last executing test programs: 31.68741653s ago: executing program 3 (id=231): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) inotify_init1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x10132) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 30.863888632s ago: executing program 3 (id=254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 30.812827823s ago: executing program 3 (id=255): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 30.696928485s ago: executing program 3 (id=262): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000a80)={[{@resuid}, {@max_dir_size_kb}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 30.511514097s ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 30.283376581s ago: executing program 3 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000000000}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x0, r2}]) 30.252996861s ago: executing program 32 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000000000}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x0, r2}]) 3.641674655s ago: executing program 0 (id=955): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x909, &(0x7f0000000240)={0x0, 0x770, 0x1, 0x0, 0x18d}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0xdc7, 0xe4bd, 0x1, 0x0, 0x0) 3.471981318s ago: executing program 0 (id=959): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) 3.387345009s ago: executing program 4 (id=964): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) fsmount(r0, 0x0, 0x0) 3.387059169s ago: executing program 4 (id=965): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 2.503215972s ago: executing program 4 (id=988): bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x8aa4, 0x6000) 2.466442763s ago: executing program 4 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2b05090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2.436953273s ago: executing program 4 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 2.141813697s ago: executing program 4 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xa, 0x1, 0x20a9, 0x3, 0x2, 0x1}) 2.121964308s ago: executing program 33 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xa, 0x1, 0x20a9, 0x3, 0x2, 0x1}) 1.876567042s ago: executing program 0 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806fbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad", 0x14}], 0x2) 1.399887319s ago: executing program 0 (id=1006): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2b05090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1.33910635s ago: executing program 0 (id=1010): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xd105) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 639.7359ms ago: executing program 0 (id=1021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 639.60275ms ago: executing program 34 (id=1021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 503.548232ms ago: executing program 1 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 449.300503ms ago: executing program 5 (id=1026): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 405.888594ms ago: executing program 2 (id=1027): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) fsmount(r0, 0x0, 0x0) 405.545183ms ago: executing program 1 (id=1028): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 405.240564ms ago: executing program 2 (id=1029): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x41, 0x0, 0x5, 0x0}) 343.875355ms ago: executing program 5 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{r0}, &(0x7f00000006c0), &(0x7f0000001740)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 343.287204ms ago: executing program 2 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x3b}}, "8000000000000000"}}}}}, 0x2e) 268.123955ms ago: executing program 5 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 267.091976ms ago: executing program 1 (id=1033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 247.791536ms ago: executing program 2 (id=1034): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) close(r0) 235.732586ms ago: executing program 5 (id=1035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 169.127397ms ago: executing program 1 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000340)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4226}, {0xa, 0x4e22, 0x7, @private0, 0xffffffff}, r3, 0x7}}, 0x48) 168.803727ms ago: executing program 2 (id=1037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 168.541017ms ago: executing program 1 (id=1038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 125.701938ms ago: executing program 1 (id=1039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x40000000, 0x3, 0x8000000, 0x0, "ff0f0000000b000000000013000200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 84.141718ms ago: executing program 5 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = eventfd2(0xce77, 0x800) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r2, r3, 0x0) 48.033579ms ago: executing program 5 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 0s ago: executing program 2 (id=1042): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): erformance. Setting the MTU to 1560 would solve the problem. [ 30.468675][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.482325][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.489357][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.515416][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.526490][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.533499][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.559554][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.573161][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.580144][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.606134][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.622329][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.629472][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.655596][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.722297][ T3307] hsr_slave_0: entered promiscuous mode [ 30.728459][ T3307] hsr_slave_1: entered promiscuous mode [ 30.734362][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.742230][ T3307] Cannot create hsr debugfs directory [ 30.749658][ T3313] hsr_slave_0: entered promiscuous mode [ 30.755777][ T3313] hsr_slave_1: entered promiscuous mode [ 30.761619][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.769288][ T3313] Cannot create hsr debugfs directory [ 30.791365][ T3315] hsr_slave_0: entered promiscuous mode [ 30.797671][ T3315] hsr_slave_1: entered promiscuous mode [ 30.803813][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.811395][ T3315] Cannot create hsr debugfs directory [ 30.817009][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.834348][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.843379][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.870816][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.956608][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.980067][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.003681][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.018886][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.054770][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.074867][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.088022][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.096885][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.135133][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.150663][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.160681][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.176220][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.183430][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.199639][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.210871][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.218001][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.239737][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.246860][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.256878][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.276538][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.293061][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.306388][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.314591][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.323554][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.337628][ T2596] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.344773][ T2596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.361682][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.372177][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.387722][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.406066][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.413260][ T2596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.438115][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.474650][ T2596] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.481837][ T2596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.492449][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.499577][ T2596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.547051][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.562324][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.591411][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.600131][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.618144][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.634665][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.641785][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.651550][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.658745][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.682660][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.693119][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.708194][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.715304][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.724615][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.731879][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.762101][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.784357][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.814362][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.824899][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.859205][ T3306] veth0_vlan: entered promiscuous mode [ 31.875989][ T3306] veth1_vlan: entered promiscuous mode [ 31.922286][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.963675][ T3306] veth0_macvtap: entered promiscuous mode [ 31.978686][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.989036][ T3306] veth1_macvtap: entered promiscuous mode [ 32.026649][ T3312] veth0_vlan: entered promiscuous mode [ 32.036024][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.054418][ T3312] veth1_vlan: entered promiscuous mode [ 32.069487][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.096164][ T3313] veth0_vlan: entered promiscuous mode [ 32.103629][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.112432][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121244][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.130036][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145027][ T3312] veth0_macvtap: entered promiscuous mode [ 32.152480][ T3312] veth1_macvtap: entered promiscuous mode [ 32.171941][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.179599][ T3313] veth1_vlan: entered promiscuous mode [ 32.197301][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.217442][ T3307] veth0_vlan: entered promiscuous mode [ 32.232157][ T3315] veth0_vlan: entered promiscuous mode [ 32.239376][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.248166][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.257007][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.265830][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.284755][ T3313] veth0_macvtap: entered promiscuous mode [ 32.295442][ T3315] veth1_vlan: entered promiscuous mode [ 32.301785][ T3307] veth1_vlan: entered promiscuous mode [ 32.342264][ T3313] veth1_macvtap: entered promiscuous mode [ 32.349345][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.360603][ T3315] veth0_macvtap: entered promiscuous mode [ 32.378640][ T3315] veth1_macvtap: entered promiscuous mode [ 32.391921][ T3307] veth0_macvtap: entered promiscuous mode [ 32.407920][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.419779][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.432781][ T3307] veth1_macvtap: entered promiscuous mode [ 32.448940][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.464393][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.472803][ T3478] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 32.473796][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.496933][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.505846][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.514766][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523524][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.567056][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.576438][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.585250][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.594010][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602779][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.622183][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.631069][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.640000][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648842][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.664924][ T3486] netlink: 'syz.1.9': attribute type 21 has an invalid length. [ 32.672524][ T3486] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.682842][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 32.682858][ T29] audit: type=1400 audit(1749773480.082:101): avc: denied { execute } for pid=3487 comm="syz.0.10" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.682940][ T3488] process 'syz.0.10' launched './file0' with NULL argv: empty string added [ 32.722761][ T29] audit: type=1400 audit(1749773480.092:102): avc: denied { execute_no_trans } for pid=3487 comm="syz.0.10" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.798842][ T29] audit: type=1400 audit(1749773480.202:103): avc: denied { create } for pid=3489 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.819872][ T3490] rdma_op ffff888119b9c580 conn xmit_rdma 0000000000000000 [ 32.891907][ T29] audit: type=1400 audit(1749773480.232:104): avc: denied { bind } for pid=3489 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.911036][ T29] audit: type=1400 audit(1749773480.232:105): avc: denied { write } for pid=3489 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.930143][ T29] audit: type=1400 audit(1749773480.242:106): avc: denied { execute } for pid=3494 comm="syz.0.12" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 32.956077][ T29] audit: type=1400 audit(1749773480.252:107): avc: denied { create } for pid=3496 comm="syz.4.5" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.976589][ T29] audit: type=1400 audit(1749773480.252:108): avc: denied { write } for pid=3496 comm="syz.4.5" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.998952][ T29] audit: type=1400 audit(1749773480.252:109): avc: denied { open } for pid=3496 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.021187][ T29] audit: type=1400 audit(1749773480.252:110): avc: denied { ioctl } for pid=3496 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.027039][ T3500] binfmt_misc: register: failed to install interpreter file ./file2 [ 33.461949][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 33.470764][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 33.476813][ T3544] loop3: detected capacity change from 0 to 1024 [ 33.507644][ T3544] ======================================================= [ 33.507644][ T3544] WARNING: The mand mount option has been deprecated and [ 33.507644][ T3544] and is ignored by this kernel. Remove the mand [ 33.507644][ T3544] option from the mount to silence this warning. [ 33.507644][ T3544] ======================================================= [ 33.619491][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.643293][ T3544] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.672479][ T3544] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.32: lblock 3 mapped to illegal pblock 3 (length 13) [ 33.707566][ T3544] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 33.720108][ T3544] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.720108][ T3544] [ 33.758541][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.792285][ T3561] loop1: detected capacity change from 0 to 764 [ 34.155574][ T3590] loop4: detected capacity change from 0 to 512 [ 34.165709][ T3595] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 34.173545][ T3595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.55'. [ 34.186642][ T3595] dummy0: entered promiscuous mode [ 34.205175][ T3595] bridge0: port 3(dummy0) entered blocking state [ 34.211641][ T3595] bridge0: port 3(dummy0) entered disabled state [ 34.219034][ T3590] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.234339][ T3595] dummy0: entered allmulticast mode [ 34.242836][ T3595] bridge0: port 3(dummy0) entered blocking state [ 34.249304][ T3595] bridge0: port 3(dummy0) entered forwarding state [ 34.249341][ T3590] EXT4-fs (loop4): mount failed [ 34.305982][ T3607] loop1: detected capacity change from 0 to 512 [ 34.329387][ T3607] EXT4-fs: inline encryption not supported [ 34.359082][ T3610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.61'. [ 34.374466][ T3611] Zero length message leads to an empty skb [ 34.380596][ T3607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.393934][ T3607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.416095][ T3607] EXT4-fs (loop1): 1 truncate cleaned up [ 34.424549][ T3607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.484554][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.530061][ T3620] loop4: detected capacity change from 0 to 128 [ 34.543526][ T3620] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 34.613983][ T3629] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQI¸¥Št [ 34.751921][ T3652] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 35.421075][ T3763] syz_tun: entered allmulticast mode [ 35.427047][ T3763] syz_tun: left allmulticast mode [ 35.703728][ T3814] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 35.714234][ T3815] loop4: detected capacity change from 0 to 1024 [ 35.736102][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.756531][ T3815] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 35.776857][ T3823] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 35.790099][ T3815] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 35.828688][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.948909][ T3834] loop3: detected capacity change from 0 to 512 [ 35.957211][ T3834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.977689][ T3834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 35.986022][ T3834] System zones: 0-2, 18-18, 34-34 [ 35.994070][ T3834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.012006][ T3834] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.065419][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.111365][ T3850] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 36.118883][ T3850] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.128182][ T3850] vhci_hcd: invalid port number 0 [ 36.215944][ T3866] loop3: detected capacity change from 0 to 1024 [ 36.222906][ T3866] EXT4-fs: Ignoring removed oldalloc option [ 36.230515][ T3866] EXT4-fs: Ignoring removed orlov option [ 36.243719][ T3866] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 36.275687][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.306985][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.516531][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 36.534919][ T3900] pimreg: entered allmulticast mode [ 36.552588][ T3900] pimreg: left allmulticast mode [ 36.655522][ T3916] loop4: detected capacity change from 0 to 512 [ 36.695602][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.726155][ T3925] loop1: detected capacity change from 0 to 164 [ 36.745100][ T3925] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.753958][ T3916] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.769103][ T3928] loop0: detected capacity change from 0 to 128 [ 36.790041][ T3925] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.799981][ T3916] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.158: corrupted inode contents [ 36.803498][ T3928] EXT4-fs: Ignoring removed nobh option [ 36.821493][ T3916] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.158: mark_inode_dirty error [ 36.832781][ T3925] Symlink component flag not implemented [ 36.832791][ T3925] Symlink component flag not implemented [ 36.833288][ T3925] Symlink component flag not implemented (7) [ 36.850210][ T3925] Symlink component flag not implemented (116) [ 36.858088][ T3930] loop3: detected capacity change from 0 to 1024 [ 36.862616][ T3928] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.864715][ T3916] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.158: corrupted inode contents [ 36.880101][ T3928] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.901587][ T3916] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.158: mark_inode_dirty error [ 36.924750][ T3930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.938476][ T3916] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 36.958636][ T3941] xt_hashlimit: size too large, truncated to 1048576 [ 36.961675][ T3916] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.158: corrupted inode contents [ 36.981424][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.991922][ T3916] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.158: mark_inode_dirty error [ 37.010003][ T3916] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.158: corrupted inode contents [ 37.022427][ T3935] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.158: corrupted inode contents [ 37.088858][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.123065][ T3935] EXT4-fs error (device loop4): ext4_setent:3643: inode #2: comm syz.4.158: mark_inode_dirty error [ 37.176990][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.239445][ T3962] loop0: detected capacity change from 0 to 2048 [ 37.261709][ T3957] vhci_hcd: invalid port number 96 [ 37.266963][ T3957] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 37.307569][ T3962] loop0: p1 < > p4 [ 37.318844][ T3962] loop0: p4 size 8388608 extends beyond EOD, truncated [ 37.334392][ T3972] loop2: detected capacity change from 0 to 2048 [ 37.344886][ T3962] FAT-fs (loop0p1): bogus number of reserved sectors [ 37.351637][ T3962] FAT-fs (loop0p1): Can't find a valid FAT filesystem [ 37.383837][ T3972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.407510][ T3972] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.455059][ T3972] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.180: bg 0: block 345: padding at end of block bitmap is not set [ 37.525488][ T3996] SELinux: failed to load policy [ 37.525857][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.589400][ T4007] SELinux: policydb version 0 does not match my version range 15-34 [ 37.603358][ T4007] SELinux: failed to load policy [ 37.646614][ T4014] netlink: 'syz.4.197': attribute type 4 has an invalid length. [ 37.667954][ T4014] netlink: 'syz.4.197': attribute type 4 has an invalid length. [ 37.704968][ T4014] syz.4.197 (4014) used greatest stack depth: 10816 bytes left [ 37.767520][ T4027] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 37.775315][ T4027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'. [ 37.791047][ T4024] SELinux: failed to load policy [ 37.810709][ T4028] loop0: detected capacity change from 0 to 2048 [ 37.872649][ T4028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.895621][ T4037] loop1: detected capacity change from 0 to 128 [ 37.896641][ T4028] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.902354][ T4037] ext4: Unknown parameter 'obj_role' [ 37.920368][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 37.920383][ T29] audit: type=1400 audit(1749773485.332:575): avc: denied { read } for pid=4030 comm="syz.4.207" lport=36127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.973251][ T29] audit: type=1326 audit(1749773485.382:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a22ae929 code=0x7ffc0000 [ 38.007841][ T29] audit: type=1326 audit(1749773485.412:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f84a22ae929 code=0x7ffc0000 [ 38.020901][ T4028] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.205: bg 0: block 345: padding at end of block bitmap is not set [ 38.031322][ T29] audit: type=1326 audit(1749773485.412:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a22ae929 code=0x7ffc0000 [ 38.093347][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.155568][ T4053] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 38.185843][ T4053] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 38.208838][ T4055] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 38.372657][ T4069] netlink: '+}[@': attribute type 3 has an invalid length. [ 38.469337][ T29] audit: type=1400 audit(1749773485.862:579): avc: denied { wake_alarm } for pid=4076 comm="syz.3.226" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.524515][ T29] audit: type=1400 audit(1749773485.932:580): avc: denied { mounton } for pid=4084 comm="syz.3.231" path="/36/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.562786][ C1] hrtimer: interrupt took 26501 ns [ 38.655167][ T4097] loop0: detected capacity change from 0 to 2048 [ 38.672840][ T4097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.750889][ T4103] loop2: detected capacity change from 0 to 512 [ 38.760957][ T29] audit: type=1400 audit(1749773486.162:581): avc: denied { mounton } for pid=4102 comm="syz.2.237" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 38.806393][ T4103] EXT4-fs (loop2): 1 orphan inode deleted [ 38.816195][ T4103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.829865][ T4103] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 38.830014][ T4089] vhci_hcd: invalid port number 255 [ 38.853486][ T4089] vhci_hcd: invalid port number 255 [ 38.856248][ T3402] kernel write not supported for file [eventfd] (pid: 3402 comm: kworker/1:5) [ 38.863139][ T2911] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.877559][ T2911] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 38.895650][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.906638][ T4103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.985551][ T4111] vhci_hcd: invalid port number 96 [ 38.990791][ T4111] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.008525][ T4114] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 39.025869][ T3402] IPVS: starting estimator thread 0... [ 39.060327][ T4123] loop1: detected capacity change from 0 to 512 [ 39.068824][ T4125] SELinux: policydb version 0 does not match my version range 15-34 [ 39.077192][ T4125] SELinux: failed to load policy [ 39.089655][ T4123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.113045][ T4121] IPVS: using max 1920 ests per chain, 96000 per kthread [ 39.123952][ T4123] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.147367][ T4123] EXT4-fs (loop1): 1 truncate cleaned up [ 39.157468][ T4123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.177100][ T29] audit: type=1400 audit(1749773486.582:582): avc: denied { append } for pid=4122 comm="syz.1.246" path="/71/file2/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.411838][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.430280][ T4144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.445567][ T4150] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 39.491441][ T4148] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 39.499242][ T4148] netlink: 224 bytes leftover after parsing attributes in process `syz.3.255'. [ 39.556917][ T4166] loop2: detected capacity change from 0 to 164 [ 39.566569][ T4165] loop3: detected capacity change from 0 to 512 [ 39.573231][ T29] audit: type=1326 audit(1749773486.972:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 39.600270][ T4166] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.635660][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.652257][ T4176] netlink: 664 bytes leftover after parsing attributes in process `syz.0.270'. [ 39.664632][ T4165] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.754814][ T4181] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.271'. [ 39.769134][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.891491][ T4188] usb usb1: usbfs: process 4188 (syz.0.275) did not claim interface 0 before use [ 39.933768][ T3315] syz-executor (3315) used greatest stack depth: 10776 bytes left [ 39.945749][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.031651][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.070447][ T4206] netlink: 204 bytes leftover after parsing attributes in process `syz.0.283'. [ 40.088211][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.108788][ T4213] loop1: detected capacity change from 0 to 1024 [ 40.124955][ T4213] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 40.134823][ T4213] EXT4-fs (loop1): group descriptors corrupted! [ 40.146728][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.178851][ T4213] ptp: physical clock is free running [ 40.215649][ T4226] loop0: detected capacity change from 0 to 1024 [ 40.231099][ T4226] EXT4-fs: Ignoring removed orlov option [ 40.236950][ T4226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.259326][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.271593][ T51] bridge_slave_1: left allmulticast mode [ 40.277428][ T51] bridge_slave_1: left promiscuous mode [ 40.283328][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.313233][ T51] bridge_slave_0: left allmulticast mode [ 40.319078][ T51] bridge_slave_0: left promiscuous mode [ 40.324979][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.336780][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.425869][ T4249] loop4: detected capacity change from 0 to 512 [ 40.455297][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.469521][ T4249] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.495184][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.505317][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.515044][ T51] bond0 (unregistering): Released all slaves [ 40.565713][ T4254] SELinux: syz.1.297 (4254) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.614409][ T51] hsr_slave_0: left promiscuous mode [ 40.628473][ T51] hsr_slave_1: left promiscuous mode [ 40.634474][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.641933][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.683593][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.691149][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.700813][ T4261] loop2: detected capacity change from 0 to 2048 [ 40.710839][ T51] veth1_macvtap: left promiscuous mode [ 40.716493][ T51] veth0_macvtap: left promiscuous mode [ 40.723248][ T51] veth1_vlan: left promiscuous mode [ 40.728564][ T51] veth0_vlan: left promiscuous mode [ 40.755632][ T4261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.807338][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.957320][ T51] team0 (unregistering): Port device team_slave_1 removed [ 40.986212][ T51] team0 (unregistering): Port device team_slave_0 removed [ 40.998658][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.046608][ T4274] loop4: detected capacity change from 0 to 764 [ 41.057498][ T4274] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.138178][ T4209] chnl_net:caif_netlink_parms(): no params data found [ 41.154145][ T4281] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 41.161883][ T4281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 41.207893][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.215051][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.222428][ T4209] bridge_slave_0: entered allmulticast mode [ 41.229189][ T4209] bridge_slave_0: entered promiscuous mode [ 41.237755][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.244026][ T4303] SELinux: syz.4.312 (4303) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.244928][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.265625][ T4209] bridge_slave_1: entered allmulticast mode [ 41.272133][ T4209] bridge_slave_1: entered promiscuous mode [ 41.282345][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 41.324804][ T4209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.354685][ T4209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.367015][ T4307] netem: incorrect gi model size [ 41.372024][ T4307] netem: change failed [ 41.404837][ T4209] team0: Port device team_slave_0 added [ 41.414232][ T4209] team0: Port device team_slave_1 added [ 41.459423][ T4320] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.318'. [ 41.481517][ T4209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.488572][ T4209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.514598][ T4209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.526645][ T4209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.533662][ T4209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.559808][ T4209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.617919][ T4323] vhci_hcd: invalid port number 96 [ 41.623150][ T4323] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 41.633537][ T4209] hsr_slave_0: entered promiscuous mode [ 41.639709][ T4209] hsr_slave_1: entered promiscuous mode [ 41.646543][ T4209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.666489][ T4209] Cannot create hsr debugfs directory [ 41.677920][ T4329] loop2: detected capacity change from 0 to 512 [ 41.702654][ T4329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.719594][ T4333] SELinux: syz.1.325 (4333) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.753096][ T4329] EXT4-fs (loop2): 1 truncate cleaned up [ 41.759276][ T4329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.911361][ T4209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.932799][ T4209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.953633][ T4209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.973477][ T4209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.011986][ T4350] loop0: detected capacity change from 0 to 1024 [ 42.029146][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.036364][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.043929][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.051020][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.056843][ T4356] IPv6: Can't replace route, no match found [ 42.068874][ T4350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.092250][ T4350] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.104293][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.117008][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.145075][ T4350] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.330: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.168786][ T4350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 42.181179][ T4350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.181179][ T4350] [ 42.204911][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.222511][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.275762][ T4209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.354636][ T4209] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.384654][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.391815][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.445980][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.453176][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.467247][ T4358] vhci_hcd: invalid port number 255 [ 42.472934][ T4358] vhci_hcd: invalid port number 255 [ 42.484297][ T4372] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 42.491991][ T4372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 42.615723][ T4209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.672186][ T4401] loop2: detected capacity change from 0 to 2048 [ 42.750389][ T4414] xt_connbytes: Forcing CT accounting to be enabled [ 42.763656][ T4414] Cannot find add_set index 0 as target [ 42.815703][ T4209] veth0_vlan: entered promiscuous mode [ 42.827851][ T4209] veth1_vlan: entered promiscuous mode [ 42.854348][ T4209] veth0_macvtap: entered promiscuous mode [ 42.864459][ T4209] veth1_macvtap: entered promiscuous mode [ 42.885910][ T4209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.900615][ T4209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.910762][ T4209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.919585][ T4209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.928369][ T4209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.937134][ T4209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.969670][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 42.969685][ T29] audit: type=1400 audit(1749773490.372:753): avc: denied { mounton } for pid=4209 comm="syz-executor" path="/root/syzkaller.5eGh0u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.064763][ T29] audit: type=1400 audit(1749773490.432:754): avc: denied { create } for pid=4433 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.084393][ T29] audit: type=1400 audit(1749773490.432:755): avc: denied { write } for pid=4433 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.103763][ T29] audit: type=1326 audit(1749773490.442:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.127211][ T29] audit: type=1326 audit(1749773490.442:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.150505][ T29] audit: type=1326 audit(1749773490.442:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.156473][ T4443] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 43.174033][ T29] audit: type=1326 audit(1749773490.442:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.181434][ T4443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 43.204692][ T29] audit: type=1326 audit(1749773490.452:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.236957][ T29] audit: type=1326 audit(1749773490.452:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.260347][ T29] audit: type=1326 audit(1749773490.452:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 43.304970][ T4448] loop2: detected capacity change from 0 to 512 [ 43.334288][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.361022][ T4448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.402073][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 43.575802][ T4478] loop0: detected capacity change from 0 to 512 [ 43.641212][ T4478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.683187][ T4478] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.720003][ T4490] IPv6: Can't replace route, no match found [ 43.729662][ T4478] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.372: corrupted inode contents [ 43.745198][ T4485] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 43.758025][ T4478] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.372: mark_inode_dirty error [ 43.779022][ T4478] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.372: corrupted inode contents [ 43.798362][ T4478] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.372: mark_inode_dirty error [ 43.836964][ T4476] vhci_hcd: invalid port number 255 [ 43.842428][ T4476] vhci_hcd: invalid port number 255 [ 43.863475][ T4498] netlink: 'syz.5.379': attribute type 10 has an invalid length. [ 43.865215][ T4478] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.372: mark inode dirty (error -117) [ 43.901384][ T4498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.909914][ T4498] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 43.918882][ T4499] netlink: 'syz.5.379': attribute type 10 has an invalid length. [ 43.926916][ T4478] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 43.936952][ T4499] batadv0: entered promiscuous mode [ 43.942220][ T4499] batadv0: entered allmulticast mode [ 43.950727][ T4499] bond0: (slave batadv0): Releasing backup interface [ 43.976073][ T4499] bridge0: port 3(batadv0) entered blocking state [ 43.982690][ T4499] bridge0: port 3(batadv0) entered disabled state [ 43.992231][ T4497] syz.5.379 (4497) used greatest stack depth: 10768 bytes left [ 43.994213][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.030147][ T4509] loop5: detected capacity change from 0 to 512 [ 44.036972][ T4509] EXT4-fs: Ignoring removed bh option [ 44.042949][ T4509] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.052171][ T4509] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 44.079424][ T4512] syz.0.384 (4512) used greatest stack depth: 9776 bytes left [ 44.099857][ T4509] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 44.111146][ T4509] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 44.157233][ T4509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.244048][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 44.253426][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 44.270937][ T4502] vhci_hcd: invalid port number 255 [ 44.276318][ T4502] vhci_hcd: invalid port number 255 [ 44.285014][ T4209] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.324576][ T4536] loop0: detected capacity change from 0 to 512 [ 44.331060][ T4534] loop4: detected capacity change from 0 to 2048 [ 44.343558][ T4536] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.374081][ T4536] EXT4-fs (loop0): 1 truncate cleaned up [ 44.380306][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.483628][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.732440][ T4565] vhci_hcd: invalid port number 255 [ 44.737858][ T4565] vhci_hcd: invalid port number 255 [ 44.804076][ T4591] __nla_validate_parse: 4 callbacks suppressed [ 44.804096][ T4591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.422'. [ 44.907966][ T4599] futex_wake_op: syz.1.423 tries to shift op by -1; fix this program [ 45.265279][ T4642] openvswitch: netlink: Message has 6 unknown bytes. [ 45.281357][ T4636] loop0: detected capacity change from 0 to 2049 [ 45.329774][ T4611] vhci_hcd: invalid port number 255 [ 45.335738][ T4611] vhci_hcd: invalid port number 255 [ 45.474207][ T4634] vhci_hcd: invalid port number 255 [ 45.479496][ T4634] vhci_hcd: invalid port number 255 [ 45.626300][ T4670] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 45.652832][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.661665][ T4671] netlink: 'syz.5.454': attribute type 298 has an invalid length. [ 45.674456][ T4670] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 45.690749][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.699012][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.707231][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.717147][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.725352][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.733619][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.741745][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.750099][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.758270][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.766474][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.774643][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.782760][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.791017][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.799227][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.814810][ T4644] vhci_hcd: invalid port number 255 [ 45.820933][ T4644] vhci_hcd: invalid port number 255 [ 45.832491][ T4670] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 45.840187][ T4681] futex_wake_op: syz.5.460 tries to shift op by -1; fix this program [ 45.840333][ T4670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.456'. [ 45.864776][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.872953][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.881101][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.889319][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.897494][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.905699][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.915218][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.924147][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.932353][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.940481][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.948600][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.956747][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.964886][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.973042][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 45.981155][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 46.001764][ T3394] hid-generic FFFF:FFFFFFFC:20000001.0001: hidraw0: HID va0.69 Device [syz0] on syz1 [ 46.052270][ T4670] batadv0: entered promiscuous mode [ 46.057857][ T4670] batadv0: entered allmulticast mode [ 46.088386][ T4670] bond0: (slave batadv0): Releasing backup interface [ 46.118688][ T4670] bridge0: port 3(batadv0) entered blocking state [ 46.125678][ T4670] bridge0: port 3(batadv0) entered disabled state [ 46.175770][ T4685] netlink: 'syz.5.461': attribute type 1 has an invalid length. [ 46.226690][ T4714] loop2: detected capacity change from 0 to 512 [ 46.281455][ T4714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.316093][ T4714] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.364928][ T4726] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.376634][ T4726] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 46.414185][ T4731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 46.429109][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.533246][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 46.542522][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 46.572815][ T4743] xt_hashlimit: size too large, truncated to 1048576 [ 46.733890][ T4745] netlink: 'syz.5.483': attribute type 1 has an invalid length. [ 46.904565][ T4766] IPv6: Can't replace route, no match found [ 46.922093][ T4768] netlink: 'syz.5.492': attribute type 1 has an invalid length. [ 47.425454][ T4677] vhci_hcd: invalid port number 255 [ 47.442433][ T4677] vhci_hcd: invalid port number 255 [ 47.524954][ T4801] loop0: detected capacity change from 0 to 1024 [ 47.546314][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.555359][ T4808] loop5: detected capacity change from 0 to 1024 [ 47.558577][ T4801] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.579387][ T4801] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 13) [ 47.594103][ T4801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 47.597721][ T4808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.606570][ T4801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.606570][ T4801] [ 47.629111][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.641054][ T4808] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 47.643534][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.672040][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.688190][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.689458][ T4209] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.702545][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.725812][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.740129][ T4800] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.754918][ T4811] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.771211][ T4800] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.504: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.787240][ T4813] xt_hashlimit: size too large, truncated to 1048576 [ 47.895617][ T4819] loop2: detected capacity change from 0 to 512 [ 47.908539][ T4820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.509'. [ 47.984526][ T4819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.000156][ T4819] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.055967][ T4825] loop4: detected capacity change from 0 to 4096 [ 48.065176][ T4825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.140915][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.202751][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.244943][ T4833] loop2: detected capacity change from 0 to 512 [ 48.269731][ T4833] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.307584][ T4833] EXT4-fs (loop2): 1 truncate cleaned up [ 48.323694][ T4833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.375842][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.397855][ T4838] loop1: detected capacity change from 0 to 8192 [ 48.420266][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.448511][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 48.448528][ T29] audit: type=1400 audit(1749773495.852:996): avc: denied { mount } for pid=4837 comm="syz.1.516" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.518139][ T29] audit: type=1400 audit(1749773495.902:997): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.563475][ T4846] loop0: detected capacity change from 0 to 512 [ 48.570603][ T4846] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 48.580239][ T4848] loop2: detected capacity change from 0 to 256 [ 48.608973][ T4848] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.639822][ T4853] loop0: detected capacity change from 0 to 2048 [ 48.666099][ T4853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.706670][ T29] audit: type=1400 audit(1749773496.112:998): avc: denied { create } for pid=4850 comm="syz.0.521" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.728378][ T29] audit: type=1400 audit(1749773496.142:999): avc: denied { read write open } for pid=4850 comm="syz.0.521" path="/114/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.802917][ T4852] loop1: detected capacity change from 0 to 8192 [ 48.845044][ T4863] xt_hashlimit: size too large, truncated to 1048576 [ 48.971294][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.163914][ T4874] loop1: detected capacity change from 0 to 512 [ 49.415021][ T4874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.443360][ T4874] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.453689][ T29] audit: type=1400 audit(1749773496.852:1000): avc: denied { mount } for pid=4873 comm="syz.1.530" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.503100][ T29] audit: type=1400 audit(1749773496.892:1001): avc: denied { read write } for pid=4873 comm="syz.1.530" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.527114][ T29] audit: type=1400 audit(1749773496.892:1002): avc: denied { open } for pid=4873 comm="syz.1.530" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.551097][ T29] audit: type=1400 audit(1749773496.892:1003): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.576715][ T29] audit: type=1400 audit(1749773496.902:1004): avc: denied { prog_load } for pid=4873 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.595736][ T29] audit: type=1400 audit(1749773496.902:1005): avc: denied { bpf } for pid=4873 comm="syz.1.530" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.828873][ T4896] loop0: detected capacity change from 0 to 2048 [ 49.867807][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.879840][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.903434][ T4896] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.925108][ T4896] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.538: bg 0: block 345: padding at end of block bitmap is not set [ 49.974524][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.077930][ T4908] loop4: detected capacity change from 0 to 8192 [ 50.143900][ T4835] vhci_hcd: invalid port number 255 [ 50.149648][ T4835] vhci_hcd: invalid port number 255 [ 50.281262][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 50.290142][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 50.319979][ T4921] wireguard0: entered promiscuous mode [ 50.325568][ T4921] wireguard0: entered allmulticast mode [ 50.382880][ T4930] loop4: detected capacity change from 0 to 256 [ 50.442207][ T4933] loop2: detected capacity change from 0 to 2048 [ 50.514059][ T4933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.542916][ T4933] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.556974][ T4942] loop0: detected capacity change from 0 to 2048 [ 50.566689][ T4933] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.552: bg 0: block 345: padding at end of block bitmap is not set [ 50.597536][ T4942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.631038][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.645571][ T4942] 9pnet_fd: Insufficient options for proto=fd [ 50.675182][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.684828][ T4951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.560'. [ 50.751040][ T4956] loop0: detected capacity change from 0 to 512 [ 50.765392][ T4956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.781203][ T4956] EXT4-fs (loop0): 1 truncate cleaned up [ 50.789154][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.839489][ T4962] SELinux: failed to load policy [ 50.877162][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.923483][ T4964] loop1: detected capacity change from 0 to 512 [ 50.931878][ T4964] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 50.941357][ T4964] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.566: iget: bad i_size value: 12154757448730 [ 50.955738][ T4964] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.566: couldn't read orphan inode 13 (err -117) [ 50.969325][ T4964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.997471][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.472307][ T4997] loop1: detected capacity change from 0 to 512 [ 51.488104][ T4997] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.512191][ T4997] EXT4-fs (loop1): 1 truncate cleaned up [ 51.520058][ T4997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.571014][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.618471][ T5005] loop4: detected capacity change from 0 to 1024 [ 51.660486][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.675226][ T5008] SELinux: failed to load policy [ 51.691940][ T5005] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.710250][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 13) [ 51.725663][ T5005] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 51.738083][ T5005] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.738083][ T5005] [ 51.751969][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.768915][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.832441][ T5004] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.866498][ T5004] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.881069][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.896369][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.911349][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.927856][ T5004] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.958085][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.581: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.586411][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.597793][ T5030] loop0: detected capacity change from 0 to 2048 [ 52.655799][ T5030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.683265][ T5030] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.744859][ T5036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5036 comm=syz.5.592 [ 52.757295][ T5036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5036 comm=syz.5.592 [ 52.861231][ T5041] loop4: detected capacity change from 0 to 512 [ 52.881757][ T5041] EXT4-fs: Ignoring removed orlov option [ 52.906562][ T5041] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 52.919993][ T5045] loop5: detected capacity change from 0 to 2048 [ 52.944287][ T5041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 52.968827][ T5041] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.594: corrupted in-inode xattr: e_value size too large [ 53.011553][ T5045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.046001][ T5041] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.594: couldn't read orphan inode 15 (err -117) [ 53.114468][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.239738][ T5043] vhci_hcd: invalid port number 255 [ 53.245063][ T5043] vhci_hcd: invalid port number 255 [ 53.339471][ T4209] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.417459][ T5030] syz.0.590 (5030) used greatest stack depth: 7000 bytes left [ 53.425717][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.469377][ T5055] netlink: 672 bytes leftover after parsing attributes in process `syz.5.602'. [ 53.478560][ T5055] netlink: 39 bytes leftover after parsing attributes in process `syz.5.602'. [ 53.491176][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 53.491192][ T29] audit: type=1400 audit(1749773500.902:1177): avc: denied { allowed } for pid=5056 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.519694][ T29] audit: type=1400 audit(1749773500.902:1178): avc: denied { create } for pid=5056 comm="syz.0.601" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.540941][ T29] audit: type=1400 audit(1749773500.902:1179): avc: denied { map } for pid=5056 comm="syz.0.601" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.565001][ T29] audit: type=1400 audit(1749773500.902:1180): avc: denied { read write } for pid=5056 comm="syz.0.601" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.589652][ T29] audit: type=1400 audit(1749773500.932:1181): avc: denied { create } for pid=5056 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.610681][ T29] audit: type=1400 audit(1749773501.002:1182): avc: denied { write } for pid=5056 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.631047][ T29] audit: type=1400 audit(1749773501.002:1183): avc: denied { read } for pid=5056 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.651294][ T29] audit: type=1326 audit(1749773501.022:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 53.674656][ T29] audit: type=1326 audit(1749773501.022:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 53.723546][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.754097][ T29] audit: type=1400 audit(1749773501.162:1186): avc: denied { create } for pid=5060 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.754118][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 53.901903][ T5075] ipip0: entered promiscuous mode [ 53.963932][ T5083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.135279][ T5097] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 54.243663][ T5109] ipip0: entered promiscuous mode [ 54.301321][ T5118] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 54.338299][ T5120] loop4: detected capacity change from 0 to 2048 [ 54.370177][ T5120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.382710][ T9] IPVS: starting estimator thread 0... [ 54.473080][ T5128] IPVS: using max 1824 ests per chain, 91200 per kthread [ 54.595955][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.614583][ T5136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.623387][ T5136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.632185][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.932342][ T5152] loop1: detected capacity change from 0 to 8192 [ 54.954157][ T5148] vhci_hcd: invalid port number 255 [ 54.959459][ T5148] vhci_hcd: invalid port number 255 [ 54.965339][ T5152] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.122619][ T36] IPVS: starting estimator thread 0... [ 55.223249][ T5163] IPVS: using max 2352 ests per chain, 117600 per kthread [ 55.288475][ T5187] netlink: 56 bytes leftover after parsing attributes in process `syz.0.663'. [ 55.302756][ T5191] loop2: detected capacity change from 0 to 1024 [ 55.310443][ T5187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'. [ 55.363425][ T5191] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.431050][ T5191] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 13) [ 55.432334][ T5207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.458139][ T5191] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 55.470654][ T5191] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.470654][ T5191] [ 55.513738][ T5208] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.534449][ T5208] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.559187][ T5208] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.575512][ T5208] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.590362][ T5214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.590976][ T5190] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.617258][ T5190] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.635597][ T5212] mmap: syz.1.673 (5212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.657395][ T5214] validate_nla: 1 callbacks suppressed [ 55.657410][ T5214] netlink: 'syz.5.674': attribute type 12 has an invalid length. [ 55.670811][ T5214] netlink: 'syz.5.674': attribute type 29 has an invalid length. [ 55.672033][ T5190] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.678583][ T5214] netlink: 148 bytes leftover after parsing attributes in process `syz.5.674'. [ 55.678606][ T5214] netlink: 'syz.5.674': attribute type 1 has an invalid length. [ 55.678652][ T5214] netlink: 'syz.5.674': attribute type 2 has an invalid length. [ 55.678663][ T5214] netlink: 39 bytes leftover after parsing attributes in process `syz.5.674'. [ 55.730598][ T5208] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.746941][ T5190] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.778361][ T5219] ptp: physical clock is free running [ 55.866078][ T5203] vhci_hcd: invalid port number 255 [ 55.872091][ T5203] vhci_hcd: invalid port number 255 [ 55.882584][ T5228] loop5: detected capacity change from 0 to 512 [ 55.924551][ T5230] loop1: detected capacity change from 0 to 2048 [ 55.937365][ T5228] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.956768][ T5228] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.680: corrupted inode contents [ 56.017977][ T5228] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.680: mark_inode_dirty error [ 56.035203][ T5228] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.680: corrupted inode contents [ 56.047641][ T5228] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.680: mark_inode_dirty error [ 56.143519][ T5252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.152158][ T5253] netlink: 240 bytes leftover after parsing attributes in process `syz.0.683'. [ 56.209032][ T5252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.209056][ T5257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.690'. [ 56.279335][ T5238] vhci_hcd: invalid port number 255 [ 56.289959][ T5238] vhci_hcd: invalid port number 255 [ 56.340433][ T5269] loop0: detected capacity change from 0 to 2048 [ 56.500521][ T5271] vhci_hcd: invalid port number 255 [ 56.505823][ T5271] vhci_hcd: invalid port number 255 [ 56.850630][ T5302] loop4: detected capacity change from 0 to 2048 [ 56.868142][ T5302] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.051572][ T5305] vhci_hcd: invalid port number 255 [ 57.057106][ T5305] vhci_hcd: invalid port number 255 [ 57.132665][ T5315] loop2: detected capacity change from 0 to 512 [ 57.177854][ T5315] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.247068][ T5315] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.714: corrupted inode contents [ 57.276722][ T5315] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.714: mark_inode_dirty error [ 57.288237][ T5315] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.714: corrupted inode contents [ 57.315841][ T5315] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.714: mark_inode_dirty error [ 57.334148][ T5325] netlink: 52 bytes leftover after parsing attributes in process `syz.0.718'. [ 57.359943][ T5328] netlink: 'syz.5.720': attribute type 5 has an invalid length. [ 57.535211][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.543849][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.654409][ T5347] SELinux: Context Ü is not valid (left unmapped). [ 57.840188][ T5351] loop5: detected capacity change from 0 to 2048 [ 57.877970][ T5302] syz.4.711 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 57.892110][ T5302] CPU: 0 UID: 0 PID: 5302 Comm: syz.4.711 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 57.892154][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.892169][ T5302] Call Trace: [ 57.892178][ T5302] [ 57.892204][ T5302] __dump_stack+0x1d/0x30 [ 57.892296][ T5302] dump_stack_lvl+0xe8/0x140 [ 57.892319][ T5302] dump_stack+0x15/0x1b [ 57.892340][ T5302] dump_header+0x81/0x220 [ 57.892382][ T5302] oom_kill_process+0x334/0x3f0 [ 57.892472][ T5302] out_of_memory+0x979/0xb80 [ 57.892514][ T5302] try_charge_memcg+0x5e6/0x9e0 [ 57.892556][ T5302] obj_cgroup_charge_pages+0xa6/0x150 [ 57.892642][ T5302] __memcg_kmem_charge_page+0x9f/0x170 [ 57.892679][ T5302] __alloc_frozen_pages_noprof+0x188/0x360 [ 57.892725][ T5302] alloc_pages_mpol+0xb3/0x250 [ 57.892778][ T5302] alloc_pages_noprof+0x90/0x130 [ 57.892860][ T5302] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 57.892918][ T5302] __kvmalloc_node_noprof+0x30f/0x4e0 [ 57.892955][ T5302] ? ip_set_alloc+0x1f/0x30 [ 57.893053][ T5302] ? ip_set_alloc+0x1f/0x30 [ 57.893094][ T5302] ? __kmalloc_cache_noprof+0x189/0x320 [ 57.893131][ T5302] ip_set_alloc+0x1f/0x30 [ 57.893210][ T5302] hash_netiface_create+0x282/0x740 [ 57.893257][ T5302] ? __pfx_hash_netiface_create+0x10/0x10 [ 57.893370][ T5302] ip_set_create+0x3cc/0x960 [ 57.893405][ T5302] ? __nla_parse+0x40/0x60 [ 57.893435][ T5302] nfnetlink_rcv_msg+0x4c6/0x590 [ 57.893473][ T5302] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 57.893595][ T5302] ? selinux_capable+0x1f9/0x270 [ 57.893684][ T5302] netlink_rcv_skb+0x123/0x220 [ 57.893705][ T5302] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 57.893781][ T5302] nfnetlink_rcv+0x16b/0x1690 [ 57.893815][ T5302] ? __kfree_skb+0x109/0x150 [ 57.893839][ T5302] ? nlmon_xmit+0x4f/0x60 [ 57.893871][ T5302] ? consume_skb+0x49/0x150 [ 57.893960][ T5302] ? nlmon_xmit+0x4f/0x60 [ 57.893993][ T5302] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 57.894024][ T5302] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 57.894050][ T5302] ? __dev_queue_xmit+0x182/0x1fb0 [ 57.894088][ T5302] ? ref_tracker_free+0x37d/0x3e0 [ 57.894144][ T5302] ? __netlink_deliver_tap+0x4dc/0x500 [ 57.894186][ T5302] netlink_unicast+0x5a1/0x670 [ 57.894253][ T5302] netlink_sendmsg+0x58b/0x6b0 [ 57.894284][ T5302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.894341][ T5302] __sock_sendmsg+0x145/0x180 [ 57.894370][ T5302] ____sys_sendmsg+0x31e/0x4e0 [ 57.894402][ T5302] ___sys_sendmsg+0x17b/0x1d0 [ 57.894439][ T5302] __x64_sys_sendmsg+0xd4/0x160 [ 57.894551][ T5302] x64_sys_call+0x2999/0x2fb0 [ 57.894579][ T5302] do_syscall_64+0xd2/0x200 [ 57.894665][ T5302] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.894701][ T5302] ? clear_bhb_loop+0x40/0x90 [ 57.894805][ T5302] ? clear_bhb_loop+0x40/0x90 [ 57.894835][ T5302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.894900][ T5302] RIP: 0033:0x7f84a22ae929 [ 57.894922][ T5302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.894943][ T5302] RSP: 002b:00007f84a0917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.894967][ T5302] RAX: ffffffffffffffda RBX: 00007f84a24d5fa0 RCX: 00007f84a22ae929 [ 57.894983][ T5302] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 57.894999][ T5302] RBP: 00007f84a2330b39 R08: 0000000000000000 R09: 0000000000000000 [ 57.895015][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.895051][ T5302] R13: 0000000000000000 R14: 00007f84a24d5fa0 R15: 00007ffd5ea0e158 [ 57.895074][ T5302] [ 58.247448][ T5302] memory: usage 307180kB, limit 307200kB, failcnt 258 [ 58.254417][ T5302] memory+swap: usage 308380kB, limit 9007199254740988kB, failcnt 0 [ 58.262333][ T5302] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 58.269646][ T5302] Memory cgroup stats for /syz4: [ 58.284040][ T5351] loop5: p1 < > p4 [ 58.300266][ T5302] cache 81920 [ 58.303757][ T5302] rss 0 [ 58.306555][ T5302] shmem 0 [ 58.309505][ T5302] mapped_file 8192 [ 58.313272][ T5302] dirty 0 [ 58.316223][ T5302] writeback 8192 [ 58.319792][ T5302] workingset_refault_anon 26 [ 58.324416][ T5302] workingset_refault_file 62 [ 58.329022][ T5302] swap 1245184 [ 58.332447][ T5302] swapcached 8192 [ 58.336132][ T5302] pgpgin 40434 [ 58.339523][ T5302] pgpgout 40412 [ 58.343035][ T5302] pgfault 54498 [ 58.346529][ T5302] pgmajfault 18 [ 58.350075][ T5302] inactive_anon 8192 [ 58.354022][ T5302] active_anon 0 [ 58.357506][ T5302] inactive_file 8192 [ 58.361493][ T5302] active_file 0 [ 58.365041][ T5302] unevictable 0 [ 58.368519][ T5302] hierarchical_memory_limit 314572800 [ 58.373930][ T5302] hierarchical_memsw_limit 9223372036854771712 [ 58.380198][ T5302] total_cache 81920 [ 58.384115][ T5302] total_rss 0 [ 58.387423][ T5302] total_shmem 0 [ 58.390896][ T5302] total_mapped_file 8192 [ 58.395185][ T5302] total_dirty 0 [ 58.398668][ T5302] total_writeback 8192 [ 58.402755][ T5302] total_workingset_refault_anon 26 [ 58.407912][ T5302] total_workingset_refault_file 62 [ 58.413090][ T5302] total_swap 1245184 [ 58.416995][ T5302] total_swapcached 8192 [ 58.421183][ T5302] total_pgpgin 40434 [ 58.425140][ T5302] total_pgpgout 40412 [ 58.429137][ T5302] total_pgfault 54498 [ 58.433210][ T5302] total_pgmajfault 18 [ 58.437289][ T5302] total_inactive_anon 8192 [ 58.439408][ T5351] loop5: p4 size 8388608 extends beyond EOD, [ 58.441706][ T5302] total_active_anon 0 [ 58.441717][ T5302] total_inactive_file 8192 [ 58.441727][ T5302] total_active_file 0 [ 58.447820][ T5351] truncated [ 58.463665][ T5302] total_unevictable 0 [ 58.467666][ T5302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.711,pid=5301,uid=0 [ 58.482810][ T5302] Memory cgroup out of memory: Killed process 5301 (syz.4.711) total-vm:95800kB, anon-rss:936kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 58.507224][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 58.507241][ T29] audit: type=1400 audit(1749773505.912:1329): avc: denied { read } for pid=5353 comm="syz.1.732" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.536881][ T29] audit: type=1400 audit(1749773505.912:1330): avc: denied { open } for pid=5353 comm="syz.1.732" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.628900][ T29] audit: type=1326 audit(1749773506.022:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05144f58e7 code=0x7ffc0000 [ 58.652290][ T29] audit: type=1326 audit(1749773506.022:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051449ab19 code=0x7ffc0000 [ 58.675768][ T29] audit: type=1326 audit(1749773506.022:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05144fe929 code=0x7ffc0000 [ 58.699186][ T29] audit: type=1326 audit(1749773506.022:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05144f58e7 code=0x7ffc0000 [ 58.723256][ T29] audit: type=1326 audit(1749773506.022:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051449ab19 code=0x7ffc0000 [ 58.746911][ T29] audit: type=1326 audit(1749773506.022:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05144fe929 code=0x7ffc0000 [ 58.770292][ T29] audit: type=1326 audit(1749773506.022:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05144f58e7 code=0x7ffc0000 [ 58.793572][ T29] audit: type=1326 audit(1749773506.022:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051449ab19 code=0x7ffc0000 [ 58.891597][ T5302] syz.4.711 (5302) used greatest stack depth: 6952 bytes left [ 58.900662][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'. [ 59.064732][ T5372] loop1: detected capacity change from 0 to 2048 [ 59.118564][ T5377] loop5: detected capacity change from 0 to 512 [ 59.156280][ T5377] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 59.162013][ T5372] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.185515][ T5377] EXT4-fs (loop5): invalid journal inode [ 59.212553][ T5377] EXT4-fs (loop5): can't get journal size [ 59.225310][ T5372] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 59.237900][ T5372] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.237900][ T5372] [ 59.247622][ T5372] EXT4-fs (loop1): Total free blocks count 0 [ 59.253668][ T5372] EXT4-fs (loop1): Free/Dirty block details [ 59.259587][ T5372] EXT4-fs (loop1): free_blocks=4096 [ 59.264840][ T5372] EXT4-fs (loop1): dirty_blocks=512 [ 59.270107][ T5372] EXT4-fs (loop1): Block reservation details [ 59.276172][ T5372] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 59.305363][ T5377] EXT4-fs (loop5): 1 truncate cleaned up [ 59.359644][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 59.372064][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.372064][ T31] [ 59.409578][ T5385] SELinux: syz.0.745 (5385) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 59.510853][ T5393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 59.519935][ T5393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 59.639502][ T5405] policy can only be matched on NF_INET_PRE_ROUTING [ 59.639519][ T5405] unable to load match [ 59.766378][ T5417] loop2: detected capacity change from 0 to 512 [ 59.776238][ T5417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.790905][ T5417] EXT4-fs (loop2): 1 truncate cleaned up [ 59.846239][ T5425] netlink: 'syz.0.760': attribute type 5 has an invalid length. [ 59.971985][ T5438] hub 9-0:1.0: USB hub found [ 59.983190][ T5438] hub 9-0:1.0: 8 ports detected [ 60.134011][ T5445] loop1: detected capacity change from 0 to 1024 [ 60.145113][ T5445] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.158574][ T5445] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 60.158836][ T5445] EXT4-fs (loop1): Remounting filesystem read-only [ 60.639978][ T5458] loop5: detected capacity change from 0 to 512 [ 60.642503][ T5458] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.678457][ T5458] EXT4-fs (loop5): 1 truncate cleaned up [ 60.768434][ T5464] netlink: 'syz.5.774': attribute type 5 has an invalid length. [ 60.787161][ T5462] __nla_validate_parse: 4 callbacks suppressed [ 60.787180][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 60.927578][ T5476] loop0: detected capacity change from 0 to 2048 [ 61.019964][ T5476] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 61.034466][ T5476] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 656 with error 28 [ 61.046985][ T5476] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.046985][ T5476] [ 61.056704][ T5476] EXT4-fs (loop0): Total free blocks count 0 [ 61.062763][ T5476] EXT4-fs (loop0): Free/Dirty block details [ 61.068734][ T5476] EXT4-fs (loop0): free_blocks=4096 [ 61.074070][ T5476] EXT4-fs (loop0): dirty_blocks=688 [ 61.079300][ T5476] EXT4-fs (loop0): Block reservation details [ 61.085384][ T5476] EXT4-fs (loop0): i_reserved_data_blocks=43 [ 61.146837][ T5370] vhci_hcd: invalid port number 255 [ 61.152622][ T5370] vhci_hcd: invalid port number 255 [ 61.175961][ T5500] loop1: detected capacity change from 0 to 2048 [ 61.183456][ T2911] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.195829][ T2911] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.195829][ T2911] [ 61.451125][ T5517] loop5: detected capacity change from 0 to 1024 [ 61.461706][ T5517] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.464375][ T5517] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 61.482671][ T5517] EXT4-fs (loop5): Remounting filesystem read-only [ 61.546162][ T5507] vhci_hcd: invalid port number 255 [ 61.551484][ T5507] vhci_hcd: invalid port number 255 [ 61.604635][ T5534] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 61.677808][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 61.791160][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.791196][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.791219][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.791240][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 61.821114][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.821147][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.836287][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.836373][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 61.851522][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.859122][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.859158][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.859195][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.868173][ T5550] loop2: detected capacity change from 0 to 2048 [ 61.874125][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.874155][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.902995][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.903024][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.903092][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.926512][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.926544][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.926598][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.948824][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.948858][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.948892][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.948949][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.978517][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.978564][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.978628][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.978652][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.978678][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.978707][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023432][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023517][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023578][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023606][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023640][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023666][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.023689][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.024714][ T3387] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 62.117764][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 62.179640][ T5558] 9pnet: p9_errstr2errno: server reported unknown error [ 62.233803][ T5562] SELinux: failed to load policy [ 62.260100][ T5567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5567 comm=syz.4.815 [ 62.329753][ T5571] hub 2-0:1.0: USB hub found [ 62.337132][ T5571] hub 2-0:1.0: 8 ports detected [ 62.346418][ T3394] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.359835][ T3394] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.409010][ T5583] loop4: detected capacity change from 0 to 1024 [ 62.425478][ T5583] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.464108][ T5583] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.824: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.490606][ T5583] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 62.503051][ T5583] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.503051][ T5583] [ 62.519830][ T5594] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.824: Freeing blocks not in datazone - block = 3, count = 1 [ 62.540631][ T5596] loop5: detected capacity change from 0 to 128 [ 62.550149][ T5583] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.824: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.573681][ T5583] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 62.586434][ T5583] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.586434][ T5583] [ 62.629568][ T5601] syzkaller0: entered allmulticast mode [ 62.655512][ T5611] SELinux: syz.4.834 (5611) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.698777][ T5615] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 62.844506][ T5635] loop5: detected capacity change from 0 to 1024 [ 62.872074][ T5635] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.897014][ T5635] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 3: comm syz.5.845: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.916982][ T5635] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 62.929336][ T5635] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.929336][ T5635] [ 62.953225][ T5635] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.845: Freeing blocks not in datazone - block = 3, count = 1 [ 62.968694][ T5635] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 3: comm syz.5.845: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.000489][ T5635] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.012878][ T5635] EXT4-fs (loop5): This should not happen!! Data will be lost [ 63.012878][ T5635] [ 63.075320][ T5660] SELinux: syz.1.850 (5660) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.173518][ T5667] loop4: detected capacity change from 0 to 1024 [ 63.184543][ T5667] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.197279][ T5667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 63.213962][ T5667] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 63.226324][ T5667] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.226324][ T5667] [ 63.236055][ T5667] EXT4-fs (loop4): Total free blocks count 0 [ 63.242138][ T5667] EXT4-fs (loop4): Free/Dirty block details [ 63.248210][ T5667] EXT4-fs (loop4): free_blocks=4293918720 [ 63.254127][ T5667] EXT4-fs (loop4): dirty_blocks=16 [ 63.259285][ T5667] EXT4-fs (loop4): Block reservation details [ 63.265394][ T5667] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 63.273057][ T5672] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 63.285592][ T5672] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.285592][ T5672] [ 63.447351][ T5674] vhci_hcd: invalid port number 255 [ 63.452594][ T5674] vhci_hcd: invalid port number 255 [ 63.507374][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 63.518634][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 63.551959][ T5682] loop1: detected capacity change from 0 to 1024 [ 63.566100][ T5682] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.580129][ T5682] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.860: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.594705][ T5682] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.607089][ T5682] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.607089][ T5682] [ 63.618209][ T5682] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.860: Freeing blocks not in datazone - block = 3, count = 1 [ 63.632487][ T5682] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.860: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.647492][ T5682] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.651074][ T5689] hub 6-0:1.0: USB hub found [ 63.659864][ T5682] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.659864][ T5682] [ 63.677540][ T5689] hub 6-0:1.0: 8 ports detected [ 63.705603][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 63.705621][ T29] audit: type=1400 audit(1749773511.112:1433): avc: denied { ioctl } for pid=5690 comm="syz.1.863" path="socket:[11539]" dev="sockfs" ino=11539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.766035][ T5697] vhci_hcd: invalid port number 15 [ 63.771203][ T5697] vhci_hcd: invalid port number 15 [ 63.786446][ T29] audit: type=1400 audit(1749773511.142:1434): avc: denied { validate_trans } for pid=5692 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.818218][ T5701] syzkaller0: entered allmulticast mode [ 63.836274][ T5703] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 63.865086][ T29] audit: type=1400 audit(1749773511.272:1435): avc: denied { mounton } for pid=5704 comm="syz.1.870" path="/proc/466/cgroup" dev="proc" ino=11567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 63.942757][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.950873][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.975998][ T5717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 64.038220][ T5722] hub 2-0:1.0: USB hub found [ 64.045032][ T5722] hub 2-0:1.0: 8 ports detected [ 64.048213][ T29] audit: type=1400 audit(1749773511.452:1436): avc: denied { read } for pid=5725 comm="syz.2.879" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.073359][ T29] audit: type=1400 audit(1749773511.452:1437): avc: denied { open } for pid=5725 comm="syz.2.879" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.114489][ T29] audit: type=1400 audit(1749773511.512:1438): avc: denied { ioctl } for pid=5725 comm="syz.2.879" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.151437][ T5730] loop1: detected capacity change from 0 to 2048 [ 64.200478][ T29] audit: type=1400 audit(1749773511.602:1439): avc: denied { append } for pid=5727 comm="syz.1.880" path="/218/file1/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.223673][ T29] audit: type=1400 audit(1749773511.602:1440): avc: denied { ioctl } for pid=5727 comm="syz.1.880" path="/218/file1/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.320882][ T29] audit: type=1326 audit(1749773511.722:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 64.345642][ T5751] netlink: 'syz.0.887': attribute type 6 has an invalid length. [ 64.353528][ T5751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.887'. [ 64.364059][ T29] audit: type=1326 audit(1749773511.722:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbc0e929 code=0x7ffc0000 [ 64.474583][ T5771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'. [ 64.571546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a1b5a00: rx timeout, send abort [ 64.579917][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1b5a00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.614038][ T5777] loop2: detected capacity change from 0 to 2048 [ 64.817168][ T5779] vhci_hcd: invalid port number 255 [ 64.822534][ T5779] vhci_hcd: invalid port number 255 [ 65.251682][ T5768] vhci_hcd: invalid port number 255 [ 65.257299][ T5768] vhci_hcd: invalid port number 255 [ 65.306962][ T5798] loop5: detected capacity change from 0 to 1024 [ 65.318052][ T5798] EXT4-fs: Ignoring removed oldalloc option [ 65.324502][ T5798] EXT4-fs: Ignoring removed orlov option [ 65.330625][ T5798] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 65.370040][ T5802] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 65.892132][ T5858] loop1: detected capacity change from 0 to 1024 [ 65.911253][ T5862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'. [ 66.021115][ T5872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.935'. [ 66.246070][ T5893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'. [ 66.248907][ T5892] loop1: detected capacity change from 0 to 512 [ 66.281102][ T5892] EXT4-fs: dax option not supported [ 66.361962][ T5899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.557749][ T5906] hub 6-0:1.0: USB hub found [ 66.563187][ T5906] hub 6-0:1.0: 8 ports detected [ 66.621997][ T5924] loop0: detected capacity change from 0 to 1024 [ 66.784694][ T5823] vhci_hcd: invalid port number 255 [ 66.790248][ T5823] vhci_hcd: invalid port number 255 [ 66.889013][ T5955] loop2: detected capacity change from 0 to 128 [ 66.907399][ T5955] syz.2.967: attempt to access beyond end of device [ 66.907399][ T5955] loop2: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 66.920807][ T5955] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 66.931581][ T5955] syz.2.967: attempt to access beyond end of device [ 66.931581][ T5955] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 66.945207][ T5955] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 66.955752][ T5955] syz.2.967: attempt to access beyond end of device [ 66.955752][ T5955] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 66.969152][ T5955] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 66.977917][ T5955] syz.2.967: attempt to access beyond end of device [ 66.977917][ T5955] loop2: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 66.991378][ T5955] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 67.000248][ T5955] syz.2.967: attempt to access beyond end of device [ 67.000248][ T5955] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 67.013682][ T5955] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 67.026069][ T5955] syz.2.967: attempt to access beyond end of device [ 67.026069][ T5955] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 67.039473][ T5955] Buffer I/O error on dev loop2, logical block 136, lost async page write [ 67.049566][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 67.049774][ T5955] syz.2.967: attempt to access beyond end of device [ 67.049774][ T5955] loop2: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 67.073844][ T5955] syz.2.967: attempt to access beyond end of device [ 67.073844][ T5955] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 67.088640][ T5955] syz.2.967: attempt to access beyond end of device [ 67.088640][ T5955] loop2: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 67.171446][ T5966] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 67.171446][ T5966] program syz.5.971 not setting count and/or reply_len properly [ 67.303709][ T3402] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 67.311252][ T3402] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 67.313816][ T5961] vhci_hcd: invalid port number 255 [ 67.318699][ T3402] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 67.323914][ T5961] vhci_hcd: invalid port number 255 [ 67.334997][ T3402] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 67.442763][ T5986] netlink: 52 bytes leftover after parsing attributes in process `syz.5.979'. [ 67.570629][ T5992] loop1: detected capacity change from 0 to 8192 [ 67.635435][ T5992] loop1: p4 < > [ 67.853790][ T6011] loop2: detected capacity change from 0 to 512 [ 67.877442][ T6011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.944211][ T6011] EXT4-fs (loop2): 1 truncate cleaned up [ 68.040902][ T6007] vhci_hcd: invalid port number 255 [ 68.046317][ T6007] vhci_hcd: invalid port number 255 [ 68.067183][ T2911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.125939][ T2911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.176556][ T6021] program syz.1.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.187636][ T5980] syz.5.979 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 68.198717][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.5.979 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 68.198753][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.198768][ T5980] Call Trace: [ 68.198776][ T5980] [ 68.198785][ T5980] __dump_stack+0x1d/0x30 [ 68.198819][ T5980] dump_stack_lvl+0xe8/0x140 [ 68.198911][ T5980] dump_stack+0x15/0x1b [ 68.198929][ T5980] dump_header+0x81/0x220 [ 68.199039][ T5980] oom_kill_process+0x334/0x3f0 [ 68.199079][ T5980] out_of_memory+0x979/0xb80 [ 68.199147][ T5980] try_charge_memcg+0x5e6/0x9e0 [ 68.199176][ T5980] charge_memcg+0x51/0xc0 [ 68.199268][ T5980] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 68.199306][ T5980] __read_swap_cache_async+0x1df/0x350 [ 68.199404][ T5980] swap_cluster_readahead+0x277/0x3e0 [ 68.199477][ T5980] swapin_readahead+0xde/0x6f0 [ 68.199509][ T5980] ? __filemap_get_folio+0x49f/0x650 [ 68.199544][ T5980] ? swap_cache_get_folio+0x77/0x200 [ 68.199618][ T5980] do_swap_page+0x301/0x2430 [ 68.199639][ T5980] ? css_rstat_updated+0xcd/0x5b0 [ 68.199674][ T5980] ? __pfx_default_wake_function+0x10/0x10 [ 68.199764][ T5980] handle_mm_fault+0x9a5/0x2be0 [ 68.199788][ T5980] ? mas_walk+0xf2/0x120 [ 68.199866][ T5980] do_user_addr_fault+0x636/0x1090 [ 68.199899][ T5980] ? fpregs_restore_userregs+0xe2/0x1d0 [ 68.199929][ T5980] ? switch_fpu_return+0xe/0x20 [ 68.199957][ T5980] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 68.200051][ T5980] exc_page_fault+0x62/0xa0 [ 68.200084][ T5980] asm_exc_page_fault+0x26/0x30 [ 68.200111][ T5980] RIP: 0033:0x7f05143d538c [ 68.200131][ T5980] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 68.200149][ T5980] RSP: 002b:00007ffc280f2c40 EFLAGS: 00010202 [ 68.200236][ T5980] RAX: 0000000000000000 RBX: 00007f0514725fa0 RCX: 0000000000000000 [ 68.200249][ T5980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558aee5808 [ 68.200290][ T5980] RBP: 00007f0514727ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 68.200303][ T5980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010a58 [ 68.200367][ T5980] R13: 00007f0514726080 R14: ffffffffffffffff R15: 00007ffc280f2d50 [ 68.200387][ T5980] [ 68.200421][ T5980] memory: usage 307200kB, limit 307200kB, failcnt 100 [ 68.436235][ T5980] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 68.444249][ T5980] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 68.451648][ T5980] Memory cgroup stats for /syz5: [ 68.451870][ T5980] cache 0 [ 68.459869][ T5980] rss 0 [ 68.462650][ T5980] shmem 0 [ 68.465651][ T5980] mapped_file 0 [ 68.469129][ T5980] dirty 0 [ 68.472091][ T5980] writeback 0 [ 68.475473][ T5980] workingset_refault_anon 12 [ 68.480196][ T5980] workingset_refault_file 0 [ 68.484794][ T5980] swap 196608 [ 68.488098][ T5980] swapcached 0 [ 68.491486][ T5980] pgpgin 21808 [ 68.494899][ T5980] pgpgout 21808 [ 68.498429][ T5980] pgfault 31552 [ 68.501914][ T5980] pgmajfault 2 [ 68.505321][ T5980] inactive_anon 0 [ 68.508970][ T5980] active_anon 0 [ 68.512452][ T5980] inactive_file 0 [ 68.516130][ T5980] active_file 0 [ 68.519658][ T5980] unevictable 0 [ 68.523181][ T5980] hierarchical_memory_limit 314572800 [ 68.528577][ T5980] hierarchical_memsw_limit 9223372036854771712 [ 68.534927][ T5980] total_cache 0 [ 68.538410][ T5980] total_rss 0 [ 68.541728][ T5980] total_shmem 0 [ 68.545376][ T5980] total_mapped_file 0 [ 68.549415][ T5980] total_dirty 0 [ 68.552905][ T5980] total_writeback 0 [ 68.556761][ T5980] total_workingset_refault_anon 12 [ 68.562004][ T5980] total_workingset_refault_file 0 [ 68.567134][ T5980] total_swap 196608 [ 68.571050][ T5980] total_swapcached 0 [ 68.574985][ T5980] total_pgpgin 21884 [ 68.578900][ T5980] total_pgpgout 21884 [ 68.582898][ T5980] total_pgfault 31643 [ 68.586931][ T5980] total_pgmajfault 2 [ 68.590842][ T5980] total_inactive_anon 0 [ 68.595039][ T5980] total_active_anon 0 [ 68.599108][ T5980] total_inactive_file 0 [ 68.603385][ T5980] total_active_file 0 [ 68.607453][ T5980] total_unevictable 0 [ 68.611519][ T5980] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.979,pid=5980,uid=0 [ 68.626181][ T5980] Memory cgroup out of memory: Killed process 5980 (syz.5.979) total-vm:95800kB, anon-rss:1064kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 68.644931][ T2911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.726635][ T2911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.751200][ T6045] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 68.751200][ T6045] program syz.2.1003 not setting count and/or reply_len properly [ 68.812263][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 68.812278][ T6051] sd 0:0:1:0: device reset [ 68.812281][ T29] audit: type=1400 audit(1749773516.212:1592): avc: denied { ioctl } for pid=6049 comm="syz.1.1005" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.908955][ T2911] bridge_slave_1: left allmulticast mode [ 68.914893][ T2911] bridge_slave_1: left promiscuous mode [ 68.915726][ T6060] loop2: detected capacity change from 0 to 512 [ 68.920624][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.941388][ T2911] bridge_slave_0: left allmulticast mode [ 68.947141][ T2911] bridge_slave_0: left promiscuous mode [ 68.952921][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.955844][ T6060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.991024][ T6060] EXT4-fs (loop2): 1 truncate cleaned up [ 68.997842][ T6060] EXT4-fs mount: 49 callbacks suppressed [ 68.997858][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.023759][ T6060] EXT4-fs (loop2): shut down requested (2) [ 69.079258][ T29] audit: type=1400 audit(1749773516.482:1593): avc: denied { tracepoint } for pid=6068 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.111947][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.122516][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.133657][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.146590][ T6071] SELinux: failed to load policy [ 69.151637][ T29] audit: type=1400 audit(1749773516.552:1594): avc: denied { load_policy } for pid=6070 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.165777][ T6073] loop2: detected capacity change from 0 to 128 [ 69.179179][ T2911] bond0 (unregistering): Released all slaves [ 69.181232][ T6073] FAT-fs (loop2): Directory bread(block 162) failed [ 69.195437][ T6073] FAT-fs (loop2): Directory bread(block 163) failed [ 69.203067][ T6073] FAT-fs (loop2): Directory bread(block 164) failed [ 69.211545][ T6073] FAT-fs (loop2): Directory bread(block 165) failed [ 69.227801][ T6073] FAT-fs (loop2): Directory bread(block 166) failed [ 69.233886][ T29] audit: type=1400 audit(1749773516.632:1595): avc: denied { mount } for pid=6075 comm="syz.5.1017" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.256786][ T6073] FAT-fs (loop2): Directory bread(block 167) failed [ 69.263727][ T6073] FAT-fs (loop2): Directory bread(block 168) failed [ 69.271513][ T6073] FAT-fs (loop2): Directory bread(block 169) failed [ 69.283968][ T29] audit: type=1400 audit(1749773516.692:1596): avc: denied { mount } for pid=6072 comm="syz.2.1016" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.309062][ T6078] loop5: detected capacity change from 0 to 1024 [ 69.309374][ T6073] FAT-fs (loop2): Directory bread(block 162) failed [ 69.316041][ T6078] EXT4-fs: Ignoring removed bh option [ 69.327883][ T6078] EXT4-fs: inline encryption not supported [ 69.334143][ T2911] hsr_slave_0: left promiscuous mode [ 69.334279][ T6073] FAT-fs (loop2): Directory bread(block 163) failed [ 69.346445][ T6078] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.357549][ T6073] syz.2.1016: attempt to access beyond end of device [ 69.357549][ T6073] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 69.384081][ T2911] hsr_slave_1: left promiscuous mode [ 69.389840][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.397380][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.405121][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.412578][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.423665][ T2911] veth1_macvtap: left promiscuous mode [ 69.429195][ T2911] veth0_macvtap: left promiscuous mode [ 69.433458][ T29] audit: type=1400 audit(1749773516.792:1597): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.435001][ T2911] veth1_vlan: left promiscuous mode [ 69.459999][ T6078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 69.469060][ T6078] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1018: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.483255][ T2911] veth0_vlan: left promiscuous mode [ 69.488794][ T6078] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 69.497043][ T6078] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.1018: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.500274][ T29] audit: type=1400 audit(1749773516.912:1598): avc: denied { create } for pid=6080 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.511505][ T6078] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 69.539771][ T6078] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1018: Failed to acquire dquot type 0 [ 69.583569][ T6078] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 69.604033][ T6078] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1018: mark_inode_dirty error [ 69.615304][ T29] audit: type=1400 audit(1749773516.942:1599): avc: denied { connect } for pid=6080 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.655806][ T6078] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 69.667905][ T6078] EXT4-fs (loop5): 1 orphan inode deleted [ 69.684207][ T6078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.696971][ T12] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.712356][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 69.730825][ T6078] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.760024][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 69.760342][ T4209] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.777066][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 69.786972][ T6093] vhci_hcd: invalid port number 96 [ 69.792164][ T6093] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 69.833678][ T6100] vhci_hcd: invalid port number 65 [ 69.838981][ T6100] vhci_hcd: invalid port number 65 [ 69.901687][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 69.947259][ T6114] netlink: 'syz.5.1032': attribute type 3 has an invalid length. [ 69.980930][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 70.030543][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.037802][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.049589][ T6022] bridge_slave_0: entered allmulticast mode [ 70.056557][ T6022] bridge_slave_0: entered promiscuous mode [ 70.066881][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.074224][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.082370][ T6022] bridge_slave_1: entered allmulticast mode [ 70.088922][ T6022] bridge_slave_1: entered promiscuous mode [ 70.122780][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.153217][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.193744][ T31] ================================================================== [ 70.201884][ T31] BUG: KCSAN: data-race in __stop_tty / pty_write_room [ 70.208788][ T31] [ 70.211129][ T31] write to 0xffff888119b86dbc of 1 bytes by task 6137 on cpu 0: [ 70.218803][ T31] __stop_tty+0x36/0x90 [ 70.222994][ T31] n_tty_ioctl_helper+0x1e9/0x210 [ 70.228054][ T31] n_tty_ioctl+0x101/0x200 [ 70.232504][ T31] tty_ioctl+0x845/0xb80 [ 70.236776][ T31] __se_sys_ioctl+0xce/0x140 [ 70.241411][ T31] __x64_sys_ioctl+0x43/0x50 [ 70.246045][ T31] x64_sys_call+0x19a8/0x2fb0 [ 70.250750][ T31] do_syscall_64+0xd2/0x200 [ 70.255285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.261235][ T31] [ 70.263569][ T31] read to 0xffff888119b86dbc of 1 bytes by task 31 on cpu 1: [ 70.270949][ T31] pty_write_room+0x19/0x70 [ 70.275503][ T31] tty_write_room+0x3c/0x60 [ 70.280032][ T31] __process_echoes+0x36/0x6b0 [ 70.284822][ T31] n_tty_receive_buf_common+0x8e4/0xbe0 [ 70.290388][ T31] n_tty_receive_buf2+0x33/0x40 [ 70.295263][ T31] tty_ldisc_receive_buf+0x63/0xf0 [ 70.300393][ T31] tty_port_default_receive_buf+0x59/0x90 [ 70.306130][ T31] flush_to_ldisc+0x144/0x360 [ 70.310823][ T31] process_scheduled_works+0x4cb/0x9d0 [ 70.316320][ T31] worker_thread+0x582/0x770 [ 70.320940][ T31] kthread+0x486/0x510 [ 70.325024][ T31] ret_from_fork+0xda/0x150 [ 70.329545][ T31] ret_from_fork_asm+0x1a/0x30 [ 70.334331][ T31] [ 70.336659][ T31] value changed: 0x00 -> 0x01 [ 70.341352][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 70.343683][ T31] Reported by Kernel Concurrency Sanitizer on: [ 70.349840][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 70.362267][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.372338][ T31] Workqueue: events_unbound flush_to_ldisc [ 70.378165][ T31] ================================================================== [ 70.408311][ T6022] team0: Port device team_slave_0 added [ 70.478283][ T6022] team0: Port device team_slave_1 added [ 70.544496][ T2911] IPVS: stop unused estimator thread 0... [ 70.659528][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.746234][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.785782][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.836110][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.906349][ T2911] bridge_slave_1: left allmulticast mode [ 70.912101][ T2911] bridge_slave_1: left promiscuous mode [ 70.917857][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.925762][ T2911] bridge_slave_0: left allmulticast mode [ 70.931425][ T2911] bridge_slave_0: left promiscuous mode [ 70.937136][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.045500][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.055612][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.064888][ T2911] bond0 (unregistering): Released all slaves [ 71.096891][ T2911] hsr_slave_0: left promiscuous mode [ 71.102581][ T2911] hsr_slave_1: left promiscuous mode [ 71.108199][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.115685][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.123624][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.131131][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.141183][ T2911] veth1_macvtap: left promiscuous mode [ 71.146961][ T2911] veth0_macvtap: left promiscuous mode [ 71.152518][ T2911] veth1_vlan: left promiscuous mode [ 71.157809][ T2911] veth0_vlan: left promiscuous mode [ 71.220699][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 71.230460][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 71.505966][ T2911] IPVS: stop unused estimator thread 0... [ 71.577345][ T2911] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.655838][ T2911] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.695489][ T2911] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.745526][ T2911] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.798504][ T2911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.855548][ T2911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.906112][ T2911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.945671][ T2911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.000627][ T2911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.065948][ T2911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.125615][ T2911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.185440][ T2911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.236945][ T2911] bridge0: port 3(batadv0) entered disabled state [ 72.244018][ T2911] bridge_slave_1: left allmulticast mode [ 72.249737][ T2911] bridge_slave_1: left promiscuous mode [ 72.255411][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.263568][ T2911] bridge_slave_0: left allmulticast mode [ 72.269229][ T2911] bridge_slave_0: left promiscuous mode [ 72.275051][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.283554][ T2911] dummy0: left allmulticast mode [ 72.288682][ T2911] bridge0: port 3(dummy0) entered disabled state [ 72.295645][ T2911] bridge_slave_1: left allmulticast mode [ 72.301351][ T2911] bridge_slave_1: left promiscuous mode [ 72.307154][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.314943][ T2911] bridge_slave_0: left allmulticast mode [ 72.320617][ T2911] bridge_slave_0: left promiscuous mode [ 72.326436][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.337282][ T2911] bridge_slave_1: left allmulticast mode [ 72.343066][ T2911] bridge_slave_1: left promiscuous mode [ 72.348753][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.356408][ T2911] bridge_slave_0: left allmulticast mode [ 72.362051][ T2911] bridge_slave_0: left promiscuous mode [ 72.367790][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.376382][ T2911] bridge0: port 3(batadv0) entered disabled state [ 72.384062][ T2911] bridge_slave_1: left allmulticast mode [ 72.389773][ T2911] bridge_slave_1: left promiscuous mode [ 72.395547][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.403334][ T2911] bridge_slave_0: left allmulticast mode [ 72.409064][ T2911] bridge_slave_0: left promiscuous mode [ 72.414739][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.545791][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.556340][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.565682][ T2911] bond0 (unregistering): Released all slaves [ 72.617636][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.627303][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.636777][ T2911] bond0 (unregistering): Released all slaves [ 72.694791][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.704429][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.714539][ T2911] bond0 (unregistering): Released all slaves [ 72.794869][ T2911] bond0 (unregistering): Released all slaves [ 72.865537][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.875641][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.885408][ T2911] bond0 (unregistering): Released all slaves [ 72.931760][ T2911] hsr_slave_0: left promiscuous mode [ 72.937864][ T2911] hsr_slave_1: left promiscuous mode [ 72.943660][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.951074][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.958677][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.966103][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.975954][ T2911] hsr_slave_0: left promiscuous mode [ 72.981505][ T2911] hsr_slave_1: left promiscuous mode [ 72.987206][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.994617][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.002188][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.009610][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.018702][ T2911] hsr_slave_0: left promiscuous mode [ 73.024562][ T2911] hsr_slave_1: left promiscuous mode [ 73.030104][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.037693][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.045176][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.052590][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.067492][ T2911] veth1_macvtap: left promiscuous mode [ 73.073073][ T2911] veth0_macvtap: left promiscuous mode [ 73.078628][ T2911] veth1_vlan: left promiscuous mode [ 73.083950][ T2911] veth0_vlan: left promiscuous mode [ 73.089620][ T2911] veth1_macvtap: left promiscuous mode [ 73.095173][ T2911] veth0_macvtap: left promiscuous mode [ 73.100675][ T2911] veth1_vlan: left promiscuous mode [ 73.106132][ T2911] veth0_vlan: left promiscuous mode [ 73.111715][ T2911] veth1_macvtap: left promiscuous mode [ 73.117326][ T2911] veth0_macvtap: left promiscuous mode [ 73.123053][ T2911] veth1_vlan: left promiscuous mode [ 73.128364][ T2911] veth0_vlan: left promiscuous mode [ 73.253369][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 73.263073][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 73.317924][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 73.327688][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 73.357670][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 73.367859][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 73.423811][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 73.434577][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 74.332000][ T2911] IPVS: stop unused estimator thread 0...