last executing test programs: 2.332760746s ago: executing program 1 (id=921): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2.253346113s ago: executing program 1 (id=924): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 2.18738776s ago: executing program 1 (id=926): openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0x2}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'trusted.', 'nfc\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu>00||!') sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104020000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 2.163636992s ago: executing program 1 (id=928): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000600)={[], [{@fowner_eq}, {@uid_lt}]}, 0x1, 0x488, &(0x7f0000000d40)="$eJzs3M1vFOUfAPDvzG7pj9f2h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQQo1tCaWNLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAntZMd3bZbnfLbll2C/v5JEOfZ+fZfZ7vzPPsPDPDbAB9a1/2TxKxLSKuRsRQRKS1BTaXl6zcrRsLk//cWJhMolR6/+8ke1vcvLEwWSma5H+3ljPF7IPSC0kMN6h3dv7cqYnp6amzeX507vQno7Pz514+eXrixNSJqTPjR44cPjT22qvjr3QkzqxNN/d8PrN399sfXnp38uilj379sdzeUunylYMr4uiMgYhYqG6Tes91trKe216TToo9bAhtGYyIYt5br8ZQFC7sqK4bire+6GnjgHuqVCqVxpuvXioBD7Aket0CoDcqB/rs/LeydGnqsSFcf6N8ApTFfStfymuKcT4vM1B3fttJ+yLi6NK/32ZL1F1PAQC4F37O5j8vNZj/DUc8UlNuR35vaDgi/h8ROyPioYjYFREPR7nsoxHxWJv176vLr57/pNfWF1lrsvnf6/m9rZXzv7Q88YsYLuT3xLYvxz+QHD85PXUw3yYHYmAwy481/PQkYin7+8fXzeqvnf9lS1Z/ZS6Yt+NacXDle45NzE10IvbM9fMRe4qN4k+ieDuK2B0Re9ZZx8kXfti78pVCNXXn+NfQgftMpe8ini/v/6Woi78iWfv+5Oj/Ynrq4GilV6z22+8X32tWf038g23H3wHZ/t/SsP9X4x9Oau/Xzq76iE13quPin1/Wn9NU99x6+/+m5IMVlX82MTd3dixiU/LO6tdrLnBX8pXyWfwH9jce/zvj9pZ4PCKyTvxERDwZEU/lbX86Ip6JiP1rxP/Lm89+3GxdOf7tsa7+3wFZ/Itt7f/5c9nOW05UX1k7UTh15adm9be2/w9XMsuNauX7r5V2NezNAAAA8ABKI2JbJOlINZ2mIyPl/y+/K7ak0zOzcy8en/n0zLHyMwLDMZBWrnQN1VwPHcuvDVfy43l+Mc8fyq8bXy5sXs6PTM5MH+t18NDntjYZ/5m/Cr1uHXDPeV4L+pfxD/1r/ePfNwfc7+4witNutQPoPkdx6F+Nxv9iD9oBdJ/jP/Sv6vj/poXCNY971T+8Cdx/HP+hfxn/0Jdaf4q/y4kkIlopHN9HrF0m2QjhtJ346m7eXuxCCyPdGBuqi4nxQns/fNHhRLHVX7WI+dLiXVfa628mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//zNz4nI=") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 1.673186869s ago: executing program 2 (id=938): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x11, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x5492, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.589606697s ago: executing program 2 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) 1.493532817s ago: executing program 4 (id=945): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210009, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.480460468s ago: executing program 2 (id=946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0xad0ea28cc95d9435) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) ftruncate(r3, 0x6) 1.4541692s ago: executing program 4 (id=947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.373500198s ago: executing program 3 (id=950): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000003010101000a0000090c001980080002000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.328746613s ago: executing program 4 (id=951): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.238809361s ago: executing program 3 (id=953): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xa940, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 1.170987897s ago: executing program 3 (id=954): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xff, 0x100, 0x551}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x6}, 0x18) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 1.15143647s ago: executing program 4 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 1.14691385s ago: executing program 1 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) modify_ldt$write2(0x11, &(0x7f00000000c0)={0xff, 0x20001000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.070146867s ago: executing program 3 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 1.069777997s ago: executing program 4 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r4, r5, 0x0, 0x1000000201001) 1.056062988s ago: executing program 2 (id=959): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1, 0x86, 0x400003) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 863.161147ms ago: executing program 1 (id=960): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1210090, &(0x7f0000001300)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) utimes(&(0x7f0000000200)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x100) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x110000002000003, 0x1}) 862.949737ms ago: executing program 3 (id=961): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) 733.98421ms ago: executing program 0 (id=962): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) 733.83937ms ago: executing program 4 (id=963): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000007c0)={0x1d, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x7fff}, 0x18) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) 667.746816ms ago: executing program 0 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) 523.74666ms ago: executing program 0 (id=965): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x2003, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 499.988972ms ago: executing program 0 (id=966): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x12, r2, 0x0) 338.988448ms ago: executing program 3 (id=967): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe5, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x108, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 277.483904ms ago: executing program 0 (id=968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 220.430569ms ago: executing program 0 (id=969): r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 97.85213ms ago: executing program 2 (id=970): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x162) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)='A', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d75134e9989e31e6ea0707380494f5d89f5d9a1772e0a34a8ddf134bf6ef391ea335160b082143bf9f5e7241d2263714a08443f6bffac24d4e50006d66a22348b91970473673b2d7048a1ced727537f80b2182fb11d862abc5c939d9a272469ff34ec84e2f66cefddc7ce47eeddb68ce18bbb817f37ca06be002cc74d816db4c297bd0f6d7d903234f699c5280df7ca8da72cba7914b93148c24221eb48f7b921562", 0xa2}, {&(0x7f0000000380)="ec6d267fdd630e2ee9f53b79b8c30ad8583ba798994cc678829de675244212", 0x1f}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000000000002bf400000000000001", @ANYRES32, @ANYBLOB="0000000014000000000000002900000043000000020000000000000060"], 0xa0}}], 0x1, 0x8) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 2 (id=971): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.474223][ T29] audit: type=1400 audit(1766460311.125:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.493812][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.499185][ T29] audit: type=1400 audit(1766460311.125:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.530854][ T29] audit: type=1400 audit(1766460311.135:71): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.583187][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.476518][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.555564][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.610304][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.617468][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.624735][ T3317] bridge_slave_0: entered allmulticast mode [ 36.631178][ T3317] bridge_slave_0: entered promiscuous mode [ 36.638062][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.647023][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.654183][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.661652][ T3317] bridge_slave_1: entered allmulticast mode [ 36.667995][ T3317] bridge_slave_1: entered promiscuous mode [ 36.713020][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 36.732725][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.758017][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.765182][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.772409][ T3316] bridge_slave_0: entered allmulticast mode [ 36.778826][ T3316] bridge_slave_0: entered promiscuous mode [ 36.788717][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.803203][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.812242][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.819305][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.826647][ T3316] bridge_slave_1: entered allmulticast mode [ 36.833054][ T3316] bridge_slave_1: entered promiscuous mode [ 36.883929][ T3317] team0: Port device team_slave_0 added [ 36.900685][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.915810][ T3317] team0: Port device team_slave_1 added [ 36.929623][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.938852][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.945958][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.953495][ T3321] bridge_slave_0: entered allmulticast mode [ 36.959984][ T3321] bridge_slave_0: entered promiscuous mode [ 36.971059][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.978280][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.985464][ T3325] bridge_slave_0: entered allmulticast mode [ 36.992253][ T3325] bridge_slave_0: entered promiscuous mode [ 37.011929][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.019028][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.026327][ T3321] bridge_slave_1: entered allmulticast mode [ 37.032701][ T3321] bridge_slave_1: entered promiscuous mode [ 37.044450][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.051590][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.058725][ T3325] bridge_slave_1: entered allmulticast mode [ 37.065352][ T3325] bridge_slave_1: entered promiscuous mode [ 37.079564][ T3316] team0: Port device team_slave_0 added [ 37.095383][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.102385][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.128765][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.145469][ T3316] team0: Port device team_slave_1 added [ 37.151112][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.158325][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.165935][ T3323] bridge_slave_0: entered allmulticast mode [ 37.172440][ T3323] bridge_slave_0: entered promiscuous mode [ 37.184289][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.191336][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.217343][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.238666][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.245837][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.253129][ T3323] bridge_slave_1: entered allmulticast mode [ 37.259600][ T3323] bridge_slave_1: entered promiscuous mode [ 37.267541][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.280420][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.300708][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.312174][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.321840][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.328784][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.354765][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.386425][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.393433][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.419434][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.431406][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.446631][ T3321] team0: Port device team_slave_0 added [ 37.461217][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.476321][ T3321] team0: Port device team_slave_1 added [ 37.482846][ T3325] team0: Port device team_slave_0 added [ 37.489370][ T3325] team0: Port device team_slave_1 added [ 37.513850][ T3317] hsr_slave_0: entered promiscuous mode [ 37.520008][ T3317] hsr_slave_1: entered promiscuous mode [ 37.552639][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.559605][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.585588][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.597305][ T3323] team0: Port device team_slave_0 added [ 37.603679][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.610694][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.636727][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.653107][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.660103][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.686164][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.697681][ T3323] team0: Port device team_slave_1 added [ 37.708971][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.716059][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.742322][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.756079][ T3316] hsr_slave_0: entered promiscuous mode [ 37.762291][ T3316] hsr_slave_1: entered promiscuous mode [ 37.768059][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.774070][ T3316] Cannot create hsr debugfs directory [ 37.803306][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.810317][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.836335][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.856982][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.864107][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.890282][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.938324][ T3321] hsr_slave_0: entered promiscuous mode [ 37.944357][ T3321] hsr_slave_1: entered promiscuous mode [ 37.950294][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.956064][ T3321] Cannot create hsr debugfs directory [ 37.963853][ T3325] hsr_slave_0: entered promiscuous mode [ 37.970072][ T3325] hsr_slave_1: entered promiscuous mode [ 37.976020][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 37.981905][ T3325] Cannot create hsr debugfs directory [ 38.038131][ T3323] hsr_slave_0: entered promiscuous mode [ 38.044414][ T3323] hsr_slave_1: entered promiscuous mode [ 38.050357][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 38.056156][ T3323] Cannot create hsr debugfs directory [ 38.189811][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.198765][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.214597][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.229347][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.262101][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.279487][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.288902][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.301138][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.318527][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.329115][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.349237][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.358907][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.393846][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.405792][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.419744][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.429254][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.454795][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.464900][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.474785][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.486261][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.495012][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.517054][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.531741][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.538847][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.556656][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.563730][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.582574][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.608695][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.628469][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.635695][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.655082][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.662198][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.680893][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.713784][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.729984][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.743014][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.750109][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.764300][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.771530][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.786001][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.795033][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.812240][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.819407][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.828344][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.835497][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.855379][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.884954][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.892043][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.922648][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.929755][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.953541][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.978459][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.044850][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.083557][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.133211][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.222449][ T3317] veth0_vlan: entered promiscuous mode [ 39.247411][ T3317] veth1_vlan: entered promiscuous mode [ 39.295730][ T3316] veth0_vlan: entered promiscuous mode [ 39.304214][ T3323] veth0_vlan: entered promiscuous mode [ 39.312390][ T3325] veth0_vlan: entered promiscuous mode [ 39.319880][ T3323] veth1_vlan: entered promiscuous mode [ 39.327680][ T3316] veth1_vlan: entered promiscuous mode [ 39.338230][ T3321] veth0_vlan: entered promiscuous mode [ 39.354662][ T3325] veth1_vlan: entered promiscuous mode [ 39.361301][ T3321] veth1_vlan: entered promiscuous mode [ 39.373740][ T3317] veth0_macvtap: entered promiscuous mode [ 39.383360][ T3317] veth1_macvtap: entered promiscuous mode [ 39.402661][ T3316] veth0_macvtap: entered promiscuous mode [ 39.414784][ T3316] veth1_macvtap: entered promiscuous mode [ 39.422898][ T3323] veth0_macvtap: entered promiscuous mode [ 39.430149][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.445629][ T3323] veth1_macvtap: entered promiscuous mode [ 39.455745][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.463584][ T3325] veth0_macvtap: entered promiscuous mode [ 39.476601][ T3321] veth0_macvtap: entered promiscuous mode [ 39.485805][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.494176][ T3325] veth1_macvtap: entered promiscuous mode [ 39.501312][ T3321] veth1_macvtap: entered promiscuous mode [ 39.508060][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.523804][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.538344][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.547336][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.555002][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.565200][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.579225][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.596852][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.606440][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.615832][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.625927][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.635409][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649571][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.659187][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 39.659199][ T29] audit: type=1400 audit(1766460316.385:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.wZZHXB/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.691690][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.699482][ T29] audit: type=1400 audit(1766460316.395:86): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.699978][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.721549][ T29] audit: type=1400 audit(1766460316.395:87): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.wZZHXB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.741650][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.754136][ T29] audit: type=1400 audit(1766460316.395:88): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.784334][ T29] audit: type=1400 audit(1766460316.395:89): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.wZZHXB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.810994][ T29] audit: type=1400 audit(1766460316.395:90): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.wZZHXB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.838380][ T29] audit: type=1400 audit(1766460316.395:91): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.857928][ T29] audit: type=1400 audit(1766460316.425:92): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.880764][ T29] audit: type=1400 audit(1766460316.425:93): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=3918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.907764][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.908226][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.936007][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.952964][ T29] audit: type=1400 audit(1766460316.685:94): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.994500][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.041112][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.045653][ T3490] loop1: detected capacity change from 0 to 1024 [ 40.077755][ T3490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.109767][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.132525][ T3490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.162405][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.173362][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.182441][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.183612][ T3496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.200294][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.209722][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.221410][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.252294][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.262335][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.535650][ C0] hrtimer: interrupt took 37072 ns [ 40.731766][ T3519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 40.741188][ T3519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 40.756879][ T3520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.878352][ T3525] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 40.892259][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 40.943152][ T3527] netlink: 'syz.3.14': attribute type 7 has an invalid length. [ 40.950947][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 41.119089][ T3539] netlink: 'syz.4.19': attribute type 39 has an invalid length. [ 41.214316][ T3520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.490369][ T3490] syz.1.2 (3490) used greatest stack depth: 7080 bytes left [ 41.515155][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.704053][ T3582] loop1: detected capacity change from 0 to 512 [ 41.728624][ T3582] EXT4-fs: Ignoring removed i_version option [ 41.749897][ T3582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.763097][ T3582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.775046][ T3582] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.789071][ T3582] EXT4-fs (loop1): 1 truncate cleaned up [ 41.796677][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.827650][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.966436][ T3520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.025502][ T3604] loop3: detected capacity change from 0 to 512 [ 42.105248][ T3604] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.38: bg 0: block 248: padding at end of block bitmap is not set [ 42.150248][ T3604] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.38: Failed to acquire dquot type 1 [ 42.170740][ T3604] EXT4-fs (loop3): 1 truncate cleaned up [ 42.185448][ T3604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.200406][ T3604] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.286343][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.444741][ T3520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.462680][ T3643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.492843][ T1680] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.510367][ T1680] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.533620][ T3647] netlink: 9 bytes leftover after parsing attributes in process `syz.1.52'. [ 42.548232][ T1680] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.556806][ T3647] netlink: 9 bytes leftover after parsing attributes in process `syz.1.52'. [ 42.581727][ T1680] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.617212][ T3650] loop2: detected capacity change from 0 to 1024 [ 42.627690][ T3643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.645625][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 42.685276][ T3643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.745845][ T3643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.773034][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.845294][ T802] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.861310][ T802] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.891177][ T802] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.899745][ T802] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.976238][ T3667] bridge0: entered promiscuous mode [ 42.986965][ T3667] bridge0: left promiscuous mode [ 43.198819][ T3665] loop1: detected capacity change from 0 to 764 [ 43.262299][ T3665] rock: directory entry would overflow storage [ 43.268880][ T3665] rock: sig=0x4654, size=5, remaining=4 [ 43.289151][ T3673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.296511][ T3673] IPv6: NLM_F_CREATE should be set when creating new route [ 43.303784][ T3673] IPv6: NLM_F_CREATE should be set when creating new route [ 43.429440][ T3684] netlink: 96 bytes leftover after parsing attributes in process `syz.0.68'. [ 43.465164][ T3688] team1: entered promiscuous mode [ 43.470319][ T3688] team1: entered allmulticast mode [ 43.476811][ T3688] 8021q: adding VLAN 0 to HW filter on device team1 [ 43.485040][ T3688] Zero length message leads to an empty skb [ 43.502679][ T3692] lo speed is unknown, defaulting to 1000 [ 43.511738][ T3692] lo speed is unknown, defaulting to 1000 [ 43.521005][ T3692] lo speed is unknown, defaulting to 1000 [ 43.567563][ T3692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.575354][ T3692] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.604190][ T3692] lo speed is unknown, defaulting to 1000 [ 43.615903][ T3702] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 43.624070][ T3702] netlink: 'syz.3.75': attribute type 4 has an invalid length. [ 43.641079][ T3692] lo speed is unknown, defaulting to 1000 [ 43.658796][ T3702] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 43.666528][ T3702] netlink: 'syz.3.75': attribute type 4 has an invalid length. [ 43.692005][ T3692] lo speed is unknown, defaulting to 1000 [ 43.699834][ T3692] lo speed is unknown, defaulting to 1000 [ 43.719973][ T3692] lo speed is unknown, defaulting to 1000 [ 43.732307][ T3716] capability: warning: `syz.3.81' uses deprecated v2 capabilities in a way that may be insecure [ 43.798783][ T3721] bridge0: entered promiscuous mode [ 43.823443][ T3721] bridge0: left promiscuous mode [ 43.867539][ T3728] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 43.972790][ T3736] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 44.015885][ T3736] hsr_slave_0: left promiscuous mode [ 44.025092][ T3736] hsr_slave_1: left promiscuous mode [ 44.208468][ T3750] ======================================================= [ 44.208468][ T3750] WARNING: The mand mount option has been deprecated and [ 44.208468][ T3750] and is ignored by this kernel. Remove the mand [ 44.208468][ T3750] option from the mount to silence this warning. [ 44.208468][ T3750] ======================================================= [ 44.218238][ T3751] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 44.218238][ T3751] The task syz.3.94 (3751) triggered the difference, watch for misbehavior. [ 44.313729][ T3757] netlink: 'syz.3.98': attribute type 7 has an invalid length. [ 44.535761][ T3770] pim6reg: entered allmulticast mode [ 44.552410][ T3770] pim6reg: left allmulticast mode [ 44.738950][ T3780] loop3: detected capacity change from 0 to 512 [ 44.839742][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.853775][ T3780] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.878436][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 44.878453][ T29] audit: type=1400 audit(1766460321.605:414): avc: denied { create } for pid=3784 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.906094][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.917242][ T29] audit: type=1400 audit(1766460321.635:415): avc: denied { setopt } for pid=3784 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.029032][ T29] audit: type=1326 audit(1766460321.755:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3788 comm="syz.1.110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x0 [ 45.081800][ T3787] tipc: Failed to remove unknown binding: 66,1,1/0:1064987883/1064987885 [ 45.091720][ T3787] tipc: Failed to remove unknown binding: 66,1,1/0:1064987883/1064987885 [ 45.100288][ T3787] tipc: Failed to remove unknown binding: 66,1,1/0:1064987883/1064987885 [ 45.135885][ T29] audit: type=1400 audit(1766460321.855:417): avc: denied { write } for pid=3784 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.169340][ T3796] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.232568][ T29] audit: type=1326 audit(1766460321.965:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 45.283005][ T29] audit: type=1326 audit(1766460321.965:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 45.306311][ T29] audit: type=1326 audit(1766460321.965:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 45.330444][ T29] audit: type=1326 audit(1766460321.965:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 45.354192][ T29] audit: type=1326 audit(1766460321.965:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 45.377521][ T29] audit: type=1326 audit(1766460321.965:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 45.452117][ T3808] __nla_validate_parse: 7 callbacks suppressed [ 45.452135][ T3808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.120'. [ 45.570152][ T3813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.609403][ T3815] process 'syz.0.122' launched './file0' with NULL argv: empty string added [ 45.636597][ T3813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.688200][ T3813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.755228][ T3813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.833130][ T2517] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.850896][ T2517] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.879888][ T2517] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.889712][ T2517] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.912507][ T3837] syz.3.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.956285][ T3839] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.003261][ T3839] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.003362][ T3841] loop0: detected capacity change from 0 to 1024 [ 46.059596][ T3841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.098327][ T3839] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.150540][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.213551][ T3839] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.284142][ T3858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.367586][ T3858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.387521][ T3863] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 46.398485][ T3865] loop4: detected capacity change from 0 to 128 [ 46.419753][ T3865] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.434952][ T3865] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.449186][ T3863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.465635][ T3858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.479601][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 46.492579][ T3863] bond1 (unregistering): Released all slaves [ 46.520261][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.534434][ T3871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.145'. [ 46.548465][ T3858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.615358][ T3877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 46.644077][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.652544][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 46.666264][ T802] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.684817][ T802] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.704954][ T802] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.742373][ T3886] Illegal XDP return value 4294967274 on prog (id 130) dev N/A, expect packet loss! [ 46.867658][ T3898] ref_ctr_offset mismatch. inode: 0x79 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 46.953025][ T3903] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 46.987303][ T3903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.027008][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 47.064493][ T3903] bond1 (unregistering): Released all slaves [ 47.088736][ T3910] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 47.137901][ T3910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.172999][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 47.192373][ T3914] bridge0: entered promiscuous mode [ 47.211381][ T3914] bridge0: port 3(macsec1) entered blocking state [ 47.218821][ T3914] bridge0: port 3(macsec1) entered disabled state [ 47.228316][ T3914] macsec1: entered allmulticast mode [ 47.234665][ T3914] bridge0: entered allmulticast mode [ 47.280615][ T3914] macsec1: left allmulticast mode [ 47.292037][ T3914] bridge0: left allmulticast mode [ 47.320376][ T3914] bridge0: left promiscuous mode [ 47.384852][ T3910] bond1 (unregistering): Released all slaves [ 47.394652][ T3925] loop2: detected capacity change from 0 to 4096 [ 47.402522][ T3925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.412782][ T3925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.674548][ T3944] bridge0: port 3(gretap0) entered blocking state [ 47.681217][ T3944] bridge0: port 3(gretap0) entered disabled state [ 47.690623][ T3944] gretap0: entered allmulticast mode [ 47.697363][ T3944] gretap0: entered promiscuous mode [ 47.703137][ T3944] bridge0: port 3(gretap0) entered blocking state [ 47.709629][ T3944] bridge0: port 3(gretap0) entered forwarding state [ 47.719866][ T3944] gretap0: left allmulticast mode [ 47.725213][ T3944] gretap0: left promiscuous mode [ 47.730404][ T3944] bridge0: port 3(gretap0) entered disabled state [ 47.758879][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.786016][ T3949] tipc: Started in network mode [ 47.790969][ T3949] tipc: Node identity ac14140f, cluster identity 4711 [ 47.818492][ T3949] tipc: New replicast peer: 255.255.255.255 [ 47.825123][ T3949] tipc: Enabled bearer , priority 10 [ 47.918927][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 48.105704][ T3961] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.183'. [ 48.115033][ T3961] netlink: zone id is out of range [ 48.120221][ T3961] netlink: zone id is out of range [ 48.136124][ T3961] netlink: set zone limit has 8 unknown bytes [ 48.203521][ T3967] loop0: detected capacity change from 0 to 128 [ 48.212622][ T3967] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ[^ ðìùr5_ןþQ¿Š–KiSšcèž(géÕÀõï'WÝ‚JáÜEµr+ð_N¼' [ 48.352289][ T3495] IPVS: starting estimator thread 0... [ 48.368994][ T3982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 48.441524][ T3980] IPVS: using max 2064 ests per chain, 103200 per kthread [ 48.514747][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.521988][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.580682][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.591138][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.642642][ T1680] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.665676][ T1680] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.682777][ T1680] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.697785][ T1680] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.761381][ T4002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.201'. [ 48.886326][ T4005] loop4: detected capacity change from 0 to 512 [ 48.893459][ T4005] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.906451][ T4005] EXT4-fs (loop4): 1 truncate cleaned up [ 48.931990][ T4005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.944241][ T1038] tipc: Node number set to 2886997007 [ 48.975619][ T4005] bridge: RTM_NEWNEIGH with invalid ether address [ 49.042304][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.094982][ T4010] loop4: detected capacity change from 0 to 4096 [ 49.114209][ T4010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.180657][ T4014] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 49.615031][ T4041] loop0: detected capacity change from 0 to 512 [ 49.634549][ T4041] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 49.883856][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 49.883936][ T29] audit: type=1326 audit(1766460326.605:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 49.913527][ T29] audit: type=1326 audit(1766460326.605:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 49.936824][ T29] audit: type=1326 audit(1766460326.605:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 49.960209][ T29] audit: type=1326 audit(1766460326.605:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 49.983562][ T29] audit: type=1326 audit(1766460326.605:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 50.006822][ T29] audit: type=1326 audit(1766460326.605:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 50.030127][ T29] audit: type=1326 audit(1766460326.605:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 50.053452][ T29] audit: type=1326 audit(1766460326.605:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 50.076726][ T29] audit: type=1326 audit(1766460326.605:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 50.100001][ T29] audit: type=1326 audit(1766460326.605:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86be25f749 code=0x7ffc0000 [ 50.138187][ T1597] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.150226][ T1597] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163054][ T1597] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.218345][ T1597] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.285343][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.733281][ T4086] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.803855][ T4086] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.867835][ T4086] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.943636][ T4086] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.579228][ T4113] loop3: detected capacity change from 0 to 2048 [ 51.604979][ T3310] Alternate GPT is invalid, using primary GPT. [ 51.611564][ T3310] loop3: p2 p3 p7 [ 51.633596][ T4113] Alternate GPT is invalid, using primary GPT. [ 51.639965][ T4113] loop3: p2 p3 p7 [ 51.716640][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 51.730475][ T4122] udevd[4122]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 51.741780][ T3697] udevd[3697]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.759224][ T3697] udevd[3697]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 51.772915][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.787580][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 52.172166][ T4140] __nla_validate_parse: 5 callbacks suppressed [ 52.172183][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 52.187244][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 52.381840][ T4150] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 52.390611][ T4150] ref_ctr increment failed for inode: 0x160 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104fbf2c0 [ 52.628523][ T4168] lo: entered allmulticast mode [ 52.637367][ T4168] lo: entered promiscuous mode [ 52.642254][ T4168] lo: left allmulticast mode [ 53.207684][ T4183] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 53.216514][ T4183] ref_ctr increment failed for inode: 0x164 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810b2d21c0 [ 53.703341][ T4209] loop3: detected capacity change from 0 to 512 [ 53.721072][ T4209] ------------[ cut here ]------------ [ 53.726682][ T4209] EA inode 11 i_nlink=2 [ 53.726700][ T4209] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.3.282/4209 [ 53.741746][ T4209] Modules linked in: [ 53.745757][ T4209] CPU: 1 UID: 0 PID: 4209 Comm: syz.3.282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.755462][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.765656][ T4209] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 53.772319][ T4209] Code: 81 e2 9c ff 4c 8d 2d 3a f1 20 05 49 8d 7e 40 e8 81 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 95 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 8c ad ba 03 66 66 66 2e 0f 1f 84 [ 53.791987][ T4209] RSP: 0018:ffffc900102175a0 EFLAGS: 00010246 [ 53.798097][ T4209] RAX: ffff88812b039b10 RBX: ffff88811ac064e8 RCX: ffffffff81bb1c6b [ 53.806183][ T4209] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d90 [ 53.814218][ T4209] RBP: 000000000000000b R08: 000188811ac0649b R09: 0000000000000000 [ 53.822343][ T4209] R10: ffffc900102174d0 R11: 0001c900102174d0 R12: ffff88811ac06498 [ 53.830709][ T4209] R13: ffffffff86dc0d90 R14: ffff88811ac06450 R15: 0000000000000001 [ 53.838804][ T4209] FS: 00007f86bccc76c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 53.847924][ T4209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.854665][ T4209] CR2: 0000001b3451cff8 CR3: 000000011b962000 CR4: 00000000003506f0 [ 53.862784][ T4209] Call Trace: [ 53.866141][ T4209] [ 53.869103][ T4209] ext4_xattr_set_entry+0x77f/0x1020 [ 53.874497][ T4209] ext4_xattr_ibody_set+0x184/0x3c0 [ 53.879892][ T4209] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 53.885850][ T4209] __ext4_expand_extra_isize+0x246/0x280 [ 53.886226][ T4221] loop4: detected capacity change from 0 to 1024 [ 53.891550][ T4209] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 53.903376][ T4209] ext4_evict_inode+0x7c4/0xd40 [ 53.908283][ T4209] ? __pfx_ext4_evict_inode+0x10/0x10 [ 53.913778][ T4209] evict+0x2af/0x510 [ 53.917803][ T4209] ? __dquot_initialize+0x146/0x7c0 [ 53.923097][ T4209] iput+0x4bd/0x650 [ 53.924699][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.926972][ T4209] ext4_process_orphan+0x1a9/0x1c0 [ 53.944179][ T4209] ext4_orphan_cleanup+0x6a8/0xa00 [ 53.949334][ T4209] ext4_fill_super+0x3411/0x37a0 [ 53.954370][ T4209] ? set_blocksize+0x1a8/0x310 [ 53.959223][ T4209] ? sb_set_blocksize+0xfc/0x170 [ 53.964229][ T4209] ? setup_bdev_super+0x30e/0x370 [ 53.969314][ T4209] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.974634][ T4209] get_tree_bdev_flags+0x291/0x300 [ 53.979835][ T4209] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.985585][ T4209] get_tree_bdev+0x1f/0x30 [ 53.990068][ T4209] ext4_get_tree+0x1c/0x30 [ 53.994613][ T4209] vfs_get_tree+0x57/0x1d0 [ 53.999172][ T4209] do_new_mount+0x24d/0x6a0 [ 54.003877][ T4209] path_mount+0x4ab/0xb80 [ 54.008265][ T4209] ? user_path_at+0xbf/0x130 [ 54.013016][ T4209] __se_sys_mount+0x28c/0x2e0 [ 54.017826][ T4209] __x64_sys_mount+0x67/0x80 [ 54.022490][ T4209] x64_sys_call+0x2cca/0x3000 [ 54.027493][ T4209] do_syscall_64+0xca/0x2b0 [ 54.032142][ T4209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.038241][ T4209] RIP: 0033:0x7f86be260eea [ 54.042802][ T4209] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.062558][ T4209] RSP: 002b:00007f86bccc6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.071070][ T4209] RAX: ffffffffffffffda RBX: 00007f86bccc6ef0 RCX: 00007f86be260eea [ 54.079146][ T4209] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f86bccc6eb0 [ 54.082351][ T4225] netlink: 'syz.2.286': attribute type 3 has an invalid length. [ 54.087177][ T4209] RBP: 0000200000000180 R08: 00007f86bccc6ef0 R09: 0000000000800718 [ 54.087193][ T4209] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 54.087206][ T4209] R13: 00007f86bccc6eb0 R14: 000000000000046f R15: 0000200000000200 [ 54.094966][ T4225] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 54.102910][ T4209] [ 54.110990][ T4225] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.286'. [ 54.119863][ T4209] ---[ end trace 0000000000000000 ]--- [ 54.129075][ T4209] EXT4-fs (loop3): 1 orphan inode deleted [ 54.152638][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.152913][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.181511][ T1680] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.193249][ T1680] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.208242][ T1680] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.222626][ T1680] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.267696][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.532577][ T4247] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.594011][ T4247] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.626198][ T4253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 54.644045][ T4247] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.714033][ T4247] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.770030][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.791915][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.812310][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.820704][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.928038][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 54.928056][ T29] audit: type=1400 audit(1766460331.655:1271): avc: denied { getopt } for pid=4267 comm="syz.2.307" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.014501][ T29] audit: type=1400 audit(1766460331.745:1272): avc: denied { getopt } for pid=4277 comm="syz.0.311" lport=54621 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 55.053746][ T29] audit: type=1326 audit(1766460331.785:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.077362][ T29] audit: type=1326 audit(1766460331.785:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.124080][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 55.133062][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 55.142005][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 55.151734][ T29] audit: type=1326 audit(1766460331.835:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.175129][ T29] audit: type=1326 audit(1766460331.835:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.198584][ T29] audit: type=1326 audit(1766460331.835:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.222043][ T29] audit: type=1326 audit(1766460331.835:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f271541e1ff code=0x7ffc0000 [ 55.245572][ T29] audit: type=1326 audit(1766460331.835:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.268975][ T29] audit: type=1326 audit(1766460331.835:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 55.296156][ T4286] netlink: 'syz.4.314': attribute type 10 has an invalid length. [ 55.314141][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 55.323114][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 55.332164][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 55.349045][ T4291] netlink: 'syz.4.314': attribute type 10 has an invalid length. [ 55.353055][ T4286] team0: Failed to send options change via netlink (err -105) [ 55.364363][ T4286] team0: Port device dummy0 added [ 55.378387][ T4280] loop2: detected capacity change from 0 to 8192 [ 55.409709][ T4295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.426982][ T4291] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 55.436349][ T3309] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 55.441623][ T3309] loop2: partition table partially beyond EOD, truncated [ 55.448822][ T3309] loop2: p1 start 100663296 is beyond EOD, truncated [ 55.455730][ T3309] loop2: p2 size 134217732 extends beyond EOD, truncated [ 55.473040][ T3309] loop2: p4 size 14876672 extends beyond EOD, truncated [ 55.480725][ T3309] loop2: p5 size 134217732 extends beyond EOD, truncated [ 55.489536][ T4297] loop1: detected capacity change from 0 to 1024 [ 55.489696][ T3309] loop2: p6 size 14876672 extends beyond EOD, truncated [ 55.504282][ T4291] team0: Failed to send options change via netlink (err -105) [ 55.532487][ T4291] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 55.534180][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.556821][ T4280] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 55.562096][ T4280] loop2: partition table partially beyond EOD, truncated [ 55.570108][ T4291] team0: Port device dummy0 removed [ 55.577354][ T4291] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.586442][ T4280] loop2: p1 start 100663296 is beyond EOD, truncated [ 55.593223][ T4280] loop2: p2 size 134217732 extends beyond EOD, truncated [ 55.617260][ T4295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.642888][ T4280] loop2: p4 size 14876672 extends beyond EOD, truncated [ 55.650568][ T4280] loop2: p5 size 134217732 extends beyond EOD, truncated [ 55.658780][ T4280] loop2: p6 size 14876672 extends beyond EOD, truncated [ 55.695135][ T4295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.740996][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.755827][ T4295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.830886][ T2465] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.877022][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.892102][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.912609][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 55.913715][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.925844][ T4122] udevd[4122]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 55.943919][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.961736][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.080419][ T4317] lo speed is unknown, defaulting to 1000 [ 56.098960][ T4317] lo speed is unknown, defaulting to 1000 [ 56.112884][ T4317] lo speed is unknown, defaulting to 1000 [ 56.125312][ T4317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.144886][ T4317] lo speed is unknown, defaulting to 1000 [ 56.155654][ T4317] lo speed is unknown, defaulting to 1000 [ 56.167463][ T4317] lo speed is unknown, defaulting to 1000 [ 56.179257][ T4317] lo speed is unknown, defaulting to 1000 [ 56.193602][ T4317] lo speed is unknown, defaulting to 1000 [ 56.204097][ T4317] lo speed is unknown, defaulting to 1000 [ 56.711780][ T4333] ip6gre1: entered allmulticast mode [ 56.741887][ T4335] bridge0: entered promiscuous mode [ 56.768638][ T4335] bridge0: left promiscuous mode [ 57.735073][ T4411] loop3: detected capacity change from 0 to 1024 [ 57.744610][ T4411] EXT4-fs: Ignoring removed orlov option [ 57.788955][ T4411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.884093][ T4420] geneve2: entered promiscuous mode [ 57.889374][ T4420] geneve2: entered allmulticast mode [ 57.926971][ T4424] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.993431][ T4424] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.059080][ T4432] bridge0: entered promiscuous mode [ 58.069049][ T4432] bridge0: left promiscuous mode [ 58.084081][ T4424] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.153827][ T4424] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.211092][ T4369] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.233188][ T4369] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.254848][ T4369] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.289534][ T4369] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.381785][ T4452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.446094][ T4452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.473865][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.555283][ T4452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.607546][ T4452] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.715413][ T4462] lo speed is unknown, defaulting to 1000 [ 58.743706][ T4469] netlink: 'syz.1.360': attribute type 10 has an invalid length. [ 58.762169][ T4469] ipvlan0: entered allmulticast mode [ 58.767709][ T4469] veth0_vlan: entered allmulticast mode [ 58.786665][ T4469] team0: Device ipvlan0 failed to register rx_handler [ 58.933666][ T4484] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.999021][ T4484] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.067106][ T4484] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.140612][ T4484] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.245685][ T4365] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.269133][ T4365] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.291360][ T4365] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.301658][ T4365] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.585826][ T4513] lo speed is unknown, defaulting to 1000 [ 59.631923][ T4513] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 59.639822][ T4513] ipvlan0: entered allmulticast mode [ 59.645280][ T4513] veth0_vlan: entered allmulticast mode [ 59.653346][ T4513] team0: Device ipvlan0 failed to register rx_handler [ 59.752346][ T4531] tipc: Started in network mode [ 59.757312][ T4531] tipc: Node identity ac14140f, cluster identity 4711 [ 59.765976][ T4531] tipc: New replicast peer: 255.255.255.255 [ 59.772253][ T4531] tipc: Enabled bearer , priority 10 [ 59.909767][ T4539] __nla_validate_parse: 4 callbacks suppressed [ 59.909788][ T4539] netlink: 204 bytes leftover after parsing attributes in process `syz.4.390'. [ 59.954112][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 59.954129][ T29] audit: type=1400 audit(1766460336.685:1593): avc: denied { read } for pid=4541 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.168347][ T29] audit: type=1326 audit(1766460336.895:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 60.207602][ T29] audit: type=1326 audit(1766460336.925:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 60.231160][ T29] audit: type=1326 audit(1766460336.925:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 60.254591][ T29] audit: type=1326 audit(1766460336.925:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 60.278076][ T29] audit: type=1326 audit(1766460336.925:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 60.301504][ T29] audit: type=1326 audit(1766460336.925:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 60.586830][ T4559] netlink: 'syz.3.399': attribute type 12 has an invalid length. [ 60.603392][ T29] audit: type=1400 audit(1766460337.335:1600): avc: denied { write } for pid=4558 comm="syz.3.399" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.684856][ T4561] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 60.753946][ T29] audit: type=1400 audit(1766460337.485:1601): avc: denied { ioctl } for pid=4567 comm="syz.3.402" path="socket:[9565]" dev="sockfs" ino=9565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.781539][ T3491] tipc: Node number set to 2886997007 [ 60.799903][ T29] audit: type=1400 audit(1766460337.515:1602): avc: denied { bind } for pid=4567 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.857127][ T4574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.405'. [ 61.017273][ T4577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 61.026273][ T4577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.405'. [ 61.035243][ T4577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 61.044654][ T4577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.405'. [ 61.182856][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 61.293267][ T4592] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.353474][ T4592] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.431834][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 61.443508][ T4592] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.464429][ T4607] team2: entered promiscuous mode [ 61.469531][ T4607] team2: entered allmulticast mode [ 61.475703][ T4607] 8021q: adding VLAN 0 to HW filter on device team2 [ 61.490557][ T4592] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.515794][ T4613] netlink: 64 bytes leftover after parsing attributes in process `syz.3.422'. [ 61.577173][ T4373] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.588949][ T4373] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.600387][ T4373] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.612321][ T4373] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.660328][ T4620] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.665471][ T4621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.425'. [ 61.727693][ T4626] netlink: 'syz.3.429': attribute type 7 has an invalid length. [ 61.845137][ T4635] bond0: (slave bond_slave_1): Releasing backup interface [ 62.043394][ T4646] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.059096][ T4650] loop1: detected capacity change from 0 to 1024 [ 62.073035][ T4365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.097641][ T4365] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.108017][ T4650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.128830][ T4650] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.145638][ T4646] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.156736][ T4650] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.438: lblock 0 mapped to illegal pblock 0 (length 6) [ 62.172625][ T4365] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.180927][ T4652] bridge: RTM_NEWNEIGH with invalid ether address [ 62.191298][ T4650] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 62.203790][ T4650] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.203790][ T4650] [ 62.213593][ T4373] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.225483][ T4657] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.438: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.240505][ T4657] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.438: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 62.259153][ T4657] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 62.260909][ T4646] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.291819][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.313701][ T4646] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.363245][ T4656] loop2: detected capacity change from 0 to 8192 [ 62.401950][ T4373] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.442472][ T4373] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.450747][ T4373] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.472003][ T4373] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.511679][ T4673] capability: warning: `syz.4.450' uses 32-bit capabilities (legacy support in use) [ 62.560490][ T4678] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 62.600943][ T4682] loop4: detected capacity change from 0 to 256 [ 62.650300][ T4678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.717871][ T4678] bond1: (slave ip6gretap1): making interface the new active one [ 62.745559][ T4678] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 62.795238][ T4697] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.814170][ T4678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4678 comm=syz.2.449 [ 62.839549][ T4701] team0 (unregistering): Port device team_slave_0 removed [ 62.849674][ T4701] team0 (unregistering): Port device team_slave_1 removed [ 62.865526][ T4697] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.935645][ T4697] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.017040][ T4697] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.083883][ T4714] loop2: detected capacity change from 0 to 2048 [ 63.113996][ T4714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.153933][ T3323] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 63.169050][ T3323] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 63.182729][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.284454][ T4726] loop2: detected capacity change from 0 to 1024 [ 63.303397][ T4726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.315841][ T4726] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.331134][ T4726] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.469: lblock 0 mapped to illegal pblock 0 (length 6) [ 63.344749][ T4726] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 63.357134][ T4726] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.357134][ T4726] [ 63.372527][ T4726] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.469: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.386164][ T4726] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 63.409194][ T4726] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 63.432530][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.475594][ T4749] lo speed is unknown, defaulting to 1000 [ 64.503649][ T4754] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 64.512802][ T4754] ipvlan0: entered allmulticast mode [ 64.518155][ T4754] veth0_vlan: entered allmulticast mode [ 64.524573][ T4754] team0: Device ipvlan0 failed to register rx_handler [ 64.581077][ T4757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.646327][ T4757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.720039][ T4757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.777004][ T4757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.800383][ T4771] loop2: detected capacity change from 0 to 1024 [ 64.817765][ T4771] EXT4-fs: Ignoring removed oldalloc option [ 64.823978][ T4771] EXT4-fs: Ignoring removed bh option [ 64.843541][ T4771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.858524][ T4390] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.878273][ T4390] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.900236][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.912511][ T4390] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.163447][ T4785] __nla_validate_parse: 9 callbacks suppressed [ 65.163467][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 65.232088][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 65.232103][ T29] audit: type=1326 audit(1766460341.965:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.262279][ T29] audit: type=1326 audit(1766460341.995:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.285747][ T29] audit: type=1326 audit(1766460341.995:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.309248][ T29] audit: type=1326 audit(1766460341.995:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.332984][ T29] audit: type=1326 audit(1766460341.995:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.356316][ T29] audit: type=1326 audit(1766460341.995:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.379857][ T29] audit: type=1326 audit(1766460341.995:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.403108][ T29] audit: type=1326 audit(1766460341.995:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.426450][ T29] audit: type=1326 audit(1766460341.995:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4784 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0b85f749 code=0x7ffc0000 [ 65.558388][ T29] audit: type=1326 audit(1766460342.285:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491650f749 code=0x7ffc0000 [ 65.720008][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.227151][ T4365] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.238543][ T4365] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.249936][ T4365] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.261670][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.334164][ T4810] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.346883][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.356467][ T4808] netlink: 348 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.366326][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.377066][ T4808] netlink: 348 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.392204][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.413506][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.423738][ T4808] netlink: 348 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.439164][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.448727][ T4808] netlink: 348 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.466403][ T4810] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.499340][ T4810] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.587117][ T4810] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.650081][ T4827] lo speed is unknown, defaulting to 1000 [ 66.692292][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.707377][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.734187][ T4365] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.742684][ T4365] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.846056][ T4837] ref_ctr_offset mismatch. inode: 0x1c9 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 67.280750][ T4865] sch_fq: defrate 0 ignored. [ 67.406940][ T4868] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.434653][ T4871] bridge: RTM_NEWNEIGH with invalid ether address [ 67.463503][ T4868] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.497966][ T4881] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 67.524388][ T4880] lo speed is unknown, defaulting to 1000 [ 67.531336][ T4868] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.547663][ T4881] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 67.558497][ T4881] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 67.570419][ T4881] bond1: (slave vxcan3): making interface the new active one [ 67.578927][ T4881] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 67.600077][ T4886] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 67.609662][ T4886] bond1 (unregistering): Released all slaves [ 67.623528][ T4868] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.054933][ T4894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.079037][ T4893] lo speed is unknown, defaulting to 1000 [ 68.096244][ T4894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.107600][ T4896] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 68.122857][ T4896] ipvlan0: entered allmulticast mode [ 68.128243][ T4896] veth0_vlan: entered allmulticast mode [ 68.142981][ T4896] team0: Device ipvlan0 failed to register rx_handler [ 68.167151][ T4894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.233878][ T4894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.281163][ T4365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.292664][ T4365] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.310845][ T4903] lo speed is unknown, defaulting to 1000 [ 68.316801][ T4365] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.333613][ T4369] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.560211][ T4931] lo speed is unknown, defaulting to 1000 [ 68.600706][ T4931] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 68.608653][ T4931] ipvlan0: entered allmulticast mode [ 68.614028][ T4931] veth0_vlan: entered allmulticast mode [ 68.620958][ T4931] team0: Device ipvlan0 failed to register rx_handler [ 69.437243][ T4950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4950 comm=syz.1.551 [ 69.474468][ T4954] netem: change failed [ 69.519229][ T4957] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 69.544350][ T4962] loop1: detected capacity change from 0 to 1024 [ 69.573292][ T4957] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.583620][ T4957] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 69.595346][ T4957] bond2: (slave vxcan3): making interface the new active one [ 69.603560][ T4957] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 69.632722][ T4957] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 69.650119][ T4957] bond2 (unregistering): Released all slaves [ 70.023259][ T4390] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.060376][ T4390] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.068883][ T4973] netlink: 'syz.4.562': attribute type 30 has an invalid length. [ 70.092340][ T4390] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.141132][ T4390] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.228725][ T4980] netlink: 'syz.3.565': attribute type 21 has an invalid length. [ 70.246542][ T4980] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 70.254358][ T4980] __nla_validate_parse: 16 callbacks suppressed [ 70.254429][ T4980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.565'. [ 70.784129][ T4995] bridge: RTM_NEWNEIGH with invalid ether address [ 71.442785][ T5018] ip6gre1: entered allmulticast mode [ 71.527044][ T5021] lo speed is unknown, defaulting to 1000 [ 71.819175][ T5027] vlan2: entered allmulticast mode [ 71.844586][ T5027] dummy0: entered allmulticast mode [ 72.684526][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 72.684544][ T29] audit: type=1326 audit(1766460349.405:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 72.714226][ T29] audit: type=1326 audit(1766460349.405:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 72.737573][ T29] audit: type=1326 audit(1766460349.415:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 72.760998][ T29] audit: type=1326 audit(1766460349.415:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 72.784629][ T29] audit: type=1326 audit(1766460349.415:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 73.189628][ T29] audit: type=1326 audit(1766460349.535:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 73.213057][ T29] audit: type=1326 audit(1766460349.535:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 73.236477][ T29] audit: type=1326 audit(1766460349.535:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 73.259865][ T29] audit: type=1326 audit(1766460349.535:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 73.283296][ T29] audit: type=1326 audit(1766460349.535:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 73.449505][ T5075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.462022][ T5072] loop4: detected capacity change from 0 to 512 [ 73.495498][ T5072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.553333][ T5072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.572989][ T5072] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.668343][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.717546][ T5088] veth2: entered promiscuous mode [ 73.722832][ T5088] veth2: entered allmulticast mode [ 73.971330][ T5098] netlink: 64 bytes leftover after parsing attributes in process `syz.4.613'. [ 74.059393][ T5110] loop3: detected capacity change from 0 to 1024 [ 74.066649][ T5110] EXT4-fs: Ignoring removed orlov option [ 74.104777][ T5110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.266229][ T4369] Bluetooth: hci0: Frame reassembly failed (-90) [ 74.279939][ T5127] syz_tun: entered allmulticast mode [ 74.287031][ T5125] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.294470][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 74.303781][ T5125] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.311597][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.331272][ T5127] syz_tun (unregistering): left allmulticast mode [ 74.859835][ T5157] mmap: syz.3.630 (5157) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.026405][ T5166] netlink: 19 bytes leftover after parsing attributes in process `syz.2.633'. [ 75.053678][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 75.063715][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 75.113138][ T5170] lo speed is unknown, defaulting to 1000 [ 75.467898][ T5186] loop2: detected capacity change from 0 to 128 [ 75.476364][ T5186] FAT-fs (loop2): bogus logical sector size 2134 [ 75.482818][ T5186] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 75.492258][ T5186] FAT-fs (loop2): Can't find a valid FAT filesystem [ 75.508811][ T5186] netlink: 372 bytes leftover after parsing attributes in process `syz.2.642'. [ 75.654343][ T5200] sch_fq: defrate 4294967295 ignored. [ 75.872570][ T5219] bridge5: entered promiscuous mode [ 75.877861][ T5219] bridge5: entered allmulticast mode [ 75.903371][ T5219] team0: Port device bridge5 added [ 75.915911][ T5219] bridge0: port 3(team0) entered blocking state [ 75.922362][ T5219] bridge0: port 3(team0) entered disabled state [ 75.928937][ T5219] team0: entered allmulticast mode [ 75.934213][ T5219] team_slave_0: entered allmulticast mode [ 75.940055][ T5219] team_slave_1: entered allmulticast mode [ 75.947924][ T5219] team0: entered promiscuous mode [ 75.953059][ T5219] team_slave_0: entered promiscuous mode [ 75.958879][ T5219] team_slave_1: entered promiscuous mode [ 75.965404][ T5219] bridge0: port 3(team0) entered blocking state [ 75.971816][ T5219] bridge0: port 3(team0) entered forwarding state [ 76.271464][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.271496][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 76.307839][ T5224] loop1: detected capacity change from 0 to 1024 [ 76.314677][ T5224] EXT4-fs: Ignoring removed orlov option [ 76.325183][ T5224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.569362][ T5239] netlink: 40 bytes leftover after parsing attributes in process `syz.2.661'. [ 76.582941][ T5239] ip6gre1: entered promiscuous mode [ 76.588420][ T5239] ip6gre1: entered allmulticast mode [ 76.621951][ T5242] lo speed is unknown, defaulting to 1000 [ 76.818962][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.913823][ T5249] vlan2: entered allmulticast mode [ 76.951479][ T5249] dummy0: entered allmulticast mode [ 77.032108][ T5256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5256 comm=syz.2.667 [ 77.618269][ T5268] loop4: detected capacity change from 0 to 512 [ 77.649022][ T5268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.707472][ T5268] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.097172][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 78.097191][ T29] audit: type=1400 audit(1766460354.825:2134): avc: denied { setattr } for pid=5267 comm="syz.4.672" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.269542][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.371397][ T5291] loop4: detected capacity change from 0 to 1024 [ 78.378216][ T5291] EXT4-fs: Ignoring removed orlov option [ 78.403174][ T5291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.448518][ T5294] netlink: 87 bytes leftover after parsing attributes in process `syz.0.679'. [ 78.567442][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.582686][ T29] audit: type=1326 audit(1766460355.315:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.606117][ T29] audit: type=1326 audit(1766460355.315:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.620814][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 78.666513][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 78.667019][ T29] audit: type=1326 audit(1766460355.365:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.698746][ T29] audit: type=1326 audit(1766460355.365:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.722106][ T29] audit: type=1326 audit(1766460355.365:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.745486][ T29] audit: type=1326 audit(1766460355.365:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.768938][ T29] audit: type=1326 audit(1766460355.375:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.792422][ T29] audit: type=1326 audit(1766460355.375:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.815794][ T29] audit: type=1326 audit(1766460355.375:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 78.871974][ T5313] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 78.954886][ T5318] Cannot find add_set index 0 as target [ 79.211038][ T5342] loop4: detected capacity change from 0 to 1024 [ 80.166376][ T5379] loop3: detected capacity change from 0 to 1024 [ 80.177997][ T5377] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.275846][ T5385] netlink: 87 bytes leftover after parsing attributes in process `syz.3.714'. [ 80.286488][ T5377] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.363314][ T5377] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.463612][ T5377] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.549509][ T4369] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.565017][ T4369] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.582583][ T4369] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.605466][ T4369] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.818925][ T5415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5415 comm=syz.3.727 [ 80.836313][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 81.649540][ T5437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.796863][ T5437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.814152][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 81.854513][ T5441] bridge1: entered promiscuous mode [ 81.859782][ T5441] bridge1: entered allmulticast mode [ 81.868629][ T5445] lo speed is unknown, defaulting to 1000 [ 81.875863][ T5437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.920965][ T5437] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.980527][ T4372] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.017458][ T4372] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.029255][ T4372] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.053526][ T4372] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.290430][ T5458] loop3: detected capacity change from 0 to 1024 [ 82.319599][ T5458] EXT4-fs: Ignoring removed oldalloc option [ 82.325718][ T5458] EXT4-fs: Ignoring removed bh option [ 82.827258][ T5463] lo speed is unknown, defaulting to 1000 [ 83.048816][ T5467] loop4: detected capacity change from 0 to 512 [ 83.199668][ T5458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.222278][ T5467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.266726][ T5467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 83.413503][ T5467] System zones: 1-12 [ 83.427376][ T5467] EXT4-fs (loop4): 1 truncate cleaned up [ 83.455790][ T5467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.643277][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.690444][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.875456][ T5483] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.943808][ T5483] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.055695][ T5483] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.127489][ T5483] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.191569][ T5491] vlan2: entered allmulticast mode [ 84.213312][ T4364] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.241224][ T4364] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.310020][ T4364] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.320180][ T5494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 84.361616][ T4364] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.401375][ T5497] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.504137][ T5497] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.518194][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 84.518211][ T29] audit: type=1326 audit(1766460361.245:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.574576][ T29] audit: type=1326 audit(1766460361.275:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.598021][ T29] audit: type=1326 audit(1766460361.275:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.621611][ T29] audit: type=1326 audit(1766460361.275:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.644904][ T29] audit: type=1326 audit(1766460361.275:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.668262][ T29] audit: type=1326 audit(1766460361.275:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.691775][ T29] audit: type=1326 audit(1766460361.275:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 84.721143][ T5497] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.751180][ T5510] loop2: detected capacity change from 0 to 1024 [ 84.763947][ T5497] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.791322][ T5517] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 84.800790][ T5510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.813664][ T5510] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.828977][ T5517] bond1: entered promiscuous mode [ 84.834281][ T5517] bond1: entered allmulticast mode [ 84.853381][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 84.883176][ T5517] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 84.889431][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.767'. [ 84.896514][ T5517] bond1: (slave bridge3): making interface the new active one [ 84.908397][ T5517] bridge3: entered promiscuous mode [ 84.913835][ T5517] bridge3: entered allmulticast mode [ 84.919716][ T5517] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 84.920380][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.946627][ T5517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.765'. [ 84.957166][ T5517] bond1: left promiscuous mode [ 84.962061][ T5517] bridge3: left promiscuous mode [ 84.967202][ T5517] bond1: left allmulticast mode [ 84.972128][ T5517] bridge3: left allmulticast mode [ 84.998006][ T5517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.030981][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 85.040045][ T5532] netlink: 'syz.3.771': attribute type 30 has an invalid length. [ 85.059383][ T4364] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.075305][ T4364] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.083959][ T4364] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.092763][ T4364] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.301544][ T29] audit: type=1400 audit(1766460362.015:2226): avc: denied { connect } for pid=5550 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.322858][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 85.332987][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 85.342805][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 85.379675][ T5557] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 85.392438][ T5557] bond2: entered promiscuous mode [ 85.397528][ T5557] bond2: entered allmulticast mode [ 85.410191][ T5557] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 85.421271][ T5557] bond2: (slave bridge2): making interface the new active one [ 85.428834][ T5557] bridge2: entered promiscuous mode [ 85.434306][ T5557] bridge2: entered allmulticast mode [ 85.440699][ T5557] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 85.455196][ T5557] bond2: left promiscuous mode [ 85.460022][ T5557] bridge2: left promiscuous mode [ 85.465274][ T5557] bond2: left allmulticast mode [ 85.470209][ T5557] bridge2: left allmulticast mode [ 85.476526][ T5557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.522382][ T5564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5564 comm=syz.2.783 [ 85.553932][ T5566] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 85.583449][ T5566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.600642][ T5566] bond2 (unregistering): Released all slaves [ 85.678892][ T5569] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 85.694551][ T29] audit: type=1326 audit(1766460362.425:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 85.712717][ T5569] team0: Port device dummy0 added [ 85.718368][ T29] audit: type=1326 audit(1766460362.425:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271541f749 code=0x7ffc0000 [ 85.758362][ T5569] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 85.769112][ T5569] team0: Port device dummy0 removed [ 85.776728][ T5569] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.932662][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.946106][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.987359][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.028791][ T5594] __nla_validate_parse: 6 callbacks suppressed [ 86.028811][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 86.043727][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.211097][ T5597] lo speed is unknown, defaulting to 1000 [ 86.300518][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 86.412809][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 86.557228][ T5597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 86.569899][ T5597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 86.650133][ T5624] lo speed is unknown, defaulting to 1000 [ 86.716197][ T5629] bridge: RTM_NEWNEIGH with invalid ether address [ 86.769107][ T5633] loop1: detected capacity change from 0 to 1024 [ 86.779445][ T5633] EXT4-fs: Ignoring removed orlov option [ 86.793465][ T5633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.840267][ T5637] netlink: 'syz.2.812': attribute type 39 has an invalid length. [ 87.160342][ T5646] xt_hashlimit: max too large, truncated to 1048576 [ 87.199542][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 87.230460][ T5650] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.240311][ T5650] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.258239][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.295972][ T5650] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.306149][ T5650] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.318207][ T5652] lo speed is unknown, defaulting to 1000 [ 87.399944][ T5650] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.409785][ T5650] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.466045][ T5665] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 87.479046][ T5650] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.488933][ T5650] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.528061][ T5665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.545495][ T5669] veth5: entered promiscuous mode [ 87.564377][ T5669] bond1: (slave veth5): Enslaving as an active interface with a down link [ 87.614769][ T5665] bond1: entered allmulticast mode [ 87.621340][ T4399] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.629675][ T4399] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.644512][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 87.674865][ T4399] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.683272][ T4399] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.691561][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 87.713151][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 87.726110][ T4399] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.734456][ T4399] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.743426][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 87.752586][ T4399] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.760864][ T4399] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.903650][ T5688] netlink: 'syz.1.833': attribute type 7 has an invalid length. [ 88.117060][ T5711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5711 comm=syz.4.843 [ 88.129539][ T5711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5711 comm=syz.4.843 [ 88.161794][ T5708] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 88.182955][ T5708] dummy0: entered promiscuous mode [ 88.192702][ T5708] team0: Port device dummy0 added [ 88.231960][ T5708] dummy0: left promiscuous mode [ 88.255248][ T5708] team0: Port device dummy0 removed [ 88.280045][ T5708] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.018313][ T5767] loop3: detected capacity change from 0 to 128 [ 89.048289][ T5768] lo speed is unknown, defaulting to 1000 [ 89.183092][ T5767] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.282171][ T5767] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.351663][ T5775] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.442291][ T5775] SELinux: failed to load policy [ 89.517039][ T5767] Invalid argument reading file caps for ./file0 [ 89.540912][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 89.540930][ T29] audit: type=1400 audit(1766460366.265:2417): avc: denied { map } for pid=5782 comm="syz.4.871" path="socket:[17481]" dev="sockfs" ino=17481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.570501][ T29] audit: type=1400 audit(1766460366.265:2418): avc: denied { read } for pid=5782 comm="syz.4.871" path="socket:[17481]" dev="sockfs" ino=17481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.605981][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.637094][ T29] audit: type=1326 audit(1766460366.355:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.666401][ T29] audit: type=1326 audit(1766460366.375:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.689844][ T29] audit: type=1326 audit(1766460366.375:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.695103][ T5784] ip6gre1: entered promiscuous mode [ 89.713418][ T29] audit: type=1326 audit(1766460366.385:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.718476][ T5784] ip6gre1: entered allmulticast mode [ 89.741949][ T29] audit: type=1326 audit(1766460366.385:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.741984][ T29] audit: type=1326 audit(1766460366.395:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.742016][ T29] audit: type=1326 audit(1766460366.395:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.817479][ T29] audit: type=1326 audit(1766460366.395:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34314f749 code=0x7ffc0000 [ 89.954568][ T5795] loop1: detected capacity change from 0 to 128 [ 89.997714][ T5795] syz.1.876: attempt to access beyond end of device [ 89.997714][ T5795] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 90.140457][ T5795] syz.1.876: attempt to access beyond end of device [ 90.140457][ T5795] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 90.154158][ T5795] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 90.231040][ T5795] syz.1.876: attempt to access beyond end of device [ 90.231040][ T5795] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 90.244694][ T5795] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 90.308392][ T5795] syz.1.876: attempt to access beyond end of device [ 90.308392][ T5795] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 90.322075][ T5795] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 90.348404][ T5795] syz.1.876: attempt to access beyond end of device [ 90.348404][ T5795] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 90.362351][ T5795] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 90.378747][ T5795] syz.1.876: attempt to access beyond end of device [ 90.378747][ T5795] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 90.392463][ T5795] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 90.441645][ T5795] syz.1.876: attempt to access beyond end of device [ 90.441645][ T5795] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 90.455382][ T5795] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 90.574939][ T5813] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.633237][ T5813] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.713312][ T5813] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.787205][ T5794] syz.1.876: attempt to access beyond end of device [ 90.787205][ T5794] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 90.801045][ T5794] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 90.812673][ T5813] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.829597][ T5794] syz.1.876: attempt to access beyond end of device [ 90.829597][ T5794] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 90.843346][ T5794] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 90.867584][ T5794] syz.1.876: attempt to access beyond end of device [ 90.867584][ T5794] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 90.881343][ T5794] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 90.920439][ T5794] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 90.946429][ T4364] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.966825][ T4364] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.992317][ T4364] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007996][ T5830] loop4: detected capacity change from 0 to 1024 [ 91.014551][ T4364] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.024964][ T5830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.089287][ T5830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.199820][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.393002][ T5863] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 91.550834][ T5874] validate_nla: 1 callbacks suppressed [ 91.550853][ T5874] netlink: 'syz.1.907': attribute type 12 has an invalid length. [ 91.572325][ T5875] lo speed is unknown, defaulting to 1000 [ 91.831713][ T5891] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.841559][ T5891] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.065162][ T5891] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.075042][ T5891] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.103808][ T5891] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.113841][ T5891] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.173776][ T5891] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.183638][ T5891] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.259010][ T5919] loop1: detected capacity change from 0 to 512 [ 92.265737][ T5919] ext4: Unknown parameter 'fowner' [ 92.323797][ T5925] __nla_validate_parse: 5 callbacks suppressed [ 92.323820][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 92.496700][ T4368] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.504979][ T4368] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528751][ T4368] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.537017][ T4368] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.594259][ T4368] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.602698][ T4368] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.655877][ T4368] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.664247][ T4368] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.845640][ T5951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5951 comm=syz.4.942 [ 92.878313][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 92.938425][ T5958] loop2: detected capacity change from 0 to 1024 [ 92.948735][ T5958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.978348][ T5958] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.030760][ T5968] loop3: detected capacity change from 0 to 128 [ 93.038136][ T5968] EXT4-fs: test_dummy_encryption option not supported [ 93.056816][ T5958] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.946: lblock 0 mapped to illegal pblock 0 (length 6) [ 93.074758][ T5968] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 93.099141][ T5958] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 93.111541][ T5958] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.111541][ T5958] [ 93.124968][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'. [ 93.182751][ T5974] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.946: lblock 0 mapped to illegal pblock 0 (length 1) [ 93.205891][ T5973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5973 comm=syz.4.951 [ 93.242647][ T5974] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 93.260934][ T5974] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 93.290439][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 93.336953][ T5985] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 93.344773][ T5985] netlink: 'syz.3.957': attribute type 2 has an invalid length. [ 93.353865][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.377132][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 93.393690][ T5987] loop4: detected capacity change from 0 to 128 [ 93.403405][ T5987] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.429717][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'. [ 93.465699][ T5987] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.516406][ T5993] loop1: detected capacity change from 0 to 1024 [ 93.543067][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.563087][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.588886][ T5993] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.674673][ T6000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6000 comm=syz.0.962 [ 93.687194][ T6000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6000 comm=syz.0.962 [ 93.912918][ T6009] lo speed is unknown, defaulting to 1000 [ 94.075640][ T6014] loop3: detected capacity change from 0 to 1024 [ 94.083102][ T6014] EXT4-fs: Ignoring removed orlov option [ 94.115920][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.145304][ T6017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6017 comm=syz.0.968 [ 94.223141][ T5993] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.960: lblock 0 mapped to illegal pblock 0 (length 6) [ 94.236968][ T5993] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 94.249423][ T5993] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.249423][ T5993] [ 94.265380][ T6005] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm syz.1.960: lblock 8 mapped to illegal pblock 8 (length 8) [ 94.310436][ T6005] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 94.323028][ T6005] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.323028][ T6005] [ 94.417525][ T6014] ================================================================== [ 94.425686][ T6014] BUG: KCSAN: data-race in filemap_read / filemap_read [ 94.432577][ T6014] [ 94.434926][ T6014] write to 0xffff888133ef2228 of 8 bytes by task 6013 on cpu 0: [ 94.442584][ T6014] filemap_read+0x974/0xa00 [ 94.447124][ T6014] generic_file_read_iter+0x79/0x330 [ 94.452444][ T6014] ext4_file_read_iter+0x1cc/0x290 [ 94.457617][ T6014] copy_splice_read+0x442/0x660 [ 94.462533][ T6014] splice_direct_to_actor+0x290/0x680 [ 94.467949][ T6014] do_splice_direct+0xda/0x150 [ 94.472749][ T6014] do_sendfile+0x380/0x650 [ 94.477213][ T6014] __x64_sys_sendfile64+0x105/0x150 [ 94.482448][ T6014] x64_sys_call+0x2db1/0x3000 [ 94.487255][ T6014] do_syscall_64+0xca/0x2b0 [ 94.491816][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.497754][ T6014] [ 94.500113][ T6014] read to 0xffff888133ef2228 of 8 bytes by task 6014 on cpu 1: [ 94.507760][ T6014] filemap_read+0x6f/0xa00 [ 94.512298][ T6014] generic_file_read_iter+0x79/0x330 [ 94.518106][ T6014] ext4_file_read_iter+0x1cc/0x290 [ 94.523274][ T6014] copy_splice_read+0x442/0x660 [ 94.528156][ T6014] splice_direct_to_actor+0x290/0x680 [ 94.533987][ T6014] do_splice_direct+0xda/0x150 [ 94.538779][ T6014] do_sendfile+0x380/0x650 [ 94.543229][ T6014] __x64_sys_sendfile64+0x105/0x150 [ 94.548452][ T6014] x64_sys_call+0x2db1/0x3000 [ 94.553173][ T6014] do_syscall_64+0xca/0x2b0 [ 94.557730][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.563656][ T6014] [ 94.566000][ T6014] value changed: 0x0000000000000297 -> 0x0000000000000298 [ 94.573134][ T6014] [ 94.575480][ T6014] Reported by Kernel Concurrency Sanitizer on: [ 94.581669][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.3.967 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.592905][ T6014] Tainted: [W]=WARN [ 94.596727][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.606804][ T6014] ================================================================== [ 94.671006][ T2465] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 112: padding at end of block bitmap is not set [ 94.706521][ T2465] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 94.719340][ T2465] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.719340][ T2465] [ 94.729103][ T2465] EXT4-fs (loop1): Total free blocks count 0 [ 94.735191][ T2465] EXT4-fs (loop1): Free/Dirty block details [ 94.741162][ T2465] EXT4-fs (loop1): free_blocks=0 [ 94.885828][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.