last executing test programs: 22.676622001s ago: executing program 0 (id=284): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRESOCT=r1, @ANYBLOB="4486fc42807c98dc", @ANYRESHEX, @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 22.535591992s ago: executing program 0 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 22.473570208s ago: executing program 0 (id=291): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x44000268) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 22.44531856s ago: executing program 0 (id=293): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = syz_io_uring_setup(0xaa, &(0x7f0000000080)={0x0, 0x7a9c, 0x10, 0xfffffffd, 0x331}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 22.302366871s ago: executing program 0 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x36, 0x34, 0x65, 0x32, 0x33, 0x33, 0x65, 0x33, 0x39, 0x35, 0x63, 0x0, 0x32, 0x64, 0x39, 0x34]}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) 21.891988144s ago: executing program 0 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) 21.891856794s ago: executing program 32 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) 14.202120911s ago: executing program 2 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 14.189348262s ago: executing program 2 (id=573): mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 14.121192007s ago: executing program 2 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) keyctl$link(0x8, r2, r1) 14.103151929s ago: executing program 2 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 14.08740196s ago: executing program 2 (id=577): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 9.864796649s ago: executing program 2 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000005c0)="df12c9f7b9a60000000000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 9.792646875s ago: executing program 33 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000005c0)="df12c9f7b9a60000000000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 6.717276521s ago: executing program 4 (id=860): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 6.644526577s ago: executing program 4 (id=865): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 6.61145379s ago: executing program 4 (id=866): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) 6.591315861s ago: executing program 4 (id=868): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28200, 0x20) 5.991473829s ago: executing program 4 (id=882): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000680)={0x1d, r1, 0x1, {0x0, 0x1}, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0xf0, 0x4}, 0x7d}, 0x18) 5.710072602s ago: executing program 4 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c060000) unshare(0x2c020400) 5.677905304s ago: executing program 34 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c060000) unshare(0x2c020400) 2.525589727s ago: executing program 6 (id=1012): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.907794397s ago: executing program 3 (id=1027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 1.677818296s ago: executing program 3 (id=1033): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 1.677516776s ago: executing program 6 (id=1034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) 1.640605668s ago: executing program 6 (id=1037): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) 1.105544771s ago: executing program 7 (id=1047): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.059832755s ago: executing program 7 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 996.31443ms ago: executing program 7 (id=1049): r0 = getpgrp(0xffffffffffffffff) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x10000, 0xb, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 928.724266ms ago: executing program 5 (id=1050): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="780000000201010300000000000000000100000408001540000000010800170000000007080003"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) 894.617318ms ago: executing program 5 (id=1051): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) 887.786739ms ago: executing program 1 (id=1052): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 882.948569ms ago: executing program 7 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) close(r2) 857.010201ms ago: executing program 7 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000005280)={0x20022000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 856.633461ms ago: executing program 5 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 838.561933ms ago: executing program 3 (id=1056): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 833.690543ms ago: executing program 1 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000240012800c0001006d6163766c616e00140002800800030001000000080001001000000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 805.212175ms ago: executing program 1 (id=1058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x30, r3, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) 783.133787ms ago: executing program 5 (id=1059): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 782.805527ms ago: executing program 6 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000a}, 0xff28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r2) 763.448199ms ago: executing program 5 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x9) 746.78966ms ago: executing program 6 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 734.475381ms ago: executing program 5 (id=1063): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 734.376721ms ago: executing program 1 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 599.808432ms ago: executing program 1 (id=1065): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 569.307734ms ago: executing program 1 (id=1066): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 541.732516ms ago: executing program 6 (id=1067): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 419.124796ms ago: executing program 3 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x59a}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 378.13328ms ago: executing program 3 (id=1069): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 279.989208ms ago: executing program 7 (id=1070): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8000, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=1071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 25.446494][ T29] audit: type=1400 audit(1754630125.900:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.447402][ T3291] cgroup: Unknown subsys name 'net' [ 25.469219][ T29] audit: type=1400 audit(1754630125.900:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.496533][ T29] audit: type=1400 audit(1754630125.930:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.628055][ T3291] cgroup: Unknown subsys name 'cpuset' [ 25.634110][ T3291] cgroup: Unknown subsys name 'rlimit' [ 25.763837][ T29] audit: type=1400 audit(1754630126.220:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.789924][ T29] audit: type=1400 audit(1754630126.220:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.810543][ T29] audit: type=1400 audit(1754630126.220:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.830904][ T29] audit: type=1400 audit(1754630126.220:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.838227][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.851142][ T29] audit: type=1400 audit(1754630126.230:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.884433][ T29] audit: type=1400 audit(1754630126.230:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.907801][ T29] audit: type=1400 audit(1754630126.320:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 25.982508][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.052154][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.070323][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.138553][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.145597][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.152828][ T3301] bridge_slave_0: entered allmulticast mode [ 27.159266][ T3301] bridge_slave_0: entered promiscuous mode [ 27.169390][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.186929][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.194071][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.201163][ T3301] bridge_slave_1: entered allmulticast mode [ 27.207523][ T3301] bridge_slave_1: entered promiscuous mode [ 27.245378][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.252511][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.259578][ T3308] bridge_slave_0: entered allmulticast mode [ 27.265927][ T3308] bridge_slave_0: entered promiscuous mode [ 27.285079][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.292195][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.299433][ T3308] bridge_slave_1: entered allmulticast mode [ 27.305717][ T3308] bridge_slave_1: entered promiscuous mode [ 27.312987][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.322082][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.335549][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.382607][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.392347][ T3301] team0: Port device team_slave_0 added [ 27.398151][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.407163][ T3301] team0: Port device team_slave_1 added [ 27.413786][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.432886][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.439942][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.447075][ T3311] bridge_slave_0: entered allmulticast mode [ 27.453538][ T3311] bridge_slave_0: entered promiscuous mode [ 27.462831][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.469967][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.477158][ T3311] bridge_slave_1: entered allmulticast mode [ 27.483397][ T3311] bridge_slave_1: entered promiscuous mode [ 27.498411][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.505340][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.531227][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.557223][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.564257][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.590160][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.619240][ T3308] team0: Port device team_slave_0 added [ 27.636365][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.646291][ T3308] team0: Port device team_slave_1 added [ 27.653781][ T3301] hsr_slave_0: entered promiscuous mode [ 27.659726][ T3301] hsr_slave_1: entered promiscuous mode [ 27.672769][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.686429][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.693618][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.700710][ T3306] bridge_slave_0: entered allmulticast mode [ 27.707006][ T3306] bridge_slave_0: entered promiscuous mode [ 27.724582][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.731731][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.738833][ T3306] bridge_slave_1: entered allmulticast mode [ 27.745203][ T3306] bridge_slave_1: entered promiscuous mode [ 27.760536][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.767465][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.793387][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.824051][ T3311] team0: Port device team_slave_0 added [ 27.829860][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.836790][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.862705][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.876759][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.886655][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.893708][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.900882][ T3303] bridge_slave_0: entered allmulticast mode [ 27.907292][ T3303] bridge_slave_0: entered promiscuous mode [ 27.914455][ T3311] team0: Port device team_slave_1 added [ 27.921059][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.942229][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.949285][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.956437][ T3303] bridge_slave_1: entered allmulticast mode [ 27.962931][ T3303] bridge_slave_1: entered promiscuous mode [ 27.996915][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.011474][ T3306] team0: Port device team_slave_0 added [ 28.017274][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.024234][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.050101][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.064477][ T3308] hsr_slave_0: entered promiscuous mode [ 28.070577][ T3308] hsr_slave_1: entered promiscuous mode [ 28.076227][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.081958][ T3308] Cannot create hsr debugfs directory [ 28.088606][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.103729][ T3306] team0: Port device team_slave_1 added [ 28.114015][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.120970][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.146970][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.183572][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.190520][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.216425][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.235040][ T3303] team0: Port device team_slave_0 added [ 28.242050][ T3303] team0: Port device team_slave_1 added [ 28.248078][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.255065][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.280969][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.312057][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.319062][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.345074][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.366908][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.373881][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.399780][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.422342][ T3311] hsr_slave_0: entered promiscuous mode [ 28.428238][ T3311] hsr_slave_1: entered promiscuous mode [ 28.433956][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.439688][ T3311] Cannot create hsr debugfs directory [ 28.466558][ T3306] hsr_slave_0: entered promiscuous mode [ 28.472397][ T3306] hsr_slave_1: entered promiscuous mode [ 28.478340][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 28.484050][ T3306] Cannot create hsr debugfs directory [ 28.510798][ T3303] hsr_slave_0: entered promiscuous mode [ 28.516634][ T3303] hsr_slave_1: entered promiscuous mode [ 28.523365][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 28.529108][ T3303] Cannot create hsr debugfs directory [ 28.619262][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.635892][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.659690][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.679891][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.708562][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.719865][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.730522][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.739368][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.760355][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.779389][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.788753][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.802417][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.816688][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.827326][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.839427][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.848161][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.883584][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.893130][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.908894][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.937668][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.955943][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.985018][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.993450][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.009419][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.019898][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.026983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.035360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.042464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.062210][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.077481][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.090981][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.105327][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.119724][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.126834][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.137050][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.144122][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.165432][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.172495][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.181550][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.188636][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.207095][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.224406][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.231464][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.241810][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.248869][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.266311][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.277124][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.303499][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.321403][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.359989][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.367032][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.376712][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.391454][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.405972][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.413106][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.430358][ T3301] veth0_vlan: entered promiscuous mode [ 29.443515][ T3301] veth1_vlan: entered promiscuous mode [ 29.458520][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.475302][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.531533][ T3301] veth0_macvtap: entered promiscuous mode [ 29.543302][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.561327][ T3301] veth1_macvtap: entered promiscuous mode [ 29.590976][ T3311] veth0_vlan: entered promiscuous mode [ 29.598605][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.616929][ T3311] veth1_vlan: entered promiscuous mode [ 29.628594][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.636854][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.657802][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670494][ T3311] veth0_macvtap: entered promiscuous mode [ 29.680189][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.694197][ T3306] veth0_vlan: entered promiscuous mode [ 29.701159][ T3311] veth1_macvtap: entered promiscuous mode [ 29.710749][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.739131][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.750146][ T3306] veth1_vlan: entered promiscuous mode [ 29.759645][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.761727][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.792667][ T3306] veth0_macvtap: entered promiscuous mode [ 29.801121][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.809676][ T3306] veth1_macvtap: entered promiscuous mode [ 29.829765][ T3460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.854083][ T3460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.874728][ T3460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.899574][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.914064][ T3460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.923022][ T3308] veth0_vlan: entered promiscuous mode [ 29.934983][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.955975][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.964983][ T3308] veth1_vlan: entered promiscuous mode [ 29.970961][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 29.989330][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.000411][ T3308] veth0_macvtap: entered promiscuous mode [ 30.008315][ T3303] veth0_vlan: entered promiscuous mode [ 30.018982][ T3303] veth1_vlan: entered promiscuous mode [ 30.025136][ T3308] veth1_macvtap: entered promiscuous mode [ 30.041545][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.048890][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.067062][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.078745][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.102420][ T3303] veth0_macvtap: entered promiscuous mode [ 30.111392][ T1083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.123022][ T3303] veth1_macvtap: entered promiscuous mode [ 30.136017][ T3480] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7'. [ 30.156487][ T1083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.174529][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.196636][ T1083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.206848][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.237863][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.255579][ T1083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.298276][ T1083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.319719][ T1083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.360807][ T1083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464547][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 30.464561][ T29] audit: type=1326 audit(1754630130.920:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 30.570375][ T29] audit: type=1326 audit(1754630130.920:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 30.593475][ T29] audit: type=1326 audit(1754630130.920:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 30.616632][ T29] audit: type=1326 audit(1754630130.920:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 30.639780][ T29] audit: type=1326 audit(1754630130.920:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 30.663024][ T29] audit: type=1326 audit(1754630130.930:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 30.717629][ T29] audit: type=1400 audit(1754630131.170:130): avc: denied { write } for pid=3528 comm="syz.1.25" name="rt_acct" dev="proc" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.740269][ T29] audit: type=1400 audit(1754630131.170:131): avc: denied { connect } for pid=3528 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.759713][ T29] audit: type=1400 audit(1754630131.170:132): avc: denied { write } for pid=3528 comm="syz.1.25" path="socket:[5241]" dev="sockfs" ino=5241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.814916][ T3530] 9pnet: Could not find request transport: 0xffffffffffffffff [ 30.816420][ T29] audit: type=1400 audit(1754630131.240:133): avc: denied { mounton } for pid=3527 comm="syz.0.24" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.859013][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 31.014813][ T3548] loop2: detected capacity change from 0 to 1024 [ 31.039250][ T3548] ======================================================= [ 31.039250][ T3548] WARNING: The mand mount option has been deprecated and [ 31.039250][ T3548] and is ignored by this kernel. Remove the mand [ 31.039250][ T3548] option from the mount to silence this warning. [ 31.039250][ T3548] ======================================================= [ 31.104074][ T3548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.127170][ T3548] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.147705][ T3553] netlink: 'syz.0.34': attribute type 21 has an invalid length. [ 31.162727][ T3553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'. [ 31.178225][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.200941][ T3560] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 31.343153][ T3579] loop4: detected capacity change from 0 to 512 [ 31.351854][ T3579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.359334][ T3579] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.373610][ T3579] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 31.383170][ T3579] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 31.391980][ T3579] EXT4-fs (loop4): 1 truncate cleaned up [ 31.398156][ T3579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.414519][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.44: lblock 0 mapped to illegal pblock 4 (length 1) [ 31.429863][ T3579] EXT4-fs (loop4): Remounting filesystem read-only [ 31.444684][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.622911][ T3605] syzkaller0: entered allmulticast mode [ 31.630388][ T3605] syzkaller0 (unregistering): left allmulticast mode [ 31.932137][ T3626] netlink: 3 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.944977][ T3626] batadv1: entered promiscuous mode [ 31.950282][ T3626] batadv1: entered allmulticast mode [ 31.980659][ T1096] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 31.988480][ T1096] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 31.999406][ T1096] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 32.009464][ T1096] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 32.089755][ T3633] fido_id[3633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.143553][ T3640] syz.3.67 (3640) used greatest stack depth: 10800 bytes left [ 32.256644][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 32.282385][ T3654] vhci_hcd: invalid port number 96 [ 32.287554][ T3654] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 32.301896][ T3650] hsr_slave_0 (unregistering): left promiscuous mode [ 32.618422][ T3671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.648752][ T3675] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 32.857470][ T3683] vhci_hcd: invalid port number 96 [ 32.862640][ T3683] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 33.255531][ T3709] bond1: entered promiscuous mode [ 33.260848][ T3709] bond1: entered allmulticast mode [ 33.282968][ T3709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.310230][ T3709] bond1 (unregistering): Released all slaves [ 33.440456][ T3671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.501804][ T3671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.567638][ T3732] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.580067][ T3671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.694150][ T3741] loop3: detected capacity change from 0 to 764 [ 33.822434][ T3750] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 33.841861][ T3752] process 'syz.4.116' launched '/dev/fd/5' with NULL argv: empty string added [ 33.869439][ T3756] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 33.877186][ T3756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.117'. [ 33.922382][ T3760] bond1: entered promiscuous mode [ 33.927422][ T3760] bond1: entered allmulticast mode [ 33.932782][ T3760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.942868][ T3760] bond1 (unregistering): Released all slaves [ 33.953426][ T3756] dummy0: entered promiscuous mode [ 33.959209][ T3756] bridge0: port 3(dummy0) entered blocking state [ 33.965759][ T3756] bridge0: port 3(dummy0) entered disabled state [ 33.973460][ T3756] dummy0: entered allmulticast mode [ 33.979635][ T3756] bridge0: port 3(dummy0) entered blocking state [ 33.986012][ T3756] bridge0: port 3(dummy0) entered forwarding state [ 33.997886][ T3763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 34.006773][ T3763] netlink: 108 bytes leftover after parsing attributes in process `syz.4.120'. [ 34.021007][ T3763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 34.140290][ T3771] loop3: detected capacity change from 0 to 4096 [ 34.191431][ T3771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.216470][ T3785] bond1: entered promiscuous mode [ 34.221577][ T3785] bond1: entered allmulticast mode [ 34.226915][ T3785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.239129][ T3785] bond1 (unregistering): Released all slaves [ 34.305906][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.113055][ T3843] __nla_validate_parse: 3 callbacks suppressed [ 35.113065][ T3843] netlink: 256 bytes leftover after parsing attributes in process `syz.2.148'. [ 35.332017][ T3863] bond1: entered promiscuous mode [ 35.337058][ T3863] bond1: entered allmulticast mode [ 35.345447][ T3863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.362501][ T3863] bond1 (unregistering): Released all slaves [ 35.528507][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 35.536181][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 35.544406][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 35.552204][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 35.559874][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 35.567542][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 35.575174][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 35.587869][ T3493] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.627053][ T3886] fido_id[3886]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.642139][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 35.651619][ T3885] vhci_hcd: invalid port number 23 [ 35.672158][ T3888] veth1_macvtap: left promiscuous mode [ 35.723156][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 35.723170][ T29] audit: type=1326 audit(1754630136.180:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 35.752817][ T29] audit: type=1326 audit(1754630136.180:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 35.782651][ T29] audit: type=1326 audit(1754630136.180:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 35.805976][ T29] audit: type=1326 audit(1754630136.180:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 35.829272][ T29] audit: type=1326 audit(1754630136.180:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 35.856857][ T29] audit: type=1400 audit(1754630136.310:335): avc: denied { mounton } for pid=3897 comm="syz.0.174" path=2F33392FE91F7189591E9233614B dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 35.857210][ T3376] kernel write not supported for file bpf-prog (pid: 3376 comm: kworker/1:3) [ 35.925851][ T29] audit: type=1326 audit(1754630136.360:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794e67ebe9 code=0x7ffc0000 [ 35.949146][ T29] audit: type=1326 audit(1754630136.360:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f794e67ebe9 code=0x7ffc0000 [ 35.972286][ T29] audit: type=1326 audit(1754630136.360:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794e67ebe9 code=0x7ffc0000 [ 35.995564][ T29] audit: type=1326 audit(1754630136.360:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f794e67ebe9 code=0x7ffc0000 [ 36.192247][ T3926] loop1: detected capacity change from 0 to 512 [ 36.211902][ T3926] EXT4-fs: Ignoring removed nobh option [ 36.235314][ T3924] SELinux: failed to load policy [ 36.264196][ T3930] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.274915][ T3930] SELinux: failed to load policy [ 36.285765][ T3926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 36.296439][ T3926] System zones: 0-2, 18-18, 34-34 [ 36.323150][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.340984][ T3926] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.366049][ T3926] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 36.422064][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.542908][ T3961] loop0: detected capacity change from 0 to 764 [ 36.561878][ T3950] syzkaller0: entered promiscuous mode [ 36.567350][ T3950] syzkaller0: entered allmulticast mode [ 36.573800][ T3961] Symlink component flag not implemented [ 36.579505][ T3961] Symlink component flag not implemented [ 36.591662][ T3961] Symlink component flag not implemented (128) [ 36.597887][ T3961] Symlink component flag not implemented (122) [ 36.714531][ T3971] loop0: detected capacity change from 0 to 512 [ 36.742588][ T3971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.776695][ T3971] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.870034][ T3986] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 36.909604][ T3970] syz.0.205 (3970) used greatest stack depth: 10672 bytes left [ 36.923494][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.929984][ C1] hrtimer: interrupt took 57578 ns [ 36.976703][ T3995] vxcan0: tx address claim with different name [ 37.173279][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 37.188256][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 37.546703][ T4074] loop1: detected capacity change from 0 to 1024 [ 37.566247][ T4074] EXT4-fs: Ignoring removed oldalloc option [ 37.574712][ T4078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 37.583679][ T4078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 37.604784][ T4074] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 37.625092][ T4074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.646634][ T4078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 37.649505][ T3409] hid_parser_main: 9 callbacks suppressed [ 37.649520][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 37.655643][ T4078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 37.661350][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.684894][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.692346][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.699875][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.707383][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.708647][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.714854][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.731185][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.738612][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 37.745981][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.754035][ T3409] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.802903][ T4078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 37.811830][ T4078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 38.033073][ T4122] loop4: detected capacity change from 0 to 512 [ 38.044929][ T4122] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 38.053642][ T4122] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.271: invalid indirect mapped block 2683928664 (level 1) [ 38.086276][ T4122] EXT4-fs (loop4): 1 truncate cleaned up [ 38.093938][ T4122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.113483][ T4122] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.271: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 38.177524][ T4135] vlan2: entered allmulticast mode [ 38.190671][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.280927][ T4147] loop2: detected capacity change from 0 to 1024 [ 38.289278][ T4147] EXT4-fs: Ignoring removed oldalloc option [ 38.311531][ T4147] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 38.332236][ T4153] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D†üB€|˜Ü0xffffffffffffffffÿÿÿÿmemory.events [ 38.360755][ T4147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.415538][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.557994][ T4169] IPVS: Error joining to the multicast group [ 38.570483][ T4173] loop0: detected capacity change from 0 to 2048 [ 38.579643][ T4173] EXT4-fs: Ignoring removed bh option [ 38.614537][ T4173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.680519][ T3306] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.707185][ T3306] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.852287][ T4206] syz.2.308 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.985092][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.003847][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.072103][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.089497][ T4226] loop2: detected capacity change from 0 to 8192 [ 39.106239][ T4237] loop3: detected capacity change from 0 to 512 [ 39.117225][ T4237] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.124023][ T4226] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 39.130277][ T4237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.174498][ T4237] EXT4-fs (loop3): 1 orphan inode deleted [ 39.180280][ T4237] EXT4-fs (loop3): 1 truncate cleaned up [ 39.190777][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.195716][ T4237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.286270][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.286768][ T4255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.304142][ T4255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.304594][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.367245][ T4260] loop3: detected capacity change from 0 to 2048 [ 39.424258][ T3295] loop3: p2 p3 p7 [ 39.445588][ T12] bridge_slave_1: left allmulticast mode [ 39.451272][ T12] bridge_slave_1: left promiscuous mode [ 39.456981][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.464267][ T4260] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 39.530216][ T12] bridge_slave_0: left allmulticast mode [ 39.535882][ T12] bridge_slave_0: left promiscuous mode [ 39.541577][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.554445][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.554585][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.579030][ T3728] udevd[3728]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 39.701787][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.712638][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.722415][ T12] bond0 (unregistering): Released all slaves [ 39.738345][ T4295] pim6reg: entered allmulticast mode [ 39.749382][ T4301] pim6reg: left allmulticast mode [ 39.771087][ T12] hsr_slave_0: left promiscuous mode [ 39.776775][ T12] hsr_slave_1: left promiscuous mode [ 39.782638][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.790116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.797893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.805336][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.826955][ T12] veth1_macvtap: left promiscuous mode [ 39.850787][ T12] veth0_macvtap: left promiscuous mode [ 39.856273][ T12] veth1_vlan: left promiscuous mode [ 39.877771][ T12] veth0_vlan: left promiscuous mode [ 39.980965][ T12] team0 (unregistering): Port device team_slave_1 removed [ 39.994519][ T12] team0 (unregistering): Port device team_slave_0 removed [ 40.111387][ T4244] chnl_net:caif_netlink_parms(): no params data found [ 40.231672][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.238806][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.248429][ T4244] bridge_slave_0: entered allmulticast mode [ 40.263702][ T4244] bridge_slave_0: entered promiscuous mode [ 40.280388][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.287525][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.310081][ T4244] bridge_slave_1: entered allmulticast mode [ 40.352873][ T4244] bridge_slave_1: entered promiscuous mode [ 40.399983][ T4244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.414062][ T4349] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 40.415583][ T4244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.447797][ T4349] SELinux: failed to load policy [ 40.455455][ T4244] team0: Port device team_slave_0 added [ 40.469515][ T4244] team0: Port device team_slave_1 added [ 40.500397][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.507481][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.533495][ T4244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.580162][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.587116][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.613041][ T4244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.659119][ T4244] hsr_slave_0: entered promiscuous mode [ 40.691623][ T4244] hsr_slave_1: entered promiscuous mode [ 40.709728][ T4244] debugfs: 'hsr0' already exists in 'hsr' [ 40.715464][ T4244] Cannot create hsr debugfs directory [ 40.811306][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 40.811320][ T29] audit: type=1400 audit(1754630141.271:593): avc: denied { write } for pid=4383 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.837385][ T29] audit: type=1400 audit(1754630141.271:594): avc: denied { nlmsg_write } for pid=4383 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.877427][ T29] audit: type=1400 audit(1754630141.321:595): avc: denied { setopt } for pid=4379 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.994004][ T29] audit: type=1400 audit(1754630141.431:596): avc: denied { block_suspend } for pid=4394 comm="syz.4.365" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.015232][ T29] audit: type=1400 audit(1754630141.441:597): avc: denied { search } for pid=4406 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.037290][ T29] audit: type=1400 audit(1754630141.441:598): avc: denied { search } for pid=4406 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.059877][ T29] audit: type=1400 audit(1754630141.441:599): avc: denied { search } for pid=4406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.082896][ T29] audit: type=1400 audit(1754630141.441:600): avc: denied { search } for pid=4406 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.105995][ T29] audit: type=1400 audit(1754630141.451:601): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.130055][ T29] audit: type=1400 audit(1754630141.451:602): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.135303][ T4244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.201960][ T4244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.220499][ T4244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.252336][ T4244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.382380][ T4244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.389532][ T4437] ref_ctr_offset mismatch. inode: 0x1cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 41.415243][ T4244] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.426029][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.433085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.485486][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.492620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.523223][ T4244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.536328][ T4448] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 41.544261][ T4451] bond1: entered promiscuous mode [ 41.549431][ T4451] bond1: entered allmulticast mode [ 41.556634][ T4451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.593400][ T4457] loop2: detected capacity change from 0 to 512 [ 41.596158][ T4451] bond1 (unregistering): Released all slaves [ 41.640002][ T4457] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.664756][ T4457] EXT4-fs (loop2): mount failed [ 41.747027][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.779101][ T4480] batadv_slave_1: entered promiscuous mode [ 41.808289][ T4479] batadv_slave_1: left promiscuous mode [ 41.909543][ T4496] ip6tnl1: entered promiscuous mode [ 41.914784][ T4496] ip6tnl1: entered allmulticast mode [ 42.024686][ T4524] serio: Serial port ptm0 [ 42.074240][ T4535] __nla_validate_parse: 16 callbacks suppressed [ 42.074255][ T4535] netlink: 76 bytes leftover after parsing attributes in process `syz.2.399'. [ 42.085966][ T4244] veth0_vlan: entered promiscuous mode [ 42.129120][ T4244] veth1_vlan: entered promiscuous mode [ 42.148317][ T4541] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 42.154994][ T4244] veth0_macvtap: entered promiscuous mode [ 42.174755][ T4244] veth1_macvtap: entered promiscuous mode [ 42.181636][ T4541] SELinux: failed to load policy [ 42.221094][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.247538][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.272781][ T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.293459][ T4565] syz.3.406 uses obsolete (PF_INET,SOCK_PACKET) [ 42.303276][ T54] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.357866][ T54] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.375653][ T54] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.467241][ T4586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.412'. [ 42.476101][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 42.607983][ T4598] loop1: detected capacity change from 0 to 2048 [ 42.638059][ T3295] loop1: p1 < > p3 p4 [ 42.644275][ T3295] loop1: p3 size 54016 extends beyond EOD, truncated [ 42.671963][ T3295] loop1: p4 start 4294967295 is beyond EOD, truncated [ 42.687138][ T4598] loop1: p1 < > p3 p4 [ 42.716162][ T4598] loop1: p3 size 54016 extends beyond EOD, truncated [ 42.733462][ T4598] loop1: p4 start 4294967295 is beyond EOD, truncated [ 42.859401][ T4631] loop4: detected capacity change from 0 to 512 [ 42.884221][ T4631] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 42.897053][ T4633] 9pnet_fd: Insufficient options for proto=fd [ 42.927556][ T4631] SELinux: Context system_u:object is not valid (left unmapped). [ 42.991176][ T4626] syz.3.422 (4626) used greatest stack depth: 10176 bytes left [ 43.057043][ T4641] ref_ctr_offset mismatch. inode: 0x40 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 43.098931][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 43.107912][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 43.116960][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 43.123595][ T4653] vlan2: entered allmulticast mode [ 43.146183][ T4654] loop1: detected capacity change from 0 to 2048 [ 43.194397][ T4654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.247554][ T4653] Zero length message leads to an empty skb [ 43.357648][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.366069][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.393211][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.410027][ T4682] loop5: detected capacity change from 0 to 128 [ 43.433995][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.443067][ T4682] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.455446][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.466127][ T4682] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.466242][ T1083] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.549987][ T4244] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.560884][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.604311][ T4690] SELinux: Context Ü is not valid (left unmapped). [ 43.687681][ T4694] loop4: detected capacity change from 0 to 8192 [ 43.725518][ T4694] syz.4.451: attempt to access beyond end of device [ 43.725518][ T4694] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.741841][ T4694] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 43.749759][ T4694] FAT-fs (loop4): Filesystem has been set read-only [ 43.757416][ T4694] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 43.765488][ T4694] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 43.825201][ T4718] netlink: 'syz.2.461': attribute type 27 has an invalid length. [ 43.928293][ T4718] bridge0: port 3(dummy0) entered disabled state [ 43.934712][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.941913][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.091019][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.149947][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.287917][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.322998][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.347100][ T4726] bridge0: port 3(dummy0) entered blocking state [ 44.353575][ T4726] bridge0: port 3(dummy0) entered forwarding state [ 44.388344][ T4726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.446968][ T1083] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.478412][ T1083] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.493725][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'. [ 44.504662][ T1083] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.532652][ T1083] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.609404][ T4796] loop1: detected capacity change from 0 to 8192 [ 44.631404][ T4796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.662713][ T4805] loop5: detected capacity change from 0 to 512 [ 44.677314][ T4796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.691323][ T4805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 44.699767][ T4805] EXT4-fs (loop5): orphan cleanup on readonly fs [ 44.706388][ T4805] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.490: iget: bad i_size value: 360287970189639690 [ 44.733142][ T4805] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.490: Bad quota inode: 15, type: 2 [ 44.744577][ T4808] loop2: detected capacity change from 0 to 1024 [ 44.745479][ T4805] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 44.766413][ T4805] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 44.768101][ T4808] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.784032][ T4808] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.784489][ T4805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.795385][ T4808] JBD2: no valid journal superblock found [ 44.811723][ T4808] EXT4-fs (loop2): Could not load journal inode [ 44.818924][ T4796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.834942][ T4805] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 44.845868][ T4805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 44.858251][ T4805] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.490: iget: bad i_size value: 360287970189639690 [ 44.874576][ T4796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.887669][ T4805] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.490: Bad quota inode: 15, type: 2 [ 44.900664][ T4805] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 44.923770][ T1083] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.933967][ T4244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.939316][ T54] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.954311][ T54] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.962945][ T54] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.033915][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 45.100505][ T4830] netlink: 108 bytes leftover after parsing attributes in process `syz.5.501'. [ 45.109618][ T4830] netlink: 108 bytes leftover after parsing attributes in process `syz.5.501'. [ 45.185693][ T4847] loop5: detected capacity change from 0 to 512 [ 45.202709][ T4847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.212956][ T4847] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.508: corrupted in-inode xattr: overlapping e_value [ 45.227831][ T4847] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.508: couldn't read orphan inode 15 (err -117) [ 45.240663][ T4847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.480183][ T4244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.501192][ T4873] hub 2-0:1.0: USB hub found [ 45.505908][ T4873] hub 2-0:1.0: 8 ports detected [ 45.551678][ T4886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4886 comm=syz.4.525 [ 45.607014][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.614284][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.656943][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.666497][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.701580][ T41] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.720863][ T41] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.760916][ T41] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.780248][ T41] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.900661][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 45.900675][ T29] audit: type=1326 audit(1754630146.361:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 45.942369][ T29] audit: type=1326 audit(1754630146.391:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 45.965671][ T29] audit: type=1326 audit(1754630146.391:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 45.988911][ T29] audit: type=1326 audit(1754630146.391:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 46.020728][ T29] audit: type=1326 audit(1754630146.481:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x0 [ 46.043663][ T29] audit: type=1400 audit(1754630146.491:888): avc: denied { connect } for pid=4919 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.124890][ T4916] loop2: detected capacity change from 0 to 8192 [ 46.190371][ T4937] netlink: 'syz.2.545': attribute type 21 has an invalid length. [ 46.224941][ T4943] ALSA: seq fatal error: cannot create timer (-19) [ 46.243208][ T29] audit: type=1400 audit(1754630146.691:889): avc: denied { lock } for pid=4945 comm="syz.3.550" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.284336][ T29] audit: type=1400 audit(1754630146.731:890): avc: denied { read write } for pid=4947 comm="syz.2.551" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 46.307742][ T29] audit: type=1400 audit(1754630146.731:891): avc: denied { open } for pid=4947 comm="syz.2.551" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 46.310038][ T4955] loop2: detected capacity change from 0 to 512 [ 46.331383][ T29] audit: type=1326 audit(1754630146.731:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0642ebe9 code=0x7ffc0000 [ 46.369531][ T4955] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.554: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 46.392357][ T4955] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.554: Bad quota inode: 3, type: 0 [ 46.404008][ T4955] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 46.419683][ T4955] EXT4-fs (loop2): mount failed [ 46.462806][ T4966] loop2: detected capacity change from 0 to 512 [ 46.491294][ T4966] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.558: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 46.517788][ T4966] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.558: Bad quota inode: 3, type: 0 [ 46.534667][ T4966] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 46.549594][ T4962] loop5: detected capacity change from 0 to 8192 [ 46.556423][ T4966] EXT4-fs (loop2): mount failed [ 46.907942][ T5007] loop1: detected capacity change from 0 to 8192 [ 46.971389][ T5015] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 46.977968][ T5015] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.985496][ T5015] vhci_hcd vhci_hcd.0: Device attached [ 46.995017][ T5019] ALSA: seq fatal error: cannot create timer (-22) [ 46.995199][ T5015] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 47.008037][ T5015] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.015640][ T5015] vhci_hcd vhci_hcd.0: Device attached [ 47.028637][ T5015] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 47.035240][ T5015] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.042815][ T5015] vhci_hcd vhci_hcd.0: Device attached [ 47.051898][ T5015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.060770][ T5015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.070177][ T5015] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 47.076767][ T5015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.084344][ T5015] vhci_hcd vhci_hcd.0: Device attached [ 47.094600][ T5026] vhci_hcd: connection closed [ 47.094755][ T41] vhci_hcd: stop threads [ 47.094945][ T5022] vhci_hcd: connection closed [ 47.099469][ T41] vhci_hcd: release socket [ 47.099479][ T41] vhci_hcd: disconnect device [ 47.105586][ T5016] vhci_hcd: connection closed [ 47.108556][ T5020] vhci_hcd: connection closed [ 47.128753][ T41] vhci_hcd: stop threads [ 47.137853][ T41] vhci_hcd: release socket [ 47.142407][ T41] vhci_hcd: disconnect device [ 47.152157][ T41] vhci_hcd: stop threads [ 47.156393][ T41] vhci_hcd: release socket [ 47.160863][ T41] vhci_hcd: disconnect device [ 47.168214][ T4756] vhci_hcd: vhci_device speed not set [ 47.178449][ T41] vhci_hcd: stop threads [ 47.182778][ T41] vhci_hcd: release socket [ 47.187298][ T41] vhci_hcd: disconnect device [ 47.213777][ T5040] __nla_validate_parse: 8 callbacks suppressed [ 47.213790][ T5040] netlink: 268 bytes leftover after parsing attributes in process `syz.1.590'. [ 47.229151][ T5040] unsupported nla_type 65024 [ 47.234371][ T5041] loop3: detected capacity change from 0 to 2048 [ 47.251232][ T5041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.255620][ T5045] loop1: detected capacity change from 0 to 1024 [ 47.289747][ T5045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.301925][ T5045] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.318658][ T5045] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.591: lblock 3 mapped to illegal pblock 3 (length 3) [ 47.333762][ T5045] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 47.346097][ T5045] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.346097][ T5045] [ 47.368447][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.419398][ T5050] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 3) [ 47.433224][ T5050] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 47.445499][ T5050] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.445499][ T5050] [ 47.584354][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 47.752776][ T41] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 47.769831][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 47.782205][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.782205][ T41] [ 47.795880][ T41] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 47.812490][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 47.824815][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.824815][ T41] [ 47.834462][ T41] EXT4-fs (loop1): Total free blocks count 0 [ 47.849864][ T5077] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 47.891865][ T5081] netlink: 'syz.5.607': attribute type 3 has an invalid length. [ 47.951407][ T5087] netlink: 51563 bytes leftover after parsing attributes in process `syz.4.610'. [ 47.953326][ T5089] loop5: detected capacity change from 0 to 512 [ 47.971451][ T5089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.978776][ T5089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.987276][ T5089] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.015820][ T5089] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.611: Allocating blocks 41-42 which overlap fs metadata [ 48.029982][ T5089] EXT4-fs (loop5): Remounting filesystem read-only [ 48.036569][ T5089] EXT4-fs (loop5): 1 truncate cleaned up [ 48.042837][ T5089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.059262][ T5089] syz.5.611 (5089) used greatest stack depth: 10032 bytes left [ 48.078713][ T4244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.110997][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.118216][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.197667][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.207543][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.287066][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.295989][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.338137][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.367806][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.512671][ T5119] loop1: detected capacity change from 0 to 512 [ 48.520759][ T5119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 48.530217][ T5119] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.536676][ T5119] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.621: iget: bad i_size value: 360287970189639690 [ 48.551137][ T5119] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.621: Bad quota inode: 15, type: 2 [ 48.562343][ T5119] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 48.578883][ T5119] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 48.585899][ T5119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.602488][ T5119] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 48.612130][ T5119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 48.627430][ T5119] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.621: iget: bad i_size value: 360287970189639690 [ 48.641933][ T5119] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.621: Bad quota inode: 15, type: 2 [ 48.654029][ T5119] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 48.686724][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.728246][ T5134] loop1: detected capacity change from 0 to 128 [ 48.747777][ T5122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.872183][ T5144] SELinux: ebitmap: truncated map [ 48.878999][ T5144] SELinux: failed to load policy [ 48.906644][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'. [ 48.958129][ T5168] loop1: detected capacity change from 0 to 512 [ 48.964924][ T5168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.972837][ T5168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.981386][ T5168] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.011692][ T5168] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.642: Allocating blocks 41-42 which overlap fs metadata [ 49.036726][ T5168] EXT4-fs (loop1): Remounting filesystem read-only [ 49.046027][ T5168] EXT4-fs (loop1): 1 truncate cleaned up [ 49.052339][ T5168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.090306][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.130514][ T5180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 49.149358][ T5178] loop3: detected capacity change from 0 to 8192 [ 49.162143][ T5178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.208052][ T5183] SELinux: failed to load policy [ 49.213713][ T5178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.289525][ T5178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.329625][ T5178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.373220][ T1083] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.383905][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.394415][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.404656][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.511449][ T5189] hub 2-0:1.0: USB hub found [ 49.516133][ T5189] hub 2-0:1.0: 8 ports detected [ 49.639250][ T5197] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 49.664730][ T5199] loop3: detected capacity change from 0 to 2048 [ 49.697334][ T5199] loop3: p2 < > p3 p4 [ 49.701972][ T5199] loop3: p3 start 65535 is beyond EOD, truncated [ 49.708407][ T5199] loop3: p4 size 8192 extends beyond EOD, truncated [ 49.829329][ T5209] loop5: detected capacity change from 0 to 8192 [ 49.868266][ T5213] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 49.874773][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.882424][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 49.889707][ T5213] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 49.896306][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.903879][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 49.910444][ T5213] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 49.916964][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.924661][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 49.930867][ T5213] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.939702][ T5213] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.949504][ T5213] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 49.956092][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.963666][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 49.970256][ T5220] vhci_hcd: connection closed [ 49.970361][ T51] vhci_hcd: stop threads [ 49.970447][ T5214] vhci_hcd: connection closed [ 49.975151][ T51] vhci_hcd: release socket [ 49.979599][ T5218] vhci_hcd: connection closed [ 49.984210][ T51] vhci_hcd: disconnect device [ 49.998504][ T5216] vhci_hcd: connection closed [ 49.999022][ T51] vhci_hcd: stop threads [ 50.008191][ T51] vhci_hcd: release socket [ 50.012739][ T51] vhci_hcd: disconnect device [ 50.022501][ T51] vhci_hcd: stop threads [ 50.026869][ T51] vhci_hcd: release socket [ 50.031451][ T51] vhci_hcd: disconnect device [ 50.038227][ T51] vhci_hcd: stop threads [ 50.042484][ T51] vhci_hcd: release socket [ 50.047051][ T51] vhci_hcd: disconnect device [ 50.066912][ T2955] vhci_hcd: vhci_device speed not set [ 50.117354][ T5231] netlink: 8 bytes leftover after parsing attributes in process `'. [ 50.270434][ T5248] hub 9-0:1.0: USB hub found [ 50.275213][ T5248] hub 9-0:1.0: 8 ports detected [ 50.672797][ T5290] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 50.723044][ T5300] random: crng reseeded on system resumption [ 50.733781][ T5300] Restarting kernel threads ... [ 50.740200][ T5300] Done restarting kernel threads. [ 50.772747][ T5309] netlink: 'syz.3.702': attribute type 4 has an invalid length. [ 50.786037][ T5309] netlink: 'syz.3.702': attribute type 4 has an invalid length. [ 50.876213][ T5323] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 50.904154][ T5327] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 50.905211][ T5326] loop4: detected capacity change from 0 to 512 [ 50.928165][ T5326] __quota_error: 167 callbacks suppressed [ 50.928176][ T5326] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 50.943936][ T5326] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.958879][ T5326] EXT4-fs (loop4): mount failed [ 50.982799][ T29] audit: type=1400 audit(1754630380.436:1052): avc: denied { mount } for pid=5334 comm="syz.4.714" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.026736][ T29] audit: type=1400 audit(1754630380.456:1053): avc: denied { search } for pid=5334 comm="syz.4.714" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.048958][ T29] audit: type=1400 audit(1754630380.456:1054): avc: denied { search } for pid=5334 comm="syz.4.714" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.071069][ T29] audit: type=1400 audit(1754630380.456:1055): avc: denied { read open } for pid=5334 comm="syz.4.714" path="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.093415][ T29] audit: type=1400 audit(1754630380.476:1056): avc: denied { connect } for pid=5336 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.117376][ T5340] loop3: detected capacity change from 0 to 128 [ 51.127819][ T29] audit: type=1326 audit(1754630380.576:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354cb3ebe9 code=0x7ffc0000 [ 51.151133][ T29] audit: type=1326 audit(1754630380.576:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f354cb3ebe9 code=0x7ffc0000 [ 51.174430][ T29] audit: type=1326 audit(1754630380.576:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354cb3ebe9 code=0x7ffc0000 [ 51.197766][ T29] audit: type=1326 audit(1754630380.576:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354cb3ebe9 code=0x7ffc0000 [ 51.280995][ T5352] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 51.287531][ T5352] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.294992][ T5352] vhci_hcd vhci_hcd.0: Device attached [ 51.358900][ T5353] vhci_hcd: connection closed [ 51.359158][ T54] vhci_hcd: stop threads [ 51.368150][ T54] vhci_hcd: release socket [ 51.372548][ T54] vhci_hcd: disconnect device [ 51.473693][ T1083] dummy0: left promiscuous mode [ 51.478700][ T1083] bridge0: port 3(dummy0) entered disabled state [ 51.479573][ T5381] loop3: detected capacity change from 0 to 1024 [ 51.491887][ T5381] EXT4-fs: Ignoring removed bh option [ 51.498370][ T1083] bridge_slave_1: left allmulticast mode [ 51.504077][ T1083] bridge_slave_1: left promiscuous mode [ 51.509798][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.529596][ T5381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.542908][ T1083] bridge_slave_0: left allmulticast mode [ 51.548588][ T1083] bridge_slave_0: left promiscuous mode [ 51.554461][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.586939][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.638369][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.653415][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.662870][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 51.672208][ T1083] bond0 (unregistering): Released all slaves [ 51.689351][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 51.732986][ T1083] hsr_slave_0: left promiscuous mode [ 51.740954][ T1083] hsr_slave_1: left promiscuous mode [ 51.746608][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.758250][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.791519][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 51.801021][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 51.830354][ T5403] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.849407][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.856445][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.878162][ T5349] bridge_slave_0: entered allmulticast mode [ 51.886718][ T5349] bridge_slave_0: entered promiscuous mode [ 51.893417][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.900547][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.907833][ T5349] bridge_slave_1: entered allmulticast mode [ 51.914456][ T5349] bridge_slave_1: entered promiscuous mode [ 51.937886][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.949703][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.974182][ T5349] team0: Port device team_slave_0 added [ 51.981235][ T5349] team0: Port device team_slave_1 added [ 51.998713][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.998752][ T5425] loop5: detected capacity change from 0 to 128 [ 52.005657][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.033835][ T5425] EXT4-fs: Ignoring removed nobh option [ 52.037778][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.043919][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.056450][ T5431] capability: warning: `syz.1.760' uses 32-bit capabilities (legacy support in use) [ 52.060798][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.090038][ T5425] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.096015][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.126844][ T5425] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.150106][ T5349] hsr_slave_0: entered promiscuous mode [ 52.155983][ T5349] hsr_slave_1: entered promiscuous mode [ 52.170082][ T5349] debugfs: 'hsr0' already exists in 'hsr' [ 52.175809][ T5349] Cannot create hsr debugfs directory [ 52.192616][ T4244] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.265016][ T5447] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 52.291513][ T5349] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.301609][ T5349] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.327798][ T5349] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.338412][ T5349] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.360119][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.367211][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.374582][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.381687][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.382522][ T5459] netlink: 'syz.4.766': attribute type 10 has an invalid length. [ 52.402697][ T5459] team0: Port device dummy0 added [ 52.431946][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.453731][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.466342][ T5473] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 52.474045][ T5473] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.769'. [ 52.512771][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.534318][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.544678][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.551799][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.561443][ T5481] syz_tun: entered allmulticast mode [ 52.567495][ T5481] syz_tun: left allmulticast mode [ 52.576813][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.583888][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.652708][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.823960][ T5349] veth0_vlan: entered promiscuous mode [ 52.841089][ T5349] veth1_vlan: entered promiscuous mode [ 52.852802][ T5349] veth0_macvtap: entered promiscuous mode [ 52.860171][ T5349] veth1_macvtap: entered promiscuous mode [ 52.874317][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.885017][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.896135][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.907205][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.918928][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.934420][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.032681][ T5548] loop5: detected capacity change from 0 to 512 [ 53.044751][ T5548] EXT4-fs: Ignoring removed nobh option [ 53.069330][ T5548] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.795: iget: bad i_size value: 38620345925642 [ 53.098995][ T5548] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.795: couldn't read orphan inode 15 (err -117) [ 53.112512][ T5548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.125849][ T5559] netlink: 'syz.6.799': attribute type 21 has an invalid length. [ 53.133836][ T5559] netlink: 132 bytes leftover after parsing attributes in process `syz.6.799'. [ 53.173873][ T5565] Illegal XDP return value 4294967294 on prog (id 588) dev N/A, expect packet loss! [ 53.211390][ T5569] netlink: 'syz.1.803': attribute type 10 has an invalid length. [ 53.219174][ T5569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.803'. [ 53.231626][ T5569] dummy0: entered promiscuous mode [ 53.241607][ T5569] bridge0: port 3(dummy0) entered blocking state [ 53.248028][ T5569] bridge0: port 3(dummy0) entered disabled state [ 53.254565][ T5569] dummy0: entered allmulticast mode [ 53.260572][ T5569] bridge0: port 3(dummy0) entered blocking state [ 53.266945][ T5569] bridge0: port 3(dummy0) entered forwarding state [ 53.410865][ T54] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 53.444510][ T54] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 53.456787][ T54] EXT4-fs (loop5): This should not happen!! Data will be lost [ 53.456787][ T54] [ 53.466423][ T54] EXT4-fs (loop5): Total free blocks count 0 [ 53.472422][ T54] EXT4-fs (loop5): Free/Dirty block details [ 53.478320][ T54] EXT4-fs (loop5): free_blocks=0 [ 53.483283][ T54] EXT4-fs (loop5): dirty_blocks=8 [ 53.488301][ T54] EXT4-fs (loop5): Block reservation details [ 53.494266][ T54] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 53.521148][ T4244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.564448][ T5601] loop3: detected capacity change from 0 to 512 [ 53.586747][ T5604] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.813'. [ 53.616918][ T5601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.631455][ T5601] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.666909][ T5613] netlink: 96 bytes leftover after parsing attributes in process `syz.5.820'. [ 53.746495][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.760986][ T5626] serio: Serial port ptm0 [ 53.801447][ T5636] loop3: detected capacity change from 0 to 512 [ 53.809128][ T5636] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 54.054047][ T5676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.848'. [ 54.109805][ T5680] bridge: RTM_NEWNEIGH with invalid ether address [ 54.165820][ T5672] loop1: detected capacity change from 0 to 8192 [ 54.172254][ T5689] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 54.178764][ T5689] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.186333][ T5689] vhci_hcd vhci_hcd.0: Device attached [ 54.235104][ T5690] vhci_hcd: connection closed [ 54.235379][ T41] vhci_hcd: stop threads [ 54.244338][ T41] vhci_hcd: release socket [ 54.248767][ T41] vhci_hcd: disconnect device [ 54.273024][ T5703] loop4: detected capacity change from 0 to 1024 [ 54.287817][ T5703] EXT4-fs: Ignoring removed bh option [ 54.308780][ T5703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.341601][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.404238][ T5724] loop4: detected capacity change from 0 to 1024 [ 54.456660][ T2955] hid_parser_main: 22 callbacks suppressed [ 54.456679][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.469988][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.489125][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.490996][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.508584][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.516008][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.523492][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.530901][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.538315][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.545774][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.553162][ T2955] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 54.573728][ T2955] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.596631][ T5724] loop4: detected capacity change from 1024 to 0 [ 54.602985][ T5734] syz.4.868: attempt to access beyond end of device [ 54.602985][ T5734] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 54.616754][ T5734] syz.4.868: attempt to access beyond end of device [ 54.616754][ T5734] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 54.634875][ T5734] syz.4.868: attempt to access beyond end of device [ 54.634875][ T5734] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 54.652918][ T5734] syz.4.868: attempt to access beyond end of device [ 54.652918][ T5734] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 54.666254][ T5734] syz.4.868: attempt to access beyond end of device [ 54.666254][ T5734] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 54.679718][ T5734] syz.4.868: attempt to access beyond end of device [ 54.679718][ T5734] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 54.696746][ T5734] syz.4.868: attempt to access beyond end of device [ 54.696746][ T5734] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 54.710059][ T5734] syz.4.868: attempt to access beyond end of device [ 54.710059][ T5734] loop4: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 54.723276][ T5734] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #15: block 8: comm syz.4.868: unable to read itable block [ 54.723560][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 54.736145][ T5734] syz.4.868: attempt to access beyond end of device [ 54.736145][ T5734] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 54.758625][ T5734] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 54.770953][ T5734] EXT4-fs (loop4): I/O error while writing superblock [ 54.778181][ T5734] syz.4.868: attempt to access beyond end of device [ 54.778181][ T5734] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 54.795035][ T5734] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #15: block 8: comm syz.4.868: unable to read itable block [ 54.808797][ T5734] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 54.819526][ T5734] EXT4-fs (loop4): I/O error while writing superblock [ 54.826330][ T5734] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 54.837350][ T5734] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 54.854624][ T5744] serio: Serial port ptm0 [ 54.873094][ T5734] EXT4-fs (loop4): I/O error while writing superblock [ 54.880033][ T5734] EXT4-fs error (device loop4): ext4_setattr:6020: inode #15: comm syz.4.868: mark_inode_dirty error [ 54.891345][ T5734] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 54.899919][ T5734] EXT4-fs (loop4): I/O error while writing superblock [ 54.906721][ T5734] EXT4-fs error (device loop4) in ext4_setattr:6071: IO failure [ 54.914433][ T5734] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 54.922947][ T5734] EXT4-fs (loop4): I/O error while writing superblock [ 54.955877][ T5755] 9p: Unknown Cache mode or invalid value n [ 54.961235][ T3308] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 54.981115][ T5757] netlink: 'syz.1.883': attribute type 39 has an invalid length. [ 54.989601][ T3308] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 54.997903][ T3308] EXT4-fs (loop4): I/O error while writing superblock [ 55.004669][ T3308] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 55.018045][ T3308] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 55.025541][ T5759] infiniband syz!: set active [ 55.026327][ T3308] EXT4-fs (loop4): I/O error while writing superblock [ 55.031022][ T5759] infiniband syz!: added team_slave_0 [ 55.037772][ T3308] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 55.056437][ T3308] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 55.068428][ T3308] EXT4-fs (loop4): I/O error while writing superblock [ 55.083400][ T54] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 55.104083][ T54] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 55.113814][ T5759] RDS/IB: syz!: added [ 55.119168][ T5759] smc: adding ib device syz! with port count 1 [ 55.121107][ T5768] loop5: detected capacity change from 0 to 512 [ 55.131996][ T54] EXT4-fs (loop4): I/O error while writing superblock [ 55.132677][ T5759] smc: ib device syz! port 1 has pnetid [ 55.139206][ T5768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.157832][ T5768] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.887: casefold flag without casefold feature [ 55.172257][ T3308] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 55.182036][ T5768] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.887: couldn't read orphan inode 15 (err -117) [ 55.196400][ T5768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.238626][ T4244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.280664][ T5771] loop5: detected capacity change from 0 to 256 [ 55.634089][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 55.664440][ T5809] netlink: 468 bytes leftover after parsing attributes in process `syz.3.903'. [ 55.718317][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.725485][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.732696][ T5779] bridge_slave_0: entered allmulticast mode [ 55.739180][ T5779] bridge_slave_0: entered promiscuous mode [ 55.745724][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.752884][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.760031][ T5779] bridge_slave_1: entered allmulticast mode [ 55.766585][ T5779] bridge_slave_1: entered promiscuous mode [ 55.776031][ T5822] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 55.805074][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.818698][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.849982][ T5833] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 55.856495][ T5833] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.863962][ T5833] vhci_hcd vhci_hcd.0: Device attached [ 55.865125][ T5779] team0: Port device team_slave_0 added [ 55.883697][ T5779] team0: Port device team_slave_1 added [ 55.898001][ T5835] vhci_hcd: connection closed [ 55.898141][ T51] vhci_hcd: stop threads [ 55.907087][ T51] vhci_hcd: release socket [ 55.911490][ T51] vhci_hcd: disconnect device [ 55.928576][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.935507][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.961500][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.976327][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.983313][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.009225][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.029479][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 56.029492][ T29] audit: type=1400 audit(1754630385.486:1194): avc: denied { relabelfrom } for pid=5841 comm="syz.6.917" name="NETLINK" dev="sockfs" ino=13627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.060042][ T29] audit: type=1400 audit(1754630385.486:1195): avc: denied { relabelto } for pid=5841 comm="syz.6.917" name="NETLINK" dev="sockfs" ino=13627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 56.107643][ T5779] hsr_slave_0: entered promiscuous mode [ 56.122608][ T5779] hsr_slave_1: entered promiscuous mode [ 56.131639][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 56.137409][ T5779] Cannot create hsr debugfs directory [ 56.225518][ T5779] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.235999][ T5779] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.247224][ T5779] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.259470][ T5779] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.303910][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.319586][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.331444][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.338583][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.357911][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.364983][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.377456][ T5862] pim6reg: entered allmulticast mode [ 56.385487][ T5866] netlink: 'syz.3.924': attribute type 4 has an invalid length. [ 56.386483][ T5862] pim6reg: left allmulticast mode [ 56.406854][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.417326][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.443350][ T5868] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 56.476646][ T5871] loop3: detected capacity change from 0 to 1024 [ 56.486122][ T5871] EXT4-fs: Ignoring removed orlov option [ 56.501346][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.523640][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.682158][ T29] audit: type=1326 audit(1754630386.126:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.693196][ T5779] veth0_vlan: entered promiscuous mode [ 56.705497][ T29] audit: type=1326 audit(1754630386.126:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.715904][ T5779] veth1_vlan: entered promiscuous mode [ 56.734171][ T29] audit: type=1326 audit(1754630386.126:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.762977][ T29] audit: type=1326 audit(1754630386.126:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.786306][ T29] audit: type=1326 audit(1754630386.126:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.809595][ T29] audit: type=1326 audit(1754630386.126:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.823641][ T5779] veth0_macvtap: entered promiscuous mode [ 56.832951][ T29] audit: type=1326 audit(1754630386.126:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.861904][ T29] audit: type=1326 audit(1754630386.126:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99837febe9 code=0x7ffc0000 [ 56.896088][ T5779] veth1_macvtap: entered promiscuous mode [ 56.909338][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.930898][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.949618][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.958400][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.982819][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.993572][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.044791][ T5912] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.937'. [ 57.123749][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.892'. [ 57.207214][ T5925] netlink: 332 bytes leftover after parsing attributes in process `syz.5.944'. [ 57.411166][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.423160][ T5942] macvtap1: entered allmulticast mode [ 57.428633][ T5942] bridge0: entered allmulticast mode [ 57.445211][ T5942] bridge0: port 3(macvtap1) entered blocking state [ 57.451978][ T5942] bridge0: port 3(macvtap1) entered disabled state [ 57.455517][ T5947] netlink: 'syz.3.953': attribute type 10 has an invalid length. [ 57.467737][ T5942] bridge0: left allmulticast mode [ 57.499121][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 57.508248][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 57.545921][ T5943] tipc: Enabling of bearer rejected, failed to enable media [ 57.554887][ T4756] syz!: Port: 1 Link DOWN [ 57.784828][ T5984] IPVS: stopping master sync thread 5985 ... [ 57.785572][ T5985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 57.995260][ T6000] serio: Serial port ttyS3 [ 58.005315][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.980'. [ 58.086431][ T6019] bridge0: port 3(batadv1) entered blocking state [ 58.092871][ T6019] bridge0: port 3(batadv1) entered disabled state [ 58.099700][ T6019] batadv1: entered allmulticast mode [ 58.105563][ T6019] batadv1: entered promiscuous mode [ 58.141387][ T6025] loop3: detected capacity change from 0 to 1024 [ 58.165134][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.246019][ T6025] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.328298][ T6025] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.989: lblock 3 mapped to illegal pblock 3 (length 13) [ 58.377735][ T6025] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 58.390201][ T6025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.390201][ T6025] [ 58.412901][ T6053] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.989: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.437923][ T6053] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.989: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.475900][ T6053] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.989: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.503033][ T6053] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.989: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.518362][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1012'. [ 58.559149][ T6075] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 58.559334][ T6074] IPVS: stopping master sync thread 6075 ... [ 58.579393][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.597662][ T51] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 58.606938][ T51] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 58.648845][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 58.665626][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 58.674661][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1006'. [ 58.762639][ T6088] serio: Serial port ttyS3 [ 58.793777][ T6085] loop3: detected capacity change from 0 to 8192 [ 58.846736][ T6085] loop3: p2 p3 p4 [ 58.850489][ T6085] loop3: p2 start 2936012800 is beyond EOD, truncated [ 58.857290][ T6085] loop3: p3 start 1912602624 is beyond EOD, truncated [ 58.864055][ T6085] loop3: p4 size 656640 extends beyond EOD, truncated [ 58.921324][ T6108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1019'. [ 58.976188][ T6116] rdma_op ffff8881058afd80 conn xmit_rdma 0000000000000000 [ 59.020708][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1024'. [ 59.110290][ T6129] serio: Serial port ttyS3 [ 59.198728][ T6139] macvlan1: entered promiscuous mode [ 59.218637][ T6139] ipvlan0: entered promiscuous mode [ 59.226336][ T6139] ipvlan0: left promiscuous mode [ 59.234006][ T6139] macvlan1: left promiscuous mode [ 59.447127][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 59.533225][ T6159] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1041'. [ 59.613782][ T6161] syzkaller0: entered promiscuous mode [ 59.619326][ T6161] syzkaller0: entered allmulticast mode [ 59.690885][ T6166] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.706331][ T6166] vhci_hcd: invalid port number 129 [ 59.711551][ T6166] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 59.808808][ T6171] loop5: detected capacity change from 0 to 164 [ 59.850320][ T6171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.005094][ T6177] tipc: Enabling of bearer rejected, failed to enable media [ 60.064271][ T6179] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1050'. [ 60.253809][ T6207] loop5: detected capacity change from 0 to 1024 [ 60.260612][ T6207] EXT4-fs: Ignoring removed orlov option [ 60.261742][ T6205] bridge0: entered promiscuous mode [ 60.275133][ T6205] macvtap1: entered allmulticast mode [ 60.277916][ T6207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.280648][ T6205] bridge0: entered allmulticast mode [ 60.299825][ T6205] bridge0: port 4(macvtap1) entered blocking state [ 60.306360][ T6205] bridge0: port 4(macvtap1) entered disabled state [ 60.313897][ T6205] bridge0: left allmulticast mode [ 60.318939][ T6205] bridge0: left promiscuous mode [ 60.638277][ T6224] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 60.679856][ T6224] dummy0: entered promiscuous mode [ 60.703443][ T6224] bridge0: port 3(dummy0) entered blocking state [ 60.709952][ T6224] bridge0: port 3(dummy0) entered disabled state [ 60.719031][ T6226] loop7: detected capacity change from 0 to 512 [ 60.725477][ T6226] EXT4-fs: Ignoring removed orlov option [ 60.745623][ T6224] dummy0: entered allmulticast mode [ 60.758364][ T6224] bridge0: port 3(dummy0) entered blocking state [ 60.764729][ T6224] bridge0: port 3(dummy0) entered forwarding state [ 60.771934][ T6226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.806362][ T6226] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.955697][ T6207] ================================================================== [ 60.963793][ T6207] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 60.971696][ T6207] [ 60.974010][ T6207] write to 0xffff888119c5e0f4 of 4 bytes by task 6213 on cpu 0: [ 60.981632][ T6207] xas_set_mark+0x12b/0x140 [ 60.986139][ T6207] __folio_start_writeback+0x1dd/0x440 [ 60.991604][ T6207] ext4_bio_write_folio+0x5ad/0x9f0 [ 60.996799][ T6207] mpage_process_page_bufs+0x4a1/0x620 [ 61.002246][ T6207] mpage_prepare_extent_to_map+0x786/0xc00 [ 61.008040][ T6207] ext4_do_writepages+0xa05/0x2750 [ 61.013152][ T6207] ext4_writepages+0x176/0x300 [ 61.017902][ T6207] do_writepages+0x1c6/0x310 [ 61.022483][ T6207] file_write_and_wait_range+0x156/0x2c0 [ 61.028113][ T6207] generic_buffers_fsync_noflush+0x45/0x120 [ 61.034001][ T6207] ext4_sync_file+0x1ab/0x690 [ 61.038678][ T6207] vfs_fsync_range+0x10d/0x130 [ 61.043431][ T6207] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.048976][ T6207] ext4_file_write_iter+0x383/0xf00 [ 61.054172][ T6207] iter_file_splice_write+0x5f2/0x970 [ 61.059531][ T6207] direct_splice_actor+0x153/0x2a0 [ 61.064629][ T6207] splice_direct_to_actor+0x30f/0x680 [ 61.069986][ T6207] do_splice_direct+0xda/0x150 [ 61.074735][ T6207] do_sendfile+0x380/0x650 [ 61.079147][ T6207] __x64_sys_sendfile64+0x105/0x150 [ 61.084342][ T6207] x64_sys_call+0x2bb0/0x2ff0 [ 61.089010][ T6207] do_syscall_64+0xd2/0x200 [ 61.093507][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.099390][ T6207] [ 61.101698][ T6207] read to 0xffff888119c5e0f4 of 4 bytes by task 6207 on cpu 1: [ 61.109224][ T6207] __writeback_single_inode+0x1f9/0x7c0 [ 61.114772][ T6207] writeback_single_inode+0x167/0x3e0 [ 61.120140][ T6207] sync_inode_metadata+0x5b/0x90 [ 61.125073][ T6207] generic_buffers_fsync_noflush+0xd9/0x120 [ 61.130959][ T6207] ext4_sync_file+0x1ab/0x690 [ 61.135637][ T6207] vfs_fsync_range+0x10d/0x130 [ 61.140388][ T6207] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.145933][ T6207] ext4_file_write_iter+0x383/0xf00 [ 61.151131][ T6207] iter_file_splice_write+0x5f2/0x970 [ 61.156491][ T6207] direct_splice_actor+0x153/0x2a0 [ 61.161587][ T6207] splice_direct_to_actor+0x30f/0x680 [ 61.166946][ T6207] do_splice_direct+0xda/0x150 [ 61.171698][ T6207] do_sendfile+0x380/0x650 [ 61.176107][ T6207] __x64_sys_sendfile64+0x105/0x150 [ 61.181303][ T6207] x64_sys_call+0x2bb0/0x2ff0 [ 61.185971][ T6207] do_syscall_64+0xd2/0x200 [ 61.190466][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.196349][ T6207] [ 61.198653][ T6207] value changed: 0x0a000021 -> 0x04000021 [ 61.204352][ T6207] [ 61.206658][ T6207] Reported by Kernel Concurrency Sanitizer on: [ 61.212812][ T6207] CPU: 1 UID: 0 PID: 6207 Comm: syz.5.1063 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 61.224863][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.234901][ T6207] ================================================================== [ 61.485975][ T4244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.578668][ T5779] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.