last executing test programs: 1.746283416s ago: executing program 2 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RLERRORu(r1, 0x0, 0x53) 1.236584125s ago: executing program 0 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200"], 0xfc}}, 0x0) 1.184179677s ago: executing program 0 (id=1067): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 1.00671388s ago: executing program 3 (id=1063): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) 977.670701ms ago: executing program 4 (id=1064): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 977.183131ms ago: executing program 0 (id=1065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 919.967002ms ago: executing program 3 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 919.583762ms ago: executing program 2 (id=1068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 895.912612ms ago: executing program 0 (id=1070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0xa, 0x2) 865.938723ms ago: executing program 3 (id=1071): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) close(r0) 865.679493ms ago: executing program 4 (id=1072): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 865.429433ms ago: executing program 2 (id=1073): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0xff}, 0x18) fgetxattr(r0, &(0x7f0000000300)=@known='security.selinux\x00', 0x0, 0x0) 830.962364ms ago: executing program 0 (id=1074): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000e"], 0x4c}}, 0x0) 800.199194ms ago: executing program 3 (id=1075): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x95bda107d86ebb57, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0xf35}, {&(0x7f0000001500)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) 744.079125ms ago: executing program 2 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r3, r2) 727.687675ms ago: executing program 0 (id=1077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x6) 726.899916ms ago: executing program 4 (id=1078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) close(r1) 726.477866ms ago: executing program 2 (id=1080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x1, 0x8, 0x200, 0x2, 0x7}, 0x7, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x81, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x7fffffff, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x9, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x6, 0x2, 0x3, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x0, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x8, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x7, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x2ed, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0xd, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6565, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x0) 718.665116ms ago: executing program 4 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) 683.274597ms ago: executing program 3 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 618.729928ms ago: executing program 1 (id=1084): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 618.398457ms ago: executing program 3 (id=1085): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 617.971727ms ago: executing program 2 (id=1094): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="610302034302060102b78c02"], 0xc) 617.681048ms ago: executing program 1 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 263.072375ms ago: executing program 4 (id=1086): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 262.507045ms ago: executing program 1 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000002}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x45, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8000000}, 0x50) 162.270097ms ago: executing program 1 (id=1087): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="3414", 0x2}], 0x1) 94.303118ms ago: executing program 1 (id=1088): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 34.761329ms ago: executing program 1 (id=1089): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 33.734982][ T29] audit: type=1400 audit(1757537527.339:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.736200][ T3293] cgroup: Unknown subsys name 'net' [ 33.757851][ T29] audit: type=1400 audit(1757537527.339:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.785261][ T29] audit: type=1400 audit(1757537527.369:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.925815][ T3293] cgroup: Unknown subsys name 'cpuset' [ 33.932254][ T3293] cgroup: Unknown subsys name 'rlimit' [ 34.103965][ T29] audit: type=1400 audit(1757537527.699:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.130571][ T29] audit: type=1400 audit(1757537527.709:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.151289][ T29] audit: type=1400 audit(1757537527.709:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.172261][ T29] audit: type=1400 audit(1757537527.709:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.192869][ T29] audit: type=1400 audit(1757537527.719:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.202734][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.218394][ T29] audit: type=1400 audit(1757537527.719:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.250425][ T29] audit: type=1400 audit(1757537527.839:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.283470][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.645445][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.683374][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.774479][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.804455][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.811950][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.819190][ T3302] bridge_slave_0: entered allmulticast mode [ 35.826134][ T3302] bridge_slave_0: entered promiscuous mode [ 35.837665][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.844957][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.852285][ T3306] bridge_slave_0: entered allmulticast mode [ 35.858944][ T3306] bridge_slave_0: entered promiscuous mode [ 35.871728][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.878957][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.887001][ T3302] bridge_slave_1: entered allmulticast mode [ 35.893802][ T3302] bridge_slave_1: entered promiscuous mode [ 35.905360][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.912721][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.919989][ T3306] bridge_slave_1: entered allmulticast mode [ 35.926548][ T3306] bridge_slave_1: entered promiscuous mode [ 35.972760][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.982321][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.992645][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.010550][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.027288][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.069934][ T3302] team0: Port device team_slave_0 added [ 36.081698][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.088887][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.096224][ T3311] bridge_slave_0: entered allmulticast mode [ 36.102876][ T3311] bridge_slave_0: entered promiscuous mode [ 36.117594][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.127836][ T3302] team0: Port device team_slave_1 added [ 36.134296][ T3306] team0: Port device team_slave_0 added [ 36.141355][ T3306] team0: Port device team_slave_1 added [ 36.147360][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.154510][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.162023][ T3311] bridge_slave_1: entered allmulticast mode [ 36.168595][ T3311] bridge_slave_1: entered promiscuous mode [ 36.218530][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.225829][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.252026][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.271387][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.295327][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.302920][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.329442][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.341095][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.348346][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.375207][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.387423][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.397318][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.404684][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.431979][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.454072][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.462056][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.469760][ T3323] bridge_slave_0: entered allmulticast mode [ 36.476331][ T3323] bridge_slave_0: entered promiscuous mode [ 36.501303][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.508483][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.515934][ T3323] bridge_slave_1: entered allmulticast mode [ 36.522603][ T3323] bridge_slave_1: entered promiscuous mode [ 36.535195][ T3311] team0: Port device team_slave_0 added [ 36.542380][ T3311] team0: Port device team_slave_1 added [ 36.580183][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.587417][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.595072][ T3319] bridge_slave_0: entered allmulticast mode [ 36.601606][ T3319] bridge_slave_0: entered promiscuous mode [ 36.610941][ T3302] hsr_slave_0: entered promiscuous mode [ 36.617241][ T3302] hsr_slave_1: entered promiscuous mode [ 36.629610][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.640484][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.654724][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.661942][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.669368][ T3319] bridge_slave_1: entered allmulticast mode [ 36.675886][ T3319] bridge_slave_1: entered promiscuous mode [ 36.703593][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.710915][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.737327][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.760817][ T3306] hsr_slave_0: entered promiscuous mode [ 36.767033][ T3306] hsr_slave_1: entered promiscuous mode [ 36.773010][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.778807][ T3306] Cannot create hsr debugfs directory [ 36.785524][ T3323] team0: Port device team_slave_0 added [ 36.798363][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.805579][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.832162][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.849744][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.859920][ T3323] team0: Port device team_slave_1 added [ 36.877152][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.920093][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.927352][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.954159][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.973238][ T3319] team0: Port device team_slave_0 added [ 36.986922][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.993896][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.019889][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.036543][ T3319] team0: Port device team_slave_1 added [ 37.070567][ T3311] hsr_slave_0: entered promiscuous mode [ 37.076769][ T3311] hsr_slave_1: entered promiscuous mode [ 37.082654][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 37.088477][ T3311] Cannot create hsr debugfs directory [ 37.125616][ T3323] hsr_slave_0: entered promiscuous mode [ 37.131616][ T3323] hsr_slave_1: entered promiscuous mode [ 37.137487][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.143785][ T3323] Cannot create hsr debugfs directory [ 37.149915][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.156935][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.183021][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.213681][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.220783][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.246866][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.327036][ T3319] hsr_slave_0: entered promiscuous mode [ 37.333684][ T3319] hsr_slave_1: entered promiscuous mode [ 37.339767][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.345609][ T3319] Cannot create hsr debugfs directory [ 37.390456][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.405270][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.425659][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.442196][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.477968][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.486952][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.505716][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.517375][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.543223][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.552411][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.566924][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.576254][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.621254][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.634185][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.643961][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.653074][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.707682][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.718129][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.729517][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.738813][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.749076][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.776204][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.789677][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.797185][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.814269][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.823793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.830936][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.854112][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.875315][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.884740][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.891958][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.922055][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.929365][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.954076][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.001793][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.010560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.017717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.030309][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.037416][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.067524][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.080350][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.116664][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.123777][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.153733][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.173636][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.180809][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.203174][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.213730][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.228703][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.268921][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.294287][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.326347][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.338829][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.345956][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.356960][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.364212][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.387009][ T3306] veth0_vlan: entered promiscuous mode [ 38.416243][ T3306] veth1_vlan: entered promiscuous mode [ 38.473234][ T3306] veth0_macvtap: entered promiscuous mode [ 38.498730][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.515592][ T3306] veth1_macvtap: entered promiscuous mode [ 38.542021][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.566079][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.591440][ T1431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.607823][ T3302] veth0_vlan: entered promiscuous mode [ 38.616364][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.623585][ T1431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.643049][ T3302] veth1_vlan: entered promiscuous mode [ 38.649436][ T1431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.658901][ T1431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.671399][ T3311] veth0_vlan: entered promiscuous mode [ 38.689850][ T3323] veth0_vlan: entered promiscuous mode [ 38.697634][ T3311] veth1_vlan: entered promiscuous mode [ 38.713345][ T3311] veth0_macvtap: entered promiscuous mode [ 38.738436][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.745411][ T3323] veth1_vlan: entered promiscuous mode [ 38.761916][ T3311] veth1_macvtap: entered promiscuous mode [ 38.781661][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 38.781689][ T29] audit: type=1400 audit(1757537532.379:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.797157][ T3468] process 'syz.0.1' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 38.812288][ T29] audit: type=1400 audit(1757537532.379:91): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.812327][ T29] audit: type=1400 audit(1757537532.379:92): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.849177][ T3302] veth0_macvtap: entered promiscuous mode [ 38.881135][ T29] audit: type=1400 audit(1757537532.399:93): avc: denied { execute } for pid=3467 comm="syz.0.1" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.903046][ T29] audit: type=1400 audit(1757537532.429:94): avc: denied { execute_no_trans } for pid=3467 comm="syz.0.1" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.923678][ T3302] veth1_macvtap: entered promiscuous mode [ 38.942685][ T3472] 9pnet_fd: Insufficient options for proto=fd [ 38.942685][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.964012][ T3323] veth0_macvtap: entered promiscuous mode [ 38.981188][ T3323] veth1_macvtap: entered promiscuous mode [ 38.990074][ T29] audit: type=1400 audit(1757537532.539:95): avc: denied { map_create } for pid=3470 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.009103][ T29] audit: type=1400 audit(1757537532.539:96): avc: denied { map_read map_write } for pid=3470 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.028822][ T29] audit: type=1400 audit(1757537532.539:97): avc: denied { prog_load } for pid=3470 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.037159][ T3319] veth0_vlan: entered promiscuous mode [ 39.047684][ T29] audit: type=1400 audit(1757537532.539:98): avc: denied { bpf } for pid=3470 comm="syz.0.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.062002][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.073238][ T29] audit: type=1400 audit(1757537532.539:99): avc: denied { perfmon } for pid=3470 comm="syz.0.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.085360][ T3319] veth1_vlan: entered promiscuous mode [ 39.109101][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.127334][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.137891][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.145643][ T552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.157037][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.167363][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.177012][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.187067][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.218940][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.234721][ T3319] veth0_macvtap: entered promiscuous mode [ 39.257287][ T3319] veth1_macvtap: entered promiscuous mode [ 39.266783][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.290776][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.300867][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.311478][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.321462][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.342010][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.358705][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.368523][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.377968][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.428513][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.457830][ T3385] IPVS: starting estimator thread 0... [ 39.480670][ T3498] loop0: detected capacity change from 0 to 512 [ 39.493479][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.514482][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.535337][ T3498] EXT4-fs: Ignoring removed oldalloc option [ 39.541351][ T3498] EXT4-fs: Ignoring removed bh option [ 39.554037][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.585197][ T3495] IPVS: using max 1872 ests per chain, 93600 per kthread [ 39.607107][ T3498] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.11: corrupted in-inode xattr: e_value size too large [ 39.689121][ T3498] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.11: couldn't read orphan inode 15 (err -117) [ 39.692842][ T3509] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 39.709250][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.769991][ T3509] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 39.777909][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.781267][ T3498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.798608][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.808413][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.819171][ T3509] Zero length message leads to an empty skb [ 39.855420][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.880246][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.893112][ T3509] syz.1.2 (3509) used greatest stack depth: 10800 bytes left [ 39.902564][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.910719][ T3521] netlink: 'syz.2.20': attribute type 4 has an invalid length. [ 39.992719][ T3528] loop4: detected capacity change from 0 to 1024 [ 40.028573][ T3521] netlink: 'syz.2.20': attribute type 4 has an invalid length. [ 40.037937][ T3528] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.059574][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 40.075745][ T3528] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.084043][ T3528] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.091131][ T3528] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.24: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.105657][ T3528] EXT4-fs (loop4): 1 orphan inode deleted [ 40.111940][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.155430][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.279309][ T3562] atomic_op ffff88811af08d28 conn xmit_atomic 0000000000000000 [ 40.304751][ T3566] loop1: detected capacity change from 0 to 256 [ 40.322566][ T3566] ======================================================= [ 40.322566][ T3566] WARNING: The mand mount option has been deprecated and [ 40.322566][ T3566] and is ignored by this kernel. Remove the mand [ 40.322566][ T3566] option from the mount to silence this warning. [ 40.322566][ T3566] ======================================================= [ 40.416442][ T3566] FAT-fs (loop1): Directory bread(block 64) failed [ 40.423132][ T3566] FAT-fs (loop1): Directory bread(block 65) failed [ 40.446233][ T3566] FAT-fs (loop1): Directory bread(block 66) failed [ 40.452823][ T3566] FAT-fs (loop1): Directory bread(block 67) failed [ 40.485268][ T3566] FAT-fs (loop1): Directory bread(block 68) failed [ 40.492168][ T3566] FAT-fs (loop1): Directory bread(block 69) failed [ 40.499138][ T3566] FAT-fs (loop1): Directory bread(block 70) failed [ 40.506334][ T3566] FAT-fs (loop1): Directory bread(block 71) failed [ 40.513085][ T3566] FAT-fs (loop1): Directory bread(block 72) failed [ 40.519899][ T3566] FAT-fs (loop1): Directory bread(block 73) failed [ 40.644150][ T3566] syz.1.39: attempt to access beyond end of device [ 40.644150][ T3566] loop1: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 40.739419][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.739419][ T31] loop1: rw=1, sector=1232, nr_sectors = 600 limit=256 [ 40.766902][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.766902][ T31] loop1: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 40.847034][ T3603] loop4: detected capacity change from 0 to 512 [ 40.864436][ T3603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 40.885351][ T3603] System zones: 0-7 [ 40.893012][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.940846][ T3612] random: crng reseeded on system resumption [ 40.954670][ T3612] Restarting kernel threads ... [ 40.960690][ T3612] Done restarting kernel threads. [ 40.995187][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.120786][ T3622] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 41.282910][ T3638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.71'. [ 41.693845][ T3664] netlink: 'syz.4.79': attribute type 21 has an invalid length. [ 41.701958][ T3664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.79'. [ 41.711122][ T3664] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 41.752203][ T3668] loop4: detected capacity change from 0 to 764 [ 41.762119][ T3668] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.775175][ T3668] Symlink component flag not implemented [ 41.781258][ T3668] Symlink component flag not implemented (7) [ 41.833726][ T3672] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 41.842011][ T3672] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 41.975583][ T3684] loop3: detected capacity change from 0 to 512 [ 42.000375][ T3684] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.021756][ T3684] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.89: Failed to acquire dquot type 1 [ 42.035319][ T3684] EXT4-fs (loop3): 1 truncate cleaned up [ 42.041986][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.056908][ T3684] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.187093][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'. [ 42.208605][ T3697] netlink: 104 bytes leftover after parsing attributes in process `syz.3.94'. [ 42.217938][ T3698] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 42.225724][ T3698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.95'. [ 42.251465][ T3698] vlan0: entered promiscuous mode [ 42.256758][ T3698] vlan0: entered allmulticast mode [ 42.262117][ T3698] veth0_vlan: entered allmulticast mode [ 42.324523][ T3703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3703 comm=syz.3.96 [ 42.341457][ T3712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 42.345642][ T3698] bridge0: port 3(vlan0) entered blocking state [ 42.357188][ T3698] bridge0: port 3(vlan0) entered disabled state [ 42.385295][ T3698] bridge0: port 3(vlan0) entered blocking state [ 42.391749][ T3698] bridge0: port 3(vlan0) entered forwarding state [ 42.576378][ T3737] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.668181][ T3747] netlink: 'syz.2.116': attribute type 13 has an invalid length. [ 42.922724][ T3747] bridge0: port 3(vlan0) entered disabled state [ 42.929231][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.936499][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.015861][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.028926][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.255213][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.274776][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.300366][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.319298][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.486265][ T3803] loop2: detected capacity change from 0 to 512 [ 43.510196][ T3803] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.523405][ T3803] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.549192][ T3803] EXT4-fs (loop2): 1 truncate cleaned up [ 43.568455][ T3812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 43.579403][ T3803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.819606][ T3827] loop3: detected capacity change from 0 to 512 [ 43.838184][ T3825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.867563][ T3827] __quota_error: 219 callbacks suppressed [ 43.867584][ T3827] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 43.916250][ T29] audit: type=1400 audit(1757537537.519:317): avc: denied { write } for pid=3833 comm="syz.0.143" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.916903][ T3834] program syz.0.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.940420][ T29] audit: type=1400 audit(1757537537.519:318): avc: denied { open } for pid=3833 comm="syz.0.143" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.974114][ T3827] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.997189][ T3827] EXT4-fs (loop3): mount failed [ 44.040178][ T29] audit: type=1400 audit(1757537537.629:319): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.061337][ T29] audit: type=1400 audit(1757537537.629:320): avc: denied { search } for pid=3032 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.082774][ T29] audit: type=1400 audit(1757537537.629:321): avc: denied { search } for pid=3032 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.104552][ T29] audit: type=1400 audit(1757537537.629:322): avc: denied { search } for pid=3032 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.126370][ T29] audit: type=1400 audit(1757537537.629:323): avc: denied { read } for pid=3032 comm="dhcpcd" name="n25" dev="tmpfs" ino=1166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.148252][ T29] audit: type=1400 audit(1757537537.629:324): avc: denied { open } for pid=3032 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.171494][ T29] audit: type=1400 audit(1757537537.629:325): avc: denied { getattr } for pid=3032 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.203739][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.256712][ T3844] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 44.465117][ T3871] ALSA: seq fatal error: cannot create timer (-22) [ 44.525448][ T3882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.907345][ T3923] ipvlan2: entered promiscuous mode [ 44.917261][ T3923] bridge0: port 3(ipvlan2) entered blocking state [ 44.924095][ T3923] bridge0: port 3(ipvlan2) entered disabled state [ 44.947104][ T3923] ipvlan2: entered allmulticast mode [ 44.952487][ T3923] bridge0: entered allmulticast mode [ 44.959818][ T3923] ipvlan2: left allmulticast mode [ 44.965005][ T3923] bridge0: left allmulticast mode [ 44.983586][ T3928] wireguard0: entered promiscuous mode [ 44.989396][ T3928] wireguard0: entered allmulticast mode [ 45.211402][ T3961] __nla_validate_parse: 4 callbacks suppressed [ 45.211423][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 45.264762][ T3967] loop1: detected capacity change from 0 to 128 [ 45.284302][ T3967] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 45.320678][ T3973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.195'. [ 45.334356][ T3974] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.342389][ T3974] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 45.362569][ T3967] FAT-fs (loop1): FAT read failed (blocknr 128) [ 45.379091][ T3974] syz.0.194 (3974) used greatest stack depth: 10712 bytes left [ 45.469369][ T3986] syzkaller1: entered promiscuous mode [ 45.475033][ T3986] syzkaller1: entered allmulticast mode [ 45.764735][ T4010] team_slave_0: entered promiscuous mode [ 45.771071][ T4010] team_slave_1: entered promiscuous mode [ 45.788456][ T4010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.804897][ T4012] ALSA: seq fatal error: cannot create timer (-19) [ 45.811855][ T4010] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 45.886627][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 45.915205][ T4019] loop4: detected capacity change from 0 to 1024 [ 45.942761][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.957741][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 45.969789][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 45.992243][ T4019] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.216: Allocating blocks 449-513 which overlap fs metadata [ 46.018783][ T4018] EXT4-fs (loop4): pa ffff8881004a2150: logic 48, phys. 177, len 21 [ 46.027499][ T4018] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 46.062007][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.380192][ T4055] loop0: detected capacity change from 0 to 4096 [ 46.410433][ T4055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.424648][ T4055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.548407][ T4065] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 46.556716][ T4065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 46.571017][ T4065] team0: Port device geneve1 added [ 46.596830][ T4065] syz.0.235 (4065) used greatest stack depth: 10584 bytes left [ 46.747969][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 46.758972][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 46.922215][ T4079] netlink: 100 bytes leftover after parsing attributes in process `¬í'. [ 46.937653][ T4077] SELinux: failed to load policy [ 47.090820][ T4083] loop4: detected capacity change from 0 to 128 [ 47.242875][ T4093] netlink: 64 bytes leftover after parsing attributes in process `syz.1.249'. [ 47.690223][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.697631][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.744048][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.758241][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.798298][ T3765] syz1: Port: 1 Link DOWN [ 47.802946][ T1431] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.812965][ T1431] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.835355][ T1431] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.858101][ T1431] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.075551][ T4160] loop0: detected capacity change from 0 to 512 [ 48.088195][ T4160] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.109041][ T4160] EXT4-fs (loop0): 1 truncate cleaned up [ 48.115732][ T4160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.130708][ T4160] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.210153][ T4168] loop0: detected capacity change from 0 to 128 [ 48.234712][ T4168] syz.0.276: attempt to access beyond end of device [ 48.234712][ T4168] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 48.300206][ T4175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.321903][ T4176] loop2: detected capacity change from 0 to 1024 [ 48.356137][ T4176] EXT4-fs: Ignoring removed bh option [ 48.392651][ T4176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.478648][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.494682][ T4192] loop1: detected capacity change from 0 to 1024 [ 48.503272][ T4192] EXT4-fs: Ignoring removed bh option [ 48.532494][ T4192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.570224][ T4192] EXT4-fs error (device loop1): ext4_xattr_set_entry:1660: inode #15: comm syz.1.288: corrupted xattr entries [ 48.588709][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 48.607741][ T4192] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #19: comm syz.1.288: dec ref error=-30 [ 48.670349][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.833642][ T4220] openvswitch: netlink: Message has 6 unknown bytes. [ 48.956308][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 48.956326][ T29] audit: type=1400 audit(1757537542.559:585): avc: denied { cpu } for pid=4230 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.002950][ T29] audit: type=1400 audit(1757537542.559:586): avc: denied { create } for pid=4227 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.022336][ T29] audit: type=1400 audit(1757537542.599:587): avc: denied { name_bind } for pid=4229 comm="syz.4.303" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.043951][ T29] audit: type=1400 audit(1757537542.599:588): avc: denied { setopt } for pid=4227 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.151814][ T29] audit: type=1400 audit(1757537542.749:589): avc: denied { bind } for pid=4227 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.380208][ T29] audit: type=1400 audit(1757537542.799:590): avc: denied { module_request } for pid=4236 comm="syz.3.308" kmod="crypto-cmac(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.402489][ T29] audit: type=1400 audit(1757537542.799:591): avc: denied { execute } for pid=4238 comm="syz.4.307" path="/64/cpu.stat" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.658335][ T29] audit: type=1400 audit(1757537543.259:592): avc: denied { sys_module } for pid=4254 comm="syz.2.312" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.722426][ T4248] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 49.730827][ T4248] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 49.818728][ T29] audit: type=1400 audit(1757537543.409:593): avc: denied { execute_no_trans } for pid=4264 comm="syz.0.315" path="/73/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.901489][ T29] audit: type=1400 audit(1757537543.489:594): avc: denied { firmware_load } for pid=4266 comm="+}[@" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 50.028167][ T4267] +}[@ (4267) used greatest stack depth: 10576 bytes left [ 50.286875][ T4319] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 50.419708][ T4333] loop3: detected capacity change from 0 to 512 [ 50.433602][ C0] hrtimer: interrupt took 36881 ns [ 50.477754][ T4333] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 50.497577][ T4333] System zones: 0-2, 18-18, 34-34 [ 50.528875][ T4347] loop1: detected capacity change from 0 to 164 [ 50.539086][ T4333] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 50.569838][ T4333] EXT4-fs (loop3): Remounting filesystem read-only [ 50.590712][ T4333] EXT4-fs (loop3): 1 truncate cleaned up [ 50.594087][ T4347] syz.1.352: attempt to access beyond end of device [ 50.594087][ T4347] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.597413][ T4333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.624044][ T4333] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.624299][ T51] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.635169][ T4347] syz.1.352: attempt to access beyond end of device [ 50.635169][ T4347] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.645287][ T51] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.686164][ T51] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.731929][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.027342][ T4391] __nla_validate_parse: 4 callbacks suppressed [ 51.027362][ T4391] netlink: 256 bytes leftover after parsing attributes in process `syz.2.372'. [ 51.037338][ T4393] loop0: detected capacity change from 0 to 2048 [ 51.080209][ T4395] netlink: 332 bytes leftover after parsing attributes in process `syz.4.375'. [ 51.117857][ T4393] Alternate GPT is invalid, using primary GPT. [ 51.124271][ T4393] loop0: p2 p3 p7 [ 51.156189][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 51.165201][ T4405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 51.174213][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 51.202021][ T4405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 51.211139][ T4405] netlink: 'syz.4.377': attribute type 6 has an invalid length. [ 51.323650][ T4422] netdevsim netdevsim0: Direct firmware load for 0.€ failed with error -2 [ 51.364413][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 51.380533][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.392454][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 51.411562][ T4430] ALSA: seq fatal error: cannot create timer (-22) [ 51.422284][ T4433] loop3: detected capacity change from 0 to 512 [ 51.436008][ T4433] EXT4-fs: Ignoring removed nobh option [ 51.451951][ T4436] loop0: detected capacity change from 0 to 128 [ 51.523260][ T4433] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.386: corrupted inode contents [ 51.552442][ T4441] loop2: detected capacity change from 0 to 128 [ 51.601006][ T4433] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.386: mark_inode_dirty error [ 51.621952][ T4433] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.386: corrupted inode contents [ 51.648744][ T4433] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.386: mark_inode_dirty error [ 51.649087][ T4441] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.678863][ T4441] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.724261][ T4433] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.386: Failed to acquire dquot type 0 [ 51.754946][ T4433] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.386: corrupted inode contents [ 51.771325][ T4441] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 20: comm syz.2.390: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 51.792687][ T4441] EXT4-fs error (device loop2) in do_split:2029: Corrupt filesystem [ 51.793973][ T4433] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.386: mark_inode_dirty error [ 51.816568][ T4433] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.386: corrupted inode contents [ 51.842665][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.852414][ T4433] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.386: mark_inode_dirty error [ 51.865065][ T4433] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.386: corrupted inode contents [ 51.879877][ T4433] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 51.891726][ T4433] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.386: corrupted inode contents [ 51.904747][ T4433] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.386: mark_inode_dirty error [ 51.916777][ T4433] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 51.926790][ T4433] EXT4-fs (loop3): 1 truncate cleaned up [ 51.932914][ T4433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.946457][ T4468] smc: net device bond0 applied user defined pnetid SYZ0 [ 51.956084][ T4433] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.976153][ T4468] smc: net device bond0 erased user defined pnetid SYZ0 [ 52.007846][ T4433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.063622][ T4480] binfmt_misc: register: failed to install interpreter file ./file2 [ 52.094927][ T4433] syz.3.386 (4433) used greatest stack depth: 9760 bytes left [ 52.159485][ T4486] loop3: detected capacity change from 0 to 1024 [ 52.206692][ T4486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.284978][ T4486] EXT4-fs error (device loop3): __ext4_remount:6740: comm syz.3.410: Abort forced by user [ 52.344659][ T4486] EXT4-fs (loop3): Remounting filesystem read-only [ 52.351496][ T4486] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.430560][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.629313][ T4533] loop2: detected capacity change from 0 to 512 [ 52.647383][ T4533] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.663717][ T4533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.679758][ T4533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 52.683929][ T4542] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 52.691215][ T4533] System zones: [ 52.695752][ T4542] netlink: 224 bytes leftover after parsing attributes in process `syz.4.436'. [ 52.708596][ T4533] 1-12 [ 52.716208][ T4533] EXT4-fs (loop2): 1 truncate cleaned up [ 52.729232][ T4533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.747298][ T4544] mmap: syz.1.437 (4544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.798878][ T4547] loop4: detected capacity change from 0 to 512 [ 52.817880][ T4547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.837232][ T4547] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.936345][ T4556] netlink: 'syz.1.442': attribute type 3 has an invalid length. [ 52.944060][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 52.991817][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.027775][ T4564] loop1: detected capacity change from 0 to 128 [ 53.049532][ T4566] loop4: detected capacity change from 0 to 1024 [ 53.066566][ T4566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.106773][ T4573] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 53.114691][ T4573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'. [ 53.243387][ T4578] loop1: detected capacity change from 0 to 2048 [ 53.272107][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.295768][ T4578] loop1: p1 < > p4 [ 53.300549][ T4583] loop4: detected capacity change from 0 to 2048 [ 53.300697][ T4578] loop1: p4 size 8388608 extends beyond EOD, truncated [ 53.317381][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.340141][ T4583] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.452: bg 0: block 234: padding at end of block bitmap is not set [ 53.391409][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.610585][ T4589] loop4: detected capacity change from 0 to 8192 [ 53.622756][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.652589][ T4600] loop2: detected capacity change from 0 to 128 [ 53.660749][ T4589] loop4: p1 p2 < > p3 p4 < p5 > [ 53.665797][ T4589] loop4: partition table partially beyond EOD, truncated [ 53.670306][ T4600] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 53.682712][ T4589] loop4: p1 size 100663296 extends beyond EOD, truncated [ 53.690830][ T4589] loop4: p2 start 591104 is beyond EOD, truncated [ 53.697433][ T4589] loop4: p3 start 33572980 is beyond EOD, truncated [ 53.704780][ T4589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 53.725227][ T4602] loop0: detected capacity change from 0 to 512 [ 53.732133][ T4602] EXT4-fs: Ignoring removed oldalloc option [ 53.747311][ T4602] EXT4-fs (loop0): 1 truncate cleaned up [ 53.753632][ T4600] syz.2.459: attempt to access beyond end of device [ 53.753632][ T4600] loop2: rw=34817, sector=97, nr_sectors = 120 limit=128 [ 53.767709][ T4602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.827250][ T37] kworker/u8:2: attempt to access beyond end of device [ 53.827250][ T37] loop2: rw=1, sector=217, nr_sectors = 824 limit=128 [ 53.850607][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 53.872523][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.886104][ T4610] loop3: detected capacity change from 0 to 256 [ 53.886442][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 53.893349][ T4610] msdos: Bad value for 'fmask' [ 53.996485][ T4629] rdma_op ffff88811aad2d80 conn xmit_rdma 0000000000000000 [ 54.033223][ T4635] syz.3.475 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.082492][ T4643] loop4: detected capacity change from 0 to 128 [ 54.099817][ T4643] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.116031][ T4643] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.127013][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 54.127030][ T29] audit: type=1400 audit(1757537547.729:785): avc: denied { map } for pid=4644 comm="syz.3.481" path="socket:[8559]" dev="sockfs" ino=8559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.156629][ T29] audit: type=1400 audit(1757537547.729:786): avc: denied { read } for pid=4644 comm="syz.3.481" path="socket:[8559]" dev="sockfs" ino=8559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.182502][ T29] audit: type=1400 audit(1757537547.789:787): avc: denied { create } for pid=4642 comm="syz.4.479" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.207771][ T29] audit: type=1400 audit(1757537547.789:788): avc: denied { add_name } for pid=4642 comm="syz.4.479" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.240922][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.277125][ T4652] 9pnet: Could not find request transport: t [ 54.366487][ T29] audit: type=1400 audit(1757537547.969:789): avc: denied { create } for pid=4670 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.415800][ T4676] loop3: detected capacity change from 0 to 1024 [ 54.474999][ T4676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.475601][ T29] audit: type=1400 audit(1757537548.079:790): avc: denied { write } for pid=4681 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.525679][ T4676] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.494: Allocating blocks 449-513 which overlap fs metadata [ 54.551202][ T4674] EXT4-fs (loop3): pa ffff888106e503f0: logic 48, phys. 177, len 21 [ 54.559518][ T4674] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 54.585442][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.662351][ T4693] team_slave_0: entered promiscuous mode [ 54.669377][ T4693] team_slave_1: entered promiscuous mode [ 54.678756][ T4693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.699285][ T4693] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 54.801913][ T29] audit: type=1400 audit(1757537548.399:791): avc: denied { map } for pid=4701 comm="syz.1.503" path="socket:[8651]" dev="sockfs" ino=8651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 54.963603][ T4716] loop0: detected capacity change from 0 to 1024 [ 54.978118][ T4716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.009483][ T4716] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.511: Allocating blocks 449-513 which overlap fs metadata [ 55.033314][ T4715] EXT4-fs (loop0): pa ffff8881004a2700: logic 48, phys. 177, len 21 [ 55.042966][ T4715] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 55.068656][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.069464][ T29] audit: type=1326 audit(1757537548.669:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 55.102237][ T29] audit: type=1326 audit(1757537548.689:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 55.128485][ T29] audit: type=1326 audit(1757537548.689:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 55.285983][ T3765] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 55.294570][ T3765] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 55.304013][ T3765] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 55.306094][ T4744] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 55.315151][ T3765] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 55.434566][ T4757] loop0: detected capacity change from 0 to 512 [ 55.454134][ T4757] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 55.466361][ T4757] System zones: 0-7 [ 55.470959][ T4757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.522118][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.557850][ T4772] loop0: detected capacity change from 0 to 256 [ 55.575855][ T4772] FAT-fs (loop0): Directory bread(block 64) failed [ 55.582569][ T4772] FAT-fs (loop0): Directory bread(block 65) failed [ 55.592099][ T4772] FAT-fs (loop0): Directory bread(block 66) failed [ 55.600031][ T4772] FAT-fs (loop0): Directory bread(block 67) failed [ 55.607294][ T4772] FAT-fs (loop0): Directory bread(block 68) failed [ 55.614037][ T4772] FAT-fs (loop0): Directory bread(block 69) failed [ 55.622423][ T4772] FAT-fs (loop0): Directory bread(block 70) failed [ 55.630373][ T4772] FAT-fs (loop0): Directory bread(block 71) failed [ 55.641071][ T4772] FAT-fs (loop0): Directory bread(block 72) failed [ 55.648635][ T4772] FAT-fs (loop0): Directory bread(block 73) failed [ 55.749202][ T4772] syz.0.535: attempt to access beyond end of device [ 55.749202][ T4772] loop0: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 55.789268][ T4782] random: crng reseeded on system resumption [ 55.803216][ T4782] Restarting kernel threads ... [ 55.812977][ T4782] Done restarting kernel threads. [ 55.909838][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.909838][ T12] loop0: rw=1, sector=1232, nr_sectors = 600 limit=256 [ 55.931342][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.931342][ T12] loop0: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 56.032401][ T4801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4801 comm=syz.0.547 [ 56.057412][ T4803] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 56.065323][ T4803] __nla_validate_parse: 4 callbacks suppressed [ 56.065344][ T4803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.548'. [ 56.093521][ T4803] vlan0: entered promiscuous mode [ 56.098892][ T4803] vlan0: entered allmulticast mode [ 56.104177][ T4803] veth0_vlan: entered allmulticast mode [ 56.111169][ T4803] bridge0: port 3(vlan0) entered blocking state [ 56.117729][ T4803] bridge0: port 3(vlan0) entered disabled state [ 56.125491][ T4803] bridge0: port 3(vlan0) entered blocking state [ 56.131879][ T4803] bridge0: port 3(vlan0) entered forwarding state [ 56.140715][ T4809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 56.174134][ T4813] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 56.182623][ T4813] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 56.370095][ T4839] netlink: 256 bytes leftover after parsing attributes in process `syz.1.573'. [ 56.426567][ T4847] loop0: detected capacity change from 0 to 512 [ 56.450454][ T4847] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.468687][ T4847] EXT4-fs (loop0): mount failed [ 56.523184][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 56.577777][ T4864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.619401][ T4870] ALSA: seq fatal error: cannot create timer (-22) [ 56.635519][ T4872] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 56.643323][ T4872] netlink: 224 bytes leftover after parsing attributes in process `syz.0.577'. [ 56.751330][ T4889] loop2: detected capacity change from 0 to 1024 [ 56.767733][ T4889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.801636][ T4889] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.584: Allocating blocks 449-513 which overlap fs metadata [ 56.834363][ T4888] EXT4-fs (loop2): pa ffff888106e50460: logic 48, phys. 177, len 21 [ 56.842816][ T4888] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 56.873081][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.887302][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 56.920215][ T4900] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 56.928802][ T4900] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 56.967113][ T4904] loop0: detected capacity change from 0 to 512 [ 56.987200][ T4904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 56.995710][ T4904] System zones: 0-2, 18-18, 34-34 [ 57.004594][ T4904] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 57.030538][ T4904] EXT4-fs (loop0): Remounting filesystem read-only [ 57.045122][ T4904] EXT4-fs (loop0): 1 truncate cleaned up [ 57.065679][ T4914] random: crng reseeded on system resumption [ 57.073429][ T1431] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.084595][ T1431] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.107773][ T4904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.124798][ T4914] Restarting kernel threads ... [ 57.130390][ T4914] Done restarting kernel threads. [ 57.162004][ T1431] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.173216][ T4904] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.227622][ T4926] netlink: 180 bytes leftover after parsing attributes in process `syz.3.611'. [ 57.240446][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.251282][ T4926] netlink: 180 bytes leftover after parsing attributes in process `syz.3.611'. [ 57.308211][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 57.322993][ T4936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.601'. [ 57.409240][ T4949] random: crng reseeded on system resumption [ 57.421294][ T4949] Restarting kernel threads ... [ 57.427326][ T4949] Done restarting kernel threads. [ 57.464003][ T4961] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 57.465917][ T4953] ALSA: seq fatal error: cannot create timer (-19) [ 57.472433][ T4961] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 58.313135][ T4981] loop0: detected capacity change from 0 to 2048 [ 58.320856][ T4980] loop1: detected capacity change from 0 to 4096 [ 58.331537][ T4980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.345880][ T4981] loop0: p1 < > p4 [ 58.346625][ T4980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.363839][ T4981] loop0: p4 size 8388608 extends beyond EOD, truncated [ 58.431277][ T4990] 9pnet: Could not find request transport: t [ 58.607131][ T5015] ipvlan2: entered promiscuous mode [ 58.619786][ T5015] bridge0: port 3(ipvlan2) entered blocking state [ 58.626556][ T5015] bridge0: port 3(ipvlan2) entered disabled state [ 58.626823][ T5015] ipvlan2: entered allmulticast mode [ 58.638493][ T5015] bridge0: entered allmulticast mode [ 58.659934][ T5015] ipvlan2: left allmulticast mode [ 58.665338][ T5015] bridge0: left allmulticast mode [ 58.677597][ T5022] loop0: detected capacity change from 0 to 128 [ 58.779781][ T5039] loop4: detected capacity change from 0 to 128 [ 58.788020][ T5039] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 58.826117][ T5045] ipvlan2: entered promiscuous mode [ 58.826274][ T5039] FAT-fs (loop4): FAT read failed (blocknr 128) [ 58.831942][ T5045] bridge0: port 4(ipvlan2) entered blocking state [ 58.844957][ T5045] bridge0: port 4(ipvlan2) entered disabled state [ 58.851769][ T5045] ipvlan2: entered allmulticast mode [ 58.857438][ T5045] bridge0: entered allmulticast mode [ 58.884368][ T5049] loop0: detected capacity change from 0 to 1024 [ 58.891032][ T5045] ipvlan2: left allmulticast mode [ 58.897424][ T5045] bridge0: left allmulticast mode [ 58.913751][ T5049] EXT4-fs: Ignoring removed bh option [ 58.938556][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.961825][ T5049] EXT4-fs error (device loop0): ext4_xattr_set_entry:1660: inode #15: comm syz.0.665: corrupted xattr entries [ 58.981563][ T5049] EXT4-fs (loop0): Remounting filesystem read-only [ 59.002944][ T5049] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #19: comm syz.0.665: dec ref error=-30 [ 59.029578][ T5059] loop1: detected capacity change from 0 to 1024 [ 59.068407][ T5059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.085299][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.130471][ T5059] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.658: Allocating blocks 449-513 which overlap fs metadata [ 59.158661][ T5058] EXT4-fs (loop1): pa ffff888106e50460: logic 48, phys. 177, len 21 [ 59.167324][ T5058] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 59.191116][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.516050][ T5095] loop2: detected capacity change from 0 to 1024 [ 59.523710][ T5095] EXT4-fs: Ignoring removed bh option [ 59.552498][ T5095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.581995][ T5100] ipvlan2: entered promiscuous mode [ 59.590122][ T5102] loop0: detected capacity change from 0 to 1024 [ 59.598787][ T5095] EXT4-fs error (device loop2): ext4_xattr_set_entry:1660: inode #15: comm syz.2.673: corrupted xattr entries [ 59.598820][ T5100] bridge0: port 4(ipvlan2) entered blocking state [ 59.614352][ T5102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.617609][ T5100] bridge0: port 4(ipvlan2) entered disabled state [ 59.631643][ T5095] EXT4-fs (loop2): Remounting filesystem read-only [ 59.636765][ T5100] ipvlan2: entered allmulticast mode [ 59.648209][ T5100] bridge0: entered allmulticast mode [ 59.654408][ T5100] ipvlan2: left allmulticast mode [ 59.659745][ T5100] bridge0: left allmulticast mode [ 59.667312][ T5095] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #19: comm syz.2.673: dec ref error=-30 [ 59.668943][ T5102] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.676: Allocating blocks 449-513 which overlap fs metadata [ 59.708189][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.715867][ T5101] EXT4-fs (loop0): pa ffff888106e504d0: logic 48, phys. 177, len 21 [ 59.722250][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 59.722269][ T29] audit: type=1326 audit(1757537553.319:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.726405][ T5101] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, [ 59.736920][ T29] audit: type=1326 audit(1757537553.339:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.757044][ T5101] free 0, pa_free 4 [ 59.765493][ T29] audit: type=1326 audit(1757537553.339:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.817155][ T29] audit: type=1326 audit(1757537553.339:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.843073][ T29] audit: type=1326 audit(1757537553.339:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.866535][ T29] audit: type=1326 audit(1757537553.339:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.890466][ T29] audit: type=1326 audit(1757537553.339:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.914205][ T29] audit: type=1326 audit(1757537553.339:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.941206][ T29] audit: type=1326 audit(1757537553.429:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 59.967435][ T29] audit: type=1326 audit(1757537553.569:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ff24eba9 code=0x7ffc0000 [ 60.003999][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.056452][ T5111] netdevsim netdevsim3: Direct firmware load for 0.€ failed with error -2 [ 60.070100][ T5106] loop1: detected capacity change from 0 to 128 [ 60.120807][ T5116] wireguard0: entered promiscuous mode [ 60.126389][ T5116] wireguard0: entered allmulticast mode [ 60.154441][ T5119] loop3: detected capacity change from 0 to 2048 [ 60.167353][ T5119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.198816][ T5119] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.680: bg 0: block 234: padding at end of block bitmap is not set [ 60.253569][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.332657][ T5128] loop3: detected capacity change from 0 to 2048 [ 60.405602][ T5128] loop3: p1 < > p4 [ 60.410798][ T5128] loop3: p4 size 8388608 extends beyond EOD, truncated [ 60.419830][ T5132] loop2: detected capacity change from 0 to 4096 [ 60.431509][ T5134] wireguard0: entered promiscuous mode [ 60.437557][ T5134] wireguard0: entered allmulticast mode [ 60.456350][ T5132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.475691][ T5132] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.546353][ T5149] netlink: 'syz.3.691': attribute type 6 has an invalid length. [ 60.582194][ T5154] ipvlan2: entered promiscuous mode [ 60.594772][ T5154] bridge0: port 3(ipvlan2) entered blocking state [ 60.601561][ T5154] bridge0: port 3(ipvlan2) entered disabled state [ 60.634393][ T5158] loop4: detected capacity change from 0 to 1024 [ 60.635175][ T5154] ipvlan2: entered allmulticast mode [ 60.646515][ T5154] bridge0: entered allmulticast mode [ 60.665320][ T5164] loop3: detected capacity change from 0 to 1024 [ 60.675678][ T5154] ipvlan2: left allmulticast mode [ 60.681395][ T5154] bridge0: left allmulticast mode [ 60.686329][ T5164] EXT4-fs: Ignoring removed bh option [ 60.710029][ T5158] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.696: Allocating blocks 449-513 which overlap fs metadata [ 60.736006][ T5155] EXT4-fs (loop4): pa ffff888106e50380: logic 48, phys. 177, len 21 [ 60.745770][ T5155] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 60.805514][ T5177] netdevsim netdevsim1: Direct firmware load for 0.€ failed with error -2 [ 60.871383][ T5188] netlink: 'syz.1.709': attribute type 6 has an invalid length. [ 60.910489][ T5191] loop4: detected capacity change from 0 to 4096 [ 60.919263][ T5193] loop0: detected capacity change from 0 to 2048 [ 60.948697][ T5193] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.711: bg 0: block 234: padding at end of block bitmap is not set [ 60.994112][ T5198] loop4: detected capacity change from 0 to 2048 [ 61.018944][ T5204] loop0: detected capacity change from 0 to 1024 [ 61.029237][ T5198] loop4: p1 < > p4 [ 61.033946][ T5198] loop4: p4 size 8388608 extends beyond EOD, truncated [ 61.045510][ T5204] EXT4-fs: Ignoring removed bh option [ 61.069926][ T5206] ipvlan2: entered promiscuous mode [ 61.091083][ T5206] bridge0: port 3(ipvlan2) entered blocking state [ 61.091805][ T5210] loop3: detected capacity change from 0 to 1024 [ 61.099738][ T5206] bridge0: port 3(ipvlan2) entered disabled state [ 61.116071][ T5206] ipvlan2: entered allmulticast mode [ 61.123024][ T5206] bridge0: entered allmulticast mode [ 61.129678][ T5206] ipvlan2: left allmulticast mode [ 61.135561][ T5206] bridge0: left allmulticast mode [ 61.161195][ T5210] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.717: Allocating blocks 449-513 which overlap fs metadata [ 61.182879][ T5209] EXT4-fs (loop3): pa ffff8881004a2770: logic 48, phys. 177, len 21 [ 61.191336][ T5209] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 61.246213][ T5218] loop4: detected capacity change from 0 to 256 [ 61.254771][ T5217] wireguard0: entered promiscuous mode [ 61.262921][ T5217] wireguard0: entered allmulticast mode [ 61.270689][ T5218] msdos: Bad value for 'fmask' [ 61.419281][ T5235] loop3: detected capacity change from 0 to 4096 [ 61.473423][ T5239] loop1: detected capacity change from 0 to 512 [ 61.481744][ T5239] EXT4-fs: Ignoring removed nobh option [ 61.497518][ T5239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.737: corrupted inode contents [ 61.510226][ T5239] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.737: mark_inode_dirty error [ 61.526719][ T5243] rdma_op ffff888102abb180 conn xmit_rdma 0000000000000000 [ 61.529548][ T5239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.737: corrupted inode contents [ 61.574986][ T5239] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.737: mark_inode_dirty error [ 61.592624][ T5245] loop3: detected capacity change from 0 to 2048 [ 61.610200][ T5239] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.737: Failed to acquire dquot type 0 [ 61.611763][ T5252] ipvlan2: entered promiscuous mode [ 61.631062][ T5252] bridge0: port 3(ipvlan2) entered blocking state [ 61.637715][ T5252] bridge0: port 3(ipvlan2) entered disabled state [ 61.645228][ T5252] ipvlan2: entered allmulticast mode [ 61.647655][ T5253] loop0: detected capacity change from 0 to 1024 [ 61.651425][ T5252] bridge0: entered allmulticast mode [ 61.652261][ T5252] ipvlan2: left allmulticast mode [ 61.663207][ T5245] Alternate GPT is invalid, using primary GPT. [ 61.666617][ T5252] bridge0: left allmulticast mode [ 61.685292][ T5245] loop3: p2 p3 p7 [ 61.689513][ T5239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.737: corrupted inode contents [ 61.708869][ T5239] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.737: mark_inode_dirty error [ 61.735838][ T5239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.737: corrupted inode contents [ 61.772855][ T5253] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.731: Allocating blocks 449-513 which overlap fs metadata [ 61.790429][ T5239] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.737: mark_inode_dirty error [ 61.819564][ T5239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.737: corrupted inode contents [ 61.843339][ T5251] EXT4-fs (loop0): pa ffff888106e505b0: logic 48, phys. 177, len 21 [ 61.844084][ T5239] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 61.852158][ T5251] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 61.889088][ T5239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.737: corrupted inode contents [ 61.903672][ T5239] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.737: mark_inode_dirty error [ 61.917399][ T5239] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 61.928748][ T5239] EXT4-fs (loop1): 1 truncate cleaned up [ 61.935495][ T5239] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.011942][ T5266] netlink: 'syz.3.740': attribute type 13 has an invalid length. [ 62.052223][ T5272] loop0: detected capacity change from 0 to 164 [ 62.052664][ T5269] wireguard0: entered promiscuous mode [ 62.065372][ T5269] wireguard0: entered allmulticast mode [ 62.081046][ T5272] syz.0.742: attempt to access beyond end of device [ 62.081046][ T5272] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.098668][ T5272] syz.0.742: attempt to access beyond end of device [ 62.098668][ T5272] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.177559][ T5275] loop4: detected capacity change from 0 to 4096 [ 62.219061][ T5282] loop2: detected capacity change from 0 to 256 [ 62.234054][ T5282] FAT-fs (loop2): Directory bread(block 64) failed [ 62.259781][ T5284] loop4: detected capacity change from 0 to 2048 [ 62.268177][ T5282] FAT-fs (loop2): Directory bread(block 65) failed [ 62.277333][ T5282] FAT-fs (loop2): Directory bread(block 66) failed [ 62.284505][ T5282] FAT-fs (loop2): Directory bread(block 67) failed [ 62.292208][ T5282] FAT-fs (loop2): Directory bread(block 68) failed [ 62.299119][ T5282] FAT-fs (loop2): Directory bread(block 69) failed [ 62.306585][ T5282] FAT-fs (loop2): Directory bread(block 70) failed [ 62.313428][ T5282] FAT-fs (loop2): Directory bread(block 71) failed [ 62.321529][ T5266] bridge0: port 3(vlan0) entered disabled state [ 62.324170][ T5282] FAT-fs (loop2): Directory bread(block 72) failed [ 62.331064][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.339667][ T5282] FAT-fs (loop2): Directory bread(block 73) failed [ 62.347178][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.375286][ T5266] team_slave_0: left promiscuous mode [ 62.379214][ T5284] Alternate GPT is invalid, using primary GPT. [ 62.382070][ T5266] team_slave_1: left promiscuous mode [ 62.389220][ T5284] loop4: p2 p3 p7 [ 62.462121][ T5282] syz.2.746: attempt to access beyond end of device [ 62.462121][ T5282] loop2: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 62.622763][ T1431] kworker/u8:6: attempt to access beyond end of device [ 62.622763][ T1431] loop2: rw=1, sector=1232, nr_sectors = 600 limit=256 [ 62.646453][ T1431] kworker/u8:6: attempt to access beyond end of device [ 62.646453][ T1431] loop2: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 62.683566][ T5286] loop4: detected capacity change from 0 to 512 [ 62.707181][ T5286] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.727199][ T5286] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 62.741930][ T5286] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.759: mark_inode_dirty error [ 62.758436][ T5286] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 62.772466][ T5286] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.759: mark_inode_dirty error [ 62.912671][ T5297] rdma_op ffff888102aba980 conn xmit_rdma 0000000000000000 [ 62.940892][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.958219][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.154287][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.169963][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.179476][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.189924][ T5310] loop3: detected capacity change from 0 to 128 [ 63.191953][ T3384] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 63.198675][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.204585][ T3384] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 63.223059][ T3384] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 63.232457][ T3384] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.245219][ T5310] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.298168][ T5318] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.338801][ T5322] rdma_op ffff888103566580 conn xmit_rdma 0000000000000000 [ 63.358501][ T5317] loop1: detected capacity change from 0 to 4096 [ 63.396113][ T5331] loop3: detected capacity change from 0 to 164 [ 63.406631][ T5331] syz.3.766: attempt to access beyond end of device [ 63.406631][ T5331] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 63.427224][ T5331] syz.3.766: attempt to access beyond end of device [ 63.427224][ T5331] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 63.498684][ T5333] loop1: detected capacity change from 0 to 8192 [ 63.555121][ T5333] loop1: p1 p2 < > p3 p4 < p5 > [ 63.560275][ T5333] loop1: partition table partially beyond EOD, truncated [ 63.567704][ T5333] loop1: p1 size 100663296 extends beyond EOD, truncated [ 63.576543][ T5333] loop1: p2 start 591104 is beyond EOD, truncated [ 63.583145][ T5333] loop1: p3 start 33572980 is beyond EOD, truncated [ 63.591527][ T5333] loop1: p5 size 100663296 extends beyond EOD, truncated [ 63.642938][ T3384] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 63.651147][ T3384] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 63.658957][ T3384] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 63.667212][ T3384] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.700441][ T5353] __nla_validate_parse: 13 callbacks suppressed [ 63.700456][ T5353] netlink: 332 bytes leftover after parsing attributes in process `syz.1.774'. [ 63.802108][ T5365] wireguard0: entered promiscuous mode [ 63.807757][ T5365] wireguard0: entered allmulticast mode [ 63.868260][ T5370] loop1: detected capacity change from 0 to 1024 [ 63.889309][ T5370] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.783: Abort forced by user [ 63.900044][ T5370] EXT4-fs (loop1): Remounting filesystem read-only [ 63.907388][ T5370] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.978151][ T5382] loop2: detected capacity change from 0 to 512 [ 63.985508][ T5382] EXT4-fs: Ignoring removed nobh option [ 63.997684][ T5382] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.786: corrupted inode contents [ 64.012391][ T5382] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.786: mark_inode_dirty error [ 64.029154][ T5382] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.786: corrupted inode contents [ 64.041891][ T5382] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.786: mark_inode_dirty error [ 64.055428][ T5382] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.786: Failed to acquire dquot type 0 [ 64.070829][ T5382] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.786: corrupted inode contents [ 64.082992][ T5382] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.786: mark_inode_dirty error [ 64.096312][ T5382] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.786: corrupted inode contents [ 64.117474][ T5382] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.786: mark_inode_dirty error [ 64.138225][ T5382] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.786: corrupted inode contents [ 64.153561][ T5395] loop4: detected capacity change from 0 to 4096 [ 64.161745][ T5382] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 64.197455][ T5382] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.786: corrupted inode contents [ 64.224474][ T5382] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.786: mark_inode_dirty error [ 64.237618][ T5382] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 64.247229][ T5407] wireguard0: entered promiscuous mode [ 64.253078][ T5407] wireguard0: entered allmulticast mode [ 64.261884][ T5382] EXT4-fs (loop2): 1 truncate cleaned up [ 64.268868][ T5382] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.312312][ T5415] loop3: detected capacity change from 0 to 256 [ 64.319468][ T5414] loop2: detected capacity change from 0 to 1024 [ 64.337323][ T5415] FAT-fs (loop3): Directory bread(block 64) failed [ 64.345316][ T5414] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.799: Abort forced by user [ 64.356571][ T5415] FAT-fs (loop3): Directory bread(block 65) failed [ 64.363600][ T5415] FAT-fs (loop3): Directory bread(block 66) failed [ 64.370547][ T5415] FAT-fs (loop3): Directory bread(block 67) failed [ 64.377731][ T5415] FAT-fs (loop3): Directory bread(block 68) failed [ 64.385526][ T5415] FAT-fs (loop3): Directory bread(block 69) failed [ 64.392896][ T5415] FAT-fs (loop3): Directory bread(block 70) failed [ 64.400259][ T5415] FAT-fs (loop3): Directory bread(block 71) failed [ 64.403365][ T5420] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.407639][ T5415] FAT-fs (loop3): Directory bread(block 72) failed [ 64.422933][ T5414] EXT4-fs (loop2): Remounting filesystem read-only [ 64.424563][ T5415] FAT-fs (loop3): Directory bread(block 73) failed [ 64.430671][ T5414] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.544700][ T5415] syz.3.809: attempt to access beyond end of device [ 64.544700][ T5415] loop3: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 64.602063][ T5431] SELinux: failed to load policy [ 64.616830][ T5435] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 64.653596][ T51] kworker/u8:3: attempt to access beyond end of device [ 64.653596][ T51] loop3: rw=1, sector=1232, nr_sectors = 600 limit=256 [ 64.697493][ T51] kworker/u8:3: attempt to access beyond end of device [ 64.697493][ T51] loop3: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 65.088757][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 65.088827][ T29] audit: type=1400 audit(1757537558.689:1071): avc: denied { bind } for pid=5450 comm="syz.2.818" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.116669][ T29] audit: type=1400 audit(1757537558.689:1072): avc: denied { name_bind } for pid=5450 comm="syz.2.818" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 65.138632][ T29] audit: type=1400 audit(1757537558.689:1073): avc: denied { node_bind } for pid=5450 comm="syz.2.818" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 65.169181][ T5458] loop0: detected capacity change from 0 to 1024 [ 65.191585][ T29] audit: type=1326 audit(1757537558.789:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 65.215166][ T29] audit: type=1326 audit(1757537558.789:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 65.241889][ T29] audit: type=1326 audit(1757537558.849:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 65.266156][ T29] audit: type=1326 audit(1757537558.849:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 65.289846][ T29] audit: type=1326 audit(1757537558.849:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b95eba9 code=0x7ffc0000 [ 65.323038][ T29] audit: type=1400 audit(1757537558.919:1079): avc: denied { ioctl } for pid=5459 comm="syz.2.820" path="socket:[10027]" dev="sockfs" ino=10027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.370921][ T5457] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.816: Abort forced by user [ 65.391218][ T5457] EXT4-fs (loop0): Remounting filesystem read-only [ 65.398111][ T5457] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.406505][ T29] audit: type=1400 audit(1757537558.989:1080): avc: denied { create } for pid=5465 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.586804][ T5475] loop4: detected capacity change from 0 to 256 [ 65.626939][ T5475] FAT-fs (loop4): Directory bread(block 64) failed [ 65.646157][ T5475] FAT-fs (loop4): Directory bread(block 65) failed [ 65.646283][ T5482] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 65.652822][ T5475] FAT-fs (loop4): Directory bread(block 66) failed [ 65.669189][ T5475] FAT-fs (loop4): Directory bread(block 67) failed [ 65.676622][ T5475] FAT-fs (loop4): Directory bread(block 68) failed [ 65.687162][ T5475] FAT-fs (loop4): Directory bread(block 69) failed [ 65.700151][ T5475] FAT-fs (loop4): Directory bread(block 70) failed [ 65.707273][ T5475] FAT-fs (loop4): Directory bread(block 71) failed [ 65.714427][ T5475] FAT-fs (loop4): Directory bread(block 72) failed [ 65.722457][ T5475] FAT-fs (loop4): Directory bread(block 73) failed [ 65.736316][ T5494] netlink: 830 bytes leftover after parsing attributes in process `syz.1.831'. [ 65.875446][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 65.887174][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 65.887889][ T5513] IPVS: Error connecting to the multicast addr [ 65.919067][ T5515] netlink: 256 bytes leftover after parsing attributes in process `syz.1.844'. [ 65.981128][ T5526] loop0: detected capacity change from 0 to 128 [ 65.989611][ T5526] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.050453][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.176491][ T5534] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 66.196169][ T5534] SELinux: failed to load policy [ 66.224501][ T5548] loop4: detected capacity change from 0 to 1024 [ 66.276208][ T5548] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 66.284121][ T5550] infiniband syz!: set down [ 66.289149][ T5548] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.289149][ T5548] [ 66.293686][ T5550] infiniband syz!: added team_slave_0 [ 66.303671][ T5548] EXT4-fs (loop4): Total free blocks count 0 [ 66.315920][ T5548] EXT4-fs (loop4): Free/Dirty block details [ 66.321884][ T5548] EXT4-fs (loop4): free_blocks=0 [ 66.327056][ T5548] EXT4-fs (loop4): dirty_blocks=0 [ 66.332399][ T5548] EXT4-fs (loop4): Block reservation details [ 66.338693][ T5548] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 66.352995][ T5550] RDS/IB: syz!: added [ 66.357123][ T5550] smc: adding ib device syz! with port count 1 [ 66.363504][ T5550] smc: ib device syz! port 1 has pnetid [ 66.387601][ T5560] loop1: detected capacity change from 0 to 128 [ 66.416864][ T5560] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.638430][ T57] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.742682][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 66.785540][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 66.849406][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/0:3) [ 66.933307][ T5607] loop0: detected capacity change from 0 to 512 [ 66.949178][ T5607] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.040506][ T5607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.053108][ T5607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 67.062476][ T5607] System zones: 1-12 [ 67.067260][ T5607] EXT4-fs (loop0): 1 truncate cleaned up [ 67.441315][ T5614] loop4: detected capacity change from 0 to 128 [ 67.467999][ T5614] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 67.572165][ T5614] bio_check_eod: 7 callbacks suppressed [ 67.572183][ T5614] syz.4.881: attempt to access beyond end of device [ 67.572183][ T5614] loop4: rw=34817, sector=97, nr_sectors = 120 limit=128 [ 67.719298][ T5620] netlink: 256 bytes leftover after parsing attributes in process `syz.3.884'. [ 67.773463][ T1431] kworker/u8:6: attempt to access beyond end of device [ 67.773463][ T1431] loop4: rw=1, sector=217, nr_sectors = 824 limit=128 [ 67.821741][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.854242][ T1431] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 67.905192][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.933845][ T5628] openvswitch: netlink: Message has 6 unknown bytes. [ 68.143335][ T5642] loop3: detected capacity change from 0 to 128 [ 68.290638][ T5656] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 68.331749][ T5662] ALSA: seq fatal error: cannot create timer (-22) [ 68.398508][ T5667] loop2: detected capacity change from 0 to 1024 [ 68.424951][ T5667] EXT4-fs: Ignoring removed bh option [ 68.441360][ T5667] EXT4-fs: inline encryption not supported [ 68.445844][ T5674] loop0: detected capacity change from 0 to 128 [ 68.479407][ T5667] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.503733][ T5667] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.910: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.533230][ T5667] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.910: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.554771][ T5667] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.910: Failed to acquire dquot type 0 [ 68.570521][ T5667] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.581338][ T5667] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.910: mark_inode_dirty error [ 68.595263][ T5667] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.608172][ T5667] EXT4-fs (loop2): 1 orphan inode deleted [ 68.625299][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.666975][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 68.701302][ T5687] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 68.716997][ T3323] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 68.734030][ T3323] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.765840][ T3323] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 68.840135][ T5701] ALSA: seq fatal error: cannot create timer (-22) [ 68.881676][ T5705] netlink: 'syz.3.927': attribute type 7 has an invalid length. [ 68.935035][ T5709] __nla_validate_parse: 4 callbacks suppressed [ 68.935051][ T5709] netlink: 108 bytes leftover after parsing attributes in process `syz.1.931'. [ 68.953964][ T5709] netlink: 108 bytes leftover after parsing attributes in process `syz.1.931'. [ 68.965103][ T5709] netlink: 108 bytes leftover after parsing attributes in process `syz.1.931'. [ 69.029969][ T5715] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 69.029969][ T5715] program syz.4.933 not setting count and/or reply_len properly [ 69.274042][ T5740] loop4: detected capacity change from 0 to 512 [ 69.288058][ T5740] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.305229][ T5740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.332673][ T5740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 69.342448][ T5740] System zones: 1-12 [ 69.357117][ T5740] EXT4-fs (loop4): 1 truncate cleaned up [ 69.585831][ T5766] loop3: detected capacity change from 0 to 256 [ 70.210309][ T5793] SELinux: policydb version 0 does not match my version range 15-35 [ 70.218860][ T5793] SELinux: failed to load policy [ 70.277583][ T3302] EXT4-fs unmount: 43 callbacks suppressed [ 70.277605][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.554761][ T5806] loop2: detected capacity change from 0 to 1024 [ 70.569046][ T5806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.590306][ T5806] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 70.604029][ T5806] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.604029][ T5806] [ 70.616156][ T5806] EXT4-fs (loop2): Total free blocks count 0 [ 70.622653][ T5806] EXT4-fs (loop2): Free/Dirty block details [ 70.629084][ T5806] EXT4-fs (loop2): free_blocks=0 [ 70.634252][ T5806] EXT4-fs (loop2): dirty_blocks=0 [ 70.639464][ T5806] EXT4-fs (loop2): Block reservation details [ 70.645894][ T5806] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 70.691977][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.747887][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 70.747908][ T29] audit: type=1400 audit(1757537564.349:1224): avc: denied { write } for pid=5819 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.221066][ T5829] loop3: detected capacity change from 0 to 128 [ 71.243405][ T5829] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 71.261526][ T29] audit: type=1400 audit(1757537564.859:1225): avc: denied { bind } for pid=5831 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.323327][ T5829] syz.3.980: attempt to access beyond end of device [ 71.323327][ T5829] loop3: rw=34817, sector=97, nr_sectors = 120 limit=128 [ 71.355571][ T51] kworker/u8:3: attempt to access beyond end of device [ 71.355571][ T51] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 71.429214][ T51] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 71.471420][ T29] audit: type=1400 audit(1757537565.059:1226): avc: denied { setopt } for pid=5839 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.503708][ T29] audit: type=1326 audit(1757537565.099:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.527992][ T29] audit: type=1326 audit(1757537565.099:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.552100][ T29] audit: type=1326 audit(1757537565.099:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.576169][ T29] audit: type=1326 audit(1757537565.099:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.601673][ T29] audit: type=1326 audit(1757537565.099:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.626798][ T29] audit: type=1326 audit(1757537565.099:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.651050][ T29] audit: type=1326 audit(1757537565.099:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8010d9eba9 code=0x7ffc0000 [ 71.689695][ T5855] SELinux: policydb version 0 does not match my version range 15-35 [ 71.703301][ T5855] SELinux: failed to load policy [ 71.739979][ T5862] loop2: detected capacity change from 0 to 1024 [ 71.770444][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.800228][ T5862] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 71.848556][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.994227][ T5888] loop1: detected capacity change from 0 to 512 [ 72.016109][ T5888] EXT4-fs: Ignoring removed bh option [ 72.016769][ T5889] vhci_hcd: invalid port number 96 [ 72.028232][ T5889] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.037477][ T5888] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.047843][ T5888] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 72.064538][ T5893] SELinux: policydb version 0 does not match my version range 15-35 [ 72.073651][ T5893] SELinux: failed to load policy [ 72.080612][ T5888] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 72.132678][ T5888] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 72.141695][ T5902] loop3: detected capacity change from 0 to 1024 [ 72.151223][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.152990][ T5905] Illegal XDP return value 4294967294 on prog (id 731) dev N/A, expect packet loss! [ 72.177774][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.215370][ T5902] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 72.233242][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.261493][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.371759][ T5924] vhci_hcd: invalid port number 96 [ 72.377291][ T5924] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.709915][ T5938] loop0: detected capacity change from 0 to 32768 [ 72.756854][ T5938] loop0: p1 p3 < > [ 73.116906][ T5991] loop1: detected capacity change from 0 to 8192 [ 73.124044][ T5991] msdos: Unknown parameter 'A' [ 73.187880][ T5997] loop1: detected capacity change from 0 to 512 [ 73.199665][ T5997] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1054: dx entry: limit 0 != root limit 125 [ 73.211836][ T5997] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1054: Corrupt directory, running e2fsck is recommended [ 73.226048][ T5997] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 73.234680][ T5997] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1054: corrupted in-inode xattr: invalid ea_ino [ 73.250322][ T5997] EXT4-fs (loop1): Remounting filesystem read-only [ 73.260000][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.290311][ T5997] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 73.312750][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.396598][ T6012] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 73.562490][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1064'. [ 73.570464][ T6023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.571876][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1064'. [ 73.659113][ T6037] netlink: 'syz.4.1072': attribute type 9 has an invalid length. [ 73.666971][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 73.681399][ T51] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.692080][ T6037] netlink: 'syz.4.1072': attribute type 9 has an invalid length. [ 73.700093][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 73.711514][ T51] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.721575][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.745944][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.826405][ T6054] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 73.885254][ T6069] loop3: detected capacity change from 0 to 512 [ 73.892775][ T6069] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.907864][ T6069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.925022][ T6069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 73.936226][ T6069] System zones: 1-12 [ 73.955645][ T6069] EXT4-fs (loop3): 1 truncate cleaned up [ 73.961955][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.979184][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 74.294496][ T6083] loop4: detected capacity change from 0 to 512 [ 74.314099][ T6083] EXT4-fs: Ignoring removed bh option [ 74.329580][ T6083] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.339983][ T6083] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 74.379626][ T6083] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 74.389923][ T6083] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 74.399049][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.525710][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.568282][ T6069] ================================================================== [ 74.577843][ T6069] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 74.586486][ T6069] [ 74.588978][ T6069] read-write to 0xffff88811a448ea8 of 4 bytes by task 6079 on cpu 0: [ 74.597182][ T6069] __writeback_single_inode+0x1e3/0x7c0 [ 74.602853][ T6069] writeback_single_inode+0x167/0x3e0 [ 74.608616][ T6069] sync_inode_metadata+0x5b/0x90 [ 74.613597][ T6069] generic_buffers_fsync_noflush+0xd9/0x120 [ 74.619568][ T6069] ext4_sync_file+0x1ab/0x690 [ 74.624292][ T6069] vfs_fsync_range+0x10d/0x130 [ 74.629090][ T6069] ext4_buffered_write_iter+0x34f/0x3c0 [ 74.634709][ T6069] ext4_file_write_iter+0xdbf/0xf00 [ 74.640056][ T6069] iter_file_splice_write+0x663/0xa60 [ 74.645481][ T6069] direct_splice_actor+0x153/0x2a0 [ 74.650742][ T6069] splice_direct_to_actor+0x30f/0x680 [ 74.656141][ T6069] do_splice_direct+0xda/0x150 [ 74.660936][ T6069] do_sendfile+0x380/0x650 [ 74.665375][ T6069] __x64_sys_sendfile64+0x105/0x150 [ 74.670614][ T6069] x64_sys_call+0x2bb0/0x2ff0 [ 74.675312][ T6069] do_syscall_64+0xd2/0x200 [ 74.679903][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.685816][ T6069] [ 74.688204][ T6069] read to 0xffff88811a448ea8 of 4 bytes by task 6069 on cpu 1: [ 74.695759][ T6069] __mark_inode_dirty+0x191/0x750 [ 74.700821][ T6069] mark_buffer_dirty+0x133/0x210 [ 74.705774][ T6069] block_write_end+0x12d/0x210 [ 74.710587][ T6069] ext4_write_end+0x134/0x730 [ 74.715301][ T6069] generic_perform_write+0x312/0x490 [ 74.720614][ T6069] ext4_buffered_write_iter+0x1ee/0x3c0 [ 74.726190][ T6069] ext4_file_write_iter+0xdbf/0xf00 [ 74.731446][ T6069] iter_file_splice_write+0x663/0xa60 [ 74.736900][ T6069] direct_splice_actor+0x153/0x2a0 [ 74.742292][ T6069] splice_direct_to_actor+0x30f/0x680 [ 74.747763][ T6069] do_splice_direct+0xda/0x150 [ 74.752664][ T6069] do_sendfile+0x380/0x650 [ 74.757335][ T6069] __x64_sys_sendfile64+0x105/0x150 [ 74.762724][ T6069] x64_sys_call+0x2bb0/0x2ff0 [ 74.767422][ T6069] do_syscall_64+0xd2/0x200 [ 74.771951][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.777865][ T6069] [ 74.780289][ T6069] value changed: 0x0000003a -> 0x00000022 [ 74.786319][ T6069] [ 74.788667][ T6069] Reported by Kernel Concurrency Sanitizer on: [ 74.794998][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.3.1085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.804894][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.815073][ T6069] ================================================================== [ 74.971403][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.