.257471][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.265676][ T3486] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10'. [ 26.285427][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.295474][ T3490] ======================================================= [ 26.295474][ T3490] WARNING: The mand mount option has been deprecated and [ 26.295474][ T3490] and is ignored by this kernel. Remove the mand [ 26.295474][ T3490] option from the mount to silence this warning. [ 26.295474][ T3490] ======================================================= [ 26.334614][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.343423][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.352181][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.360966][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.388771][ T3494] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 26.497169][ T3506] xt_hashlimit: max too large, truncated to 1048576 [ 26.507823][ T3510] loop2: detected capacity change from 0 to 1024 [ 26.573075][ T3510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 26.589204][ T3516] vhci_hcd: invalid port number 96 [ 26.594365][ T3516] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 26.611864][ T3510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.633245][ T3526] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 26.661795][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 26.661809][ T29] audit: type=1400 audit(1750674811.308:141): avc: denied { mount } for pid=3509 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.662307][ T3526] syz.3.23 (3526) used greatest stack depth: 10960 bytes left [ 26.694971][ T29] audit: type=1400 audit(1750674811.338:142): avc: denied { create } for pid=3529 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 26.729252][ T29] audit: type=1400 audit(1750674811.368:143): avc: denied { write } for pid=3529 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 26.748427][ T29] audit: type=1400 audit(1750674811.368:144): avc: denied { ioctl } for pid=3529 comm="syz.1.25" path="socket:[4378]" dev="sockfs" ino=4378 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 26.772940][ T29] audit: type=1400 audit(1750674811.368:145): avc: denied { add_name } for pid=3509 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.793536][ T29] audit: type=1400 audit(1750674811.368:146): avc: denied { create } for pid=3509 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.813602][ T29] audit: type=1400 audit(1750674811.368:147): avc: denied { read write } for pid=3509 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.835989][ T29] audit: type=1400 audit(1750674811.368:148): avc: denied { open } for pid=3509 comm="syz.2.17" path="/2/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.866969][ T29] audit: type=1400 audit(1750674811.428:149): avc: denied { create } for pid=3531 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.886408][ T29] audit: type=1400 audit(1750674811.428:150): avc: denied { connect } for pid=3531 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.937593][ T3510] syz.2.17 (3510) used greatest stack depth: 10904 bytes left [ 26.976047][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.087781][ T3557] xt_hashlimit: max too large, truncated to 1048576 [ 27.155093][ T3566] netlink: 'syz.1.41': attribute type 3 has an invalid length. [ 27.217294][ T3574] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 27.244724][ T3576] unsupported nla_type 52263 [ 27.585496][ T3612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.60'. [ 27.664454][ C0] hrtimer: interrupt took 47389 ns [ 27.809681][ T3633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.70'. [ 27.855184][ T3637] Zero length message leads to an empty skb [ 28.019887][ T3653] loop0: detected capacity change from 0 to 512 [ 28.037333][ T3656] vlan2: entered allmulticast mode [ 28.048751][ T3653] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.061826][ T3653] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.090710][ T3653] EXT4-fs (loop0): 1 truncate cleaned up [ 28.097186][ T3653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.201151][ T3673] loop3: detected capacity change from 0 to 512 [ 28.233614][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.234036][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 28.270187][ T3673] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 28.303156][ T3684] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 28.313549][ T3684] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 28.366836][ T3689] hsr0: entered promiscuous mode [ 28.396998][ T3692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 28.444710][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 28.466254][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 28.477077][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 28.487177][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 28.554565][ T3713] loop2: detected capacity change from 0 to 1024 [ 28.563460][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 28.597489][ T3713] EXT4-fs: Ignoring removed nobh option [ 28.603145][ T3713] EXT4-fs: Ignoring removed bh option [ 28.641307][ T3718] loop0: detected capacity change from 0 to 2048 [ 28.650668][ T3713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.676410][ T3718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.698501][ T3725] netem: unknown loss type 0 [ 28.700252][ T3718] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 28.703109][ T3725] netem: change failed [ 28.715685][ T3718] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.724622][ T3718] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 28.737039][ T3718] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.737039][ T3718] [ 28.746711][ T3718] EXT4-fs (loop0): Total free blocks count 0 [ 28.752739][ T3718] EXT4-fs (loop0): Free/Dirty block details [ 28.758662][ T3718] EXT4-fs (loop0): free_blocks=2415919504 [ 28.764439][ T3718] EXT4-fs (loop0): dirty_blocks=64 [ 28.769585][ T3718] EXT4-fs (loop0): Block reservation details [ 28.775559][ T3718] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 28.803020][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.812733][ T3718] syz.0.108 (3718) used greatest stack depth: 10120 bytes left [ 28.839098][ T3452] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 29.064136][ T3760] loop4: detected capacity change from 0 to 1024 [ 29.088583][ T3760] EXT4-fs: Ignoring removed oldalloc option [ 29.094607][ T3760] EXT4-fs: Ignoring removed bh option [ 29.181515][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.272816][ T3794] Illegal XDP return value 4294967274 on prog (id 96) dev N/A, expect packet loss! [ 29.275711][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.295282][ T3792] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 29.310340][ T3796] atomic_op ffff88811aa1b128 conn xmit_atomic 0000000000000000 [ 29.353660][ T3798] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 29.383336][ T3802] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 29.434142][ T3806] loop4: detected capacity change from 0 to 1024 [ 29.446892][ T3811] 9pnet_fd: Insufficient options for proto=fd [ 29.484177][ T3806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.508300][ T3818] loop0: detected capacity change from 0 to 164 [ 29.543898][ T3818] syz.0.153: attempt to access beyond end of device [ 29.543898][ T3818] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 29.557778][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.562195][ T3824] loop1: detected capacity change from 0 to 1024 [ 29.570455][ T3818] syz.0.153: attempt to access beyond end of device [ 29.570455][ T3818] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 29.573627][ T3824] EXT4-fs: Ignoring removed nobh option [ 29.592303][ T3824] EXT4-fs: Ignoring removed bh option [ 29.615732][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.676209][ T3834] loop0: detected capacity change from 0 to 512 [ 29.687379][ T3824] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.156: Allocating blocks 497-513 which overlap fs metadata [ 29.728662][ T3839] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 29.750540][ T3834] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.787179][ T3823] EXT4-fs (loop1): pa ffff888106a6b0e0: logic 16, phys. 321, len 12 [ 29.795240][ T3823] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 29.842054][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.875931][ T3834] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 29.912265][ T3305] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 29.947351][ T3861] loop3: detected capacity change from 0 to 164 [ 29.959524][ T3861] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.972346][ T3861] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.995631][ T3867] geneve0: entered allmulticast mode [ 30.003351][ T3861] Symlink component flag not implemented [ 30.009087][ T3861] Symlink component flag not implemented [ 30.045649][ T3861] Symlink component flag not implemented (7) [ 30.051778][ T3861] Symlink component flag not implemented (116) [ 30.210299][ T3895] loop4: detected capacity change from 0 to 512 [ 30.220865][ T3897] loop3: detected capacity change from 0 to 512 [ 30.241546][ T3895] EXT4-fs (loop4): 1 orphan inode deleted [ 30.247873][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.271662][ T1805] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 30.291370][ T3896] infiniband syz!: set active [ 30.296089][ T3896] infiniband syz!: added team_slave_0 [ 30.310298][ T3895] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.311870][ T3897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.351004][ T3897] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.364976][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.388158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 30.401725][ T3896] RDS/IB: syz!: added [ 30.405742][ T3896] smc: adding ib device syz! with port count 1 [ 30.430867][ T3896] smc: ib device syz! port 1 has pnetid [ 30.440338][ T3914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3914 comm=syz.2.196 [ 30.459661][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.587652][ T3935] syz_tun: entered promiscuous mode [ 30.604313][ T3935] batadv_slave_0: entered promiscuous mode [ 30.611150][ T3939] hub 9-0:1.0: USB hub found [ 30.616303][ T3937] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET) [ 30.618041][ T3939] hub 9-0:1.0: 8 ports detected [ 30.670879][ T3943] loop3: detected capacity change from 0 to 128 [ 30.692972][ T3943] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 30.700973][ T3943] FAT-fs (loop3): Filesystem has been set read-only [ 30.715162][ T3943] gtp: attempt to access beyond end of device [ 30.715162][ T3943] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 30.729505][ T3943] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 30.737360][ T3943] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 30.745824][ T3943] gtp: attempt to access beyond end of device [ 30.745824][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.769660][ T3943] gtp: attempt to access beyond end of device [ 30.769660][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.783912][ T3943] gtp: attempt to access beyond end of device [ 30.783912][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.797576][ T3943] gtp: attempt to access beyond end of device [ 30.797576][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.810917][ T3947] netdevsim netdevsim2: Direct firmware load for ngkNq>*x(O@ failed with error -2 [ 30.811614][ T3943] gtp: attempt to access beyond end of device [ 30.811614][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.835331][ T3943] gtp: attempt to access beyond end of device [ 30.835331][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.858936][ T3943] gtp: attempt to access beyond end of device [ 30.858936][ T3943] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.884842][ T3953] loop2: detected capacity change from 0 to 164 [ 30.887318][ T3954] loop1: detected capacity change from 0 to 512 [ 30.914288][ T3954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.950042][ T3954] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.002101][ T3954] EXT4-fs (loop1): 1 truncate cleaned up [ 31.035198][ T3954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.058005][ T3958] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 31.121249][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.292797][ T3965] netlink: 'syz.2.214': attribute type 3 has an invalid length. [ 31.300595][ T3972] loop0: detected capacity change from 0 to 2048 [ 31.374355][ T3977] syz.2.219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.401626][ T3976] SELinux: failed to load policy [ 31.659480][ T4005] loop3: detected capacity change from 0 to 512 [ 31.681308][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 31.681321][ T29] audit: type=1400 audit(1750674816.328:432): avc: denied { write } for pid=4006 comm="syz.2.236" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.712932][ T4005] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.726700][ T3999] loop1: detected capacity change from 0 to 8192 [ 31.740768][ T4005] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 31.754302][ T29] audit: type=1326 audit(1750674816.388:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.760085][ T4005] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.234: attempt to clear invalid blocks 2 len 1 [ 31.777562][ T29] audit: type=1326 audit(1750674816.388:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.813520][ T29] audit: type=1326 audit(1750674816.388:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.836845][ T29] audit: type=1326 audit(1750674816.388:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.860153][ T29] audit: type=1326 audit(1750674816.388:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.879549][ T4005] EXT4-fs (loop3): Remounting filesystem read-only [ 31.883557][ T29] audit: type=1326 audit(1750674816.388:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.907080][ T4005] EXT4-fs (loop3): 1 truncate cleaned up [ 31.913119][ T29] audit: type=1326 audit(1750674816.388:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.913145][ T29] audit: type=1326 audit(1750674816.388:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 31.919767][ T4005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.942056][ T29] audit: type=1326 audit(1750674816.388:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0edee0e929 code=0x7ffc0000 [ 32.055180][ T4005] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 32.070520][ T4023] loop0: detected capacity change from 0 to 128 [ 32.090328][ T4026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 32.101910][ T4018] IPVS: stopping master sync thread 4026 ... [ 32.137290][ T4023] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 32.168791][ T4023] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.180490][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.211024][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.225379][ T4036] __nla_validate_parse: 4 callbacks suppressed [ 32.225394][ T4036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.247'. [ 32.318712][ T4047] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 32.372432][ T4054] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 32.380249][ T4054] netlink: 'syz.3.254': attribute type 3 has an invalid length. [ 32.387985][ T4054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 32.458158][ T4067] netlink: 'syz.2.261': attribute type 13 has an invalid length. [ 32.507840][ T4067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.698195][ T4091] vlan2: entered allmulticast mode [ 32.710123][ T4093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4093 comm=syz.2.273 [ 32.736025][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 32.738814][ T4099] loop0: detected capacity change from 0 to 256 [ 32.760404][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 32.840651][ T4110] loop3: detected capacity change from 0 to 128 [ 32.848173][ T4111] tipc: Started in network mode [ 32.853064][ T4111] tipc: Node identity 2000007, cluster identity 4711 [ 32.859864][ T4111] tipc: Node number set to 33554439 [ 32.883091][ T4110] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.912674][ T4110] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.940707][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.963840][ T4123] tipc: Started in network mode [ 32.968913][ T4123] tipc: Node identity 4, cluster identity 4711 [ 32.975088][ T4123] tipc: Node number set to 4 [ 33.099031][ T4140] syz.3.295 (4140) used greatest stack depth: 9720 bytes left [ 33.158910][ T4150] 9pnet_fd: Insufficient options for proto=fd [ 33.412979][ T4176] loop0: detected capacity change from 0 to 1024 [ 33.432088][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 33.501311][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.548862][ T4176] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.306: Allocating blocks 385-513 which overlap fs metadata [ 33.610166][ T4175] EXT4-fs (loop0): pa ffff888106aa0000: logic 16, phys. 129, len 24 [ 33.618313][ T4175] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 33.739427][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.765925][ T4210] netlink: 596 bytes leftover after parsing attributes in process `syz.2.318'. [ 33.863249][ T4223] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 34.071523][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88810496fa00: rx timeout, send abort [ 34.079888][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810496fa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.167001][ T4269] SELinux: security policydb version 18 (MLS) not backwards compatible [ 34.207804][ T4269] SELinux: failed to load policy [ 34.382495][ T4290] SELinux: syz.0.351 (4290) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 34.598387][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 34.607329][ T4309] netlink: 'syz.4.357': attribute type 5 has an invalid length. [ 34.620820][ T4309] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.629586][ T4309] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.638407][ T4309] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.647145][ T4309] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.666231][ T4309] vxlan0: entered promiscuous mode [ 35.343976][ T4356] loop0: detected capacity change from 0 to 2048 [ 35.358368][ T4356] EXT4-fs: Ignoring removed bh option [ 35.390184][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.439180][ T4369] netlink: 108 bytes leftover after parsing attributes in process `syz.1.383'. [ 35.448217][ T4369] netlink: 108 bytes leftover after parsing attributes in process `syz.1.383'. [ 35.457206][ T4369] netlink: 108 bytes leftover after parsing attributes in process `syz.1.383'. [ 35.535081][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.601692][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.609070][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.710099][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.729673][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.773431][ T4379] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.782644][ T4379] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.791818][ T4379] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.800988][ T4379] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.837194][ T4406] syzkaller1: entered promiscuous mode [ 35.842850][ T4406] syzkaller1: entered allmulticast mode [ 36.104849][ T4448] loop0: detected capacity change from 0 to 1024 [ 36.145879][ T4448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.182648][ T4456] 9pnet: p9_errstr2errno: server reported unknown error @ [ 36.189162][ T4448] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.319994][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.376189][ T4474] $H: renamed from bond0 (while UP) [ 36.399969][ T4474] $H: entered promiscuous mode [ 36.405263][ T4474] bond_slave_0: entered promiscuous mode [ 36.411297][ T4474] bond_slave_1: entered promiscuous mode [ 36.413534][ T4480] loop1: detected capacity change from 0 to 128 [ 36.438136][ T4480] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.466779][ T4480] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.553406][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.611817][ T4502] loop2: detected capacity change from 0 to 256 [ 36.653613][ T4502] bio_check_eod: 15588 callbacks suppressed [ 36.653629][ T4502] syz.2.438: attempt to access beyond end of device [ 36.653629][ T4502] loop2: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 36.782901][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 36.782917][ T29] audit: type=1400 audit(1750674821.428:627): avc: denied { read } for pid=4511 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.850553][ T4521] loop1: detected capacity change from 0 to 1024 [ 36.864554][ T4521] EXT4-fs: Ignoring removed orlov option [ 36.896985][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.298065][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.422316][ T4561] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.518131][ T29] audit: type=1326 audit(1750674822.128:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.541500][ T29] audit: type=1326 audit(1750674822.128:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.564881][ T29] audit: type=1326 audit(1750674822.128:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.588201][ T29] audit: type=1326 audit(1750674822.128:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.611583][ T29] audit: type=1326 audit(1750674822.128:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.634878][ T29] audit: type=1326 audit(1750674822.128:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.658189][ T29] audit: type=1326 audit(1750674822.128:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb686e929 code=0x7ffc0000 [ 37.681527][ T29] audit: type=1326 audit(1750674822.128:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb68658e7 code=0x7ffc0000 [ 37.704857][ T29] audit: type=1326 audit(1750674822.128:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fb680ab19 code=0x7ffc0000 [ 37.774778][ T4579] __nla_validate_parse: 3 callbacks suppressed [ 37.774793][ T4579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 37.824320][ T4587] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 37.835778][ T4584] IPVS: stopping master sync thread 4587 ... [ 37.915155][ T4595] loop3: detected capacity change from 0 to 512 [ 37.940627][ T4595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.959369][ T4595] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.991644][ T4605] loop1: detected capacity change from 0 to 2048 [ 38.066436][ T3573] loop1: p1 < > p4 [ 38.070583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.111080][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.145288][ T3573] loop1: p4 size 8388608 extends beyond EOD, truncated [ 38.189524][ T4605] loop1: p1 < > p4 [ 38.225389][ T4605] loop1: p4 size 8388608 extends beyond EOD, truncated [ 38.261124][ T4631] : renamed from vlan1 [ 38.389289][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.393820][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 38.514422][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 38.728077][ T4675] program syz.0.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.971122][ T4707] netlink: 'syz.4.522': attribute type 21 has an invalid length. [ 38.990092][ T4707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.522'. [ 39.056067][ T4714] mmap: syz.4.525 (4714) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.361399][ T4734] netlink: 104 bytes leftover after parsing attributes in process `syz.1.533'. [ 39.418689][ T4740] netlink: 'syz.2.537': attribute type 3 has an invalid length. [ 39.687808][ T4758] loop2: detected capacity change from 0 to 512 [ 39.707409][ T4758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.739026][ T4758] EXT4-fs (loop2): 1 truncate cleaned up [ 39.745135][ T4758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.887488][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.235810][ T4752] loop4: detected capacity change from 0 to 1024 [ 40.325773][ T4752] EXT4-fs: Ignoring removed orlov option [ 40.378560][ T4752] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.406028][ T4789] xt_hashlimit: max too large, truncated to 1048576 [ 40.426470][ T4752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.476109][ T4796] loop3: detected capacity change from 0 to 1024 [ 40.483195][ T4796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.566523][ T4796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.653693][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.677401][ T4810] loop0: detected capacity change from 0 to 512 [ 40.694152][ T4810] EXT4-fs: Ignoring removed bh option [ 40.716036][ T4810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.731115][ T4810] EXT4-fs (loop0): 1 truncate cleaned up [ 40.741683][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.759987][ T4815] openvswitch: netlink: Message has 6 unknown bytes. [ 40.867307][ T4817] loop3: detected capacity change from 0 to 128 [ 40.909142][ T4817] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.948068][ T4817] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.995385][ T4817] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.566: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 41.015827][ T4817] EXT4-fs (loop3): Remounting filesystem read-only [ 41.092964][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.115741][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.219782][ T23] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 41.233877][ T23] hid-generic 0003:0000:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.331395][ T4831] fido_id[4831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.355779][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.385877][ T4837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.575'. [ 41.539044][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.546335][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.576576][ T4851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.582'. [ 41.577870][ T4848] $H: left promiscuous mode [ 41.590334][ T4848] bond_slave_0: left promiscuous mode [ 41.595788][ T4848] bond_slave_1: left promiscuous mode [ 41.653523][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.673827][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.709088][ T4848] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.718197][ T4848] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.727280][ T4848] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.736358][ T4848] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.757619][ T4861] openvswitch: netlink: Message has 6 unknown bytes. [ 41.804583][ T4864] loop3: detected capacity change from 0 to 512 [ 41.831885][ T4864] EXT4-fs: Ignoring removed bh option [ 41.857607][ T4864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.899559][ T4864] EXT4-fs (loop3): 1 truncate cleaned up [ 41.915843][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.078080][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 42.078094][ T29] audit: type=1326 audit(1750674826.708:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.107551][ T29] audit: type=1326 audit(1750674826.728:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.468299][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.493136][ T29] audit: type=1326 audit(1750674826.778:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.516467][ T29] audit: type=1326 audit(1750674826.778:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.540155][ T29] audit: type=1326 audit(1750674826.778:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.563486][ T29] audit: type=1326 audit(1750674826.778:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.586732][ T29] audit: type=1326 audit(1750674826.778:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.609977][ T29] audit: type=1326 audit(1750674826.778:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.633241][ T29] audit: type=1326 audit(1750674826.778:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.656484][ T29] audit: type=1326 audit(1750674826.778:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 42.884529][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.891839][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.931115][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.940862][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.970068][ T4903] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.979199][ T4903] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.988442][ T4903] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.997353][ T4903] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.115731][ T4924] loop2: detected capacity change from 0 to 512 [ 43.124285][ T4924] EXT4-fs: Ignoring removed bh option [ 43.131610][ T4924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.156962][ T4924] EXT4-fs (loop2): 1 truncate cleaned up [ 43.176893][ T4924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.227093][ T4932] loop0: detected capacity change from 0 to 8192 [ 43.244279][ T4932] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 43.252910][ T4932] FAT-fs (loop0): Filesystem has been set read-only [ 43.406103][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.695023][ T4974] loop2: detected capacity change from 0 to 512 [ 43.707415][ T4974] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.719626][ T4974] EXT4-fs (loop2): 1 truncate cleaned up [ 43.725821][ T4974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.769205][ T4976] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.780796][ T4976] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 43.833371][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.867188][ T4980] vlan3: entered allmulticast mode [ 44.027080][ T4986] loop4: detected capacity change from 0 to 512 [ 44.035324][ T4986] EXT4-fs: Ignoring removed bh option [ 44.064282][ T4986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.079305][ T4986] EXT4-fs (loop4): 1 truncate cleaned up [ 44.085595][ T4986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.110383][ T4984] loop2: detected capacity change from 0 to 8192 [ 44.140350][ T4984] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 44.149014][ T4984] FAT-fs (loop2): Filesystem has been set read-only [ 44.398288][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.435831][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 44.509294][ T5018] hsr0: entered promiscuous mode [ 44.639777][ T5030] netlink: 136 bytes leftover after parsing attributes in process `syz.4.659'. [ 44.820254][ T5052] loop4: detected capacity change from 0 to 2048 [ 44.841717][ T5058] loop0: detected capacity change from 0 to 512 [ 44.868891][ T5052] loop4: p1 < > p4 [ 44.875234][ T5058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.898553][ T5058] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.909053][ T5052] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.939106][ T5052] : renamed from vlan1 (while UP) [ 45.046144][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.064054][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 45.140229][ T5072] IPVS: stopping master sync thread 5075 ... [ 45.140731][ T5075] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.166748][ T5078] netlink: 92 bytes leftover after parsing attributes in process `syz.0.680'. [ 45.175697][ T5078] netem: unknown loss type 0 [ 45.180385][ T5078] netem: change failed [ 45.270712][ T5089] loop1: detected capacity change from 0 to 2048 [ 45.292759][ T5089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.334635][ T5089] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.425188][ T5089] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 45.437692][ T5089] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.437692][ T5089] [ 45.447391][ T5089] EXT4-fs (loop1): Total free blocks count 0 [ 45.453530][ T5089] EXT4-fs (loop1): Free/Dirty block details [ 45.459459][ T5089] EXT4-fs (loop1): free_blocks=2415919504 [ 45.465223][ T5089] EXT4-fs (loop1): dirty_blocks=64 [ 45.470380][ T5089] EXT4-fs (loop1): Block reservation details [ 45.476519][ T5089] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 45.492567][ T5109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 45.570126][ T296] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.601977][ T5120] IPVS: Error connecting to the multicast addr [ 45.777717][ T5150] IPVS: Error connecting to the multicast addr [ 45.883352][ T5162] program syz.0.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.932204][ T5172] loop4: detected capacity change from 0 to 512 [ 45.940287][ T5172] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 46.469586][ T5208] loop1: detected capacity change from 0 to 1024 [ 46.476556][ T5208] EXT4-fs: Ignoring removed oldalloc option [ 46.482569][ T5208] EXT4-fs: Ignoring removed bh option [ 46.512922][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.551028][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.773668][ T5220] netlink: 7 bytes leftover after parsing attributes in process `syz.1.737'. [ 46.783788][ T5220] netlink: 7 bytes leftover after parsing attributes in process `syz.1.737'. [ 46.912631][ T5245] loop3: detected capacity change from 0 to 256 [ 46.949879][ T5245] syz.3.749: attempt to access beyond end of device [ 46.949879][ T5245] loop3: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 47.015288][ T5254] loop0: detected capacity change from 0 to 128 [ 47.024416][ T5254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.037193][ T5254] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.091727][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 47.091740][ T29] audit: type=1400 audit(1750674831.738:1484): avc: denied { ioctl } for pid=5253 comm="syz.0.763" path="/172/mnt/pids.current" dev="loop0" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.213198][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.496509][ T5280] netlink: 1 bytes leftover after parsing attributes in process `syz.4.765'. [ 47.598605][ T5285] $H: renamed from bond0 (while UP) [ 47.605842][ T5285] $H: entered promiscuous mode [ 47.610999][ T5285] bond_slave_0: entered promiscuous mode [ 47.616701][ T5285] bond_slave_1: entered promiscuous mode [ 47.655583][ T29] audit: type=1326 audit(1750674832.298:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.678983][ T29] audit: type=1326 audit(1750674832.298:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.704010][ T29] audit: type=1326 audit(1750674832.298:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.727503][ T29] audit: type=1326 audit(1750674832.298:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.751005][ T29] audit: type=1326 audit(1750674832.298:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.774300][ T29] audit: type=1326 audit(1750674832.298:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.798104][ T29] audit: type=1326 audit(1750674832.348:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf329e929 code=0x7ffc0000 [ 47.822197][ T29] audit: type=1400 audit(1750674832.468:1492): avc: denied { relabelfrom } for pid=5290 comm="syz.0.771" name="" dev="pipefs" ino=9816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 47.847847][ T5293] loop4: detected capacity change from 0 to 128 [ 47.861358][ T5293] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.873858][ T5293] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.875449][ T5295] xt_hashlimit: max too large, truncated to 1048576 [ 47.928815][ T29] audit: type=1400 audit(1750674832.558:1493): avc: denied { read append } for pid=5298 comm="syz.3.773" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.959396][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.012652][ T5311] netlink: 1 bytes leftover after parsing attributes in process `syz.0.777'. [ 48.037283][ T5315] $H: renamed from bond0 [ 48.043869][ T5315] $H: entered promiscuous mode [ 48.049093][ T5315] bond_slave_0: entered promiscuous mode [ 48.054829][ T5315] bond_slave_1: entered promiscuous mode [ 48.062441][ T5309] vhci_hcd: invalid port number 96 [ 48.067659][ T5309] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 48.125546][ T5321] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 48.163296][ T5331] loop3: detected capacity change from 0 to 128 [ 48.169772][ T5329] loop0: detected capacity change from 0 to 1024 [ 48.176425][ T5329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.184382][ T5331] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.209166][ T5331] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.259392][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.284741][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.370254][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.523455][ T5355] geneve0: left allmulticast mode [ 48.544216][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'. [ 48.575514][ T5365] loop0: detected capacity change from 0 to 1024 [ 48.583342][ T5365] EXT4-fs: Ignoring removed nobh option [ 48.589003][ T5365] EXT4-fs: Ignoring removed bh option [ 48.600114][ T5365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.627617][ T5371] loop2: detected capacity change from 0 to 164 [ 48.630698][ T5365] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.801: Allocating blocks 497-513 which overlap fs metadata [ 48.648267][ T5371] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.674515][ T5364] EXT4-fs (loop0): pa ffff888106a6b150: logic 16, phys. 321, len 12 [ 48.681971][ T5371] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.682616][ T5364] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 48.700789][ T5371] Symlink component flag not implemented [ 48.706448][ T5371] Symlink component flag not implemented [ 48.712607][ T5371] Symlink component flag not implemented (7) [ 48.713435][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.718667][ T5371] Symlink component flag not implemented (116) [ 48.767423][ T5377] loop2: detected capacity change from 0 to 512 [ 48.779534][ T5377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.792292][ T5377] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.825680][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.844765][ T5384] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 48.857328][ T5384] bond0: entered promiscuous mode [ 48.863630][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.881763][ T5384] bond0: (slave bridge1): making interface the new active one [ 48.889290][ T5384] bridge1: entered promiscuous mode [ 48.895704][ T5384] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 48.931108][ T5389] loop2: detected capacity change from 0 to 1024 [ 48.950459][ T5389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.976155][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.989143][ T5396] loop4: detected capacity change from 0 to 512 [ 48.998267][ T5396] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.030759][ T5396] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.077670][ T3303] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.157704][ T5418] loop4: detected capacity change from 0 to 1024 [ 49.171478][ T5418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.190956][ T5418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.191169][ T5424] 9pnet: p9_errstr2errno: server reported unknown error @ [ 49.208599][ T5420] vhci_hcd: invalid port number 96 [ 49.215651][ T5420] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.252040][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.285745][ T5433] syz_tun: entered promiscuous mode [ 49.293443][ T5433] batadv_slave_0: entered promiscuous mode [ 49.300351][ T5433] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 49.308298][ T5433] Cannot create hsr debugfs directory [ 49.347129][ T5438] hub 9-0:1.0: USB hub found [ 49.351925][ T5438] hub 9-0:1.0: 8 ports detected [ 49.496355][ T5447] __nla_validate_parse: 2 callbacks suppressed [ 49.496371][ T5447] netlink: 1 bytes leftover after parsing attributes in process `syz.2.834'. [ 49.519458][ T5451] netdevsim netdevsim3: Direct firmware load for ngkNq>*x(O@ failed with error -2 [ 49.554760][ T5458] 9pnet: p9_errstr2errno: server reported unknown error @ [ 49.557316][ T5459] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.582928][ T5462] loop2: detected capacity change from 0 to 1024 [ 49.602132][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.614764][ T5462] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.735207][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.765171][ T5484] loop3: detected capacity change from 0 to 1024 [ 49.795966][ T5493] loop2: detected capacity change from 0 to 512 [ 49.803273][ T5493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.814355][ T5484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.827863][ T5484] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.841403][ T5493] EXT4-fs (loop2): 1 truncate cleaned up [ 49.847546][ T5493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.926970][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.940677][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.161851][ T5542] loop4: detected capacity change from 0 to 1024 [ 50.188509][ T5540] SELinux: failed to load policy [ 50.194329][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.209380][ T5542] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.256862][ T5550] xt_hashlimit: max too large, truncated to 1048576 [ 50.341935][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.645644][ T5609] loop1: detected capacity change from 0 to 128 [ 50.646524][ T5610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.902'. [ 50.654853][ T5609] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.668812][ T5609] FAT-fs (loop1): Filesystem has been set read-only [ 50.675534][ T5609] gtp: attempt to access beyond end of device [ 50.675534][ T5609] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 50.689158][ T5609] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.697154][ T5609] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.705615][ T5609] gtp: attempt to access beyond end of device [ 50.705615][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.718757][ T5609] gtp: attempt to access beyond end of device [ 50.718757][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.731569][ T5609] gtp: attempt to access beyond end of device [ 50.731569][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.744406][ T5609] gtp: attempt to access beyond end of device [ 50.744406][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.757315][ T5609] gtp: attempt to access beyond end of device [ 50.757315][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.770282][ T5609] gtp: attempt to access beyond end of device [ 50.770282][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.783248][ T5609] gtp: attempt to access beyond end of device [ 50.783248][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.796005][ T5609] gtp: attempt to access beyond end of device [ 50.796005][ T5609] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.264054][ T5639] loop2: detected capacity change from 0 to 1024 [ 51.270892][ T5633] loop0: detected capacity change from 0 to 8192 [ 51.288302][ T5639] EXT4-fs: Ignoring removed orlov option [ 51.310809][ T5639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.416390][ T5657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.924'. [ 51.541118][ T5665] loop1: detected capacity change from 0 to 1024 [ 51.579707][ T5665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.592123][ T5671] loop4: detected capacity change from 0 to 512 [ 51.599785][ T5671] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.607574][ T5671] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 51.608076][ T5665] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.627023][ T5671] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.929: attempt to clear invalid blocks 2 len 1 [ 51.640036][ T5671] EXT4-fs (loop4): Remounting filesystem read-only [ 51.647043][ T5671] EXT4-fs (loop4): 1 truncate cleaned up [ 51.675890][ T5676] loop3: detected capacity change from 0 to 128 [ 51.682458][ T5671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.697581][ T5676] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.722308][ T5676] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.743477][ T5671] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 51.865268][ T5699] netlink: 'syz.0.937': attribute type 3 has an invalid length. [ 51.926006][ T5710] loop4: detected capacity change from 0 to 1024 [ 51.945859][ T5710] EXT4-fs: Ignoring removed orlov option [ 51.952968][ T5715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.946'. [ 52.013664][ T5725] loop3: detected capacity change from 0 to 1024 [ 52.040208][ T5725] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.143429][ T5738] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 52.151170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.299289][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 52.299303][ T29] audit: type=1326 audit(1750674836.938:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.328881][ T29] audit: type=1326 audit(1750674836.938:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.352253][ T29] audit: type=1326 audit(1750674836.948:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.375664][ T29] audit: type=1326 audit(1750674836.948:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.399082][ T29] audit: type=1326 audit(1750674836.948:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.415796][ T5751] netlink: 'syz.1.960': attribute type 4 has an invalid length. [ 52.423381][ T29] audit: type=1326 audit(1750674836.978:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.430012][ T5751] netlink: 'syz.1.960': attribute type 3 has an invalid length. [ 52.430024][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 52.470072][ T29] audit: type=1326 audit(1750674836.978:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.493442][ T29] audit: type=1326 audit(1750674836.978:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.516731][ T29] audit: type=1326 audit(1750674836.978:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.540011][ T29] audit: type=1326 audit(1750674836.978:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da31e929 code=0x7ffc0000 [ 52.569375][ T5749] netlink: 'syz.0.970': attribute type 13 has an invalid length. [ 52.587955][ T5754] netlink: 108 bytes leftover after parsing attributes in process `syz.2.961'. [ 52.596964][ T5754] netlink: 108 bytes leftover after parsing attributes in process `syz.2.961'. [ 52.606073][ T5754] netlink: 108 bytes leftover after parsing attributes in process `syz.2.961'. [ 52.629534][ T5749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.680136][ T5764] loop1: detected capacity change from 0 to 1024 [ 52.701799][ T5766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.967'. [ 52.711841][ T5764] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.796561][ T5783] loop2: detected capacity change from 0 to 1024 [ 52.812191][ T5783] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.846312][ T5794] loop0: detected capacity change from 0 to 1024 [ 52.868571][ T5794] EXT4-fs: Ignoring removed orlov option [ 53.056623][ T5813] netlink: 108 bytes leftover after parsing attributes in process `syz.3.986'. [ 53.316701][ T5853] loop3: detected capacity change from 0 to 1024 [ 53.334877][ T5853] EXT4-fs: Ignoring removed orlov option [ 53.584145][ T5871] loop4: detected capacity change from 0 to 512 [ 53.591258][ T5871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.606862][ T5871] EXT4-fs (loop4): 1 truncate cleaned up [ 53.729910][ T5883] vlan1: entered allmulticast mode [ 53.796316][ T5896] syz_tun: entered promiscuous mode [ 53.803235][ T5896] batadv_slave_0: entered promiscuous mode [ 53.809704][ T5896] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 53.810194][ T5893] loop0: detected capacity change from 0 to 1024 [ 53.817410][ T5897] netlink: 'syz.2.1019': attribute type 5 has an invalid length. [ 53.824102][ T5893] EXT4-fs: Ignoring removed orlov option [ 53.832358][ T5896] Cannot create hsr debugfs directory [ 53.853981][ T5897] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.862760][ T5897] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.871500][ T5897] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.880369][ T5897] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.921682][ T5897] vxlan0: entered promiscuous mode [ 53.990913][ T5915] loop1: detected capacity change from 0 to 512 [ 54.003769][ T5915] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.021707][ T5915] EXT4-fs (loop1): 1 truncate cleaned up [ 54.138887][ T5928] loop1: detected capacity change from 0 to 512 [ 54.148188][ T5928] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 54.604469][ T5937] loop0: detected capacity change from 0 to 1024 [ 54.611382][ T5937] EXT4-fs: Ignoring removed orlov option [ 54.715057][ T5941] ================================================================== [ 54.723170][ T5941] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 54.732395][ T5941] [ 54.734717][ T5941] write to 0xffff888106bca460 of 4 bytes by task 5937 on cpu 0: [ 54.742342][ T5941] writeback_single_inode+0x14a/0x3e0 [ 54.747725][ T5941] sync_inode_metadata+0x5b/0x90 [ 54.752666][ T5941] generic_buffers_fsync_noflush+0xd9/0x120 [ 54.758567][ T5941] ext4_sync_file+0x1ab/0x690 [ 54.763241][ T5941] vfs_fsync_range+0x10d/0x130 [ 54.767991][ T5941] ext4_buffered_write_iter+0x34f/0x3c0 [ 54.773529][ T5941] ext4_file_write_iter+0x383/0xf00 [ 54.778709][ T5941] iter_file_splice_write+0x5f2/0x970 [ 54.784074][ T5941] direct_splice_actor+0x153/0x2a0 [ 54.789173][ T5941] splice_direct_to_actor+0x30f/0x680 [ 54.794529][ T5941] do_splice_direct+0xda/0x150 [ 54.799277][ T5941] do_sendfile+0x380/0x650 [ 54.803679][ T5941] __x64_sys_sendfile64+0x105/0x150 [ 54.808860][ T5941] x64_sys_call+0xb39/0x2fb0 [ 54.813440][ T5941] do_syscall_64+0xd2/0x200 [ 54.817929][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.823811][ T5941] [ 54.826118][ T5941] read to 0xffff888106bca460 of 4 bytes by task 5941 on cpu 1: [ 54.833645][ T5941] generic_buffers_fsync_noflush+0x80/0x120 [ 54.839525][ T5941] ext4_sync_file+0x1ab/0x690 [ 54.844187][ T5941] vfs_fsync_range+0x10d/0x130 [ 54.848949][ T5941] ext4_buffered_write_iter+0x34f/0x3c0 [ 54.854492][ T5941] ext4_file_write_iter+0x383/0xf00 [ 54.859678][ T5941] iter_file_splice_write+0x5f2/0x970 [ 54.865053][ T5941] direct_splice_actor+0x153/0x2a0 [ 54.870162][ T5941] splice_direct_to_actor+0x30f/0x680 [ 54.875534][ T5941] do_splice_direct+0xda/0x150 [ 54.880296][ T5941] do_sendfile+0x380/0x650 [ 54.884712][ T5941] __x64_sys_sendfile64+0x105/0x150 [ 54.889904][ T5941] x64_sys_call+0xb39/0x2fb0 [ 54.894487][ T5941] do_syscall_64+0xd2/0x200 [ 54.898980][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.904876][ T5941] [ 54.907189][ T5941] value changed: 0x00000038 -> 0x00000002 [ 54.912894][ T5941] [ 54.915207][ T5941] Reported by Kernel Concurrency Sanitizer on: [ 54.921363][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.0.1049 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 54.932034][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.942080][ T5941] ==================================================================