last executing test programs: 27.66323101s ago: executing program 4 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) 27.566811668s ago: executing program 4 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 27.481636895s ago: executing program 4 (id=643): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r2}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 27.242115425s ago: executing program 4 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 27.136825593s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000c0002800400010004000380"], 0x38}}, 0x0) 26.914413701s ago: executing program 4 (id=662): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 26.880606064s ago: executing program 32 (id=662): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.10323784s ago: executing program 1 (id=1536): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 905.324176ms ago: executing program 1 (id=1543): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) uname(0x0) 801.276715ms ago: executing program 1 (id=1547): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r0) 671.907395ms ago: executing program 1 (id=1548): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 511.190088ms ago: executing program 0 (id=1555): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 510.179718ms ago: executing program 5 (id=1556): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xe3, @dev={0xfe, 0x80, '\x00', 0x6}, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) shutdown(r0, 0x1) 416.049886ms ago: executing program 5 (id=1558): socket(0x2, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000340)={0x11, 0x3, r1, 0x1, 0x80}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[], 0x0) 415.646956ms ago: executing program 0 (id=1560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 415.397206ms ago: executing program 2 (id=1561): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 415.203896ms ago: executing program 5 (id=1562): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 376.157399ms ago: executing program 3 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xff7ffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa80b705a8ff2fb8e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 360.36251ms ago: executing program 2 (id=1565): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x7f}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x40815) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000340)={0x1, 0x1, 0x4, 0x0, 0x8545}, 0xc) 329.097743ms ago: executing program 5 (id=1566): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000600)={0x0, 0xfadc, 0x400, 0x3, 0x108}, &(0x7f0000000680)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010020}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r0, 0x33, {0x27fffffffffffff, 0x800000008}, 0x54}, 0x1) 320.656034ms ago: executing program 3 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x21, @remote, @remote, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 216.980452ms ago: executing program 2 (id=1568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) timer_delete(0x0) 199.167533ms ago: executing program 3 (id=1569): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 198.810093ms ago: executing program 5 (id=1570): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 177.362475ms ago: executing program 0 (id=1571): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 176.542535ms ago: executing program 1 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 139.291829ms ago: executing program 0 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 139.000529ms ago: executing program 1 (id=1574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x800}, 0xc084) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x600000000000000) 138.858259ms ago: executing program 2 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 138.106349ms ago: executing program 3 (id=1576): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xfffffffa, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a00b400"/40, 0x28}], 0x1}, 0x0) 114.14321ms ago: executing program 0 (id=1577): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 113.61409ms ago: executing program 2 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 93.786072ms ago: executing program 2 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fb7fd, 0x20005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) 93.545262ms ago: executing program 3 (id=1580): r0 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x240088c0) 93.429732ms ago: executing program 5 (id=1581): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 41.138226ms ago: executing program 3 (id=1582): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980d6", 0x31) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 0s ago: executing program 0 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_selinux(r2, &(0x7f0000000200), &(0x7f0000000380)='system_u:object_r:system_map_t:s0\x00', 0x22, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 35.494737][ T30] audit: type=1400 audit(1754439107.532:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.496037][ T3291] cgroup: Unknown subsys name 'net' [ 35.526922][ T30] audit: type=1400 audit(1754439107.532:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.557505][ T30] audit: type=1400 audit(1754439107.572:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.797344][ T3291] cgroup: Unknown subsys name 'cpuset' [ 35.804052][ T3291] cgroup: Unknown subsys name 'rlimit' [ 35.975814][ T30] audit: type=1400 audit(1754439108.012:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.005889][ T30] audit: type=1400 audit(1754439108.022:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.030328][ T30] audit: type=1400 audit(1754439108.022:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.039558][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 36.052155][ T30] audit: type=1400 audit(1754439108.022:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.087052][ T30] audit: type=1400 audit(1754439108.022:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.090879][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.116821][ T30] audit: type=1400 audit(1754439108.022:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.151735][ T30] audit: type=1400 audit(1754439108.102:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.416911][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 37.490841][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 37.521286][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 37.553800][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 37.573887][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.581462][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.588784][ T3301] bridge_slave_0: entered allmulticast mode [ 37.595311][ T3301] bridge_slave_0: entered promiscuous mode [ 37.604009][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.611229][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.618849][ T3301] bridge_slave_1: entered allmulticast mode [ 37.625407][ T3301] bridge_slave_1: entered promiscuous mode [ 37.666357][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.686669][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.701623][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 37.719545][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.726676][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.733876][ T3306] bridge_slave_0: entered allmulticast mode [ 37.740366][ T3306] bridge_slave_0: entered promiscuous mode [ 37.750184][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.757297][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.764632][ T3306] bridge_slave_1: entered allmulticast mode [ 37.771185][ T3306] bridge_slave_1: entered promiscuous mode [ 37.793714][ T3301] team0: Port device team_slave_0 added [ 37.819932][ T3301] team0: Port device team_slave_1 added [ 37.839842][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.849291][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.856416][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.863765][ T3302] bridge_slave_0: entered allmulticast mode [ 37.870348][ T3302] bridge_slave_0: entered promiscuous mode [ 37.877366][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.888157][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.897607][ T3302] bridge_slave_1: entered allmulticast mode [ 37.907144][ T3302] bridge_slave_1: entered promiscuous mode [ 37.925603][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.933991][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.942680][ T3305] bridge_slave_0: entered allmulticast mode [ 37.950637][ T3305] bridge_slave_0: entered promiscuous mode [ 37.963105][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.990958][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.999212][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.008642][ T3305] bridge_slave_1: entered allmulticast mode [ 38.018267][ T3305] bridge_slave_1: entered promiscuous mode [ 38.044997][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.052716][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.090401][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.114999][ T3306] team0: Port device team_slave_0 added [ 38.124276][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.135197][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.143912][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.173292][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.198923][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.210248][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.217638][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.226058][ T3304] bridge_slave_0: entered allmulticast mode [ 38.234620][ T3304] bridge_slave_0: entered promiscuous mode [ 38.245256][ T3306] team0: Port device team_slave_1 added [ 38.256680][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.268674][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.283513][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.293674][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.302714][ T3304] bridge_slave_1: entered allmulticast mode [ 38.309906][ T3304] bridge_slave_1: entered promiscuous mode [ 38.359834][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.371553][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.378943][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.412691][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.430817][ T3302] team0: Port device team_slave_0 added [ 38.437715][ T3302] team0: Port device team_slave_1 added [ 38.444241][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.463962][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.470970][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.497105][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.508526][ T3305] team0: Port device team_slave_0 added [ 38.537680][ T3305] team0: Port device team_slave_1 added [ 38.550382][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.557395][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.583349][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.594744][ T3304] team0: Port device team_slave_0 added [ 38.602614][ T3301] hsr_slave_0: entered promiscuous mode [ 38.609689][ T3301] hsr_slave_1: entered promiscuous mode [ 38.625662][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.632675][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.658626][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.670113][ T3304] team0: Port device team_slave_1 added [ 38.691893][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.698917][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.724910][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.736150][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.743237][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.769260][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.788277][ T3306] hsr_slave_0: entered promiscuous mode [ 38.794268][ T3306] hsr_slave_1: entered promiscuous mode [ 38.800129][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 38.805866][ T3306] Cannot create hsr debugfs directory [ 38.842324][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.849330][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.875280][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.908107][ T3305] hsr_slave_0: entered promiscuous mode [ 38.914415][ T3305] hsr_slave_1: entered promiscuous mode [ 38.920313][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 38.926062][ T3305] Cannot create hsr debugfs directory [ 38.931931][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.938930][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.964851][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.982226][ T3302] hsr_slave_0: entered promiscuous mode [ 38.988592][ T3302] hsr_slave_1: entered promiscuous mode [ 38.994506][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 39.000278][ T3302] Cannot create hsr debugfs directory [ 39.089839][ T3304] hsr_slave_0: entered promiscuous mode [ 39.095943][ T3304] hsr_slave_1: entered promiscuous mode [ 39.101939][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 39.110153][ T3304] Cannot create hsr debugfs directory [ 39.272289][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.284376][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.297279][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.311937][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.335407][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.344656][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.353619][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.363508][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.398694][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.413719][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.425158][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.434578][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.494684][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.503673][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.513466][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.522317][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.555837][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.578670][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.590447][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.600524][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.621579][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.631288][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.643632][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.662553][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.670933][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.683578][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.691584][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.706687][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.733713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.742409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.767466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.776323][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.815656][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.851899][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.863612][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.894521][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.902259][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.914093][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.928975][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.938716][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.947141][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.964957][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.972732][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.984867][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.992719][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.017172][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.037527][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.045093][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.065174][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.082418][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.091437][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.106351][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.147753][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.180712][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.234276][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.311973][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.351390][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.381238][ T3301] veth0_vlan: entered promiscuous mode [ 40.401784][ T3306] veth0_vlan: entered promiscuous mode [ 40.421380][ T3301] veth1_vlan: entered promiscuous mode [ 40.432888][ T3306] veth1_vlan: entered promiscuous mode [ 40.467692][ T3306] veth0_macvtap: entered promiscuous mode [ 40.475212][ T3302] veth0_vlan: entered promiscuous mode [ 40.485947][ T3301] veth0_macvtap: entered promiscuous mode [ 40.493910][ T3301] veth1_macvtap: entered promiscuous mode [ 40.511608][ T3302] veth1_vlan: entered promiscuous mode [ 40.522884][ T3306] veth1_macvtap: entered promiscuous mode [ 40.537434][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.556366][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.579131][ T26] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.589092][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.598604][ T3304] veth0_vlan: entered promiscuous mode [ 40.605866][ T26] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.617821][ T3302] veth0_macvtap: entered promiscuous mode [ 40.625896][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.633391][ T26] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.643286][ T3304] veth1_vlan: entered promiscuous mode [ 40.662408][ T26] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.679297][ T26] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.701243][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 40.701351][ T30] audit: type=1400 audit(1754439112.742:82): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.gHtNbM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.701554][ T26] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.717956][ T30] audit: type=1400 audit(1754439112.752:83): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.774648][ T30] audit: type=1400 audit(1754439112.752:84): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.gHtNbM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.808109][ T30] audit: type=1400 audit(1754439112.752:85): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.834107][ T30] audit: type=1400 audit(1754439112.752:86): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.gHtNbM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.870931][ T30] audit: type=1400 audit(1754439112.752:87): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.gHtNbM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.904844][ T30] audit: type=1400 audit(1754439112.752:88): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.936210][ T30] audit: type=1400 audit(1754439112.792:89): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.937068][ T3302] veth1_macvtap: entered promiscuous mode [ 40.962410][ T30] audit: type=1400 audit(1754439112.792:90): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.987439][ T26] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.010008][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.021665][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.042424][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.050200][ T26] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.067552][ T30] audit: type=1400 audit(1754439113.102:91): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.101063][ T3305] veth0_vlan: entered promiscuous mode [ 41.128188][ T360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.141688][ T3474] loop0: detected capacity change from 0 to 256 [ 41.159537][ T3304] veth0_macvtap: entered promiscuous mode [ 41.167003][ T3474] ======================================================= [ 41.167003][ T3474] WARNING: The mand mount option has been deprecated and [ 41.167003][ T3474] and is ignored by this kernel. Remove the mand [ 41.167003][ T3474] option from the mount to silence this warning. [ 41.167003][ T3474] ======================================================= [ 41.212214][ T3304] veth1_macvtap: entered promiscuous mode [ 41.223837][ T3474] FAT-fs (loop0): Directory bread(block 64) failed [ 41.231138][ T360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.231598][ T3474] FAT-fs (loop0): Directory bread(block 65) failed [ 41.241190][ T3305] veth1_vlan: entered promiscuous mode [ 41.256918][ T360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.271784][ T3474] FAT-fs (loop0): Directory bread(block 66) failed [ 41.278616][ T3474] FAT-fs (loop0): Directory bread(block 67) failed [ 41.294380][ T360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.324696][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.333815][ T3305] veth0_macvtap: entered promiscuous mode [ 41.342423][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.353293][ T3305] veth1_macvtap: entered promiscuous mode [ 41.359403][ T3474] FAT-fs (loop0): Directory bread(block 68) failed [ 41.365951][ T3474] FAT-fs (loop0): Directory bread(block 69) failed [ 41.384343][ T3474] FAT-fs (loop0): Directory bread(block 70) failed [ 41.393693][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.408378][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.416891][ T3474] FAT-fs (loop0): Directory bread(block 71) failed [ 41.433147][ T3474] FAT-fs (loop0): Directory bread(block 72) failed [ 41.441725][ T3474] FAT-fs (loop0): Directory bread(block 73) failed [ 41.454991][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.490075][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.503094][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.534479][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.559534][ T3474] syz.0.1: attempt to access beyond end of device [ 41.559534][ T3474] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 41.589669][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.618626][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.670202][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.697082][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.714707][ T3499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.735529][ T3499] netlink: 'syz.1.13': attribute type 12 has an invalid length. [ 41.745198][ T3499] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 41.756571][ T3499] netlink: 148 bytes leftover after parsing attributes in process `syz.1.13'. [ 41.767942][ T3499] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 41.781648][ T3499] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 41.799146][ T3499] Zero length message leads to an empty skb [ 41.801183][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.824215][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.873184][ T3509] netlink: 'syz.1.18': attribute type 3 has an invalid length. [ 41.916653][ T3512] loop3: detected capacity change from 0 to 512 [ 41.927642][ T3512] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.945230][ T3512] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.975970][ T3512] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.019207][ T3512] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.027812][ T3512] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.19: Invalid block bitmap block 0 in block_group 0 [ 42.041989][ T3512] EXT4-fs (loop3): Remounting filesystem read-only [ 42.050484][ T3512] EXT4-fs (loop3): 1 orphan inode deleted [ 42.069738][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.095618][ T3512] syz.3.19 (3512) used greatest stack depth: 9592 bytes left [ 42.142729][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.181281][ T3537] loop4: detected capacity change from 0 to 764 [ 42.235119][ T3536] vhci_hcd: invalid port number 96 [ 42.240345][ T3536] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 42.328205][ T3554] netlink: 'syz.4.36': attribute type 12 has an invalid length. [ 42.335930][ T3554] netlink: 'syz.4.36': attribute type 29 has an invalid length. [ 42.343793][ T3554] netlink: 148 bytes leftover after parsing attributes in process `syz.4.36'. [ 42.352899][ T3554] netlink: 'syz.4.36': attribute type 2 has an invalid length. [ 42.360555][ T3554] netlink: 23 bytes leftover after parsing attributes in process `syz.4.36'. [ 42.401368][ T3554] netlink: 'syz.4.36': attribute type 12 has an invalid length. [ 42.409307][ T3554] netlink: 'syz.4.36': attribute type 29 has an invalid length. [ 42.417035][ T3554] netlink: 148 bytes leftover after parsing attributes in process `syz.4.36'. [ 42.425925][ T3554] netlink: 23 bytes leftover after parsing attributes in process `syz.4.36'. [ 42.460477][ T3559] 9pnet: p9_errstr2errno: server reported unknown error [ 42.624934][ T3577] process 'syz.2.48' launched '/dev/fd/5' with NULL argv: empty string added [ 42.786132][ T3598] syz.0.57: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.800761][ T3598] CPU: 0 UID: 0 PID: 3598 Comm: syz.0.57 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 42.800795][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.800807][ T3598] Call Trace: [ 42.800813][ T3598] [ 42.800821][ T3598] __dump_stack+0x1d/0x30 [ 42.800900][ T3598] dump_stack_lvl+0xe8/0x140 [ 42.800920][ T3598] dump_stack+0x15/0x1b [ 42.800996][ T3598] warn_alloc+0x12b/0x1a0 [ 42.801036][ T3598] ? audit_log_end+0x1d7/0x1f0 [ 42.801095][ T3598] ? audit_log_end+0x1d7/0x1f0 [ 42.801194][ T3598] __vmalloc_node_range_noprof+0x9c/0xe00 [ 42.801275][ T3598] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.801306][ T3598] ? __rcu_read_unlock+0x4f/0x70 [ 42.801334][ T3598] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 42.801433][ T3598] ? perf_cgroup_switch+0x10c/0x480 [ 42.801451][ T3598] ? update_load_avg+0x1da/0x820 [ 42.801477][ T3598] ? __list_add_valid_or_report+0x38/0xe0 [ 42.801508][ T3598] ? should_fail_ex+0x30/0x280 [ 42.801588][ T3598] ? xskq_create+0x36/0xe0 [ 42.801626][ T3598] vmalloc_user_noprof+0x7d/0xb0 [ 42.801669][ T3598] ? xskq_create+0x80/0xe0 [ 42.801704][ T3598] xskq_create+0x80/0xe0 [ 42.801803][ T3598] xsk_init_queue+0x95/0xf0 [ 42.801895][ T3598] xsk_setsockopt+0x477/0x640 [ 42.801936][ T3598] ? __pfx_xsk_setsockopt+0x10/0x10 [ 42.801972][ T3598] __sys_setsockopt+0x184/0x200 [ 42.802043][ T3598] __x64_sys_setsockopt+0x64/0x80 [ 42.802083][ T3598] x64_sys_call+0x20ec/0x2ff0 [ 42.802105][ T3598] do_syscall_64+0xd2/0x200 [ 42.802197][ T3598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.802229][ T3598] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.802257][ T3598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.802357][ T3598] RIP: 0033:0x7fe48ef8ebe9 [ 42.802387][ T3598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.802502][ T3598] RSP: 002b:00007fe48d5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 42.802522][ T3598] RAX: ffffffffffffffda RBX: 00007fe48f1b5fa0 RCX: 00007fe48ef8ebe9 [ 42.802538][ T3598] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 42.802555][ T3598] RBP: 00007fe48f011e19 R08: 0000000000000004 R09: 0000000000000000 [ 42.802617][ T3598] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 42.802630][ T3598] R13: 00007fe48f1b6038 R14: 00007fe48f1b5fa0 R15: 00007fffd8ce26a8 [ 42.802656][ T3598] [ 42.802701][ T3598] Mem-Info: [ 43.142305][ T3598] active_anon:5189 inactive_anon:0 isolated_anon:0 [ 43.142305][ T3598] active_file:5603 inactive_file:2199 isolated_file:0 [ 43.142305][ T3598] unevictable:0 dirty:1288 writeback:0 [ 43.142305][ T3598] slab_reclaimable:3063 slab_unreclaimable:13310 [ 43.142305][ T3598] mapped:28989 shmem:165 pagetables:1117 [ 43.142305][ T3598] sec_pagetables:0 bounce:0 [ 43.142305][ T3598] kernel_misc_reclaimable:0 [ 43.142305][ T3598] free:1907369 free_pcp:7824 free_cma:0 [ 43.199544][ T3598] Node 0 active_anon:20756kB inactive_anon:0kB active_file:22412kB inactive_file:8796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115956kB dirty:5152kB writeback:0kB shmem:660kB kernel_stack:3328kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 43.228584][ T3598] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 43.257311][ T3598] lowmem_reserve[]: 0 2883 7862 7862 [ 43.262776][ T3598] Node 0 DMA32 free:2949328kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 43.293736][ T3598] lowmem_reserve[]: 0 0 4978 4978 [ 43.298982][ T3598] Node 0 Normal free:4664788kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20756kB inactive_anon:0kB active_file:22412kB inactive_file:8796kB unevictable:0kB writepending:5152kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27760kB local_pcp:15204kB free_cma:0kB [ 43.331093][ T3598] lowmem_reserve[]: 0 0 0 0 [ 43.335677][ T3598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 43.348633][ T3598] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949328kB [ 43.364878][ T3598] Node 0 Normal: 3*4kB (UME) 3*8kB (UME) 1*16kB (E) 1*32kB (U) 1*64kB (M) 2*128kB (ME) 2*256kB (UM) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 1137*4096kB (M) = 4664724kB [ 43.382102][ T3598] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 43.391457][ T3598] 7993 total pagecache pages [ 43.396079][ T3598] 0 pages in swap cache [ 43.400287][ T3598] Free swap = 124996kB [ 43.404461][ T3598] Total swap = 124996kB [ 43.408731][ T3598] 2097051 pages RAM [ 43.412602][ T3598] 0 pages HighMem/MovableOnly [ 43.417349][ T3598] 80436 pages reserved [ 43.422871][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 43.709201][ T3635] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 43.755650][ T3638] bond1: entered promiscuous mode [ 43.760787][ T3638] bond1: entered allmulticast mode [ 43.777812][ T3638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.785858][ T3647] vhci_hcd: invalid port number 255 [ 43.809319][ T3638] bond1 (unregistering): Released all slaves [ 43.853880][ T3658] random: crng reseeded on system resumption [ 44.008862][ T3669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 44.111917][ T3683] syz_tun: entered promiscuous mode [ 44.118420][ T3683] batadv_slave_0: entered promiscuous mode [ 44.411103][ T3715] loop2: detected capacity change from 0 to 512 [ 44.446225][ T3715] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.100: bg 0: block 288: padding at end of block bitmap is not set [ 44.504901][ T3715] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 44.526345][ T3715] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.100: attempt to clear invalid blocks 1024 len 1 [ 44.544185][ T3715] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.100: invalid indirect mapped block 1819239214 (level 0) [ 44.568002][ T3715] EXT4-fs (loop2): 1 truncate cleaned up [ 44.568179][ T3722] IPVS: stopping backup sync thread 3723 ... [ 44.575977][ T3715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.624521][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.736863][ T3729] sd 0:0:1:0: device reset [ 44.778109][ T3731] mmap: syz.2.106 (3731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.853337][ T3737] loop2: detected capacity change from 0 to 512 [ 44.878185][ T3735] loop1: detected capacity change from 0 to 512 [ 44.880722][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190f2c00: rx timeout, send abort [ 44.903225][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.926286][ T3737] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.951476][ T3735] EXT4-fs (loop1): too many log groups per flexible block group [ 44.968257][ T3735] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 44.982597][ T3735] EXT4-fs (loop1): mount failed [ 45.007097][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.257973][ T3765] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.276596][ T3765] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 45.380743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810476a000: rx timeout, send abort [ 45.398025][ T3780] Illegal XDP return value 4294967294 on prog (id 90) dev N/A, expect packet loss! [ 45.400104][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190f2c00: abort rx timeout. Force session deactivation [ 45.482490][ T3791] loop1: detected capacity change from 0 to 512 [ 45.489840][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 45.504651][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 45.522758][ T3791] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 45.531653][ T3791] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.131: invalid indirect mapped block 2683928664 (level 1) [ 45.549003][ T3791] EXT4-fs (loop1): 1 truncate cleaned up [ 45.560768][ T3791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.606697][ T3791] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.131: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 45.652814][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.680992][ T3805] netlink: 224 bytes leftover after parsing attributes in process `syz.3.138'. [ 45.772192][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 45.772211][ T30] audit: type=1400 audit(1754439117.812:270): avc: denied { setopt } for pid=3818 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.853373][ T30] audit: type=1400 audit(1754439117.882:271): avc: denied { relabelfrom } for pid=3822 comm="syz.3.145" name="" dev="pipefs" ino=5443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 45.889155][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810476a000: abort rx timeout. Force session deactivation [ 45.911225][ T30] audit: type=1400 audit(1754439117.922:272): avc: denied { execmem } for pid=3829 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.932289][ T3831] loop0: detected capacity change from 0 to 1024 [ 45.950703][ T3831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.971285][ T30] audit: type=1400 audit(1754439118.012:273): avc: denied { create } for pid=3828 comm="syz.0.148" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 46.008407][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.087694][ T3838] random: crng reseeded on system resumption [ 46.135234][ T3842] syz.0.154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.191862][ T30] audit: type=1400 audit(1754439118.222:274): avc: denied { append } for pid=3845 comm="syz.0.156" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.277653][ T3852] loop9: detected capacity change from 0 to 7 [ 46.292544][ T30] audit: type=1326 audit(1754439118.282:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 46.322751][ T30] audit: type=1326 audit(1754439118.282:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 46.354055][ T30] audit: type=1326 audit(1754439118.292:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 46.380505][ T30] audit: type=1326 audit(1754439118.292:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 46.405704][ T30] audit: type=1326 audit(1754439118.292:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 46.429509][ T3852] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.437520][ T3852] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.445370][ T3852] loop9: unable to read partition table [ 46.451261][ T3852] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 46.451261][ T3852] ) failed (rc=-5) [ 46.497248][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.505350][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.516121][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.526440][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.534488][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.598832][ T3863] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 46.615128][ T3861] IPVS: stopping master sync thread 3863 ... [ 46.685272][ T360] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.718093][ T360] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.746606][ T360] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.777814][ T26] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.954943][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 47.121827][ T3921] loop1: detected capacity change from 0 to 1024 [ 47.129706][ T3921] EXT4-fs: inline encryption not supported [ 47.148210][ T3921] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 47.387271][ T3951] loop1: detected capacity change from 0 to 164 [ 47.396019][ T3951] __nla_validate_parse: 4 callbacks suppressed [ 47.396037][ T3951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.202'. [ 47.411554][ T3951] unsupported nla_type 10042 [ 47.865274][ T3983] sd 0:0:1:0: device reset [ 48.045701][ T3998] loop3: detected capacity change from 0 to 512 [ 48.055231][ T3998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.062599][ T3998] EXT4-fs: Ignoring removed orlov option [ 48.113705][ T3998] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 48.144205][ T2992] udevd[2992]: worker [3295] terminated by signal 33 (Unknown signal 33) [ 48.160065][ T4009] netlink: 80 bytes leftover after parsing attributes in process `syz.2.228'. [ 48.160799][ T3998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 48.177193][ T3998] System zones: 1-12 [ 48.184327][ T2992] udevd[2992]: worker [3295] failed while handling '/devices/virtual/block/loop0' [ 48.193921][ T3998] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.223: corrupted in-inode xattr: e_value size too large [ 48.220561][ T4009] netlink: 80 bytes leftover after parsing attributes in process `syz.2.228'. [ 48.239084][ T3998] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.223: couldn't read orphan inode 15 (err -117) [ 48.256914][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.301535][ T3998] capability: warning: `syz.3.223' uses deprecated v2 capabilities in a way that may be insecure [ 48.371003][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.532015][ T4050] validate_nla: 5 callbacks suppressed [ 48.532034][ T4050] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 48.618198][ T4057] loop1: detected capacity change from 0 to 512 [ 48.679758][ T4057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.725515][ T4059] loop4: detected capacity change from 0 to 8192 [ 48.737185][ T4057] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.763862][ T4057] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.246: bg 0: block 64: padding at end of block bitmap is not set [ 48.831101][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.933038][ T4076] vhci_hcd: invalid port number 96 [ 48.942211][ T4076] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 48.953582][ T4080] loop3: detected capacity change from 0 to 512 [ 48.976444][ T4080] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.011338][ T4080] EXT4-fs (loop3): mount failed [ 49.140823][ C0] hrtimer: interrupt took 37570 ns [ 49.287171][ T4104] loop3: detected capacity change from 0 to 512 [ 49.294845][ T4104] EXT4-fs: Ignoring removed nobh option [ 49.310056][ T4104] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.358057][ T4104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.265: corrupted inode contents [ 49.385493][ T4104] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.265: mark_inode_dirty error [ 49.433842][ T4104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.265: corrupted inode contents [ 49.516306][ T4104] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.265: mark_inode_dirty error [ 49.542633][ T4104] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.265: Failed to acquire dquot type 0 [ 49.585179][ T4126] netem: change failed [ 49.599705][ T4104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.265: corrupted inode contents [ 49.617290][ T4104] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.265: mark_inode_dirty error [ 49.633291][ T4104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.265: corrupted inode contents [ 49.649140][ T4104] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.265: mark_inode_dirty error [ 49.697690][ T4104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.265: corrupted inode contents [ 49.723199][ T4104] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 49.751187][ T4104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.265: corrupted inode contents [ 49.764160][ T4104] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.265: mark_inode_dirty error [ 49.777897][ T4104] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 49.789788][ T4104] EXT4-fs (loop3): 1 truncate cleaned up [ 49.797282][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.797607][ T4104] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.839165][ T4104] EXT4-fs (loop3): shut down requested (0) [ 49.890421][ T4134] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 49.920974][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.593798][ T4181] loop0: detected capacity change from 0 to 512 [ 51.598490][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 51.598583][ T30] audit: type=1400 audit(1754439123.632:481): avc: denied { create } for pid=4183 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.609311][ T4181] EXT4-fs: Ignoring removed nobh option [ 51.640984][ T4184] loop2: detected capacity change from 0 to 512 [ 51.685940][ T30] audit: type=1400 audit(1754439123.712:482): avc: denied { create } for pid=4185 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.718734][ T4184] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 51.751834][ T30] audit: type=1400 audit(1754439123.722:483): avc: denied { setopt } for pid=4185 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.773259][ T30] audit: type=1400 audit(1754439123.722:484): avc: denied { connect } for pid=4185 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.774062][ T4184] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.808575][ T4184] EXT4-fs (loop2): mount failed [ 51.814509][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.296: corrupted inode contents [ 51.835408][ T4181] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.296: mark_inode_dirty error [ 51.852250][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.296: corrupted inode contents [ 51.867623][ T4181] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.296: mark_inode_dirty error [ 51.885579][ T4181] Quota error (device loop0): write_blk: dquota write failed [ 51.893590][ T4181] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.905511][ T4181] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.296: Failed to acquire dquot type 0 [ 51.927106][ T4199] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 51.928538][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.296: corrupted inode contents [ 51.947854][ T30] audit: type=1400 audit(1754439123.972:485): avc: denied { write } for pid=4183 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.980179][ T4208] netlink: 256 bytes leftover after parsing attributes in process `syz.3.306'. [ 51.992395][ T4181] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.296: mark_inode_dirty error [ 52.014447][ T30] audit: type=1326 audit(1754439124.052:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e5f0ebe9 code=0x7ffc0000 [ 52.022814][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.296: corrupted inode contents [ 52.039919][ T30] audit: type=1326 audit(1754439124.052:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e5f0ebe9 code=0x7ffc0000 [ 52.085824][ T4181] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.296: mark_inode_dirty error [ 52.124060][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.296: corrupted inode contents [ 52.182481][ T4181] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 52.197526][ T4221] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 52.230568][ T2992] udevd[2992]: worker [3619] terminated by signal 33 (Unknown signal 33) [ 52.246580][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.296: corrupted inode contents [ 52.294562][ T4181] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.296: mark_inode_dirty error [ 52.339194][ T4181] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 52.363612][ T4181] EXT4-fs (loop0): 1 truncate cleaned up [ 52.381300][ T4181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.397864][ T4181] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.445234][ T4181] EXT4-fs (loop0): shut down requested (0) [ 52.460920][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.470547][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.493762][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.505915][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.558132][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.567023][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.595045][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.603527][ T4256] loop0: detected capacity change from 0 to 1024 [ 52.633091][ T4256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.645652][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.654600][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.663848][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.703972][ T4256] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 52.850859][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.901491][ T4273] loop4: detected capacity change from 0 to 512 [ 52.923396][ T4273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.960202][ T4273] EXT4-fs (loop4): 1 truncate cleaned up [ 52.971818][ T4273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.991997][ T4285] 9pnet: Could not find request transport: 0xffffffffffffffff [ 53.020504][ T4273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.169245][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 53.193363][ T4312] loop1: detected capacity change from 0 to 1024 [ 53.248922][ T4312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.306364][ T4327] 9pnet: Could not find request transport: 0xffffffffffffffff [ 53.345375][ T4312] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 53.439851][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.479164][ T4342] loop3: detected capacity change from 0 to 512 [ 53.511188][ T4342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.555568][ T4342] EXT4-fs (loop3): 1 truncate cleaned up [ 53.576936][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.638180][ T4342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.717058][ T4363] atomic_op ffff88811b1c5528 conn xmit_atomic 0000000000000000 [ 53.733147][ T4365] loop3: detected capacity change from 0 to 1024 [ 53.747979][ T4362] 9pnet: Could not find request transport: 0xffffffffffffffff [ 53.771840][ T4365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.815864][ T4365] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 53.879517][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.972929][ T4393] loop1: detected capacity change from 0 to 512 [ 53.982541][ T4393] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.007512][ T4393] EXT4-fs (loop1): 1 truncate cleaned up [ 54.014013][ T4393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.071604][ T4393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.118670][ T4409] loop4: detected capacity change from 0 to 1024 [ 54.149897][ T4409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.213105][ T4409] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 54.245409][ T4418] netlink: 'syz.1.388': attribute type 4 has an invalid length. [ 54.273664][ T4418] netlink: 'syz.1.388': attribute type 4 has an invalid length. [ 54.325598][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.515652][ T9] IPVS: starting estimator thread 0... [ 54.561407][ T4446] loop2: detected capacity change from 0 to 512 [ 54.569587][ T4446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.599656][ T4446] EXT4-fs (loop2): 1 truncate cleaned up [ 54.614102][ T4446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.630568][ T4437] IPVS: using max 1920 ests per chain, 96000 per kthread [ 54.631558][ T4449] loop1: detected capacity change from 0 to 4096 [ 54.651711][ T4446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.671708][ T4449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.723727][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.742700][ T4458] loop2: detected capacity change from 0 to 1024 [ 54.759893][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.815281][ T4458] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 54.885780][ T4470] hub 9-0:1.0: USB hub found [ 54.893291][ T4470] hub 9-0:1.0: 8 ports detected [ 54.982017][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.058261][ T4485] loop0: detected capacity change from 0 to 512 [ 55.068400][ T4485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.082253][ T4485] EXT4-fs (loop0): 1 truncate cleaned up [ 55.090064][ T4485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.108052][ T4485] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.069060][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 57.069100][ T30] audit: type=1400 audit(1754439129.112:764): avc: denied { read write } for pid=4497 comm="syz.4.422" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.082507][ T4501] loop0: detected capacity change from 0 to 1024 [ 57.098694][ T30] audit: type=1400 audit(1754439129.112:765): avc: denied { open } for pid=4497 comm="syz.4.422" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.129497][ T30] audit: type=1400 audit(1754439129.142:766): avc: denied { setopt } for pid=4502 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.188356][ T4514] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.198685][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.220632][ T4501] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 57.273369][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.301740][ T30] audit: type=1400 audit(1754439129.332:767): avc: denied { mount } for pid=4521 comm="syz.4.432" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.442830][ T30] audit: type=1400 audit(1754439129.472:768): avc: denied { read } for pid=4535 comm="syz.3.436" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.465763][ T30] audit: type=1400 audit(1754439129.472:769): avc: denied { open } for pid=4535 comm="syz.3.436" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.489864][ T30] audit: type=1400 audit(1754439129.482:770): avc: denied { write } for pid=4535 comm="syz.3.436" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.565041][ T30] audit: type=1400 audit(1754439129.602:771): avc: denied { create } for pid=4540 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.584855][ T30] audit: type=1400 audit(1754439129.602:772): avc: denied { connect } for pid=4540 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.675342][ T30] audit: type=1400 audit(1754439129.712:773): avc: denied { write } for pid=4549 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.874017][ T4578] netlink: 'syz.3.456': attribute type 21 has an invalid length. [ 57.924094][ T4585] hub 9-0:1.0: USB hub found [ 57.933174][ T4585] hub 9-0:1.0: 8 ports detected [ 57.999388][ T4595] random: crng reseeded on system resumption [ 58.003992][ T4599] __nla_validate_parse: 35 callbacks suppressed [ 58.004013][ T4599] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.465'. [ 58.103503][ T4612] loop3: detected capacity change from 0 to 128 [ 58.107789][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 58.110547][ T4612] msdos: Bad value for 'gid' [ 58.123270][ T4612] msdos: Bad value for 'gid' [ 58.130218][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 58.318549][ T4636] tls_set_device_offload_rx: netdev not found [ 58.371608][ T4638] SELinux: failed to load policy [ 58.391012][ T4642] loop3: detected capacity change from 0 to 256 [ 58.439007][ T4644] loop1: detected capacity change from 0 to 164 [ 58.455746][ T4644] syz.1.486: attempt to access beyond end of device [ 58.455746][ T4644] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 58.471415][ T4644] syz.1.486: attempt to access beyond end of device [ 58.471415][ T4644] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 58.602788][ T4662] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 58.610648][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 58.636864][ T4660] netem: change failed [ 58.940365][ T4697] loop3: detected capacity change from 0 to 764 [ 58.956232][ T4697] Symlink component flag not implemented [ 58.972559][ T4697] Symlink component flag not implemented (129) [ 58.985839][ T4697] rock: directory entry would overflow storage [ 58.992221][ T4697] rock: sig=0x4f50, size=4, remaining=3 [ 58.998544][ T4697] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 59.023799][ T4705] vlan2: entered allmulticast mode [ 59.078919][ T4709] loop1: detected capacity change from 0 to 8192 [ 59.099446][ T4715] smc: net device bond0 applied user defined pnetid SYZ2 [ 59.108173][ T4715] smc: net device bond0 erased user defined pnetid SYZ2 [ 59.168161][ T4716] loop2: detected capacity change from 0 to 4096 [ 59.194275][ T4724] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 59.209242][ T4716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.239279][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.279459][ T4732] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 59.432889][ T4751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 59.439857][ T4751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.447676][ T4751] vhci_hcd vhci_hcd.0: Device attached [ 59.459641][ T4752] vhci_hcd: connection closed [ 59.460089][ T51] vhci_hcd: stop threads [ 59.469556][ T51] vhci_hcd: release socket [ 59.474086][ T51] vhci_hcd: disconnect device [ 59.545611][ T4762] loop4: detected capacity change from 0 to 4096 [ 59.553570][ T4762] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.566065][ T4762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.595880][ T4769] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 59.631349][ T4771] netlink: 200 bytes leftover after parsing attributes in process `syz.1.543'. [ 59.657237][ T4774] loop0: detected capacity change from 0 to 128 [ 59.675600][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.689091][ T4774] FAT-fs (loop0): Directory bread(block 32) failed [ 59.697506][ T4774] FAT-fs (loop0): Directory bread(block 33) failed [ 59.704442][ T4774] FAT-fs (loop0): Directory bread(block 34) failed [ 59.711497][ T4774] FAT-fs (loop0): Directory bread(block 35) failed [ 59.728076][ T4774] FAT-fs (loop0): Directory bread(block 36) failed [ 59.752187][ T4774] FAT-fs (loop0): Directory bread(block 37) failed [ 59.759998][ T4774] FAT-fs (loop0): Directory bread(block 38) failed [ 59.767373][ T4774] FAT-fs (loop0): Directory bread(block 39) failed [ 59.777223][ T4774] FAT-fs (loop0): Directory bread(block 40) failed [ 59.811849][ T4774] FAT-fs (loop0): Directory bread(block 41) failed [ 59.874474][ T4774] syz.0.545: attempt to access beyond end of device [ 59.874474][ T4774] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 59.898103][ T4774] FAT-fs (loop0): Filesystem has been set read-only [ 59.919218][ T4774] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 60.046686][ T4827] loop3: detected capacity change from 0 to 4096 [ 60.092843][ T4827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.189891][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.586645][ T4913] loop3: detected capacity change from 0 to 512 [ 60.600406][ T4913] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.628809][ T4913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.693660][ T4913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.732254][ T4913] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.755097][ T4913] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.585: corrupted xattr block 19: overlapping e_value [ 60.790999][ T4937] loop2: detected capacity change from 0 to 512 [ 60.809355][ T4913] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 60.820823][ T4913] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.585: corrupted xattr block 19: overlapping e_value [ 60.821919][ T4937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.854551][ T4913] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 60.866948][ T4937] EXT4-fs (loop2): 1 truncate cleaned up [ 60.873797][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.875684][ T4913] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.585: corrupted xattr block 19: overlapping e_value [ 60.902803][ T4913] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 60.915770][ T4937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.949086][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.681052][ T5043] ALSA: seq fatal error: cannot create timer (-22) [ 61.925826][ T5075] loop2: detected capacity change from 0 to 1024 [ 61.933325][ T5075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.946298][ T5077] netlink: 'syz.1.623': attribute type 6 has an invalid length. [ 61.958363][ T5075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.018105][ T5083] netlink: 96 bytes leftover after parsing attributes in process `syz.4.627'. [ 62.088532][ T5091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 62.097553][ T5091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 62.109367][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.136985][ T5095] 9pnet: Could not find request transport: f [ 62.183733][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 62.183752][ T30] audit: type=1400 audit(1754963422.162:982): avc: denied { ioctl } for pid=5103 comm="syz.0.637" path="socket:[10354]" dev="sockfs" ino=10354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.193846][ T5104] batadv_slave_1: entered promiscuous mode [ 62.233268][ T5103] batadv_slave_1: left promiscuous mode [ 62.333307][ T5114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.362647][ T5121] loop4: detected capacity change from 0 to 1024 [ 62.386528][ T5125] loop3: detected capacity change from 0 to 512 [ 62.396844][ T5124] netlink: 92 bytes leftover after parsing attributes in process `syz.0.646'. [ 62.406594][ T5125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.418256][ T5121] EXT4-fs: Ignoring removed orlov option [ 62.437106][ T5125] EXT4-fs (loop3): 1 truncate cleaned up [ 62.445487][ T5121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.458030][ T5125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.487149][ T5121] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.511340][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.553093][ T5136] loop2: detected capacity change from 0 to 1024 [ 62.560657][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.594134][ T5136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.618297][ T30] audit: type=1400 audit(1754963422.580:983): avc: denied { lock } for pid=5135 comm="syz.2.651" path="/130/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.641404][ T30] audit: type=1400 audit(1754963422.580:984): avc: denied { link } for pid=5135 comm="syz.2.651" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.645186][ T5146] loop3: detected capacity change from 0 to 512 [ 62.680295][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.709466][ T30] audit: type=1400 audit(1754963422.667:985): avc: denied { create } for pid=5147 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.732609][ T5146] EXT4-fs (loop3): too many log groups per flexible block group [ 62.740497][ T5146] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 62.747772][ T5146] EXT4-fs (loop3): mount failed [ 62.763727][ T30] audit: type=1400 audit(1754963422.667:986): avc: denied { bind } for pid=5147 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.782971][ T30] audit: type=1400 audit(1754963422.667:987): avc: denied { node_bind } for pid=5147 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 62.803734][ T5152] netlink: 184 bytes leftover after parsing attributes in process `syz.2.658'. [ 62.831749][ T5146] loop3: detected capacity change from 0 to 512 [ 62.832396][ T5152] xt_socket: unknown flags 0xd0 [ 62.863577][ T5146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 62.895527][ T5146] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 62.925222][ T5146] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 62.952892][ T5146] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 62.997241][ T30] audit: type=1400 audit(1754963422.930:988): avc: denied { mounton } for pid=5163 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.015579][ T5146] EXT4-fs (loop3): 1 truncate cleaned up [ 63.018742][ T30] audit: type=1326 audit(1754963422.930:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 63.026199][ T5146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.047795][ T30] audit: type=1326 audit(1754963422.930:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 63.083604][ T30] audit: type=1326 audit(1754963422.930:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 63.111920][ T5169] netlink: 268 bytes leftover after parsing attributes in process `syz.0.666'. [ 63.131056][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 63.193694][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.297889][ T5163] chnl_net:caif_netlink_parms(): no params data found [ 63.327065][ T5198] atomic_op ffff88811b694528 conn xmit_atomic 0000000000000000 [ 63.354180][ T5201] netlink: 368 bytes leftover after parsing attributes in process `syz.0.677'. [ 63.399579][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.406844][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.418229][ T5163] bridge_slave_0: entered allmulticast mode [ 63.425945][ T5163] bridge_slave_0: entered promiscuous mode [ 63.436742][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.444181][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.451613][ T5163] bridge_slave_1: entered allmulticast mode [ 63.462144][ T5163] bridge_slave_1: entered promiscuous mode [ 63.492567][ T5163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.503845][ T5163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.528575][ T5163] team0: Port device team_slave_0 added [ 63.539020][ T5163] team0: Port device team_slave_1 added [ 63.560878][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.567878][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.593963][ T5163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.605426][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.612448][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.638448][ T5163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.641173][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.656565][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.664093][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.671624][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.679248][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.686758][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.694272][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.701658][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.709095][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.716554][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.729679][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.742953][ T5163] hsr_slave_0: entered promiscuous mode [ 63.749335][ T5163] hsr_slave_1: entered promiscuous mode [ 63.755394][ T5163] debugfs: 'hsr0' already exists in 'hsr' [ 63.761133][ T5163] Cannot create hsr debugfs directory [ 63.856827][ T5245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.696'. [ 63.869542][ T5163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.880184][ T5163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.889530][ T5163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.898607][ T5163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.917711][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.924897][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.932253][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.939362][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.980468][ T5163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.011965][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.030233][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.052572][ T5163] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.085377][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.092523][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.124435][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.131598][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.173844][ T5163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.188481][ T5163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.246091][ T5282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.357919][ T5163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.653759][ T5325] netlink: 256 bytes leftover after parsing attributes in process `syz.2.719'. [ 64.665722][ T5163] veth0_vlan: entered promiscuous mode [ 64.692482][ T5163] veth1_vlan: entered promiscuous mode [ 64.747033][ T5163] veth0_macvtap: entered promiscuous mode [ 64.784085][ T5163] veth1_macvtap: entered promiscuous mode [ 64.819265][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.833983][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.845355][ T26] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.932395][ T26] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.959666][ T5337] loop2: detected capacity change from 0 to 1024 [ 64.985639][ T5337] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 65.019061][ T26] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.036690][ T26] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.075528][ T5337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.297675][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.333221][ T5345] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 65.387158][ T5338] loop1: detected capacity change from 0 to 8192 [ 65.491332][ T5353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5353 comm=syz.5.728 [ 65.503820][ T5353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5353 comm=syz.5.728 [ 66.018042][ T5377] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 66.167923][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 66.315937][ T5412] loop1: detected capacity change from 0 to 1024 [ 66.347831][ T5412] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.390828][ T5412] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.411877][ T5412] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.456587][ T5412] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.751: Failed to acquire dquot type 0 [ 66.500945][ T5412] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.751: Failed to acquire dquot type 0 [ 66.544030][ T5412] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.751: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.577658][ T5425] hub 6-0:1.0: USB hub found [ 66.577681][ T5412] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.751: Failed to acquire dquot type 0 [ 66.577853][ T5425] hub 6-0:1.0: 8 ports detected [ 66.583450][ T5429] SELinux: Context system_u:object is not valid (left unmapped). [ 66.607075][ T5412] EXT4-fs (loop1): 1 orphan inode deleted [ 66.781432][ T5446] sd 0:0:1:0: device reset [ 66.889727][ T5468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.777'. [ 66.958112][ T5482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.784'. [ 66.972056][ T5482] netlink: 'syz.5.784': attribute type 1 has an invalid length. [ 66.979917][ T5482] netlink: 'syz.5.784': attribute type 2 has an invalid length. [ 66.987765][ T5482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.784'. [ 67.051723][ T5492] program syz.3.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.060330][ T5495] netlink: 104 bytes leftover after parsing attributes in process `syz.5.790'. [ 67.073999][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.117062][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.160010][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.200753][ T5513] loop3: detected capacity change from 0 to 1024 [ 67.208143][ T5513] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.223263][ T5513] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.799: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.237752][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.238965][ T5513] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.799: Failed to acquire dquot type 0 [ 67.261216][ T5513] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.799: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.274930][ T5513] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.799: Invalid inode bitmap blk 0 in block_group 0 [ 67.289711][ T41] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.298596][ T5519] loop2: detected capacity change from 0 to 512 [ 67.304826][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 67.310407][ T5513] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 67.326732][ T5519] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.801: casefold flag without casefold feature [ 67.334885][ T5513] EXT4-fs (loop3): 1 orphan inode deleted [ 67.344990][ T5519] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.801: couldn't read orphan inode 15 (err -117) [ 67.370605][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 67.370621][ T30] audit: type=1326 audit(1754963427.217:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.400567][ T30] audit: type=1326 audit(1754963427.217:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.424702][ T30] audit: type=1326 audit(1754963427.266:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.448160][ T30] audit: type=1326 audit(1754963427.266:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.453384][ T51] bridge_slave_1: left allmulticast mode [ 67.471506][ T30] audit: type=1326 audit(1754963427.266:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.500581][ T51] bridge_slave_1: left promiscuous mode [ 67.501328][ T30] audit: type=1326 audit(1754963427.266:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.506254][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.529416][ T30] audit: type=1400 audit(1754963427.266:1122): avc: denied { read } for pid=5518 comm="syz.2.801" path="/158/file0/file2" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.559504][ T30] audit: type=1326 audit(1754963427.266:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.583386][ T30] audit: type=1326 audit(1754963427.266:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.606805][ T30] audit: type=1326 audit(1754963427.266:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 67.632428][ T51] bridge_slave_0: left promiscuous mode [ 67.638203][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.718694][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.733369][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.751051][ T51] bond0 (unregistering): Released all slaves [ 67.781084][ T51] hsr_slave_0: left promiscuous mode [ 67.788237][ T51] hsr_slave_1: left promiscuous mode [ 67.794425][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.801908][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.811074][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.818642][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.830067][ T51] veth1_macvtap: left promiscuous mode [ 67.835685][ T51] veth0_macvtap: left promiscuous mode [ 67.841327][ T51] veth1_vlan: left promiscuous mode [ 67.846646][ T51] veth0_vlan: left promiscuous mode [ 67.932108][ T51] team0 (unregistering): Port device team_slave_1 removed [ 67.942514][ T51] team0 (unregistering): Port device team_slave_0 removed [ 67.988665][ T5549] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 68.039860][ T5554] hub 9-0:1.0: USB hub found [ 68.044672][ T5554] hub 9-0:1.0: 8 ports detected [ 68.157094][ T5572] random: crng reseeded on system resumption [ 68.290128][ T5585] netlink: 'syz.1.830': attribute type 21 has an invalid length. [ 68.356057][ T5597] __nla_validate_parse: 3 callbacks suppressed [ 68.356078][ T5597] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.834'. [ 68.527923][ T5620] SELinux: failed to load policy [ 68.745664][ T5648] netem: change failed [ 68.768667][ T5650] netlink: 'syz.0.860': attribute type 2 has an invalid length. [ 68.776446][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.860'. [ 68.842650][ T5660] netlink: 'syz.0.865': attribute type 21 has an invalid length. [ 69.179854][ T5683] vlan2: entered allmulticast mode [ 69.264031][ T5685] random: crng reseeded on system resumption [ 69.322170][ T5693] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 69.356947][ T5691] loop5: detected capacity change from 0 to 8192 [ 69.419448][ T5706] loop2: detected capacity change from 0 to 256 [ 69.454805][ T5709] loop3: detected capacity change from 0 to 4096 [ 69.519094][ T5719] loop2: detected capacity change from 0 to 128 [ 69.564582][ T5719] FAT-fs (loop2): Directory bread(block 32) failed [ 69.571627][ T5719] FAT-fs (loop2): Directory bread(block 33) failed [ 69.579344][ T5719] FAT-fs (loop2): Directory bread(block 34) failed [ 69.586885][ T5719] FAT-fs (loop2): Directory bread(block 35) failed [ 69.605149][ T5719] FAT-fs (loop2): Directory bread(block 36) failed [ 69.638534][ T5719] FAT-fs (loop2): Directory bread(block 37) failed [ 69.645815][ T5719] FAT-fs (loop2): Directory bread(block 38) failed [ 69.652620][ T5719] FAT-fs (loop2): Directory bread(block 39) failed [ 69.664646][ T5719] FAT-fs (loop2): Directory bread(block 40) failed [ 69.675230][ T5719] FAT-fs (loop2): Directory bread(block 41) failed [ 69.737767][ T5719] syz.2.893: attempt to access beyond end of device [ 69.737767][ T5719] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 69.751484][ T5734] netlink: 'syz.5.898': attribute type 21 has an invalid length. [ 69.752039][ T5719] FAT-fs (loop2): Filesystem has been set read-only [ 69.767338][ T5719] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 69.790982][ T5746] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.835722][ T5748] smc: net device bond0 applied user defined pnetid SYZ2 [ 69.866187][ T5748] smc: net device bond0 erased user defined pnetid SYZ2 [ 70.016245][ T5756] SELinux: failed to load policy [ 70.057617][ T5776] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.267538][ T5800] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 70.342416][ T5807] loop3: detected capacity change from 0 to 4096 [ 70.349994][ T5807] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.411284][ T5816] loop1: detected capacity change from 0 to 4096 [ 71.421603][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 71.430628][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 71.583824][ T5876] loop3: detected capacity change from 0 to 1024 [ 71.590998][ T5876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.740524][ T5886] ALSA: seq fatal error: cannot create timer (-22) [ 71.933422][ T5915] vlan2: entered allmulticast mode [ 71.991252][ T5918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 71.997799][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.005516][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 72.014338][ T5920] vhci_hcd: connection closed [ 72.014976][ T26] vhci_hcd: stop threads [ 72.024017][ T26] vhci_hcd: release socket [ 72.028535][ T26] vhci_hcd: disconnect device [ 72.057265][ T5924] loop3: detected capacity change from 0 to 512 [ 72.064607][ T5924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.076354][ T5924] EXT4-fs (loop3): 1 truncate cleaned up [ 72.553606][ T5947] vlan2: entered allmulticast mode [ 72.792431][ T3542] syz_tun (unregistering): left promiscuous mode [ 73.695775][ T5977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.733325][ T5992] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1014'. [ 73.744994][ T5992] xt_socket: unknown flags 0xd0 [ 73.973850][ T5985] chnl_net:caif_netlink_parms(): no params data found [ 74.010020][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.017178][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.024495][ T5985] bridge_slave_0: entered allmulticast mode [ 74.031187][ T5985] bridge_slave_0: entered promiscuous mode [ 74.037894][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.045009][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.052315][ T5985] bridge_slave_1: entered allmulticast mode [ 74.058751][ T5985] bridge_slave_1: entered promiscuous mode [ 74.075797][ T5985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.086237][ T5985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.106028][ T5985] team0: Port device team_slave_0 added [ 74.112751][ T5985] team0: Port device team_slave_1 added [ 74.128936][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.135997][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.162019][ T5985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.173400][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.180378][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.206341][ T5985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.237127][ T5985] hsr_slave_0: entered promiscuous mode [ 74.243340][ T5985] hsr_slave_1: entered promiscuous mode [ 74.249376][ T5985] debugfs: 'hsr0' already exists in 'hsr' [ 74.255187][ T5985] Cannot create hsr debugfs directory [ 74.270971][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 74.270988][ T30] audit: type=1326 audit(1756012009.963:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799c96ebe9 code=0x7ffc0000 [ 74.301243][ T30] audit: type=1326 audit(1756012009.992:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f799c96ebe9 code=0x7ffc0000 [ 74.391044][ T5985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.432244][ T5985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.482818][ T5985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.534091][ T5985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.631296][ T5985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.641965][ T5985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.651864][ T5985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.661539][ T5985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.684419][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.691637][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.698979][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.706114][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.738495][ T5985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.751068][ T5985] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.764244][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.773604][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.797593][ T30] audit: type=1326 audit(1756012010.470:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 74.833021][ T30] audit: type=1326 audit(1756012010.480:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 74.856609][ T30] audit: type=1326 audit(1756012010.480:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 74.880290][ T30] audit: type=1326 audit(1756012010.509:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 74.911582][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.918708][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.932006][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.939123][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.955622][ T5985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.966159][ T5985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.039856][ T5985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.143121][ T6057] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1029'. [ 75.158206][ T5985] veth0_vlan: entered promiscuous mode [ 75.163891][ T6057] xt_socket: unknown flags 0xd0 [ 75.172633][ T5985] veth1_vlan: entered promiscuous mode [ 75.204776][ T5985] veth0_macvtap: entered promiscuous mode [ 75.217433][ T5985] veth1_macvtap: entered promiscuous mode [ 75.245936][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.258582][ T6063] loop3: detected capacity change from 0 to 2048 [ 75.269568][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.290522][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309939][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.319327][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.351396][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.371457][ T30] audit: type=1400 audit(1756012011.026:1228): avc: denied { write } for pid=5985 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 75.396975][ T30] audit: type=1400 audit(1756012011.026:1229): avc: denied { open } for pid=5985 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 75.432125][ T6063] loop3: p2 p3 p7 [ 75.522800][ T6082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6082 comm=syz.3.1040 [ 75.535373][ T6082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6082 comm=syz.3.1040 [ 75.594961][ T6088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6088 comm=syz.1.1045 [ 75.607618][ T6088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6088 comm=syz.1.1045 [ 75.634419][ T30] audit: type=1400 audit(1756012011.280:1230): avc: denied { setopt } for pid=6085 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.897733][ T30] audit: type=1326 audit(1756012011.553:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36080ebe9 code=0x7ffc0000 [ 76.052502][ T6115] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 76.059078][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.066950][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 76.110648][ T6116] vhci_hcd: connection closed [ 76.118865][ T339] vhci_hcd: stop threads [ 76.127849][ T339] vhci_hcd: release socket [ 76.132335][ T339] vhci_hcd: disconnect device [ 76.418262][ T6131] loop3: detected capacity change from 0 to 8192 [ 76.638476][ T6148] sd 0:0:1:0: device reset [ 76.661934][ T6152] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1071'. [ 76.699284][ T6154] loop3: detected capacity change from 0 to 1024 [ 76.708685][ T6154] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.730406][ T6154] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.746436][ T6154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.785578][ T6154] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1073: Failed to acquire dquot type 0 [ 76.818456][ T6154] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1073: Failed to acquire dquot type 0 [ 76.843502][ T6154] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1073: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.859656][ T6154] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1073: Failed to acquire dquot type 0 [ 76.872999][ T6154] EXT4-fs (loop3): 1 orphan inode deleted [ 76.882030][ T6154] EXT4-fs mount: 16 callbacks suppressed [ 76.882058][ T6154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.904967][ T6163] loop5: detected capacity change from 0 to 256 [ 76.926102][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.941393][ T6163] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 77.006834][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 77.017298][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'. [ 77.026860][ T6181] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 77.034684][ T6181] netlink: 'syz.2.1087': attribute type 2 has an invalid length. [ 77.042570][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 77.088216][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1100'. [ 77.109666][ T6189] syzkaller0: entered promiscuous mode [ 77.115403][ T6189] syzkaller0: entered allmulticast mode [ 77.123636][ T6191] loop5: detected capacity change from 0 to 512 [ 77.129981][ T6187] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 77.137871][ T6187] netlink: 'syz.0.1100': attribute type 2 has an invalid length. [ 77.145668][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'. [ 77.172153][ T6191] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1090: casefold flag without casefold feature [ 77.192941][ T6191] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1090: couldn't read orphan inode 15 (err -117) [ 77.214761][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1093'. [ 77.223850][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1093'. [ 77.239612][ T6191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.321479][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.427005][ T6230] syzkaller0: entered promiscuous mode [ 77.432536][ T6230] syzkaller0: entered allmulticast mode [ 77.607675][ T6250] sd 0:0:1:0: device reset [ 77.913345][ T6273] 9pnet_fd: Insufficient options for proto=fd [ 78.179974][ T6291] IPVS: Error joining to the multicast group [ 78.331072][ T6310] veth1_to_bridge: entered allmulticast mode [ 78.337626][ T6310] veth1_to_bridge: left allmulticast mode [ 78.388575][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.395941][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.436308][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.446732][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.481421][ T360] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.490914][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.500867][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.510616][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.377596][ T6369] batadv_slave_1: entered promiscuous mode [ 79.398764][ T6368] batadv_slave_1: left promiscuous mode [ 79.436182][ T6371] loop5: detected capacity change from 0 to 2048 [ 79.444449][ T6371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.469480][ T6371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.487535][ T6371] __nla_validate_parse: 10 callbacks suppressed [ 79.487557][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1172'. [ 79.514715][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.737751][ T6396] C: renamed from team_slave_0 (while UP) [ 79.747075][ T6396] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1184'. [ 79.979569][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 79.979587][ T30] audit: type=1400 audit(1756012015.531:1336): avc: denied { mounton } for pid=6405 comm="syz.2.1189" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 80.269789][ T30] audit: type=1326 audit(1756012015.825:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.293360][ T30] audit: type=1326 audit(1756012015.825:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.335767][ T30] audit: type=1326 audit(1756012015.894:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.359287][ T30] audit: type=1326 audit(1756012015.894:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.382811][ T30] audit: type=1326 audit(1756012015.894:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.445342][ T6417] SELinux: failed to load policy [ 80.471967][ T30] audit: type=1326 audit(1756012016.031:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6422 comm="syz.3.1196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f799c96ebe9 code=0x0 [ 80.531830][ T30] audit: type=1326 audit(1756012016.090:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.555969][ T30] audit: type=1326 audit(1756012016.090:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.579873][ T30] audit: type=1326 audit(1756012016.090:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe451f5ebe9 code=0x7ffc0000 [ 80.714843][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'. [ 80.745048][ T6446] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.831034][ T6455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1210'. [ 80.881336][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'. [ 80.890486][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'. [ 80.902910][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'. [ 80.912147][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'. [ 81.016603][ T2955] kernel write not supported for file bpf-prog (pid: 2955 comm: kworker/0:2) [ 81.106640][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 81.175434][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1227'. [ 81.401240][ T6525] bond1: entered promiscuous mode [ 81.406507][ T6525] bond1: entered allmulticast mode [ 81.413718][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.424875][ T6525] bond1 (unregistering): Released all slaves [ 81.488969][ T6536] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 81.776644][ T6556] loop5: detected capacity change from 0 to 1024 [ 81.783602][ T6556] EXT4-fs: Ignoring removed orlov option [ 81.789477][ T6556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.822945][ T6556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.876231][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.491109][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.510684][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.531274][ T6665] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.554657][ T6665] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.906251][ T6722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.922876][ T6722] bond1: (slave batadv1): Opening slave failed [ 83.033964][ T6728] bond2: entered promiscuous mode [ 83.039196][ T6728] bond2: entered allmulticast mode [ 83.044713][ T6728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.056136][ T6728] bond2 (unregistering): Released all slaves [ 83.232780][ T6756] hub 9-0:1.0: USB hub found [ 83.245064][ T6756] hub 9-0:1.0: 8 ports detected [ 83.288936][ T6764] loop5: detected capacity change from 0 to 512 [ 83.311538][ T6764] EXT4-fs: Ignoring removed bh option [ 83.322727][ T6768] netlink: 'syz.0.1355': attribute type 3 has an invalid length. [ 83.323852][ T6764] EXT4-fs: Mount option(s) incompatible with ext3 [ 83.689950][ T6810] pimreg: entered allmulticast mode [ 83.714135][ T6810] pimreg: left allmulticast mode [ 83.867504][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.885090][ T6838] bond2: (slave batadv1): Opening slave failed [ 84.149054][ T6878] netlink: 'syz.3.1402': attribute type 3 has an invalid length. [ 84.184581][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.192085][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.201791][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.209297][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.578021][ T6910] __nla_validate_parse: 17 callbacks suppressed [ 84.578036][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 84.603586][ T6910] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1426'. [ 84.612881][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 84.647633][ T2955] IPVS: starting estimator thread 0... [ 84.653367][ T6909] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 84.708992][ T6922] sd 0:0:1:0: device reset [ 84.751847][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1429'. [ 84.761579][ T6915] IPVS: using max 1968 ests per chain, 98400 per kthread [ 84.828572][ T6942] serio: Serial port ttyS3 [ 84.910750][ T6948] pimreg: entered allmulticast mode [ 84.918586][ T6948] pimreg: left allmulticast mode [ 85.006674][ T6959] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1439'. [ 85.023149][ T6959] batadv0: entered promiscuous mode [ 85.028526][ T6959] batadv0: entered allmulticast mode [ 85.110170][ T30] kauditd_printk_skb: 289 callbacks suppressed [ 85.110189][ T30] audit: type=1326 audit(1756012020.601:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.140645][ T30] audit: type=1326 audit(1756012020.601:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.164180][ T30] audit: type=1326 audit(1756012020.611:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.187969][ T30] audit: type=1326 audit(1756012020.611:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.211614][ T30] audit: type=1326 audit(1756012020.611:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.235395][ T30] audit: type=1326 audit(1756012020.611:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.258863][ T30] audit: type=1326 audit(1756012020.611:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.282518][ T30] audit: type=1326 audit(1756012020.611:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.306069][ T30] audit: type=1326 audit(1756012020.611:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.329736][ T30] audit: type=1326 audit(1756012020.611:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b5c7ebe9 code=0x7ffc0000 [ 85.812826][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 85.837929][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.883889][ T7004] bond1: (slave batadv1): Opening slave failed [ 86.011011][ T6998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.069516][ T6998] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.089509][ T6998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.133042][ T7023] serio: Serial port ttyS3 [ 86.158633][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1466'. [ 86.175249][ T7025] hsr_slave_0 (unregistering): left promiscuous mode [ 86.218247][ T7028] syzkaller0: entered promiscuous mode [ 86.224039][ T7028] syzkaller0: entered allmulticast mode [ 86.860097][ T7046] ip6gretap0: entered promiscuous mode [ 86.867448][ T7046] ip6gretap0: left promiscuous mode [ 86.876415][ T7049] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1477'. [ 86.890944][ T7049] batadv1: entered promiscuous mode [ 86.896173][ T7049] batadv1: entered allmulticast mode [ 86.923049][ T3410] hid_parser_main: 33 callbacks suppressed [ 86.923065][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.936373][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.943909][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.952021][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.959553][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.966972][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.974532][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.982009][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.989453][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.996907][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.005218][ T3410] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 87.143983][ T7067] usb usb8: usbfs: process 7067 (syz.5.1486) did not claim interface 0 before use [ 87.290114][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'. [ 87.318640][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.339008][ T7077] bond1: (slave batadv1): Opening slave failed [ 87.568740][ T3410] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 87.695035][ T7090] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1494'. [ 87.709879][ T7090] batadv1: entered promiscuous mode [ 87.715164][ T7090] batadv1: entered allmulticast mode [ 87.801175][ T7098] ref_ctr_offset mismatch. inode: 0x2ec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 87.961390][ T7117] netlink: 'syz.2.1508': attribute type 21 has an invalid length. [ 88.056663][ T7130] batadv1: entered promiscuous mode [ 88.061986][ T7130] batadv1: entered allmulticast mode [ 88.071092][ T7131] loop5: detected capacity change from 0 to 512 [ 88.079748][ T7131] journal_path: Lookup failure for './file0/../file0' [ 88.081644][ T7129] ref_ctr_offset mismatch. inode: 0x5e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 88.086592][ T7131] EXT4-fs: error: could not find journal device path [ 88.116266][ T7134] ip6gretap0: entered promiscuous mode [ 88.124094][ T7134] ip6gretap0: left promiscuous mode [ 88.525447][ T7172] batadv1: entered promiscuous mode [ 88.530838][ T7172] batadv1: entered allmulticast mode [ 88.612265][ T7150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.769416][ T7174] hsr_slave_0 (unregistering): left promiscuous mode [ 88.835883][ T7186] loop7: detected capacity change from 0 to 16384 [ 88.902548][ T7186] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 88.929309][ T7186] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 88.951864][ T7186] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.961357][ T7186] Buffer I/O error on dev loop7, logical block 544, async page read [ 89.007020][ T7198] ref_ctr_offset mismatch. inode: 0x2a3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 89.021306][ T7185] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 89.031247][ T7185] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 89.039783][ T7185] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 89.048283][ T7185] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 89.056729][ T7185] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 89.065611][ T7185] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 89.074357][ T7185] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 89.082747][ T7185] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 89.091103][ T7185] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 89.099534][ T7185] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 89.114669][ T7185] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 89.134324][ T7185] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 89.165630][ T7185] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 89.184929][ T7185] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 89.198013][ T7210] ip6gretap0: entered promiscuous mode [ 89.206342][ T7210] ip6gretap0: left promiscuous mode [ 89.274311][ T7218] loop9: detected capacity change from 0 to 7 [ 89.280625][ T7218] loop9: unable to read partition table [ 89.302321][ T7218] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 89.302321][ T7218] ) failed (rc=-5) [ 89.460604][ T7241] pim6reg9: entered allmulticast mode [ 89.498059][ T7206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.709530][ T7270] __nla_validate_parse: 9 callbacks suppressed [ 89.709613][ T7270] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1581'. [ 89.730733][ T7270] batadv1: entered promiscuous mode [ 89.735986][ T7270] batadv1: entered allmulticast mode [ 89.767004][ T7280] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 89.777964][ T7275] ip6gretap0: entered promiscuous mode [ 89.786267][ T7275] ip6gretap0: left promiscuous mode [ 89.834156][ T7281] ================================================================== [ 89.842298][ T7281] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 89.850913][ T7281] [ 89.853266][ T7281] write to 0xffff888120a07b28 of 8 bytes by task 7278 on cpu 1: [ 89.860910][ T7281] shmem_file_splice_read+0x470/0x600 [ 89.866304][ T7281] splice_direct_to_actor+0x26c/0x680 [ 89.871696][ T7281] do_splice_direct+0xda/0x150 [ 89.876462][ T7281] do_sendfile+0x380/0x650 [ 89.880888][ T7281] __x64_sys_sendfile64+0x105/0x150 [ 89.886091][ T7281] x64_sys_call+0x2bb0/0x2ff0 [ 89.890779][ T7281] do_syscall_64+0xd2/0x200 [ 89.895297][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.901204][ T7281] [ 89.903533][ T7281] write to 0xffff888120a07b28 of 8 bytes by task 7281 on cpu 0: [ 89.911168][ T7281] shmem_file_splice_read+0x470/0x600 [ 89.916554][ T7281] splice_direct_to_actor+0x26c/0x680 [ 89.921939][ T7281] do_splice_direct+0xda/0x150 [ 89.926709][ T7281] do_sendfile+0x380/0x650 [ 89.931140][ T7281] __x64_sys_sendfile64+0x105/0x150 [ 89.936357][ T7281] x64_sys_call+0x2bb0/0x2ff0 [ 89.941067][ T7281] do_syscall_64+0xd2/0x200 [ 89.945587][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.951485][ T7281] [ 89.953808][ T7281] value changed: 0x0000000000031341 -> 0x00000000000313d4 [ 89.960917][ T7281] [ 89.963248][ T7281] Reported by Kernel Concurrency Sanitizer on: [ 89.969403][ T7281] CPU: 0 UID: 0 PID: 7281 Comm: syz.3.1582 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.981484][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.991549][ T7281] ================================================================== [ 90.277925][ T339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.387612][ T339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.437954][ T339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.489552][ T339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.549456][ T339] bridge_slave_1: left allmulticast mode [ 90.555194][ T339] bridge_slave_1: left promiscuous mode [ 90.560907][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.568617][ T339] bridge_slave_0: left allmulticast mode [ 90.574286][ T339] bridge_slave_0: left promiscuous mode [ 90.580038][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.680534][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.690851][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.700485][ T339] bond0 (unregistering): Released all slaves [ 90.709013][ T339] bond1 (unregistering): Released all slaves [ 90.772288][ T339] hsr_slave_1: left promiscuous mode [ 90.780616][ T339] veth1_macvtap: left promiscuous mode [ 90.786101][ T339] veth0_macvtap: left promiscuous mode [ 90.791638][ T339] veth1_vlan: left promiscuous mode [ 90.796895][ T339] veth0_vlan: left promiscuous mode [ 90.852412][ T339] team0 (unregistering): Port device team_slave_1 removed [ 90.862497][ T339] team0 (unregistering): Port device team_slave_0 removed [ 91.166136][ T339] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.225325][ T339] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.266354][ T339] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.346318][ T339] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.429158][ T339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.439516][ T339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.478072][ T339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.488410][ T339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.528356][ T339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.538691][ T339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.568278][ T339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.578618][ T339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.792330][ T339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.831304][ T339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.890927][ T339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.951895][ T339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.013752][ T339] bridge_slave_1: left allmulticast mode [ 92.019451][ T339] bridge_slave_1: left promiscuous mode [ 92.025357][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.033027][ T339] bridge_slave_0: left allmulticast mode [ 92.038674][ T339] bridge_slave_0: left promiscuous mode [ 92.044581][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.053247][ T339] bridge_slave_1: left allmulticast mode [ 92.058965][ T339] bridge_slave_1: left promiscuous mode [ 92.064654][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.072398][ T339] bridge_slave_0: left promiscuous mode [ 92.078074][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.086307][ T339] bridge_slave_1: left allmulticast mode [ 92.092036][ T339] bridge_slave_1: left promiscuous mode [ 92.097748][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.105337][ T339] bridge_slave_0: left promiscuous mode [ 92.111067][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.119325][ T339] bridge_slave_1: left allmulticast mode [ 92.125015][ T339] bridge_slave_1: left promiscuous mode [ 92.130795][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.138627][ T339] bridge_slave_0: left promiscuous mode [ 92.144281][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.314588][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.324335][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.333867][ T339] bond0 (unregistering): Released all slaves [ 92.342441][ T339] bond1 (unregistering): Released all slaves [ 92.406040][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.415904][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.425696][ T339] bond0 (unregistering): Released all slaves [ 92.434345][ T339] bond1 (unregistering): Released all slaves [ 92.476523][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.485773][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.495904][ T339] bond0 (unregistering): Released all slaves [ 92.504147][ T339] bond1 (unregistering): Released all slaves [ 92.512732][ T339] bond2 (unregistering): Released all slaves [ 92.566512][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.576203][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.585654][ T339] bond0 (unregistering): Released all slaves [ 92.635356][ T339] hsr_slave_1: left promiscuous mode [ 92.640997][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.648438][ T339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.656625][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.664027][ T339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.673249][ T339] hsr_slave_0: left promiscuous mode [ 92.679466][ T339] hsr_slave_1: left promiscuous mode [ 92.685078][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.692520][ T339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.700178][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.707666][ T339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.718180][ T339] hsr_slave_0: left promiscuous mode [ 92.723761][ T339] hsr_slave_1: left promiscuous mode [ 92.729409][ T339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.736926][ T339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.746955][ T339] hsr_slave_0: left promiscuous mode [ 92.752589][ T339] hsr_slave_1: left promiscuous mode [ 92.758254][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.765686][ T339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.773223][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.780683][ T339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.798928][ T339] veth1_macvtap: left promiscuous mode [ 92.804421][ T339] veth0_macvtap: left promiscuous mode [ 92.809970][ T339] veth1_vlan: left promiscuous mode [ 92.815273][ T339] veth0_vlan: left promiscuous mode [ 92.821011][ T339] veth1_macvtap: left promiscuous mode [ 92.826572][ T339] veth0_macvtap: left promiscuous mode [ 92.832104][ T339] veth1_vlan: left promiscuous mode [ 92.837725][ T339] veth0_vlan: left promiscuous mode [ 92.843542][ T339] veth1_macvtap: left promiscuous mode [ 92.849081][ T339] veth0_macvtap: left promiscuous mode [ 92.854596][ T339] veth1_vlan: left promiscuous mode [ 92.859978][ T339] veth0_vlan: left promiscuous mode [ 92.987139][ T339] team0 (unregistering): Port device team_slave_1 removed [ 92.997343][ T339] team0 (unregistering): Port device C removed [ 93.051451][ T339] team0 (unregistering): Port device team_slave_1 removed [ 93.060827][ T339] team0 (unregistering): Port device team_slave_0 removed [ 93.115156][ T339] team0 (unregistering): Port device team_slave_1 removed [ 93.124471][ T339] team0 (unregistering): Port device team_slave_0 removed [ 93.155824][ T339] pim6reg9 (unregistering): left allmulticast mode [ 93.186940][ T339] team0 (unregistering): Port device team_slave_1 removed [ 93.196744][ T339] team0 (unregistering): Port device team_slave_0 removed [ 94.071792][ T339] IPVS: stop unused estimator thread 0... [ 94.078217][ T339] IPVS: stop unused estimator thread 0... [ 94.088728][ T339] ------------[ cut here ]------------ [ 94.094351][ T339] WARNING: CPU: 1 PID: 339 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 94.103869][ T339] Modules linked in: [ 94.107848][ T339] CPU: 1 UID: 0 PID: 339 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 94.120044][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.130128][ T339] Workqueue: netns cleanup_net [ 94.134914][ T339] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 94.140536][ T339] Code: 48 8d bb 30 0e 00 00 e8 a2 4f bd fc 48 8b bb 30 0e 00 00 e8 06 cf c9 fc 5b 41 5e 41 5f 5d e9 cb 92 b3 00 cc e8 25 92 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 17 92 a2 fc 90 0f 0b 90 4c 89 f7 e8 6b [ 94.160244][ T339] RSP: 0018:ffffc9000124fc60 EFLAGS: 00010293 [ 94.166317][ T339] RAX: ffffffff84b5679b RBX: ffff88810a6297c0 RCX: ffff888101579080 [ 94.174392][ T339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a62a5c0 [ 94.182396][ T339] RBP: ffffffff86c8a3e0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 94.190406][ T339] R10: ffffc9000124fbe8 R11: 0001c9000124fbe8 R12: ffffffff86c8a400 [ 94.198454][ T339] R13: ffff88810a6297e8 R14: ffff88810a62a5c0 R15: ffff88810a6297c0 [ 94.206480][ T339] FS: 0000000000000000(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 94.215503][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.222169][ T339] CR2: 0000001b32408ff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 94.230193][ T339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.238209][ T339] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 94.246191][ T339] Call Trace: [ 94.249508][ T339] [ 94.252460][ T339] xfrm_net_exit+0x2d/0x60 [ 94.256888][ T339] ops_undo_list+0x278/0x410 [ 94.261527][ T339] cleanup_net+0x2de/0x4d0 [ 94.265962][ T339] process_scheduled_works+0x4ce/0x9d0 [ 94.271476][ T339] worker_thread+0x582/0x770 [ 94.276132][ T339] kthread+0x486/0x510 [ 94.280242][ T339] ? finish_task_switch+0xad/0x2b0 [ 94.285462][ T339] ? __pfx_worker_thread+0x10/0x10 [ 94.290623][ T339] ? __pfx_kthread+0x10/0x10 [ 94.295246][ T339] ret_from_fork+0xda/0x150 [ 94.299838][ T339] ? __pfx_kthread+0x10/0x10 [ 94.304493][ T339] ret_from_fork_asm+0x1a/0x30 [ 94.309362][ T339] [ 94.312394][ T339] ---[ end trace 0000000000000000 ]---