last executing test programs: 703.039038ms ago: executing program 1 (id=512): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) fallocate(r0, 0x20, 0x0, 0x8000) 649.905219ms ago: executing program 2 (id=515): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010104}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 623.469869ms ago: executing program 4 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x6e2e5000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = socket$inet6(0xa, 0x802, 0x88) fstat(r2, &(0x7f0000000100)) 506.440941ms ago: executing program 1 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0) 504.652911ms ago: executing program 4 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) 452.461942ms ago: executing program 4 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x5, 0x4, 0x2, 0x0, 0xa, 0x2, 0x4, 0x10, 0x4, 0x5, 0xa, 0x5, 0x9, 0x3, 0x5], 0x0, [0x9, 0x9, 0xc1, 0x7, 0x5, 0xffff, 0x5, 0xff03, 0xc474, 0x976c, 0x5, 0xfff7, 0x9e, 0x0, 0x1ff, 0x80a], [0x0, 0x7, 0x5, 0x1bf, 0xfff8, 0x624d, 0x0, 0xa, 0xa, 0xfffb, 0x5, 0x5, 0x9, 0x4, 0xc, 0x9]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c861}, 0x404c040) 447.442372ms ago: executing program 2 (id=526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = getpid() unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) 382.263253ms ago: executing program 4 (id=528): tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008811) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 381.168193ms ago: executing program 1 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 375.269853ms ago: executing program 2 (id=529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x800}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000380)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 315.219004ms ago: executing program 2 (id=530): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000000)="f8ad4819", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 299.460054ms ago: executing program 0 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x6e2e5000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = socket$inet6(0xa, 0x802, 0x88) fstat(r2, &(0x7f0000000100)) 297.092185ms ago: executing program 2 (id=532): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) fallocate(r0, 0x20, 0x0, 0x8000) 282.860075ms ago: executing program 4 (id=533): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket$can_raw(0x1d, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003ac0), 0x2000) 254.993665ms ago: executing program 3 (id=534): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 254.454275ms ago: executing program 1 (id=545): tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008811) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 204.829666ms ago: executing program 2 (id=535): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2, 0xfffffffffffffa6f, 0xfffffffc}) 170.939407ms ago: executing program 3 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) 170.779756ms ago: executing program 4 (id=537): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010104}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 170.441416ms ago: executing program 0 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x6e2e5000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = socket$inet6(0xa, 0x802, 0x88) fstat(r2, &(0x7f0000000100)) 147.446777ms ago: executing program 3 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 141.193187ms ago: executing program 1 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x5, 0x4, 0x2, 0x0, 0xa, 0x2, 0x4, 0x10, 0x4, 0x5, 0xa, 0x5, 0x9, 0x3, 0x5], 0x0, [0x9, 0x9, 0xc1, 0x7, 0x5, 0xffff, 0x5, 0xff03, 0xc474, 0x976c, 0x5, 0xfff7, 0x9e, 0x0, 0x1ff, 0x80a], [0x0, 0x7, 0x5, 0x1bf, 0xfff8, 0x624d, 0x0, 0xa, 0xa, 0xfffb, 0x5, 0x5, 0x9, 0x4, 0xc, 0x9]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c861}, 0x404c040) 102.484417ms ago: executing program 0 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = getpid() unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) 102.043668ms ago: executing program 3 (id=542): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffc9c, 0x2, {0x0, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) 81.477138ms ago: executing program 3 (id=543): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 64.737018ms ago: executing program 0 (id=544): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000000)="f8ad4819", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 48.878878ms ago: executing program 0 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 34.274989ms ago: executing program 1 (id=547): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 9.370139ms ago: executing program 0 (id=549): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) fallocate(r0, 0x20, 0x0, 0x8000) 0s ago: executing program 3 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 25.193179][ T29] audit: type=1400 audit(1752970843.317:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.194031][ T3294] cgroup: Unknown subsys name 'net' [ 25.215902][ T29] audit: type=1400 audit(1752970843.317:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.243243][ T29] audit: type=1400 audit(1752970843.347:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.361333][ T3294] cgroup: Unknown subsys name 'cpuset' [ 25.367441][ T3294] cgroup: Unknown subsys name 'rlimit' [ 25.475948][ T29] audit: type=1400 audit(1752970843.597:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.499305][ T29] audit: type=1400 audit(1752970843.597:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.519773][ T29] audit: type=1400 audit(1752970843.597:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.540191][ T29] audit: type=1400 audit(1752970843.597:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.559526][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.560672][ T29] audit: type=1400 audit(1752970843.627:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.593841][ T29] audit: type=1400 audit(1752970843.627:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.617101][ T29] audit: type=1400 audit(1752970843.687:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.630932][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.537952][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.650058][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.657251][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.664533][ T3304] bridge_slave_0: entered allmulticast mode [ 26.671039][ T3304] bridge_slave_0: entered promiscuous mode [ 26.679102][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.686264][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.693594][ T3304] bridge_slave_1: entered allmulticast mode [ 26.700033][ T3304] bridge_slave_1: entered promiscuous mode [ 26.745348][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.757034][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.791294][ T3304] team0: Port device team_slave_0 added [ 26.799278][ T3304] team0: Port device team_slave_1 added [ 26.847365][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.854356][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.880252][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.900350][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.907427][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.933430][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.950656][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.995843][ T3304] hsr_slave_0: entered promiscuous mode [ 27.001757][ T3304] hsr_slave_1: entered promiscuous mode [ 27.011013][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.040450][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.047610][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.054853][ T3313] bridge_slave_0: entered allmulticast mode [ 27.061298][ T3313] bridge_slave_0: entered promiscuous mode [ 27.091752][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.098836][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.106077][ T3313] bridge_slave_1: entered allmulticast mode [ 27.112454][ T3313] bridge_slave_1: entered promiscuous mode [ 27.118686][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.155890][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.165512][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.184236][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.215784][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.222862][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.230701][ T3314] bridge_slave_0: entered allmulticast mode [ 27.237047][ T3314] bridge_slave_0: entered promiscuous mode [ 27.264653][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.271767][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.279088][ T3314] bridge_slave_1: entered allmulticast mode [ 27.285479][ T3314] bridge_slave_1: entered promiscuous mode [ 27.299180][ T3313] team0: Port device team_slave_0 added [ 27.305069][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.312144][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.319239][ T3318] bridge_slave_0: entered allmulticast mode [ 27.325827][ T3318] bridge_slave_0: entered promiscuous mode [ 27.342261][ T3313] team0: Port device team_slave_1 added [ 27.352834][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.359900][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.367113][ T3318] bridge_slave_1: entered allmulticast mode [ 27.373476][ T3318] bridge_slave_1: entered promiscuous mode [ 27.391381][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.416280][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.426337][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.439571][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.446536][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.472580][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.486500][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.508293][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.515423][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.522655][ T3317] bridge_slave_0: entered allmulticast mode [ 27.528937][ T3317] bridge_slave_0: entered promiscuous mode [ 27.535665][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.542727][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.568752][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.587195][ T3314] team0: Port device team_slave_0 added [ 27.594055][ T3314] team0: Port device team_slave_1 added [ 27.599692][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.606908][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.614242][ T3317] bridge_slave_1: entered allmulticast mode [ 27.620578][ T3317] bridge_slave_1: entered promiscuous mode [ 27.639480][ T3318] team0: Port device team_slave_0 added [ 27.646029][ T3318] team0: Port device team_slave_1 added [ 27.668275][ T3313] hsr_slave_0: entered promiscuous mode [ 27.674251][ T3313] hsr_slave_1: entered promiscuous mode [ 27.679963][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.687535][ T3313] Cannot create hsr debugfs directory [ 27.701225][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.708170][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.734086][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.765507][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.772524][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.798496][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.809371][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.816359][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.842314][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.854283][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.864648][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.874026][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.881058][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.907070][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.929039][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.947868][ T3317] team0: Port device team_slave_0 added [ 27.954672][ T3317] team0: Port device team_slave_1 added [ 27.967044][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.975837][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.000342][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.019344][ T3314] hsr_slave_0: entered promiscuous mode [ 28.025570][ T3314] hsr_slave_1: entered promiscuous mode [ 28.031599][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.039147][ T3314] Cannot create hsr debugfs directory [ 28.047414][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.054409][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.080436][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.094447][ T3318] hsr_slave_0: entered promiscuous mode [ 28.100319][ T3318] hsr_slave_1: entered promiscuous mode [ 28.106286][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.113863][ T3318] Cannot create hsr debugfs directory [ 28.128613][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.135586][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.161509][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.237072][ T3317] hsr_slave_0: entered promiscuous mode [ 28.243173][ T3317] hsr_slave_1: entered promiscuous mode [ 28.249032][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.256700][ T3317] Cannot create hsr debugfs directory [ 28.305992][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.324495][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.335372][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.354961][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.392550][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.402182][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.412429][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.421254][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.463857][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.474603][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.484892][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.493295][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.508248][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.538562][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.551323][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.559785][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.568742][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.577972][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.591618][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.598670][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.611758][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.643356][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.652778][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.659916][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.672038][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.685783][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.692823][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.707069][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.714134][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.726910][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.743230][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.750347][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.760360][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.767459][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.797037][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.814668][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.825058][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.847227][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.857628][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.872686][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.879783][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.895684][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.902948][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.913529][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.947235][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.954363][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.972470][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.979554][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.009661][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.020973][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.042814][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.084211][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.107471][ T3313] veth0_vlan: entered promiscuous mode [ 29.137905][ T3313] veth1_vlan: entered promiscuous mode [ 29.173670][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.194793][ T3313] veth0_macvtap: entered promiscuous mode [ 29.210442][ T3304] veth0_vlan: entered promiscuous mode [ 29.226559][ T3313] veth1_macvtap: entered promiscuous mode [ 29.234854][ T3304] veth1_vlan: entered promiscuous mode [ 29.247120][ T3318] veth0_vlan: entered promiscuous mode [ 29.263621][ T3318] veth1_vlan: entered promiscuous mode [ 29.276610][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.294881][ T3304] veth0_macvtap: entered promiscuous mode [ 29.304626][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.313611][ T3304] veth1_macvtap: entered promiscuous mode [ 29.324637][ T3317] veth0_vlan: entered promiscuous mode [ 29.339560][ T3317] veth1_vlan: entered promiscuous mode [ 29.346418][ T3318] veth0_macvtap: entered promiscuous mode [ 29.356045][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.364886][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.373846][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.382674][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.395003][ T3318] veth1_macvtap: entered promiscuous mode [ 29.410493][ T3314] veth0_vlan: entered promiscuous mode [ 29.426534][ T3314] veth1_vlan: entered promiscuous mode [ 29.436708][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.448816][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.458639][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.468489][ T3317] veth0_macvtap: entered promiscuous mode [ 29.468912][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.477278][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.501694][ T3318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.510399][ T3318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.519195][ T3318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.527946][ T3318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.541576][ T3317] veth1_macvtap: entered promiscuous mode [ 29.549172][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.557992][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.566855][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.575642][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.602539][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.615818][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.625932][ T3314] veth0_macvtap: entered promiscuous mode [ 29.637416][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.646176][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.654917][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.663727][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.683140][ T3314] veth1_macvtap: entered promiscuous mode [ 29.705856][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.733323][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.772732][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.781649][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.790353][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.799081][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.895685][ T3496] loop3: detected capacity change from 0 to 512 [ 29.908195][ T3496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.921418][ T3496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.965173][ T3496] EXT4-fs (loop3): 1 truncate cleaned up [ 29.980062][ T3496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.013812][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.092061][ T3517] mmap: syz.3.17 (3517) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.139584][ T3521] loop4: detected capacity change from 0 to 128 [ 30.153861][ T3525] loop2: detected capacity change from 0 to 164 [ 30.166193][ T3525] Unable to read rock-ridge attributes [ 30.187160][ T3525] Unable to read rock-ridge attributes [ 30.200799][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 30.200828][ T29] audit: type=1400 audit(1752970848.327:156): avc: denied { setopt } for pid=3522 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 30.284598][ T29] audit: type=1400 audit(1752970848.357:157): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.304506][ T29] audit: type=1400 audit(1752970848.377:158): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 30.324541][ T29] audit: type=1400 audit(1752970848.407:159): avc: denied { read write } for pid=3533 comm="syz.2.27" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 30.348633][ T29] audit: type=1400 audit(1752970848.407:160): avc: denied { open } for pid=3533 comm="syz.2.27" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 30.389940][ T29] audit: type=1400 audit(1752970848.507:161): avc: denied { read write } for pid=3535 comm="syz.1.28" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.413340][ T29] audit: type=1400 audit(1752970848.507:162): avc: denied { open } for pid=3535 comm="syz.1.28" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.436679][ T29] audit: type=1400 audit(1752970848.507:163): avc: denied { read write } for pid=3541 comm="syz.0.29" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.459823][ T29] audit: type=1400 audit(1752970848.507:164): avc: denied { open } for pid=3541 comm="syz.0.29" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.482740][ T29] audit: type=1400 audit(1752970848.507:165): avc: denied { ioctl } for pid=3541 comm="syz.0.29" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.715582][ T3573] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 30.723023][ T3573] syzkaller1: entered promiscuous mode [ 30.728569][ T3573] syzkaller1: entered allmulticast mode [ 30.928530][ T3639] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.952655][ T3639] tipc: Started in network mode [ 30.957560][ T3639] tipc: Node identity 4, cluster identity 4711 [ 30.963953][ T3639] tipc: Node number set to 4 [ 31.092454][ T3663] loop4: detected capacity change from 0 to 2048 [ 31.121707][ T3499] loop4: p2 p3 < > p4 [ 31.125873][ T3499] loop4: partition table partially beyond EOD, truncated [ 31.152305][ T3499] loop4: p3 start 4284289 is beyond EOD, truncated [ 31.162096][ T3663] loop4: p2 p3 < > p4 [ 31.166201][ T3663] loop4: partition table partially beyond EOD, truncated [ 31.177827][ T3663] loop4: p3 start 4284289 is beyond EOD, truncated [ 31.189874][ T2995] udevd[2995]: worker [3499] terminated by signal 33 (Unknown signal 33) [ 31.203931][ T2995] udevd[2995]: worker [3499] failed while handling '/devices/virtual/block/loop4' [ 31.244926][ T2995] loop4: p2 p3 < > p4 [ 31.249065][ T2995] loop4: partition table partially beyond EOD, truncated [ 31.289266][ T2995] loop4: p3 start 4284289 is beyond EOD, truncated [ 31.760479][ T3688] process 'syz.2.64' launched './file0' with NULL argv: empty string added [ 31.814111][ T3692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.66'. [ 31.837505][ T3692] bridge0: entered promiscuous mode [ 31.845951][ T3692] bridge0: port 3(macvlan2) entered blocking state [ 31.852700][ T3692] bridge0: port 3(macvlan2) entered disabled state [ 31.860400][ T3692] macvlan2: entered allmulticast mode [ 31.865941][ T3692] bridge0: entered allmulticast mode [ 31.871988][ T3694] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 31.878526][ T3694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 31.886127][ T3694] vhci_hcd vhci_hcd.0: Device attached [ 31.892442][ T3692] macvlan2: left allmulticast mode [ 31.897700][ T3692] bridge0: left allmulticast mode [ 31.904418][ T3692] bridge0: left promiscuous mode [ 31.910947][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.919453][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.987078][ T3710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.73'. [ 31.996037][ T3710] Zero length message leads to an empty skb [ 32.129156][ T3695] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 32.130577][ T3377] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 32.143547][ T3615] vhci_hcd: stop threads [ 32.147789][ T3615] vhci_hcd: release socket [ 32.152279][ T3615] vhci_hcd: disconnect device [ 32.206162][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 32.440140][ T3747] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.698671][ T3756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 32.798326][ T3765] netlink: 3529 bytes leftover after parsing attributes in process `syz.4.98'. [ 32.956721][ T3779] loop1: detected capacity change from 0 to 512 [ 32.966002][ T3779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 32.974974][ T3779] System zones: 1-12 [ 32.979241][ T3779] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.105: corrupted in-inode xattr: e_value size too large [ 32.994296][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.105: couldn't read orphan inode 15 (err -117) [ 33.006570][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.098352][ C0] hrtimer: interrupt took 33835 ns [ 33.243379][ T3795] loop2: detected capacity change from 0 to 1024 [ 33.250027][ T3795] ======================================================= [ 33.250027][ T3795] WARNING: The mand mount option has been deprecated and [ 33.250027][ T3795] and is ignored by this kernel. Remove the mand [ 33.250027][ T3795] option from the mount to silence this warning. [ 33.250027][ T3795] ======================================================= [ 33.288095][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.316517][ T3795] EXT4-fs: Ignoring removed nobh option [ 33.322194][ T3795] EXT4-fs: Ignoring removed bh option [ 33.350487][ T3795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.435673][ T3806] loop1: detected capacity change from 0 to 256 [ 33.445744][ T3802] SELinux: failed to load policy [ 33.474744][ T3795] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 33.499793][ T3806] FAT-fs (loop1): Directory bread(block 64) failed [ 33.506688][ T3806] FAT-fs (loop1): Directory bread(block 65) failed [ 33.518647][ T3806] FAT-fs (loop1): Directory bread(block 66) failed [ 33.528432][ T3812] IPVS: stopping master sync thread 3813 ... [ 33.534707][ T3813] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 33.541464][ T3806] FAT-fs (loop1): Directory bread(block 67) failed [ 33.562150][ T3806] FAT-fs (loop1): Directory bread(block 68) failed [ 33.568706][ T3806] FAT-fs (loop1): Directory bread(block 69) failed [ 33.578288][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.599150][ T3806] FAT-fs (loop1): Directory bread(block 70) failed [ 33.606717][ T3806] FAT-fs (loop1): Directory bread(block 71) failed [ 33.614919][ T3806] FAT-fs (loop1): Directory bread(block 72) failed [ 33.622949][ T3806] FAT-fs (loop1): Directory bread(block 73) failed [ 33.705724][ T3806] syz.1.114: attempt to access beyond end of device [ 33.705724][ T3806] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 33.750616][ T3806] syz.1.114: attempt to access beyond end of device [ 33.750616][ T3806] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 33.842018][ T3831] loop1: detected capacity change from 0 to 164 [ 33.864933][ T3831] syz.1.125: attempt to access beyond end of device [ 33.864933][ T3831] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 33.879779][ T3831] syz.1.125: attempt to access beyond end of device [ 33.879779][ T3831] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.963945][ T3841] netlink: 'syz.2.131': attribute type 3 has an invalid length. [ 34.133633][ T3864] syz.0.141 (3864) used greatest stack depth: 10504 bytes left [ 34.144063][ T3866] loop2: detected capacity change from 0 to 512 [ 34.178503][ T3866] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.140: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 34.231216][ T3866] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.140: Bad quota inode: 3, type: 0 [ 34.267554][ T3866] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 34.291418][ T3866] EXT4-fs (loop2): mount failed [ 34.435893][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 34.455173][ T3894] pim6reg1: entered promiscuous mode [ 34.460639][ T3894] pim6reg1: entered allmulticast mode [ 34.474906][ T3892] IPVS: Error joining to the multicast group [ 34.509638][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 34.530557][ T3902] smc: net device bond0 applied user defined pnetid SYZ0 [ 34.537959][ T3902] smc: net device bond0 erased user defined pnetid SYZ0 [ 34.575928][ T3909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 34.584863][ T3909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 34.593744][ T3909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 34.805192][ T3955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.853663][ T3955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.917833][ T3955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.944245][ T3969] rdma_op ffff88810b7f2580 conn xmit_rdma 0000000000000000 [ 34.976429][ T3955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.994370][ T3975] ip6tnl1: entered promiscuous mode [ 35.033253][ T3955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.071581][ T3955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.094507][ T3955] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.107890][ T3955] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.119664][ T3988] loop0: detected capacity change from 0 to 1764 [ 35.156798][ T3990] Driver unsupported XDP return value 0 on prog (id 140) dev N/A, expect packet loss! [ 35.197632][ T3994] loop0: detected capacity change from 0 to 1024 [ 35.223708][ T3994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.232178][ T4004] loop3: detected capacity change from 0 to 512 [ 35.242803][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 35.242892][ T29] audit: type=1400 audit(35.215:513): avc: denied { read write } for pid=3993 comm="syz.0.195" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.271074][ T29] audit: type=1400 audit(35.215:514): avc: denied { open } for pid=3993 comm="syz.0.195" path="/51/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.305755][ T4004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.319307][ T3653] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 35.339906][ T3653] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 35.352327][ T3653] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.352327][ T3653] [ 35.362035][ T3653] EXT4-fs (loop0): Total free blocks count 0 [ 35.368157][ T3653] EXT4-fs (loop0): Free/Dirty block details [ 35.374099][ T3653] EXT4-fs (loop0): free_blocks=4293918720 [ 35.375706][ T4004] EXT4-fs (loop3): shut down requested (1) [ 35.379812][ T3653] EXT4-fs (loop0): dirty_blocks=16 [ 35.379826][ T3653] EXT4-fs (loop0): Block reservation details [ 35.379836][ T3653] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 35.398155][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.423830][ T4010] netlink: 'syz.2.203': attribute type 4 has an invalid length. [ 35.432967][ T4004] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 35.446094][ T4014] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 35.483498][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.508256][ T29] audit: type=1400 audit(35.485:515): avc: denied { mounton } for pid=4020 comm="syz.0.207" path="/proc/113/task" dev="proc" ino=5667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.553158][ T4028] capability: warning: `syz.4.209' uses deprecated v2 capabilities in a way that may be insecure [ 35.593739][ T4025] veth4: entered promiscuous mode [ 35.598815][ T4025] veth4: entered allmulticast mode [ 35.716850][ T29] audit: type=1326 audit(35.695:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8aa6e9a9 code=0x7ffc0000 [ 35.739455][ T29] audit: type=1326 audit(35.695:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f9c8aa6e9a9 code=0x7ffc0000 [ 35.762234][ T29] audit: type=1326 audit(35.695:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8aa6e9a9 code=0x7ffc0000 [ 35.801358][ T4048] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 35.828806][ T4048] team0: Port device geneve1 added [ 35.902337][ T4060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.918062][ T4060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.994985][ T4072] loop4: detected capacity change from 0 to 512 [ 36.014001][ T29] audit: type=1400 audit(35.995:519): avc: denied { getopt } for pid=4073 comm="syz.0.229" lport=35281 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 36.073230][ T4072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.111731][ T4086] netlink: 'syz.2.232': attribute type 3 has an invalid length. [ 36.181664][ T29] audit: type=1400 audit(36.165:520): avc: denied { ioctl } for pid=4071 comm="syz.4.228" path="/55/bus/cgroup.controllers" dev="loop4" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.242724][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.272831][ T4092] bridge0: entered promiscuous mode [ 36.279452][ T4092] bridge0: port 3(macvlan2) entered blocking state [ 36.286142][ T4092] bridge0: port 3(macvlan2) entered disabled state [ 36.310764][ T4092] macvlan2: entered allmulticast mode [ 36.316201][ T4092] bridge0: entered allmulticast mode [ 36.349911][ T4092] macvlan2: left allmulticast mode [ 36.355142][ T4092] bridge0: left allmulticast mode [ 36.361675][ T4092] bridge0: left promiscuous mode [ 36.391207][ T29] audit: type=1326 audit(36.375:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906e78e9a9 code=0x7ffc0000 [ 36.441533][ T29] audit: type=1326 audit(36.395:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906e78e9a9 code=0x7ffc0000 [ 36.544761][ T4117] capability: warning: `syz.2.248' uses 32-bit capabilities (legacy support in use) [ 36.763583][ T4140] pimreg: entered allmulticast mode [ 36.770781][ T4140] pimreg: left allmulticast mode [ 36.845055][ T4147] syz.1.261 (4147) used greatest stack depth: 10104 bytes left [ 36.896937][ T4151] syz.1.263 (4151) used greatest stack depth: 9600 bytes left [ 37.039733][ T4157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.048692][ T4157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.165660][ T4162] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 37.173377][ T4162] __nla_validate_parse: 14 callbacks suppressed [ 37.173389][ T4162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.269'. [ 37.209444][ T4168] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 37.217261][ T4168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 37.218254][ T3377] usb 5-1: enqueue for inactive port 0 [ 37.235532][ T4168] team0: Port device geneve1 added [ 37.239186][ T3377] usb 5-1: enqueue for inactive port 0 [ 37.320799][ T3377] vhci_hcd: vhci_device speed not set [ 37.373890][ T4184] loop4: detected capacity change from 0 to 512 [ 37.404822][ T4184] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.277: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 37.454675][ T4184] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.277: Bad quota inode: 3, type: 0 [ 37.465914][ T4184] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.500713][ T4184] EXT4-fs (loop4): mount failed [ 37.576236][ T4197] loop4: detected capacity change from 0 to 164 [ 37.586459][ T4199] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 37.594310][ T4199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.282'. [ 37.608823][ T4199] team0: Port device geneve1 added [ 37.626714][ T4197] syz.4.281: attempt to access beyond end of device [ 37.626714][ T4197] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.656176][ T4197] syz.4.281: attempt to access beyond end of device [ 37.656176][ T4197] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.675683][ T4204] loop0: detected capacity change from 0 to 1024 [ 37.683931][ T4204] EXT4-fs: Ignoring removed nobh option [ 37.689601][ T4204] EXT4-fs: Ignoring removed bh option [ 37.705200][ T4204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.785803][ T4204] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 37.791746][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119914400: rx timeout, send abort [ 37.832594][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.858893][ T4221] loop0: detected capacity change from 0 to 512 [ 37.893495][ T4221] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.290: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 37.912642][ T4221] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.290: Bad quota inode: 3, type: 0 [ 37.924132][ T4221] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.939073][ T4221] EXT4-fs (loop0): mount failed [ 37.959673][ T4231] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 37.967578][ T4231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.296'. [ 37.978216][ T4233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 37.983714][ T4231] team0: Port device geneve1 added [ 38.000636][ T4233] bridge0: entered promiscuous mode [ 38.011693][ T4233] bridge0: port 3(macvlan2) entered blocking state [ 38.018253][ T4233] bridge0: port 3(macvlan2) entered disabled state [ 38.026523][ T4233] macvlan2: entered allmulticast mode [ 38.031963][ T4233] bridge0: entered allmulticast mode [ 38.038207][ T4233] macvlan2: left allmulticast mode [ 38.043518][ T4233] bridge0: left allmulticast mode [ 38.049041][ T4233] bridge0: left promiscuous mode [ 38.063562][ T4239] netlink: 304 bytes leftover after parsing attributes in process `syz.4.298'. [ 38.072798][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 38.083701][ T4241] loop2: detected capacity change from 0 to 164 [ 38.092427][ T4241] syz.2.299: attempt to access beyond end of device [ 38.092427][ T4241] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.106388][ T4241] syz.2.299: attempt to access beyond end of device [ 38.106388][ T4241] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.263626][ T4253] veth2: entered promiscuous mode [ 38.268695][ T4253] veth2: entered allmulticast mode [ 38.310423][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119914400: abort rx timeout. Force session deactivation [ 38.416415][ T4268] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 38.424219][ T4268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.309'. [ 38.439245][ T4272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.313'. [ 38.439283][ T4268] team0: Port device geneve1 added [ 38.462855][ T4272] bridge0: entered promiscuous mode [ 38.470767][ T4275] loop0: detected capacity change from 0 to 164 [ 38.477215][ T4272] bridge0: port 3(macvlan2) entered blocking state [ 38.483934][ T4272] bridge0: port 3(macvlan2) entered disabled state [ 38.492179][ T4272] macvlan2: entered allmulticast mode [ 38.497562][ T4272] bridge0: entered allmulticast mode [ 38.504336][ T4272] macvlan2: left allmulticast mode [ 38.509482][ T4272] bridge0: left allmulticast mode [ 38.511671][ T4275] syz.0.311: attempt to access beyond end of device [ 38.511671][ T4275] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.515515][ T4272] bridge0: left promiscuous mode [ 38.529130][ T4275] syz.0.311: attempt to access beyond end of device [ 38.529130][ T4275] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.573511][ T4280] netlink: 304 bytes leftover after parsing attributes in process `syz.1.315'. [ 38.607288][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.616524][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.806259][ T4296] loop1: detected capacity change from 0 to 512 [ 38.812968][ T4296] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.819386][ T4296] EXT4-fs: Ignoring removed bh option [ 38.825049][ T4296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.835848][ T4296] EXT4-fs (loop1): 1 truncate cleaned up [ 38.842136][ T4296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.905292][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.925403][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.933917][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.262033][ T4340] loop1: detected capacity change from 0 to 1024 [ 39.269626][ T4340] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 39.282247][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.309676][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.356937][ T4354] loop1: detected capacity change from 0 to 512 [ 39.364990][ T4354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.377726][ T4354] EXT4-fs (loop1): 1 truncate cleaned up [ 39.384388][ T4354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.410348][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.446995][ T4365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.484096][ T4365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.569358][ T4365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.644876][ T4365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.646758][ T4390] loop3: detected capacity change from 0 to 512 [ 39.682608][ T4390] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.364: Failed to acquire dquot type 1 [ 39.695325][ T4390] EXT4-fs (loop3): 1 truncate cleaned up [ 39.702737][ T4390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.723813][ T4365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.739244][ T4365] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750675][ T4365] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.762275][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.771757][ T4365] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.786111][ T4397] loop1: detected capacity change from 0 to 1024 [ 39.792973][ T4397] EXT4-fs: Ignoring removed orlov option [ 39.798677][ T4397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.819773][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.897787][ T4412] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4412 comm=syz.3.372 [ 39.910209][ T4412] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4412 comm=syz.3.372 [ 39.975346][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.083936][ T4437] loop3: detected capacity change from 0 to 1024 [ 40.104440][ T4437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.136974][ T4437] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 40.149395][ T4437] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.149395][ T4437] [ 40.159111][ T4437] EXT4-fs (loop3): Total free blocks count 0 [ 40.165108][ T4437] EXT4-fs (loop3): Free/Dirty block details [ 40.171153][ T4437] EXT4-fs (loop3): free_blocks=0 [ 40.176254][ T4437] EXT4-fs (loop3): dirty_blocks=0 [ 40.181319][ T4437] EXT4-fs (loop3): Block reservation details [ 40.187416][ T4437] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 40.224460][ T4445] loop1: detected capacity change from 0 to 8192 [ 40.231662][ T4445] FAT-fs (loop1): bogus sectors per cluster 0 [ 40.231860][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.237749][ T4445] FAT-fs (loop1): Can't find a valid FAT filesystem [ 40.272922][ T4449] loop3: detected capacity change from 0 to 512 [ 40.291939][ T4449] __quota_error: 192 callbacks suppressed [ 40.291952][ T4449] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.307739][ T4449] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.317939][ T4449] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.389: Failed to acquire dquot type 1 [ 40.330138][ T4449] EXT4-fs (loop3): 1 truncate cleaned up [ 40.337083][ T4449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.337771][ T4445] SELinux: syz.1.387 (4445) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.354768][ T29] audit: type=1400 audit(40.335:713): avc: denied { create } for pid=4448 comm="syz.3.389" name="cgroup" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 40.385206][ T4449] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.395273][ T4449] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.405233][ T4449] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.389: Failed to acquire dquot type 1 [ 40.432802][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.453225][ T4459] loop2: detected capacity change from 0 to 1024 [ 40.462546][ T4459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.492364][ T29] audit: type=1326 audit(40.475:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d84ae9a9 code=0x7ffc0000 [ 40.516411][ T29] audit: type=1326 audit(40.485:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4d84ae9a9 code=0x7ffc0000 [ 40.539003][ T29] audit: type=1326 audit(40.485:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d84ae9a9 code=0x7ffc0000 [ 40.561577][ T29] audit: type=1326 audit(40.485:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d84ae9a9 code=0x7ffc0000 [ 40.584115][ T29] audit: type=1326 audit(40.495:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4d84ae9a9 code=0x7ffc0000 [ 40.610079][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.749881][ T4484] loop0: detected capacity change from 0 to 512 [ 40.783506][ T4484] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.404: Failed to acquire dquot type 1 [ 40.802837][ T4482] loop4: detected capacity change from 0 to 8192 [ 40.817066][ T4482] FAT-fs (loop4): bogus sectors per cluster 0 [ 40.823182][ T4482] FAT-fs (loop4): Can't find a valid FAT filesystem [ 40.830695][ T4491] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.841824][ T4484] EXT4-fs (loop0): 1 truncate cleaned up [ 40.860742][ T4484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.881173][ T4484] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.404: Failed to acquire dquot type 1 [ 40.891306][ T4482] SELinux: syz.4.403 (4482) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.893657][ T4491] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.928246][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.945495][ T4495] loop1: detected capacity change from 0 to 1024 [ 40.955060][ T4499] loop0: detected capacity change from 0 to 1024 [ 40.961824][ T4499] EXT4-fs: Ignoring removed orlov option [ 40.967513][ T4499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.982802][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.006997][ T4491] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.018364][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.051641][ T4507] loop4: detected capacity change from 0 to 512 [ 41.059902][ T4507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.072144][ T4491] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.080382][ T4507] EXT4-fs (loop4): 1 truncate cleaned up [ 41.087983][ T4507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.088707][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.127187][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.151412][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.178489][ T4491] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.214871][ T4491] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.227473][ T4491] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.243248][ T4491] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.328617][ T4528] bridge0: entered promiscuous mode [ 41.342774][ T4533] loop1: detected capacity change from 0 to 512 [ 41.352592][ T4528] bridge0: port 3(macvlan2) entered blocking state [ 41.359169][ T4528] bridge0: port 3(macvlan2) entered disabled state [ 41.394268][ T4533] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.420: Failed to acquire dquot type 1 [ 41.395694][ T4528] macvlan2: entered allmulticast mode [ 41.410917][ T4528] bridge0: entered allmulticast mode [ 41.420692][ T4533] EXT4-fs (loop1): 1 truncate cleaned up [ 41.429970][ T4528] macvlan2: left allmulticast mode [ 41.430946][ T4533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.435136][ T4528] bridge0: left allmulticast mode [ 41.455658][ T4515] loop4: detected capacity change from 0 to 512 [ 41.462378][ T4533] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.420: Failed to acquire dquot type 1 [ 41.470939][ T4515] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.473841][ T4528] bridge0: left promiscuous mode [ 41.479900][ T4515] EXT4-fs: Ignoring removed bh option [ 41.500840][ T4515] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.519011][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.528107][ T4541] loop2: detected capacity change from 0 to 1024 [ 41.547539][ T4541] EXT4-fs: Ignoring removed orlov option [ 41.553269][ T4541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.560717][ T4515] EXT4-fs (loop4): 1 truncate cleaned up [ 41.566657][ T4515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.675822][ T4541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.689752][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.709891][ T4560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.722716][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.794494][ T4560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.854256][ T4560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.913844][ T4560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.979931][ T4560] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.992054][ T4560] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.004364][ T4560] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.016847][ T4560] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.033234][ T4582] loop2: detected capacity change from 0 to 512 [ 42.042391][ T4582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.062187][ T4582] EXT4-fs (loop2): 1 truncate cleaned up [ 42.068425][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.107561][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.153250][ T4590] loop4: detected capacity change from 0 to 1024 [ 42.161260][ T4590] EXT4-fs: Ignoring removed orlov option [ 42.167013][ T4590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.182420][ T4590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.227382][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.348498][ T4592] loop2: detected capacity change from 0 to 512 [ 42.355865][ T4592] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.362662][ T4592] EXT4-fs: Ignoring removed bh option [ 42.372278][ T4592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.395029][ T4592] EXT4-fs (loop2): 1 truncate cleaned up [ 42.401536][ T4592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.462706][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.484695][ T4621] loop1: detected capacity change from 0 to 512 [ 42.499564][ T4621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.514020][ T4621] EXT4-fs (loop1): 1 truncate cleaned up [ 42.520160][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.562416][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.605847][ T4639] __nla_validate_parse: 6 callbacks suppressed [ 42.605860][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 42.913451][ T4660] loop0: detected capacity change from 0 to 512 [ 42.920177][ T4660] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.926645][ T4660] EXT4-fs: Ignoring removed bh option [ 42.933908][ T4660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.944834][ T4660] EXT4-fs (loop0): 1 truncate cleaned up [ 42.951826][ T4660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.394342][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.411152][ T4673] SELinux: failed to load policy [ 43.441881][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 43.583110][ T4707] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 43.594920][ T4706] IPVS: stopping master sync thread 4707 ... [ 43.595979][ T4704] SELinux: failed to load policy [ 43.635922][ T4711] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 43.652068][ T4711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.661802][ T4712] IPVS: stopping master sync thread 4719 ... [ 43.670465][ T4719] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 43.685911][ T4717] syzkaller1: entered promiscuous mode [ 43.691559][ T4717] syzkaller1: entered allmulticast mode [ 43.766498][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.775457][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.784346][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.828844][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.837841][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.846895][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.888725][ T4739] SELinux: failed to load policy [ 43.901752][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.910883][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 43.924372][ T4745] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 43.939468][ T4745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.402640][ T4756] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 44.414100][ T4754] IPVS: stopping master sync thread 4756 ... [ 44.424222][ T4757] loop1: detected capacity change from 0 to 1024 [ 44.439069][ T4749] SELinux: failed to load policy [ 44.461094][ T4757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.503228][ T4764] syzkaller1: entered promiscuous mode [ 44.508872][ T4764] syzkaller1: entered allmulticast mode [ 44.519983][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.595423][ T4778] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 44.609958][ T4778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.719377][ T4795] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 44.719608][ T4791] IPVS: stopping master sync thread 4795 ... [ 44.760142][ T4794] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 44.769917][ T4796] SELinux: failed to load policy [ 44.804841][ T4802] loop2: detected capacity change from 0 to 1024 [ 44.842182][ T4802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.861855][ T4811] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 44.884931][ T4811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.899055][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.908962][ T4812] SELinux: failed to load policy [ 44.944001][ T4819] syzkaller1: entered promiscuous mode [ 44.949534][ T4819] syzkaller1: entered allmulticast mode [ 45.066721][ T4838] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.105208][ T4845] syzkaller0: entered promiscuous mode [ 45.110808][ T4845] syzkaller0: entered allmulticast mode [ 45.116435][ T4841] loop1: detected capacity change from 0 to 8192 [ 45.128020][ T4843] loop0: detected capacity change from 0 to 1024 [ 45.152738][ T4843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.184654][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.310374][ T3615] ================================================================== [ 45.318457][ T3615] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 45.326708][ T3615] [ 45.329023][ T3615] write to 0xffff888122edb6f0 of 2 bytes by task 4841 on cpu 1: [ 45.336642][ T3615] fat16_ent_put+0x28/0x60 [ 45.341046][ T3615] fat_alloc_clusters+0x4ce/0xa80 [ 45.346054][ T3615] fat_get_block+0x258/0x5e0 [ 45.350634][ T3615] __block_write_begin_int+0x3fd/0xf90 [ 45.356083][ T3615] cont_write_begin+0x5fc/0x970 [ 45.360922][ T3615] fat_write_begin+0x4f/0xe0 [ 45.365498][ T3615] cont_write_begin+0x1ad/0x970 [ 45.370344][ T3615] fat_write_begin+0x4f/0xe0 [ 45.374920][ T3615] generic_cont_expand_simple+0xb0/0x150 [ 45.380570][ T3615] fat_cont_expand+0x3e/0x170 [ 45.385238][ T3615] fat_setattr+0x2a5/0x8a0 [ 45.389635][ T3615] notify_change+0x809/0x890 [ 45.394212][ T3615] do_ftruncate+0x34b/0x450 [ 45.398693][ T3615] __x64_sys_ftruncate+0x68/0xc0 [ 45.403614][ T3615] x64_sys_call+0xd65/0x2fb0 [ 45.408192][ T3615] do_syscall_64+0xd2/0x200 [ 45.412675][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.418549][ T3615] [ 45.420857][ T3615] read to 0xffff888122edb600 of 512 bytes by task 3615 on cpu 0: [ 45.428550][ T3615] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 45.434427][ T3615] generic_perform_write+0x2c2/0x490 [ 45.439698][ T3615] shmem_file_write_iter+0xc5/0xf0 [ 45.444791][ T3615] lo_rw_aio+0x6a0/0x760 [ 45.449019][ T3615] loop_process_work+0x52d/0xa60 [ 45.453964][ T3615] loop_workfn+0x31/0x40 [ 45.458203][ T3615] process_scheduled_works+0x4cb/0x9d0 [ 45.463670][ T3615] worker_thread+0x582/0x770 [ 45.468252][ T3615] kthread+0x489/0x510 [ 45.472306][ T3615] ret_from_fork+0xda/0x150 [ 45.476805][ T3615] ret_from_fork_asm+0x1a/0x30 [ 45.481549][ T3615] [ 45.483852][ T3615] Reported by Kernel Concurrency Sanitizer on: [ 45.490002][ T3615] CPU: 0 UID: 0 PID: 3615 Comm: kworker/u8:30 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 45.502654][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.512691][ T3615] Workqueue: loop1 loop_workfn [ 45.517463][ T3615] ================================================================== [ 45.776020][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 45.776034][ T29] audit: type=1326 audit(45.755:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4815 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c8aa6e9a9 code=0x7fc00000