last executing test programs: 2.446344741s ago: executing program 2 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) sendfile(r0, r2, 0x0, 0x401) 2.429837903s ago: executing program 2 (id=1447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x30044f1, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.399151866s ago: executing program 2 (id=1449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) truncate(0x0, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x2, 0x404c851) 2.271393388s ago: executing program 1 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket(0x40000000015, 0x5, 0x0) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.030027982s ago: executing program 1 (id=1457): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x18}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.804548044s ago: executing program 3 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) close(r2) 1.74518742s ago: executing program 3 (id=1463): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 1.729482621s ago: executing program 3 (id=1464): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) 1.509122083s ago: executing program 2 (id=1466): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.501032544s ago: executing program 2 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) write$binfmt_aout(r1, &(0x7f0000002140)=ANY=[], 0xff2e) 1.416886911s ago: executing program 0 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010a182}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) 1.394741854s ago: executing program 0 (id=1472): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x2000c050) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250301f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d25498c345946ca3907c2d97baf450f7989d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c16a5f137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e9734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c808004500ac1414bb0000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 1.077666745s ago: executing program 2 (id=1475): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2000000) 1.076859825s ago: executing program 1 (id=1485): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000300), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 1.02255191s ago: executing program 0 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 647.339147ms ago: executing program 3 (id=1482): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") write$hidraw(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 489.003032ms ago: executing program 3 (id=1486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) write$binfmt_aout(r1, &(0x7f0000002140)=ANY=[], 0xff2e) 292.225552ms ago: executing program 4 (id=1491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 256.809795ms ago: executing program 4 (id=1492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 232.433688ms ago: executing program 3 (id=1493): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 206.0915ms ago: executing program 1 (id=1494): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x13, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/141], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 205.87894ms ago: executing program 4 (id=1495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 122.748498ms ago: executing program 4 (id=1496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 122.538138ms ago: executing program 0 (id=1497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) 119.587208ms ago: executing program 4 (id=1498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x3, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0xfffffffffffffffd, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0xffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0xe8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket(0x2, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 117.920349ms ago: executing program 1 (id=1499): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x404c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 69.005594ms ago: executing program 1 (id=1500): tkill(0x0, 0x1b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x56, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000800)={@none, 0x4}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 25.075568ms ago: executing program 4 (id=1501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 19.868679ms ago: executing program 0 (id=1502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x406, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x0, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1503): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffc}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) kernel console output (not intermixed with test programs): 16] bridge_slave_1: entered allmulticast mode [ 26.376313][ T3316] bridge_slave_1: entered promiscuous mode [ 26.389414][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.398579][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.405652][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.412973][ T3312] bridge_slave_1: entered allmulticast mode [ 26.419419][ T3312] bridge_slave_1: entered promiscuous mode [ 26.466690][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.484559][ T3317] team0: Port device team_slave_0 added [ 26.491292][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.501123][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.510440][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.517478][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.524632][ T3311] bridge_slave_0: entered allmulticast mode [ 26.531095][ T3311] bridge_slave_0: entered promiscuous mode [ 26.537490][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.544579][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.551875][ T3313] bridge_slave_0: entered allmulticast mode [ 26.558081][ T3313] bridge_slave_0: entered promiscuous mode [ 26.565218][ T3317] team0: Port device team_slave_1 added [ 26.571785][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.595363][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.602566][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.609801][ T3311] bridge_slave_1: entered allmulticast mode [ 26.616154][ T3311] bridge_slave_1: entered promiscuous mode [ 26.626569][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.633693][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.640942][ T3313] bridge_slave_1: entered allmulticast mode [ 26.647211][ T3313] bridge_slave_1: entered promiscuous mode [ 26.662268][ T3316] team0: Port device team_slave_0 added [ 26.668239][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.675239][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.701193][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.725765][ T3316] team0: Port device team_slave_1 added [ 26.736690][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.743664][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.769693][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.781452][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.797987][ T3312] team0: Port device team_slave_0 added [ 26.808841][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.815829][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.841857][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.853285][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.863491][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.877077][ T3312] team0: Port device team_slave_1 added [ 26.884040][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.891027][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.916983][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.930989][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.959352][ T3311] team0: Port device team_slave_0 added [ 26.970063][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.977103][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.003039][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.020535][ T3317] hsr_slave_0: entered promiscuous mode [ 27.026498][ T3317] hsr_slave_1: entered promiscuous mode [ 27.037539][ T3311] team0: Port device team_slave_1 added [ 27.052902][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.060029][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.086089][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.106607][ T3313] team0: Port device team_slave_0 added [ 27.127132][ T3316] hsr_slave_0: entered promiscuous mode [ 27.133171][ T3316] hsr_slave_1: entered promiscuous mode [ 27.139009][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.144734][ T3316] Cannot create hsr debugfs directory [ 27.150845][ T3313] team0: Port device team_slave_1 added [ 27.156677][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.163642][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.189552][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.211467][ T3312] hsr_slave_0: entered promiscuous mode [ 27.217464][ T3312] hsr_slave_1: entered promiscuous mode [ 27.223499][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.229267][ T3312] Cannot create hsr debugfs directory [ 27.240136][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.247079][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.272972][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.304108][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.311091][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.337002][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.361061][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.368070][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.394024][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.432136][ T3311] hsr_slave_0: entered promiscuous mode [ 27.438067][ T3311] hsr_slave_1: entered promiscuous mode [ 27.443855][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.449627][ T3311] Cannot create hsr debugfs directory [ 27.481647][ T3313] hsr_slave_0: entered promiscuous mode [ 27.487589][ T3313] hsr_slave_1: entered promiscuous mode [ 27.493674][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.499492][ T3313] Cannot create hsr debugfs directory [ 27.636135][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.646843][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.655602][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.666396][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.694892][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.712949][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.723854][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.732101][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.742019][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.751160][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.760025][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.769809][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.807127][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.815729][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.824966][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.833714][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.867174][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.884002][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.893099][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.901757][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.916433][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.924405][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.947254][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.954385][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.969901][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.976954][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.997309][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.018357][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.040441][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.060216][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.067283][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.079548][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.093020][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.100120][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.108956][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.126504][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.137672][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.149587][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.156643][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.165301][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.172368][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.182735][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.194766][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.201875][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.220419][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.229416][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.236462][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.256095][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.278072][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.285233][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.303915][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.311079][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.363188][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.385311][ T3312] veth0_vlan: entered promiscuous mode [ 28.396725][ T3312] veth1_vlan: entered promiscuous mode [ 28.425964][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.457596][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.492013][ T3312] veth0_macvtap: entered promiscuous mode [ 28.511087][ T3312] veth1_macvtap: entered promiscuous mode [ 28.524022][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.534877][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.571388][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.610919][ T3317] veth0_vlan: entered promiscuous mode [ 28.618363][ T3311] veth0_vlan: entered promiscuous mode [ 28.626507][ T3311] veth1_vlan: entered promiscuous mode [ 28.634800][ T3330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.652432][ T3330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.669787][ T3311] veth0_macvtap: entered promiscuous mode [ 28.680770][ T3316] veth0_vlan: entered promiscuous mode [ 28.686501][ T3330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.695435][ T3330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.706275][ T3317] veth1_vlan: entered promiscuous mode [ 28.714384][ T3311] veth1_macvtap: entered promiscuous mode [ 28.725180][ T3316] veth1_vlan: entered promiscuous mode [ 28.735996][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.748712][ T3317] veth0_macvtap: entered promiscuous mode [ 28.764115][ T3313] veth0_vlan: entered promiscuous mode [ 28.776924][ T3317] veth1_macvtap: entered promiscuous mode [ 28.787450][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.796937][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.817408][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.827205][ T3313] veth1_vlan: entered promiscuous mode [ 28.850703][ T3316] veth0_macvtap: entered promiscuous mode [ 28.859441][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.870655][ T3316] veth1_macvtap: entered promiscuous mode [ 28.884267][ T3313] veth0_macvtap: entered promiscuous mode [ 28.893916][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.901204][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.913925][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.914196][ T3482] loop2: detected capacity change from 0 to 512 [ 28.929297][ T3313] veth1_macvtap: entered promiscuous mode [ 28.939296][ T3485] loop3: detected capacity change from 0 to 512 [ 28.942251][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.963595][ T3485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.976724][ T3485] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.989849][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.990812][ T3482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.000876][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.011531][ T3482] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.024935][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.038196][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.048843][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.058888][ T3485] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.090801][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.100517][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.100839][ T3485] EXT4-fs (loop3): 1 truncate cleaned up [ 29.116611][ T3485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.134519][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.176112][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.200815][ T3496] loop2: detected capacity change from 0 to 1024 [ 29.208712][ T3496] ======================================================= [ 29.208712][ T3496] WARNING: The mand mount option has been deprecated and [ 29.208712][ T3496] and is ignored by this kernel. Remove the mand [ 29.208712][ T3496] option from the mount to silence this warning. [ 29.208712][ T3496] ======================================================= [ 29.245147][ T3330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.259271][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.274995][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.310120][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.322874][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.327705][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.332115][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.353265][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.373867][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 29.373882][ T29] audit: type=1400 audit(1761405032.300:133): avc: denied { create } for pid=3509 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.409321][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.418206][ T29] audit: type=1400 audit(1761405032.330:134): avc: denied { create } for pid=3511 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.437864][ T29] audit: type=1400 audit(1761405032.330:135): avc: denied { connect } for pid=3509 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.457218][ T29] audit: type=1400 audit(1761405032.340:136): avc: denied { read } for pid=3509 comm="syz.3.9" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.479676][ T29] audit: type=1400 audit(1761405032.340:137): avc: denied { open } for pid=3509 comm="syz.3.9" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.504014][ T29] audit: type=1400 audit(1761405032.370:138): avc: denied { setopt } for pid=3511 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.505155][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.523407][ T29] audit: type=1400 audit(1761405032.370:139): avc: denied { add_name } for pid=3495 comm="syz.2.7" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.552505][ T29] audit: type=1400 audit(1761405032.370:140): avc: denied { create } for pid=3495 comm="syz.2.7" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.569075][ T3496] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.7: Allocating blocks 449-513 which overlap fs metadata [ 29.572640][ T29] audit: type=1400 audit(1761405032.370:141): avc: denied { read } for pid=3495 comm="syz.2.7" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.607925][ T29] audit: type=1400 audit(1761405032.370:142): avc: denied { open } for pid=3495 comm="syz.2.7" path="/2/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.714705][ T3522] loop1: detected capacity change from 0 to 512 [ 29.752252][ T3495] EXT4-fs (loop2): pa ffff888107284070: logic 48, phys. 177, len 21 [ 29.760404][ T3495] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 29.810763][ T3522] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.14: inode has both inline data and extents flags [ 29.853921][ T3496] syz.2.7 (3496) used greatest stack depth: 10576 bytes left [ 29.881402][ T3522] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.14: couldn't read orphan inode 15 (err -117) [ 29.895800][ T3533] loop4: detected capacity change from 0 to 512 [ 29.910576][ T3522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.922677][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.941479][ T3533] EXT4-fs: Ignoring removed orlov option [ 29.949698][ T3534] xt_nat: multiple ranges no longer supported [ 29.957237][ T3522] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.14: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 29.980117][ T3533] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.20: inode has both inline data and extents flags [ 30.025367][ T3533] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.20: couldn't read orphan inode 15 (err -117) [ 30.042536][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.069495][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.091522][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 30.100403][ T3539] netlink: 348 bytes leftover after parsing attributes in process `syz.2.19'. [ 30.109438][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 30.118175][ T3539] netlink: 348 bytes leftover after parsing attributes in process `syz.2.19'. [ 30.133501][ T3541] program syz.3.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.171676][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.172034][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 30.228631][ T3547] Illegal XDP return value 3648988470 on prog (id 22) dev syz_tun, expect packet loss! [ 30.306983][ T3551] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 30.379095][ T3563] loop0: detected capacity change from 0 to 512 [ 30.385708][ T3563] EXT4-fs: Ignoring removed orlov option [ 30.405665][ T3563] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.32: inode has both inline data and extents flags [ 30.421524][ T3563] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.32: couldn't read orphan inode 15 (err -117) [ 30.434029][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.449950][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.457240][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.497443][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.524150][ T3571] loop1: detected capacity change from 0 to 512 [ 30.544057][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.544252][ T3571] EXT4-fs: Ignoring removed nobh option [ 30.569962][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.577525][ T3571] EXT4-fs (loop1): #clusters per group too big: 360448 [ 30.643873][ T3330] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.655910][ T3568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.706231][ T3330] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.726239][ T3330] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.782595][ T3588] loop5: detected capacity change from 0 to 7 [ 30.842101][ T327] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.851323][ T327] Buffer I/O error on dev loop5, logical block 0, async page read [ 30.860505][ T3588] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.869730][ T3588] Buffer I/O error on dev loop5, logical block 0, async page read [ 30.877566][ T3588] loop5: unable to read partition table [ 30.883944][ T3588] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 30.901793][ T3599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 31.187701][ T3617] loop0: detected capacity change from 0 to 1024 [ 31.221135][ T3617] EXT4-fs: Ignoring removed nobh option [ 31.249209][ T3622] ALSA: seq fatal error: cannot create timer (-19) [ 31.258004][ T3617] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.282800][ T3617] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.53: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 31.302492][ T3617] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.53: couldn't read orphan inode 11 (err -117) [ 31.314869][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.335775][ T3617] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.53: Invalid block bitmap block 0 in block_group 0 [ 31.359476][ T3617] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.53: Failed to acquire dquot type 0 [ 31.410846][ T3617] syz.0.53 (3617) used greatest stack depth: 10144 bytes left [ 31.424894][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.463801][ T3641] mmap: syz.1.63 (3641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.487610][ T3643] loop0: detected capacity change from 0 to 512 [ 31.502184][ T3643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.517051][ T3643] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.525785][ T3645] syzkaller0: entered promiscuous mode [ 31.528552][ T3643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.532911][ T3645] syzkaller0: entered allmulticast mode [ 31.884809][ T3669] process 'syz.0.74' launched './file0' with NULL argv: empty string added [ 32.117992][ T3686] loop3: detected capacity change from 0 to 164 [ 32.128294][ T3686] syz.3.82: attempt to access beyond end of device [ 32.128294][ T3686] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 32.145252][ T3686] syz.3.82: attempt to access beyond end of device [ 32.145252][ T3686] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.177103][ T3691] veth0: entered promiscuous mode [ 32.182906][ T3691] veth0: left promiscuous mode [ 32.204253][ T3693] loop1: detected capacity change from 0 to 128 [ 32.491570][ T3745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.98'. [ 32.692550][ T3767] loop2: detected capacity change from 0 to 1024 [ 32.707296][ T3773] loop3: detected capacity change from 0 to 128 [ 32.734770][ T3773] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.748545][ T3773] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.784334][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.800185][ T3767] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 32.812714][ T3767] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.812714][ T3767] [ 32.822362][ T3767] EXT4-fs (loop2): Total free blocks count 0 [ 32.828386][ T3767] EXT4-fs (loop2): Free/Dirty block details [ 32.834306][ T3767] EXT4-fs (loop2): free_blocks=0 [ 32.839516][ T3767] EXT4-fs (loop2): dirty_blocks=0 [ 32.844533][ T3767] EXT4-fs (loop2): Block reservation details [ 32.850549][ T3767] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 32.867183][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.910266][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.920297][ T3780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.112'. [ 32.937529][ T3780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 33.398332][ T3845] wg2: entered promiscuous mode [ 33.403502][ T3845] wg2: entered allmulticast mode [ 33.651319][ T3863] ip6gre1: entered promiscuous mode [ 33.656527][ T3863] ip6gre1: entered allmulticast mode [ 33.924784][ T3870] netlink: 96 bytes leftover after parsing attributes in process `syz.2.149'. [ 34.118348][ T3890] syz.4.159 uses obsolete (PF_INET,SOCK_PACKET) [ 34.219904][ T3896] loop1: detected capacity change from 0 to 512 [ 34.258107][ T3896] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.277280][ T3896] EXT4-fs (loop1): mount failed [ 34.586854][ T3928] tipc: Started in network mode [ 34.591808][ T3928] tipc: Node identity ac14140f, cluster identity 4711 [ 34.598817][ T3928] tipc: New replicast peer: 255.255.255.255 [ 34.605501][ T3928] tipc: Enabled bearer , priority 10 [ 34.794794][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 34.794827][ T29] audit: type=1400 audit(1761405037.720:435): avc: denied { write } for pid=3946 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.839596][ C1] hrtimer: interrupt took 64167 ns [ 34.920146][ T29] audit: type=1400 audit(1761405037.850:436): avc: denied { connect } for pid=3952 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.998129][ T29] audit: type=1400 audit(1761405037.870:437): avc: denied { read } for pid=3952 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.286423][ T3971] : renamed from vlan1 (while UP) [ 35.312457][ T29] audit: type=1400 audit(1761405038.240:438): avc: denied { create } for pid=3972 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.331915][ T29] audit: type=1400 audit(1761405038.240:439): avc: denied { setopt } for pid=3972 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.417177][ T29] audit: type=1326 audit(1761405038.330:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 35.440492][ T29] audit: type=1326 audit(1761405038.330:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 35.463760][ T29] audit: type=1326 audit(1761405038.330:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 35.487041][ T29] audit: type=1326 audit(1761405038.330:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 35.510429][ T29] audit: type=1326 audit(1761405038.330:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 35.608287][ T3983] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 35.718968][ T36] tipc: Node number set to 2886997007 [ 35.881249][ T4004] loop3: detected capacity change from 0 to 128 [ 35.901183][ T4004] capability: warning: `syz.3.211' uses deprecated v2 capabilities in a way that may be insecure [ 36.125298][ T4015] pimreg: entered allmulticast mode [ 36.137713][ T4015] pimreg: left allmulticast mode [ 36.237246][ T4024] loop2: detected capacity change from 0 to 128 [ 36.354616][ T4039] loop1: detected capacity change from 0 to 512 [ 36.377032][ T4039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.396677][ T4039] EXT4-fs (loop1): 1 truncate cleaned up [ 36.406526][ T4039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.440346][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.815901][ T4093] loop1: detected capacity change from 0 to 2048 [ 36.837085][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.851930][ T4093] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 36.901092][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.931448][ T4103] __nla_validate_parse: 1 callbacks suppressed [ 36.931463][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 36.946851][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 36.956170][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 36.966649][ T4109] program syz.2.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.993337][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 37.002510][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 37.011494][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 37.038579][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 37.047610][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 37.057024][ T4103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.252'. [ 37.098217][ T4124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 37.313852][ T4140] loop2: detected capacity change from 0 to 512 [ 37.334624][ T4140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.343837][ T4146] loop3: detected capacity change from 0 to 1024 [ 37.350849][ T4146] EXT4-fs: inline encryption not supported [ 37.356826][ T4146] EXT4-fs: Ignoring removed orlov option [ 37.362729][ T4140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.371535][ T4146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.373828][ T4140] EXT4-fs (loop2): 1 truncate cleaned up [ 37.390989][ T4140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.408584][ T4152] syz.1.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.435446][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.445212][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.501720][ T4165] ip6t_rpfilter: unknown options [ 37.554674][ T4175] loop4: detected capacity change from 0 to 512 [ 37.606837][ T4175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.629244][ T4175] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.689731][ T4194] loop2: detected capacity change from 0 to 512 [ 37.711136][ T4194] EXT4-fs: Mount option(s) incompatible with ext2 [ 37.727070][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.799144][ T4198] Falling back ldisc for ttyS3. [ 38.074733][ T4261] loop4: detected capacity change from 0 to 512 [ 38.105323][ T4261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.162163][ T4261] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.334395][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.877107][ T4345] tipc: Enabled bearer , priority 0 [ 38.887543][ T4345] tipc: Disabling bearer [ 38.981871][ T4359] vlan2: entered allmulticast mode [ 39.486641][ T4398] loop4: detected capacity change from 0 to 128 [ 39.493463][ T4398] EXT4-fs: Ignoring removed nobh option [ 39.508235][ T4398] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.524645][ T4398] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.548159][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.548502][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.565973][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.733395][ T4420] loop4: detected capacity change from 0 to 1024 [ 39.746044][ T4420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.938581][ T4437] netlink: 'syz.0.376': attribute type 3 has an invalid length. [ 39.957415][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.007121][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 40.007135][ T29] audit: type=1400 audit(1761405042.930:695): avc: denied { load_policy } for pid=4442 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.007664][ T4443] SELinux: ebitmap start bit (50331840) is beyond the end of the bitmap (1472) [ 40.042735][ T4443] SELinux: failed to load policy [ 40.072851][ T29] audit: type=1400 audit(1761405043.000:696): avc: denied { create } for pid=4446 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.196318][ T4465] loop9: detected capacity change from 0 to 7 [ 40.211416][ T4465] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.222449][ T4465] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.230357][ T4465] loop9: unable to read partition table [ 40.237605][ T4465] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 40.237605][ T4465] ) failed (rc=-5) [ 40.385755][ T4486] netlink: 'syz.4.385': attribute type 13 has an invalid length. [ 40.409977][ T29] audit: type=1400 audit(1761405043.340:697): avc: denied { write } for pid=4484 comm="syz.2.399" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.433167][ T29] audit: type=1400 audit(1761405043.340:698): avc: denied { open } for pid=4484 comm="syz.2.399" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.487500][ T4486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.495663][ T4486] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.500978][ T4495] syz.0.402: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 40.516790][ T4495] CPU: 0 UID: 0 PID: 4495 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.516815][ T4495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.516830][ T4495] Call Trace: [ 40.516835][ T4495] [ 40.516840][ T4495] __dump_stack+0x1d/0x30 [ 40.516855][ T4495] dump_stack_lvl+0xe8/0x140 [ 40.516943][ T4495] dump_stack+0x15/0x1b [ 40.516953][ T4495] warn_alloc+0x12b/0x1a0 [ 40.516994][ T4495] __vmalloc_node_range_noprof+0x9d/0xed0 [ 40.517048][ T4495] ? probe_sched_wakeup+0x85/0xa0 [ 40.517067][ T4495] ? ttwu_do_activate+0x1d0/0x210 [ 40.517095][ T4495] ? __rcu_read_unlock+0x4f/0x70 [ 40.517109][ T4495] ? avc_has_perm_noaudit+0x1b1/0x200 [ 40.517143][ T4495] vmalloc_user_noprof+0x7d/0xb0 [ 40.517162][ T4495] ? xskq_create+0x80/0xe0 [ 40.517174][ T4495] xskq_create+0x80/0xe0 [ 40.517186][ T4495] xsk_init_queue+0x95/0xf0 [ 40.517198][ T4495] xsk_setsockopt+0x477/0x640 [ 40.517221][ T4495] ? __pfx_xsk_setsockopt+0x10/0x10 [ 40.517232][ T4495] __sys_setsockopt+0x184/0x200 [ 40.517251][ T4495] __x64_sys_setsockopt+0x64/0x80 [ 40.517276][ T4495] x64_sys_call+0x20ec/0x3000 [ 40.517337][ T4495] do_syscall_64+0xd2/0x200 [ 40.517352][ T4495] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.517427][ T4495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.517440][ T4495] RIP: 0033:0x7ff777ecefc9 [ 40.517449][ T4495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.517459][ T4495] RSP: 002b:00007ff776937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 40.517471][ T4495] RAX: ffffffffffffffda RBX: 00007ff778125fa0 RCX: 00007ff777ecefc9 [ 40.517478][ T4495] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 40.517491][ T4495] RBP: 00007ff777f51f91 R08: 0000000000000004 R09: 0000000000000000 [ 40.517502][ T4495] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 40.517509][ T4495] R13: 00007ff778126038 R14: 00007ff778125fa0 R15: 00007ffd87a5ccd8 [ 40.517519][ T4495] [ 40.517527][ T4495] Mem-Info: [ 40.724611][ T4495] active_anon:10955 inactive_anon:4 isolated_anon:0 [ 40.724611][ T4495] active_file:8881 inactive_file:2248 isolated_file:0 [ 40.724611][ T4495] unevictable:0 dirty:1465 writeback:0 [ 40.724611][ T4495] slab_reclaimable:3141 slab_unreclaimable:27972 [ 40.724611][ T4495] mapped:31719 shmem:3030 pagetables:1051 [ 40.724611][ T4495] sec_pagetables:0 bounce:0 [ 40.724611][ T4495] kernel_misc_reclaimable:0 [ 40.724611][ T4495] free:1864257 free_pcp:18858 free_cma:0 [ 40.769704][ T4495] Node 0 active_anon:43820kB inactive_anon:16kB active_file:35524kB inactive_file:8992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126876kB dirty:5860kB writeback:0kB shmem:12120kB kernel_stack:3344kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 40.797172][ T4495] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 40.826752][ T4495] lowmem_reserve[]: 0 2881 7859 7859 [ 40.832076][ T4495] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 40.863466][ T4495] lowmem_reserve[]: 0 0 4978 4978 [ 40.868581][ T4495] Node 0 Normal free:4494924kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43820kB inactive_anon:16kB active_file:35524kB inactive_file:8992kB unevictable:0kB writepending:5840kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:71904kB local_pcp:34036kB free_cma:0kB [ 40.901743][ T4495] lowmem_reserve[]: 0 0 0 0 [ 40.906286][ T4495] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 40.919114][ T4495] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 40.935232][ T4495] Node 0 Normal: 7*4kB (UM) 6*8kB (UME) 0*16kB 30*32kB (UE) 5*64kB (UME) 4*128kB (UE) 5*256kB (UM) 5*512kB (UE) 10*1024kB (UM) 9*2048kB (UME) 1089*4096kB (M) = 4494924kB [ 40.952221][ T4495] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 40.961595][ T4495] 14155 total pagecache pages [ 40.966254][ T4495] 3 pages in swap cache [ 40.970407][ T4495] Free swap = 124980kB [ 40.974637][ T4495] Total swap = 124996kB [ 40.978778][ T4495] 2097051 pages RAM [ 40.982629][ T4495] 0 pages HighMem/MovableOnly [ 40.987298][ T4495] 81083 pages reserved [ 40.994353][ T4486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.042152][ T29] audit: type=1400 audit(1761405043.970:699): avc: denied { read write } for pid=4498 comm="syz.0.404" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.048214][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.065501][ T29] audit: type=1400 audit(1761405043.970:700): avc: denied { open } for pid=4498 comm="syz.0.404" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.072968][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.103498][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.110924][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.118301][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.125752][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.133179][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.140619][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.148078][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.155613][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.204958][ T3376] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 41.230874][ T29] audit: type=1400 audit(1761405044.150:701): avc: denied { getopt } for pid=4504 comm="syz.4.407" lport=39584 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 41.301497][ T4515] syzkaller1: entered promiscuous mode [ 41.307000][ T4515] syzkaller1: entered allmulticast mode [ 41.385830][ T29] audit: type=1400 audit(1761405044.310:702): avc: denied { ioctl } for pid=4520 comm="syz.0.414" path="socket:[8538]" dev="sockfs" ino=8538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.431329][ T29] audit: type=1326 audit(1761405044.360:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4528 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 41.457079][ T29] audit: type=1326 audit(1761405044.360:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4528 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1613eefc9 code=0x7ffc0000 [ 41.577727][ T4546] loop2: detected capacity change from 0 to 1024 [ 41.608655][ T4546] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 41.808525][ T4576] loop4: detected capacity change from 0 to 4096 [ 41.815688][ T4576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.831516][ T4576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.860118][ T4576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.902124][ T4589] loop4: detected capacity change from 0 to 512 [ 41.909820][ T4589] EXT4-fs: Ignoring removed i_version option [ 41.916018][ T4589] EXT4-fs: Ignoring removed bh option [ 41.947330][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.015976][ T4589] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.036947][ T4608] __nla_validate_parse: 13 callbacks suppressed [ 42.036985][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.052230][ T4608] netlink: 348 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.061257][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.070063][ T4608] netlink: 348 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.082550][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.129056][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.137995][ T4608] netlink: 348 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.146977][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.155871][ T4608] netlink: 348 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.171583][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 42.207080][ T4621] loop1: detected capacity change from 0 to 256 [ 42.214390][ T4621] FAT-fs (loop1): bogus number of FAT sectors [ 42.220492][ T4621] FAT-fs (loop1): Can't find a valid FAT filesystem [ 42.251170][ T4623] loop2: detected capacity change from 0 to 512 [ 42.269121][ T4623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.295607][ T4623] EXT4-fs (loop2): 1 truncate cleaned up [ 42.302425][ T4623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.341180][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.370694][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.384330][ T4633] SELinux: failed to load policy [ 42.432577][ T4643] SELinux: failed to load policy [ 42.452807][ T4650] netlink: 'syz.2.472': attribute type 12 has an invalid length. [ 42.501938][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4659 comm=syz.2.476 [ 42.514387][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4659 comm=syz.2.476 [ 42.558202][ T4665] loop1: detected capacity change from 0 to 512 [ 42.577414][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.592304][ T4665] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.612823][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.858156][ T4711] Zero length message leads to an empty skb [ 42.864815][ T4712] team0: Port device team_slave_1 removed [ 42.886414][ T4714] loop2: detected capacity change from 0 to 512 [ 42.905044][ T4714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.922287][ T4714] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.959838][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.064445][ T4744] loop2: detected capacity change from 0 to 128 [ 43.086574][ T4744] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.145604][ T4753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.183561][ T4753] loop2: detected capacity change from 0 to 512 [ 43.202581][ T4753] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 43.266314][ T4753] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.519: casefold flag without casefold feature [ 43.296646][ T4753] EXT4-fs (loop2): Remounting filesystem read-only [ 43.303719][ T4753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.360175][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.429111][ T4791] tipc: Started in network mode [ 43.434070][ T4791] tipc: Node identity ac14140f, cluster identity 4711 [ 43.452852][ T4791] tipc: New replicast peer: 255.255.255.83 [ 43.458732][ T4791] tipc: Enabled bearer , priority 10 [ 43.475571][ T4795] IPVS: stopping master sync thread 4797 ... [ 43.482608][ T4797] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 43.525351][ T4802] loop2: detected capacity change from 0 to 1024 [ 43.553869][ T4802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.569557][ T4802] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.539: Allocating blocks 497-513 which overlap fs metadata [ 43.594361][ T4802] EXT4-fs (loop2): pa ffff888107284000: logic 16, phys. 129, len 24 [ 43.602434][ T4802] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 43.615588][ T4815] loop3: detected capacity change from 0 to 256 [ 43.636104][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.930141][ T4840] syzkaller0: entered promiscuous mode [ 43.935682][ T4840] syzkaller0: entered allmulticast mode [ 44.040934][ T4852] loop2: detected capacity change from 0 to 512 [ 44.048416][ T4852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.084868][ T4852] EXT4-fs (loop2): 1 truncate cleaned up [ 44.091107][ T4852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.141747][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.158458][ T4860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4860 comm=syz.3.563 [ 44.243432][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.256695][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.265646][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.274598][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.490471][ T4882] loop2: detected capacity change from 0 to 512 [ 44.497514][ T4882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.510109][ T4882] EXT4-fs (loop2): 1 truncate cleaned up [ 44.516076][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.516889][ T4884] loop5: detected capacity change from 0 to 7 [ 44.564128][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.573336][ T3376] tipc: Node number set to 2886997007 [ 44.591243][ T48] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.600462][ T48] Buffer I/O error on dev loop5, logical block 0, async page read [ 44.608382][ T4884] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.617590][ T4884] Buffer I/O error on dev loop5, logical block 0, async page read [ 44.625549][ T4884] loop5: unable to read partition table [ 44.629778][ T4890] serio: Serial port ptm0 [ 44.632024][ T4884] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 44.715686][ T4902] loop1: detected capacity change from 0 to 512 [ 44.732823][ T4902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.745658][ T4902] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.792401][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.948921][ T4918] loop3: detected capacity change from 0 to 1024 [ 44.970244][ T4918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.994335][ T4918] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.589: Allocating blocks 449-513 which overlap fs metadata [ 45.014590][ T4917] EXT4-fs (loop3): pa ffff888107195000: logic 48, phys. 177, len 21 [ 45.022623][ T4917] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 45.043802][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.088248][ T4927] loop4: detected capacity change from 0 to 4096 [ 45.095462][ T4927] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 45.108955][ T4927] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 45.134822][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 45.134836][ T29] audit: type=1326 audit(1761405048.060:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.3.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x0 [ 45.190050][ T29] audit: type=1400 audit(1761405048.120:862): avc: denied { create } for pid=4935 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.210697][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8d8800: rx timeout, send abort [ 45.218920][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8d8200: rx timeout, send abort [ 45.224143][ T29] audit: type=1400 audit(1761405048.150:863): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.227142][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a8d8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.227182][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a8d8200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.249183][ T29] audit: type=1400 audit(1761405048.150:864): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.298956][ T29] audit: type=1400 audit(1761405048.150:865): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.320615][ T29] audit: type=1400 audit(1761405048.150:866): avc: denied { add_name } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.341313][ T29] audit: type=1400 audit(1761405048.150:867): avc: denied { create } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.343990][ T4940] netlink: 'syz.0.599': attribute type 5 has an invalid length. [ 45.361940][ T29] audit: type=1400 audit(1761405048.150:868): avc: denied { append open } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.361968][ T29] audit: type=1400 audit(1761405048.150:869): avc: denied { getattr } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.420481][ T4940] batman_adv: batadv0: Adding interface: vxlan0 [ 45.426783][ T4940] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.459101][ T4940] batman_adv: batadv0: Interface activated: vxlan0 [ 45.466714][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.477774][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.486871][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.496215][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.524923][ T4946] loop4: detected capacity change from 0 to 512 [ 45.554659][ T4946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.567790][ T4946] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.636314][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.736122][ T4963] loop1: detected capacity change from 0 to 512 [ 45.742649][ T4963] EXT4-fs: Ignoring removed orlov option [ 45.768642][ T4963] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.607: inode has both inline data and extents flags [ 45.782302][ T4963] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.607: couldn't read orphan inode 15 (err -117) [ 45.794929][ T4963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.890038][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.948644][ T4981] netlink: 'syz.1.615': attribute type 9 has an invalid length. [ 45.979060][ T29] audit: type=1400 audit(1761405048.900:870): avc: denied { watch } for pid=4982 comm="syz.3.616" path="/128/file0" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.023673][ T4990] loop3: detected capacity change from 0 to 128 [ 46.032009][ T4990] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.054782][ T4990] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.131722][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.480620][ T5024] pim6reg1: entered promiscuous mode [ 46.485958][ T5024] pim6reg1: entered allmulticast mode [ 46.878261][ T5045] loop2: detected capacity change from 0 to 512 [ 46.925511][ T5045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.939465][ T5045] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.968146][ T5045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.081273][ T5058] loop4: detected capacity change from 0 to 512 [ 47.087813][ T5058] EXT4-fs: Ignoring removed i_version option [ 47.093943][ T5058] EXT4-fs: Ignoring removed bh option [ 47.119047][ T5061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5061 comm=syz.2.648 [ 47.131535][ T5061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5061 comm=syz.2.648 [ 47.179211][ T5058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.193811][ T5058] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.212218][ T5073] loop2: detected capacity change from 0 to 512 [ 47.257126][ T5073] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.654: bad orphan inode 11862016 [ 47.284424][ T5073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.308422][ T5073] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.348299][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.388558][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.465344][ T5101] loop2: detected capacity change from 0 to 256 [ 47.473048][ T5101] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.488381][ T5098] vlan1: entered allmulticast mode [ 47.497424][ T5098] dummy0: entered allmulticast mode [ 47.505234][ T5101] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.581878][ T5110] SELinux: Context @ is not valid (left unmapped). [ 47.582485][ T5114] vlan2: entered allmulticast mode [ 47.653295][ T5120] pimreg: entered allmulticast mode [ 47.662380][ T5120] pimreg: left allmulticast mode [ 47.775992][ T5139] block device autoloading is deprecated and will be removed. [ 48.180973][ T5180] loop0: detected capacity change from 0 to 2048 [ 48.203148][ T5184] loop2: detected capacity change from 0 to 512 [ 48.210785][ T5180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.215168][ T5184] EXT4-fs: Ignoring removed nobh option [ 48.228397][ T5184] ext4: Unknown parameter 'noacl' [ 48.237779][ T5180] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 48.351445][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.358841][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.384354][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.480728][ T5200] loop2: detected capacity change from 0 to 1024 [ 48.503134][ T5200] EXT4-fs: Ignoring removed orlov option [ 48.514716][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.523605][ T5200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.531432][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.536862][ T5200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.648796][ T5194] ip6gre1: left promiscuous mode [ 48.654130][ T5194] ip6gre1: left allmulticast mode [ 48.684573][ T5195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.704799][ T5220] loop1: detected capacity change from 0 to 512 [ 48.714477][ T5224] loop0: detected capacity change from 0 to 128 [ 48.723448][ T5224] FAT-fs (loop0): bogus number of reserved sectors [ 48.730185][ T5224] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 48.730280][ T5220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.739765][ T5224] FAT-fs (loop0): Can't find a valid FAT filesystem [ 48.748127][ T5220] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.763640][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.783570][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.793363][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.803220][ T5220] EXT4-fs (loop1): 1 truncate cleaned up [ 48.809418][ T5220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.852464][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.865119][ T5234] __nla_validate_parse: 19 callbacks suppressed [ 48.865215][ T5234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.724'. [ 48.872464][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.960440][ T5253] loop4: detected capacity change from 0 to 128 [ 49.004446][ T5261] gretap1: entered promiscuous mode [ 49.039669][ T5254] Falling back ldisc for ttyS3. [ 49.045459][ T5265] program syz.0.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.296041][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 49.311717][ T5318] loop4: detected capacity change from 0 to 512 [ 49.353548][ T5322] loop1: detected capacity change from 0 to 256 [ 49.366953][ T5322] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.378106][ T5325] netlink: 116 bytes leftover after parsing attributes in process `syz.0.762'. [ 49.409530][ T5327] @: renamed from vlan0 (while UP) [ 49.529930][ T5341] tipc: Started in network mode [ 49.534843][ T5341] tipc: Node identity be33e817d33f, cluster identity 4711 [ 49.542069][ T5341] tipc: Enabled bearer , priority 0 [ 49.554660][ T5341] syzkaller0: MTU too low for tipc bearer [ 49.560566][ T5341] tipc: Disabling bearer [ 49.570845][ T5342] netlink: 96 bytes leftover after parsing attributes in process `+}[@'. [ 49.612712][ T5350] loop0: detected capacity change from 0 to 512 [ 49.619666][ T5350] EXT4-fs: Ignoring removed nobh option [ 49.625323][ T5350] ext4: Unknown parameter 'noacl' [ 49.732515][ T5372] loop0: detected capacity change from 0 to 512 [ 49.751576][ T5372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.764422][ T5372] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.814227][ T5382] loop4: detected capacity change from 0 to 512 [ 49.841253][ T5382] EXT4-fs: Ignoring removed nobh option [ 49.846862][ T5382] ext4: Unknown parameter 'noacl' [ 49.945683][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.997014][ T5403] loop4: detected capacity change from 0 to 1024 [ 50.003722][ T5403] EXT4-fs: Ignoring removed orlov option [ 50.011106][ T5403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.024071][ T5403] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.041863][ T5406] loop0: detected capacity change from 0 to 512 [ 50.055104][ T5408] loop4: detected capacity change from 0 to 164 [ 50.060369][ T5406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.074139][ T5406] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.078973][ T5408] syz.4.801: attempt to access beyond end of device [ 50.078973][ T5408] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.098652][ T5408] syz.4.801: attempt to access beyond end of device [ 50.098652][ T5408] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.108222][ T5406] syz.0.800 (5406) used greatest stack depth: 10064 bytes left [ 50.121209][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.254478][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 50.254491][ T29] audit: type=1326 audit(1761405053.180:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.284271][ T29] audit: type=1326 audit(1761405053.180:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.307681][ T29] audit: type=1326 audit(1761405053.180:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.331381][ T29] audit: type=1326 audit(1761405053.180:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.354728][ T29] audit: type=1326 audit(1761405053.180:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.378179][ T29] audit: type=1326 audit(1761405053.180:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.401876][ T29] audit: type=1326 audit(1761405053.180:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.425208][ T29] audit: type=1326 audit(1761405053.180:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.448513][ T29] audit: type=1326 audit(1761405053.180:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.472168][ T29] audit: type=1326 audit(1761405053.180:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 50.500719][ T5426] loop4: detected capacity change from 0 to 128 [ 50.507829][ T5426] FAT-fs (loop4): bogus number of reserved sectors [ 50.514411][ T5426] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 50.523795][ T5426] FAT-fs (loop4): Can't find a valid FAT filesystem [ 50.589037][ T5433] syzkaller0: entered promiscuous mode [ 50.594565][ T5433] syzkaller0: entered allmulticast mode [ 50.837816][ T5466] loop1: detected capacity change from 0 to 2048 [ 50.901491][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.906054][ T5480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.918333][ T5466] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.991483][ T5488] loop4: detected capacity change from 0 to 512 [ 50.998638][ T5488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.022881][ T5488] EXT4-fs (loop4): 1 truncate cleaned up [ 51.029362][ T5488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.159692][ T5504] sg_write: data in/out 124/1 bytes for SCSI command 0xdf-- guessing data in; [ 51.159692][ T5504] program syz.4.843 not setting count and/or reply_len properly [ 51.307448][ T68] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 51.379045][ T68] EXT4-fs (loop1): Remounting filesystem read-only [ 51.385881][ T52] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 51.451381][ T5517] tipc: Started in network mode [ 51.456306][ T5517] tipc: Node identity f20882e4d1cc, cluster identity 4711 [ 51.463562][ T5517] tipc: Enabled bearer , priority 0 [ 51.496591][ T5517] syzkaller0: MTU too low for tipc bearer [ 51.502386][ T5517] tipc: Disabling bearer [ 51.612098][ T5529] netlink: 96 bytes leftover after parsing attributes in process `syz.0.852'. [ 51.983467][ T5560] syzkaller0: entered promiscuous mode [ 51.989173][ T5560] syzkaller0: entered allmulticast mode [ 52.015327][ T5564] sg_write: data in/out 124/1 bytes for SCSI command 0xdf-- guessing data in; [ 52.015327][ T5564] program syz.2.867 not setting count and/or reply_len properly [ 52.115795][ T5568] loop2: detected capacity change from 0 to 1024 [ 52.219435][ T5572] tipc: Started in network mode [ 52.224321][ T5572] tipc: Node identity 62358fb53e96, cluster identity 4711 [ 52.231499][ T5572] tipc: Enabled bearer , priority 0 [ 52.260715][ T5572] syzkaller0: MTU too low for tipc bearer [ 52.266571][ T5572] tipc: Disabling bearer [ 52.276312][ T5568] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.868: Allocating blocks 497-513 which overlap fs metadata [ 52.310157][ T5568] EXT4-fs (loop2): pa ffff888107195000: logic 16, phys. 129, len 24 [ 52.318188][ T5568] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 52.528957][ T5593] netlink: 96 bytes leftover after parsing attributes in process `syz.0.880'. [ 52.970036][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 53.378296][ T5638] loop0: detected capacity change from 0 to 2048 [ 53.379229][ T5640] loop2: detected capacity change from 0 to 2048 [ 53.400305][ T5638] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.411941][ T5640] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.489040][ T5646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.900: bg 0: block 345: padding at end of block bitmap is not set [ 53.559159][ T5646] EXT4-fs (loop2): Remounting filesystem read-only [ 53.613655][ T270] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 53.688926][ T270] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 53.713699][ T270] EXT4-fs (loop0): Remounting filesystem read-only [ 53.720488][ T31] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 53.830767][ T5655] vlan2: entered allmulticast mode [ 53.836039][ T5655] dummy0: entered allmulticast mode [ 54.106627][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 54.199907][ T5689] netlink: 'syz.4.920': attribute type 12 has an invalid length. [ 54.433693][ T5705] netlink: 'syz.4.926': attribute type 7 has an invalid length. [ 54.441474][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 54.579138][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.586354][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.635997][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.647703][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.689547][ T5717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.700793][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.709808][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.718742][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.084272][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 55.230405][ T5759] loop0: detected capacity change from 0 to 2048 [ 55.240515][ T5759] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.314366][ T5765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.950: bg 0: block 345: padding at end of block bitmap is not set [ 55.329558][ T5765] EXT4-fs (loop0): Remounting filesystem read-only [ 55.336223][ T270] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 55.988267][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 55.988281][ T29] audit: type=1326 audit(1761405058.910:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.019457][ T29] audit: type=1326 audit(1761405058.910:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.043389][ T29] audit: type=1326 audit(1761405058.920:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.066968][ T29] audit: type=1326 audit(1761405058.920:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.090285][ T29] audit: type=1326 audit(1761405058.920:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.113702][ T29] audit: type=1326 audit(1761405058.920:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.137035][ T29] audit: type=1326 audit(1761405058.920:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.160515][ T29] audit: type=1326 audit(1761405058.920:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.184180][ T29] audit: type=1326 audit(1761405058.920:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.207565][ T29] audit: type=1326 audit(1761405058.920:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ec0efc9 code=0x7ffc0000 [ 56.233603][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 56.294034][ T5789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5789 comm=syz.0.960 [ 56.306483][ T5789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5789 comm=syz.0.960 [ 56.708546][ T5829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5829 comm=syz.3.977 [ 56.721114][ T5829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5829 comm=syz.3.977 [ 56.743977][ T5834] loop0: detected capacity change from 0 to 256 [ 56.758106][ T5832] syzkaller0: entered promiscuous mode [ 56.763719][ T5832] syzkaller0: entered allmulticast mode [ 56.786906][ T5836] geneve2: entered promiscuous mode [ 56.792178][ T5836] geneve2: entered allmulticast mode [ 56.890468][ T5846] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 56.890468][ T5846] program syz.3.988 not setting count and/or reply_len properly [ 57.015006][ T5855] loop5: detected capacity change from 0 to 7 [ 57.066125][ T327] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.075299][ T327] Buffer I/O error on dev loop5, logical block 0, async page read [ 57.083592][ T5855] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.092795][ T5855] Buffer I/O error on dev loop5, logical block 0, async page read [ 57.100718][ T5855] loop5: unable to read partition table [ 57.114947][ T5855] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 57.343576][ T5876] loop4: detected capacity change from 0 to 512 [ 57.351602][ T5876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.370240][ T5876] EXT4-fs (loop4): 1 truncate cleaned up [ 57.402366][ T5884] loop4: detected capacity change from 0 to 512 [ 57.421063][ T5884] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.568387][ T5898] pim6reg: entered allmulticast mode [ 57.582075][ T5898] pim6reg: left allmulticast mode [ 58.119815][ T5907] loop5: detected capacity change from 0 to 7 [ 58.159841][ T5910] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 58.174153][ T48] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.183684][ T48] Buffer I/O error on dev loop5, logical block 0, async page read [ 58.192307][ T5907] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.201666][ T5907] Buffer I/O error on dev loop5, logical block 0, async page read [ 58.209676][ T5907] loop5: unable to read partition table [ 58.231177][ T5907] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 58.294014][ T5926] loop1: detected capacity change from 0 to 1024 [ 58.303825][ T5931] geneve2: entered promiscuous mode [ 58.309101][ T5931] geneve2: entered allmulticast mode [ 58.321753][ T5926] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 58.334142][ T5926] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.334142][ T5926] [ 58.334159][ T5926] EXT4-fs (loop1): Total free blocks count 0 [ 58.334172][ T5926] EXT4-fs (loop1): Free/Dirty block details [ 58.334183][ T5926] EXT4-fs (loop1): free_blocks=0 [ 58.360729][ T5926] EXT4-fs (loop1): dirty_blocks=0 [ 58.360746][ T5926] EXT4-fs (loop1): Block reservation details [ 58.360827][ T5926] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 58.448754][ T5945] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 58.476419][ T5948] loop0: detected capacity change from 0 to 1024 [ 58.483422][ T5948] EXT4-fs (loop0): filesystem is read-only [ 58.490091][ T5948] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 58.501430][ T5948] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.518949][ T5948] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.1028: inode #1: comm syz.0.1028: iget: illegal inode # [ 58.537750][ T5948] EXT4-fs (loop0): no journal found [ 58.543072][ T5948] EXT4-fs (loop0): can't get journal size [ 58.555626][ T5962] loop5: detected capacity change from 0 to 7 [ 58.571711][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 58.581101][ T5948] EXT4-fs (loop0): failed to initialize system zone (-22) [ 58.588306][ T5948] EXT4-fs (loop0): mount failed [ 58.615900][ T327] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.625134][ T327] Buffer I/O error on dev loop5, logical block 0, async page read [ 58.635451][ T5962] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.644728][ T5962] Buffer I/O error on dev loop5, logical block 0, async page read [ 58.652598][ T5962] loop5: unable to read partition table [ 58.658965][ T5962] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 58.822085][ T5987] loop0: detected capacity change from 0 to 1024 [ 58.833560][ T5987] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.844522][ T5987] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.857247][ T5987] JBD2: no valid journal superblock found [ 58.863082][ T5987] EXT4-fs (loop0): Could not load journal inode [ 58.869642][ T5974] loop1: detected capacity change from 0 to 512 [ 59.054783][ T6023] loop3: detected capacity change from 0 to 1024 [ 59.061884][ T6023] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.072796][ T6023] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.083223][ T6023] JBD2: no valid journal superblock found [ 59.088983][ T6023] EXT4-fs (loop3): Could not load journal inode [ 59.123452][ T6029] loop0: detected capacity change from 0 to 512 [ 59.152097][ T6029] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.375988][ T6033] loop3: detected capacity change from 0 to 512 [ 60.412117][ T6085] pimreg: entered allmulticast mode [ 60.429059][ T6085] pimreg: left allmulticast mode [ 60.820873][ T6104] vlan2: entered allmulticast mode [ 60.826718][ T6104] dummy0: entered allmulticast mode [ 61.013355][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 61.013370][ T29] audit: type=1326 audit(1761405063.940:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.118942][ T29] audit: type=1326 audit(1761405064.040:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.142402][ T29] audit: type=1326 audit(1761405064.040:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.165863][ T29] audit: type=1326 audit(1761405064.040:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.199171][ T29] audit: type=1326 audit(1761405064.040:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.222917][ T29] audit: type=1326 audit(1761405064.120:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.246473][ T29] audit: type=1326 audit(1761405064.120:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.270045][ T29] audit: type=1326 audit(1761405064.120:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.293487][ T29] audit: type=1326 audit(1761405064.120:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff777ecd810 code=0x7ffc0000 [ 61.317665][ T29] audit: type=1326 audit(1761405064.230:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777ecefc9 code=0x7ffc0000 [ 61.387076][ T6137] loop3: detected capacity change from 0 to 128 [ 61.434342][ T6139] pim6reg1: entered promiscuous mode [ 61.439740][ T6139] pim6reg1: entered allmulticast mode [ 61.459498][ T6143] program syz.3.1107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.500943][ T6145] vlan2: entered allmulticast mode [ 61.506081][ T6145] dummy0: entered allmulticast mode [ 61.543383][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 61.641128][ T6162] loop3: detected capacity change from 0 to 512 [ 61.654411][ T6162] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.792740][ T6168] netlink: 'syz.3.1118': attribute type 5 has an invalid length. [ 61.822089][ T6168] batman_adv: batadv0: Adding interface: vxlan0 [ 61.828359][ T6168] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.880765][ T6168] batman_adv: batadv0: Interface activated: vxlan0 [ 61.887498][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.898898][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.927394][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.943492][ T6177] program syz.0.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.947886][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.115657][ T6184] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 62.148594][ T6188] ip6t_rpfilter: unknown options [ 62.225977][ T6194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6194 comm=syz.4.1128 [ 62.238502][ T6194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6194 comm=syz.4.1128 [ 62.416648][ T6200] netlink: 'syz.2.1132': attribute type 5 has an invalid length. [ 62.437648][ T6200] batman_adv: batadv0: Adding interface: vxlan0 [ 62.443943][ T6200] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.488897][ T6200] batman_adv: batadv0: Interface activated: vxlan0 [ 62.499169][ T270] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.507532][ T270] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.529070][ T270] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.537277][ T270] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.698887][ T6216] loop1: detected capacity change from 0 to 512 [ 62.706347][ T6216] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.713362][ T6216] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1139: EA inode hash validation failed [ 62.726078][ T6216] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.739318][ T6216] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.1139: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 62.754666][ T6216] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1226: inode #11: comm syz.1.1139: ea_inode dec ref err=-117 [ 62.767671][ T6216] EXT4-fs (loop1): 1 orphan inode deleted [ 62.921534][ T270] Bluetooth: hci1: Frame reassembly failed (-84) [ 62.944645][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 62.955543][ T6229] ip6gre1: entered promiscuous mode [ 63.455987][ T6236] loop1: detected capacity change from 0 to 512 [ 63.494595][ T6236] EXT4-fs: Ignoring removed i_version option [ 63.500666][ T6236] EXT4-fs: Ignoring removed bh option [ 63.543196][ T6236] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.655163][ T6245] serio: Serial port ptm2 [ 63.685443][ T6247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=535 sclass=netlink_route_socket pid=6247 comm=syz.4.1149 [ 64.649315][ T6276] netlink: 'syz.1.1158': attribute type 7 has an invalid length. [ 64.657086][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 64.706009][ T6281] tipc: Enabling of bearer rejected, failed to enable media [ 64.758982][ T3837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.998900][ T6217] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 64.999237][ T3837] Bluetooth: hci1: command 0x1003 tx timeout [ 65.061754][ T6313] loop1: detected capacity change from 0 to 512 [ 65.090317][ T6313] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.103745][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1173: corrupted inode contents [ 65.115885][ T6313] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.1173: mark_inode_dirty error [ 65.127630][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1173: corrupted inode contents [ 65.139810][ T6313] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1173: mark_inode_dirty error [ 65.171466][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 65.244292][ T6335] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 65.255083][ T6335] team0: Port device dummy0 added [ 65.263534][ T6335] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 65.272018][ T6335] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.282332][ T6335] team0: Failed to send options change via netlink (err -105) [ 65.290101][ T6335] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.299166][ T6335] team0: Port device dummy0 removed [ 65.306311][ T6335] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.326438][ T6335] syz.1.1181 (6335) used greatest stack depth: 9936 bytes left [ 65.346713][ T6342] bond_slave_1: mtu less than device minimum [ 65.357051][ T6344] netlink: 'syz.1.1185': attribute type 12 has an invalid length. [ 65.386649][ T6348] netlink: 'syz.0.1187': attribute type 7 has an invalid length. [ 65.394612][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 65.400640][ T6350] loop1: detected capacity change from 0 to 512 [ 65.410499][ T6350] EXT4-fs: Ignoring removed orlov option [ 65.419100][ T6350] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 65.428554][ T6350] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1188: corrupted in-inode xattr: e_value size too large [ 65.442925][ T6350] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1188: couldn't read orphan inode 15 (err -117) [ 65.552946][ T6368] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 65.564649][ T6368] team0: Port device dummy0 added [ 65.571712][ T6368] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 65.581412][ T6368] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.593586][ T6368] team0: Failed to send options change via netlink (err -105) [ 65.601269][ T6368] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.610281][ T6368] team0: Port device dummy0 removed [ 65.616863][ T6368] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.625676][ T6370] netlink: 'syz.4.1197': attribute type 12 has an invalid length. [ 65.715335][ T6386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6386 comm=syz.0.1204 [ 65.903000][ T6411] can0: slcan on ttyS3. [ 65.958978][ T6411] can0 (unregistered): slcan off ttyS3. [ 66.074439][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 66.074452][ T29] audit: type=1400 audit(1761405069.000:1576): avc: denied { mount } for pid=6426 comm="syz.3.1220" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.110346][ T29] audit: type=1400 audit(1761405069.030:1577): avc: denied { read } for pid=6426 comm="syz.3.1220" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.133632][ T29] audit: type=1400 audit(1761405069.030:1578): avc: denied { open } for pid=6426 comm="syz.3.1220" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.140168][ T6433] syzkaller1: entered promiscuous mode [ 66.157480][ T29] audit: type=1400 audit(1761405069.040:1579): avc: denied { ioctl } for pid=6426 comm="syz.3.1220" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.162885][ T6433] syzkaller1: entered allmulticast mode [ 66.194538][ T29] audit: type=1400 audit(1761405069.040:1580): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.223087][ T29] audit: type=1400 audit(1761405069.150:1581): avc: denied { create } for pid=6428 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.244077][ T29] audit: type=1400 audit(1761405069.160:1582): avc: denied { create } for pid=6435 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.263935][ T29] audit: type=1400 audit(1761405069.170:1583): avc: denied { sys_admin } for pid=6435 comm="syz.3.1223" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.284936][ T29] audit: type=1400 audit(1761405069.170:1584): avc: denied { write } for pid=6428 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.399292][ T29] audit: type=1400 audit(1761405069.330:1585): avc: denied { create } for pid=6452 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.428339][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.435656][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.494176][ T6462] loop3: detected capacity change from 0 to 512 [ 66.544379][ T6462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.571969][ T6446] wg2: left promiscuous mode [ 66.576595][ T6446] wg2: left allmulticast mode [ 66.591671][ T6462] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.605901][ T6466] loop1: detected capacity change from 0 to 4096 [ 66.615653][ T6466] EXT4-fs mount: 32 callbacks suppressed [ 66.615668][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.657421][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.678007][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.717461][ T6462] EXT4-fs (loop3): 1 truncate cleaned up [ 66.723684][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.754948][ T6446] batman_adv: batadv0: Interface deactivated: vxlan0 [ 66.778582][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1228'. [ 66.800669][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.819833][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.830112][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.846359][ T6454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.865471][ T31] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.874384][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.904046][ T31] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.913046][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.963705][ T31] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.972665][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.007616][ T31] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.016664][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.054036][ T6481] validate_nla: 1 callbacks suppressed [ 67.054052][ T6481] netlink: 'syz.0.1241': attribute type 12 has an invalid length. [ 67.200869][ T6494] loop1: detected capacity change from 0 to 512 [ 67.274238][ T6494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.405237][ T6494] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1243: bg 0: block 384: padding at end of block bitmap is not set [ 67.434235][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.445768][ T6494] EXT4-fs (loop1): Remounting filesystem read-only [ 67.463548][ T6494] EXT4-fs (loop1): 1 truncate cleaned up [ 67.473986][ T6494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.047496][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.213656][ T6669] loop2: detected capacity change from 0 to 256 [ 68.220893][ T6670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.428980][ T6687] loop1: detected capacity change from 0 to 512 [ 68.447625][ T6687] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1277: error while reading EA inode 32 err=-116 [ 68.469225][ T6687] EXT4-fs (loop1): Remounting filesystem read-only [ 68.477414][ T6687] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 68.487841][ T6687] EXT4-fs (loop1): 1 orphan inode deleted [ 68.499300][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.559604][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.605897][ T6711] xt_connbytes: Forcing CT accounting to be enabled [ 68.620402][ T6711] set match dimension is over the limit! [ 68.746389][ T6722] v: renamed from ip6_vti0 (while UP) [ 68.765291][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 68.790583][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 68.946100][ T6743] loop1: detected capacity change from 0 to 1024 [ 68.952734][ T6743] EXT4-fs: Ignoring removed orlov option [ 68.960706][ T6743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.150357][ T6755] loop2: detected capacity change from 0 to 512 [ 69.159856][ T6755] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.1304: corrupted xattr block 95: invalid header [ 69.173980][ T6755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1304: bg 0: block 7: invalid block bitmap [ 69.187029][ T6755] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 69.197520][ T6755] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.1304: corrupted xattr block 95: invalid header [ 69.212028][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.221178][ T6755] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 69.230659][ T6755] EXT4-fs (loop2): 1 orphan inode deleted [ 69.236727][ T6755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.266265][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.380689][ T6781] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 69.430504][ T6786] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.988654][ T6799] loop3: detected capacity change from 0 to 256 [ 70.123243][ T6617] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.400470][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 70.480265][ T6827] team1: entered promiscuous mode [ 70.485386][ T6827] team1: entered allmulticast mode [ 70.495293][ T6827] 8021q: adding VLAN 0 to HW filter on device team1 [ 70.559846][ T6841] netlink: 'syz.0.1341': attribute type 9 has an invalid length. [ 70.567617][ T6841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1341'. [ 70.834514][ T6879] xt_connbytes: Forcing CT accounting to be enabled [ 70.841733][ T6879] set match dimension is over the limit! [ 70.946409][ T6894] loop2: detected capacity change from 0 to 1024 [ 70.953245][ T6894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.970393][ T6894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.068290][ T6888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.136256][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 71.136271][ T29] audit: type=1326 audit(1761405074.060:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.166545][ T29] audit: type=1326 audit(1761405074.060:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.190036][ T29] audit: type=1326 audit(1761405074.060:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.213438][ T29] audit: type=1326 audit(1761405074.060:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.236852][ T29] audit: type=1326 audit(1761405074.060:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.260283][ T29] audit: type=1326 audit(1761405074.060:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.283718][ T29] audit: type=1326 audit(1761405074.060:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.308085][ T29] audit: type=1326 audit(1761405074.060:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.331628][ T29] audit: type=1326 audit(1761405074.060:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.355026][ T29] audit: type=1326 audit(1761405074.060:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c3bbefc9 code=0x7ffc0000 [ 71.794075][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.814098][ T6912] bridge_slave_0: left promiscuous mode [ 71.819965][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.828245][ T6912] bridge_slave_1: left allmulticast mode [ 71.833921][ T6912] bridge_slave_1: left promiscuous mode [ 71.839595][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.848045][ T6912] bond0: (slave bond_slave_0): Releasing backup interface [ 71.856191][ T6912] bond0: (slave bond_slave_1): Releasing backup interface [ 71.864546][ T6912] team0: Port device team_slave_0 removed [ 71.865300][ T6913] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 71.878185][ T6913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1368'. [ 71.888001][ T6912] team0: Port device team_slave_1 removed [ 71.894077][ T6912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.901787][ T6912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.909409][ T6912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.935529][ T6913] veth1_vlan: left promiscuous mode [ 71.957067][ T6913] batman_adv: batadv0: Adding interface: veth1_vlan [ 71.963789][ T6913] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.996132][ T6913] batman_adv: batadv0: Interface activated: veth1_vlan [ 72.118360][ T6924] tipc: Enabled bearer , priority 0 [ 72.129205][ T6923] tipc: Resetting bearer [ 72.155811][ T6923] tipc: Disabling bearer [ 72.199221][ T6217] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.245852][ T6944] loop3: detected capacity change from 0 to 1024 [ 72.270949][ T6944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.314743][ T6944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.334500][ T6955] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 72.349787][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.366887][ T6955] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.378180][ T6955] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 72.386079][ T6955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1383'. [ 72.395523][ T6955] batadv0: entered promiscuous mode [ 72.400792][ T6955] batadv0: entered allmulticast mode [ 72.407013][ T6955] bond0: (slave batadv0): Releasing backup interface [ 72.419861][ T6955] bridge0: port 1(batadv0) entered blocking state [ 72.426310][ T6955] bridge0: port 1(batadv0) entered disabled state [ 72.655869][ T6977] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 72.663769][ T6977] netlink: 'syz.0.1391': attribute type 4 has an invalid length. [ 72.674101][ T6977] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1391'. [ 72.684322][ T6977] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 72.692179][ T6977] netlink: 'syz.0.1391': attribute type 4 has an invalid length. [ 72.700042][ T6977] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1391'. [ 72.700090][ T68] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 72.718521][ T68] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 72.756587][ T6983] loop2: detected capacity change from 0 to 1024 [ 72.763532][ T6983] EXT4-fs: Ignoring removed orlov option [ 72.772929][ T6985] wg2: entered promiscuous mode [ 72.773967][ T6983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.777924][ T6985] wg2: entered allmulticast mode [ 72.820314][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 72.892792][ T6990] tipc: Enabled bearer , priority 0 [ 72.900404][ T6989] tipc: Resetting bearer [ 72.916059][ T6989] tipc: Disabling bearer [ 72.996194][ T6997] loop1: detected capacity change from 0 to 128 [ 73.047475][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.085826][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.198726][ T7062] loop2: detected capacity change from 0 to 2048 [ 73.229001][ T7064] tipc: Enabled bearer , priority 0 [ 73.238186][ T7063] tipc: Resetting bearer [ 73.251958][ T7063] tipc: Disabling bearer [ 73.300236][ T7062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.434477][ T7076] loop1: detected capacity change from 0 to 512 [ 73.444330][ T7076] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.490922][ T7076] EXT4-fs (loop1): 1 truncate cleaned up [ 73.526730][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.536322][ T7076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.738606][ T7085] loop2: detected capacity change from 0 to 128 [ 73.855087][ T7091] netlink: 'syz.2.1417': attribute type 12 has an invalid length. [ 73.912140][ T7094] geneve2: entered promiscuous mode [ 73.917381][ T7094] geneve2: entered allmulticast mode [ 74.219523][ T7106] SELinux: failed to load policy [ 74.239822][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.671592][ T7130] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 74.679408][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1435'. [ 74.770662][ T7141] lo: entered allmulticast mode [ 74.785918][ T7141] pimreg: entered allmulticast mode [ 74.797575][ T7140] lo: left allmulticast mode [ 74.803050][ T7140] pimreg: left allmulticast mode [ 74.886909][ T7151] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 74.958738][ T7162] loop2: detected capacity change from 0 to 256 [ 75.014766][ T7172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1452'. [ 75.029686][ T7175] loop1: detected capacity change from 0 to 512 [ 75.037051][ T7175] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.039623][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 75.056074][ T7172] bridge_slave_1: left allmulticast mode [ 75.061868][ T7172] bridge_slave_1: left promiscuous mode [ 75.067650][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.075339][ T7172] bridge_slave_0: left allmulticast mode [ 75.080604][ T7175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.080998][ T7172] bridge_slave_0: left promiscuous mode [ 75.099428][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.108731][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.525954][ T7199] SELinux: failed to load policy [ 75.599827][ T7205] loop3: detected capacity change from 0 to 512 [ 75.610259][ T7205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.622925][ T7205] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.651604][ T3311] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 75.664902][ T3311] EXT4-fs (loop3): Remounting filesystem read-only [ 75.674097][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.683177][ T7041] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.694112][ T7041] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.768426][ T7211] team0: Port device team_slave_0 removed [ 75.899329][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1468'. [ 76.016842][ T7228] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 76.025143][ T7228] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1472'. [ 76.307024][ T29] kauditd_printk_skb: 700 callbacks suppressed [ 76.307038][ T29] audit: type=1400 audit(1761405079.230:2507): avc: denied { open } for pid=7236 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.332567][ T29] audit: type=1400 audit(1761405079.230:2508): avc: denied { kernel } for pid=7236 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.357046][ T29] audit: type=1400 audit(1761405079.290:2509): avc: denied { write } for pid=7236 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.390653][ T29] audit: type=1400 audit(1761405079.320:2510): avc: denied { block_suspend } for pid=7242 comm="syz.0.1477" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.434212][ T7246] binfmt_misc: register: failed to install interpreter file ./file0 [ 76.444207][ T29] audit: type=1400 audit(1761405079.370:2511): avc: denied { mounton } for pid=7244 comm="syz.4.1478" path="/323/bus" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.505532][ T29] audit: type=1400 audit(1761405079.430:2512): avc: denied { create } for pid=7251 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.533515][ T29] audit: type=1400 audit(1761405079.460:2513): avc: denied { create } for pid=7251 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.553261][ T29] audit: type=1400 audit(1761405079.460:2514): avc: denied { ioctl } for pid=7251 comm="syz.4.1480" path="socket:[16327]" dev="sockfs" ino=16327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.579194][ T7252] team0: Port device team_slave_1 removed [ 76.703030][ T7209] syz.3.1464 (7209) used greatest stack depth: 6184 bytes left [ 76.725091][ T7258] loop3: detected capacity change from 0 to 1024 [ 76.732163][ T7258] EXT4-fs: Ignoring removed orlov option [ 76.741216][ T7258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.757230][ T29] audit: type=1400 audit(1761405079.690:2515): avc: denied { read } for pid=7257 comm="syz.3.1482" path="/280/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.853681][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.917606][ T29] audit: type=1400 audit(1761405079.840:2516): avc: denied { bind } for pid=7264 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.163567][ T7278] loop3: detected capacity change from 0 to 1024 [ 77.174353][ T7278] EXT4-fs: Ignoring removed orlov option [ 77.183910][ T7278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.249625][ T7288] tipc: Enabled bearer , priority 0 [ 77.261354][ T7288] tipc: Disabling bearer [ 77.397181][ T7278] ================================================================== [ 77.405304][ T7278] BUG: KCSAN: data-race in filemap_read / filemap_read [ 77.412171][ T7278] [ 77.414482][ T7278] read to 0xffff88811f80e168 of 8 bytes by task 7289 on cpu 0: [ 77.422010][ T7278] filemap_read+0x6f/0xa00 [ 77.426425][ T7278] generic_file_read_iter+0x79/0x330 [ 77.431797][ T7278] ext4_file_read_iter+0x1cc/0x290 [ 77.436899][ T7278] copy_splice_read+0x442/0x660 [ 77.441740][ T7278] splice_direct_to_actor+0x290/0x680 [ 77.447104][ T7278] do_splice_direct+0xda/0x150 [ 77.451861][ T7278] do_sendfile+0x380/0x650 [ 77.456279][ T7278] __x64_sys_sendfile64+0x105/0x150 [ 77.461485][ T7278] x64_sys_call+0x2bb4/0x3000 [ 77.466154][ T7278] do_syscall_64+0xd2/0x200 [ 77.470643][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.476547][ T7278] [ 77.478859][ T7278] write to 0xffff88811f80e168 of 8 bytes by task 7278 on cpu 1: [ 77.486483][ T7278] filemap_read+0x974/0xa00 [ 77.490999][ T7278] generic_file_read_iter+0x79/0x330 [ 77.496293][ T7278] ext4_file_read_iter+0x1cc/0x290 [ 77.501513][ T7278] copy_splice_read+0x442/0x660 [ 77.506392][ T7278] splice_direct_to_actor+0x290/0x680 [ 77.511770][ T7278] do_splice_direct+0xda/0x150 [ 77.516529][ T7278] do_sendfile+0x380/0x650 [ 77.520946][ T7278] __x64_sys_sendfile64+0x105/0x150 [ 77.526149][ T7278] x64_sys_call+0x2bb4/0x3000 [ 77.530830][ T7278] do_syscall_64+0xd2/0x200 [ 77.535347][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.541251][ T7278] [ 77.543564][ T7278] value changed: 0x000000000000033d -> 0x000000000000033e [ 77.550651][ T7278] [ 77.552958][ T7278] Reported by Kernel Concurrency Sanitizer on: [ 77.559094][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.3.1493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.568908][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.578962][ T7278] ================================================================== [ 77.649912][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.358931][ T6217] Bluetooth: hci0: Opcode 0x1003 failed: -110