last executing test programs: 3.23862668s ago: executing program 3 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x4, 0x9fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0xfffffffc, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x3, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x735, 0x0, 0x1, 0x1a2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 3.192309811s ago: executing program 3 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x8001}, {0x7, 0x9423, 0x7, 0x8}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0xd8f}, {0x7fffffff, 0x2, 0x40, 0x800000}}}]}]}]}}]}, 0x7c}}, 0x0) 3.089896493s ago: executing program 3 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x100000000000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2.994061805s ago: executing program 3 (id=346): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2.71855592s ago: executing program 3 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 2.305526247s ago: executing program 2 (id=360): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x2e, 0x0, 0x0) 2.299151428s ago: executing program 2 (id=361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0x23b, &(0x7f0000000400)={0x0, 0x0, 0x10100, 0xfffffffd}, &(0x7f0000000000), &(0x7f00000001c0)) 2.236313639s ago: executing program 2 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 2.027765143s ago: executing program 3 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000100)="080000000200040000071a806d8b3ad8", 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.027550463s ago: executing program 32 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000100)="080000000200040000071a806d8b3ad8", 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.972792284s ago: executing program 2 (id=369): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.818019327s ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='memory.events\x00') 1.361784785s ago: executing program 4 (id=381): r0 = syz_io_uring_setup(0x6c5e, &(0x7f0000000000)={0x0, 0xa01c, 0x800, 0x3, 0x53}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4, 0x0, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 1.337408966s ago: executing program 2 (id=382): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 1.298811477s ago: executing program 33 (id=382): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 1.231974688s ago: executing program 4 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 1.200043698s ago: executing program 4 (id=387): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.029702861s ago: executing program 4 (id=389): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 680.736408ms ago: executing program 4 (id=390): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x19ffe, 0x4000, 0x0, 0xfffffffffffffe00) 442.743082ms ago: executing program 0 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 291.150355ms ago: executing program 4 (id=396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xf1, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 290.969995ms ago: executing program 34 (id=396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xf1, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 290.712685ms ago: executing program 0 (id=399): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xa55c}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0) 277.130476ms ago: executing program 1 (id=400): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) 200.868877ms ago: executing program 0 (id=401): write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8, "23e3c4", "ff1801f10b3020329865571ffe06d9907737dae88636a498f872a4d556e7da252ba5b17da78aef321612a2ea7d193b544ae2b54ca5c03caad54d76a43e981a7277e9326d579378fb1fbf8beedb4c9cd5aead7a5c7d3ae35df834aa2837ec1982eeae042452fca24f18668f024df0b96ee26f01162c5de2744608d9c6d7d29807d8eeb019bfd229a0bcd1aad935d0d4d13e5732443a11f63ef31548bc4f389a5e23bda3d6f665bff825facb2b47631149b6a46513ea0d6cca5415bd732f2412d5a5cb1e13856094257c73cb99b3d8905dca67db19dec27cddfaba2f6cfc6c638d38d230af217eda5c729232cd9b1900e58ed97ea307420a6835d6c6d27d2d7c1b"}}, 0x110) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={0x0, 0x0}) 200.688407ms ago: executing program 1 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 151.849378ms ago: executing program 0 (id=403): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 138.290558ms ago: executing program 1 (id=404): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 98.022409ms ago: executing program 1 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) 85.129889ms ago: executing program 0 (id=406): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 18.49245ms ago: executing program 1 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getpgid(0x0) 6.121701ms ago: executing program 0 (id=408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 0s ago: executing program 1 (id=409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x11, 0x2, 0x2}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 27.045305][ T29] audit: type=1400 audit(1759664391.970:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.068447][ T29] audit: type=1400 audit(1759664392.000:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.069500][ T3287] cgroup: Unknown subsys name 'net' [ 27.096267][ T29] audit: type=1400 audit(1759664392.020:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.208676][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.215006][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.415724][ T29] audit: type=1400 audit(1759664392.340:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.439732][ T29] audit: type=1400 audit(1759664392.340:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.460244][ T29] audit: type=1400 audit(1759664392.340:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.480637][ T29] audit: type=1400 audit(1759664392.340:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.489624][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.500951][ T29] audit: type=1400 audit(1759664392.340:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.534485][ T29] audit: type=1400 audit(1759664392.340:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.557837][ T29] audit: type=1400 audit(1759664392.440:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.592179][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.290369][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.327366][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 29.336344][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.414086][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.453986][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.461476][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.468635][ T3300] bridge_slave_0: entered allmulticast mode [ 29.475282][ T3300] bridge_slave_0: entered promiscuous mode [ 29.499044][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.506240][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.513609][ T3300] bridge_slave_1: entered allmulticast mode [ 29.520028][ T3300] bridge_slave_1: entered promiscuous mode [ 29.528066][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.535163][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.542402][ T3301] bridge_slave_0: entered allmulticast mode [ 29.548899][ T3301] bridge_slave_0: entered promiscuous mode [ 29.567014][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.581084][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.588170][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.595457][ T3301] bridge_slave_1: entered allmulticast mode [ 29.601854][ T3301] bridge_slave_1: entered promiscuous mode [ 29.610346][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.617408][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.624563][ T3311] bridge_slave_0: entered allmulticast mode [ 29.631080][ T3311] bridge_slave_0: entered promiscuous mode [ 29.641507][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.669599][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.676779][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.683951][ T3311] bridge_slave_1: entered allmulticast mode [ 29.690437][ T3311] bridge_slave_1: entered promiscuous mode [ 29.697450][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.737569][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.746832][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.754000][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.761155][ T3308] bridge_slave_0: entered allmulticast mode [ 29.767577][ T3308] bridge_slave_0: entered promiscuous mode [ 29.779899][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.792387][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.801710][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.808927][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.816101][ T3308] bridge_slave_1: entered allmulticast mode [ 29.822559][ T3308] bridge_slave_1: entered promiscuous mode [ 29.829271][ T3300] team0: Port device team_slave_0 added [ 29.841045][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.865506][ T3300] team0: Port device team_slave_1 added [ 29.886575][ T3301] team0: Port device team_slave_0 added [ 29.898414][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.913071][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.920176][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.927312][ T3305] bridge_slave_0: entered allmulticast mode [ 29.933799][ T3305] bridge_slave_0: entered promiscuous mode [ 29.940775][ T3301] team0: Port device team_slave_1 added [ 29.946609][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.953797][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.961012][ T3305] bridge_slave_1: entered allmulticast mode [ 29.967372][ T3305] bridge_slave_1: entered promiscuous mode [ 29.979868][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.989589][ T3311] team0: Port device team_slave_0 added [ 30.015169][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.022173][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.048116][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.059538][ T3311] team0: Port device team_slave_1 added [ 30.065465][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.072509][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.098963][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.110421][ T3308] team0: Port device team_slave_0 added [ 30.137811][ T3308] team0: Port device team_slave_1 added [ 30.143775][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.150769][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.176921][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.188196][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.195215][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.221277][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.233114][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.248738][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.255717][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.281655][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.292806][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.299816][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.325841][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.337878][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.384468][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.391490][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.417433][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.428696][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.435758][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.461805][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.485210][ T3305] team0: Port device team_slave_0 added [ 30.494210][ T3305] team0: Port device team_slave_1 added [ 30.507083][ T3301] hsr_slave_0: entered promiscuous mode [ 30.513321][ T3301] hsr_slave_1: entered promiscuous mode [ 30.521926][ T3300] hsr_slave_0: entered promiscuous mode [ 30.527958][ T3300] hsr_slave_1: entered promiscuous mode [ 30.533884][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.539654][ T3300] Cannot create hsr debugfs directory [ 30.562735][ T3311] hsr_slave_0: entered promiscuous mode [ 30.568922][ T3311] hsr_slave_1: entered promiscuous mode [ 30.574814][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 30.580588][ T3311] Cannot create hsr debugfs directory [ 30.591793][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.598841][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.624857][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.663422][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.670415][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.696338][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.711345][ T3308] hsr_slave_0: entered promiscuous mode [ 30.717350][ T3308] hsr_slave_1: entered promiscuous mode [ 30.723531][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.729288][ T3308] Cannot create hsr debugfs directory [ 30.774763][ T3305] hsr_slave_0: entered promiscuous mode [ 30.780847][ T3305] hsr_slave_1: entered promiscuous mode [ 30.786671][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.792424][ T3305] Cannot create hsr debugfs directory [ 30.953319][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.969381][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.978332][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.990049][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.006870][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.017297][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.039754][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.051644][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.061895][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.077492][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.086480][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.095688][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.142984][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.169396][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.180636][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.196209][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.209991][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.217206][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.225872][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.237033][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.264706][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.273267][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.284224][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.291493][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.305098][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.317263][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.326594][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.335952][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.350309][ T2625] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.357480][ T2625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.376231][ T2625] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.383351][ T2625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.412196][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.445161][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.455635][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.468999][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.493942][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.501047][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.520852][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.539669][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.546773][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.564984][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.592391][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.623742][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.630853][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.644218][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.653674][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.664550][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.681916][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.689032][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.703733][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.732840][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.740014][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.750003][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.757171][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.798940][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.806225][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.854497][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.879633][ T3301] veth0_vlan: entered promiscuous mode [ 31.903293][ T3301] veth1_vlan: entered promiscuous mode [ 31.952323][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.974825][ T3301] veth0_macvtap: entered promiscuous mode [ 31.991489][ T3311] veth0_vlan: entered promiscuous mode [ 31.998072][ T3301] veth1_macvtap: entered promiscuous mode [ 32.015206][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.026203][ T3311] veth1_vlan: entered promiscuous mode [ 32.033968][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.044067][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.060737][ T271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087328][ T3311] veth0_macvtap: entered promiscuous mode [ 32.099536][ T3311] veth1_macvtap: entered promiscuous mode [ 32.105825][ T271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.123004][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.123020][ T29] audit: type=1400 audit(1759664397.050:81): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.xg3wT1/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.164590][ T3300] veth0_vlan: entered promiscuous mode [ 32.172559][ T271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.182038][ T271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191251][ T29] audit: type=1400 audit(1759664397.090:82): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.212955][ T3308] veth0_vlan: entered promiscuous mode [ 32.213278][ T29] audit: type=1400 audit(1759664397.090:83): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.xg3wT1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.222748][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.243960][ T29] audit: type=1400 audit(1759664397.090:84): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.263051][ T3308] veth1_vlan: entered promiscuous mode [ 32.272932][ T29] audit: type=1400 audit(1759664397.090:85): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.xg3wT1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.285310][ T3300] veth1_vlan: entered promiscuous mode [ 32.305027][ T29] audit: type=1400 audit(1759664397.090:86): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.xg3wT1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.315552][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.337844][ T29] audit: type=1400 audit(1759664397.090:87): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.355636][ T3308] veth0_macvtap: entered promiscuous mode [ 32.364550][ T29] audit: type=1400 audit(1759664397.100:88): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.392995][ T29] audit: type=1400 audit(1759664397.100:89): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.393810][ T3308] veth1_macvtap: entered promiscuous mode [ 32.425331][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.446739][ T29] audit: type=1400 audit(1759664397.370:90): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.484174][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.497488][ T3300] veth0_macvtap: entered promiscuous mode [ 32.504348][ T2625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.522207][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.538721][ T3305] veth0_vlan: entered promiscuous mode [ 32.546225][ T2625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.555748][ T2625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.572796][ T3300] veth1_macvtap: entered promiscuous mode [ 32.580153][ T2625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.596596][ T3305] veth1_vlan: entered promiscuous mode [ 32.609306][ T2625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.620946][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.633118][ T2625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.652189][ T3305] veth0_macvtap: entered promiscuous mode [ 32.670979][ T3305] veth1_macvtap: entered promiscuous mode [ 32.677812][ T2625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.688192][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.708297][ T2625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734665][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.750015][ T2625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.769736][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.784221][ T2625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.833098][ T2625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.868572][ T2625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.870638][ T3489] sd 0:0:1:0: device reset [ 32.882375][ T2625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.950061][ T3495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.959432][ T2625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.975831][ T2625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.985372][ T2625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.057135][ T3500] sd 0:0:1:0: device reset [ 33.304298][ T3517] loop0: detected capacity change from 0 to 1024 [ 33.316846][ T3517] ======================================================= [ 33.316846][ T3517] WARNING: The mand mount option has been deprecated and [ 33.316846][ T3517] and is ignored by this kernel. Remove the mand [ 33.316846][ T3517] option from the mount to silence this warning. [ 33.316846][ T3517] ======================================================= [ 33.409367][ T3517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.422070][ T3517] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.475341][ T3517] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.23: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.491994][ T3517] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 33.504417][ T3517] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.504417][ T3517] [ 33.536816][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.650936][ T3547] netlink: 168 bytes leftover after parsing attributes in process `syz.1.36'. [ 33.659994][ T3547] tipc: Started in network mode [ 33.665018][ T3547] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 33.674160][ T3547] tipc: Enabling of bearer rejected, failed to enable media [ 33.686246][ T3544] SELinux: failed to load policy [ 33.802889][ T3560] loop4: detected capacity change from 0 to 512 [ 33.847238][ T3563] loop0: detected capacity change from 0 to 128 [ 33.855149][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.870321][ T3563] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.919233][ T3560] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.950836][ T3563] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.973331][ T3560] EXT4-fs (loop4): shut down requested (0) [ 33.989333][ T3560] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.009202][ T3560] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.049410][ T3575] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.071688][ T296] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.081357][ T3560] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 34.123418][ T3560] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.167705][ T3560] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 34.212226][ T3560] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.250214][ T3575] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 34.299076][ T3575] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 34.325741][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.522252][ T3609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 34.531648][ T3611] loop2: detected capacity change from 0 to 128 [ 34.567570][ T3611] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 34.575152][ T3611] FAT-fs (loop2): Filesystem has been set read-only [ 34.673649][ T3629] loop1: detected capacity change from 0 to 1024 [ 34.709760][ T3629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.790536][ T3641] process 'syz.0.74' launched '/dev/fd/6' with NULL argv: empty string added [ 34.945730][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 34.988025][ T3655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.80'. [ 35.018915][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.086481][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.093859][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.150075][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.160738][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.199061][ T3670] netlink: 'syz.3.87': attribute type 18 has an invalid length. [ 35.206788][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 35.215625][ T2625] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.232823][ T3670] netlink: 'syz.3.87': attribute type 18 has an invalid length. [ 35.237676][ T2625] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.240954][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 35.267254][ T2625] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.277631][ T3670] Zero length message leads to an empty skb [ 35.292716][ T2625] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.326967][ T2625] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.335923][ T2625] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.357021][ T2625] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.387917][ T2625] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.458554][ T3667] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 35.466278][ T3667] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 35.485187][ T3667] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 35.513837][ T3667] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.533176][ T3703] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 35.541570][ T3703] ipvlan0: entered allmulticast mode [ 35.546953][ T3703] veth0_vlan: entered allmulticast mode [ 35.589876][ T3704] fido_id[3704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.605649][ T3703] team0: Device ipvlan0 failed to register rx_handler [ 35.634947][ T3703] syz.1.101 (3703) used greatest stack depth: 10432 bytes left [ 35.658366][ T3716] ALSA: seq fatal error: cannot create timer (-22) [ 35.671418][ T3722] loop1: detected capacity change from 0 to 128 [ 35.704643][ T3728] pim6reg: entered allmulticast mode [ 35.722493][ T3728] pim6reg: left allmulticast mode [ 35.769728][ T3741] syz.1.108: attempt to access beyond end of device [ 35.769728][ T3741] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 35.800885][ T3741] syz.1.108: attempt to access beyond end of device [ 35.800885][ T3741] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 35.829845][ T3741] syz.1.108: attempt to access beyond end of device [ 35.829845][ T3741] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 35.847257][ T3741] syz.1.108: attempt to access beyond end of device [ 35.847257][ T3741] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 35.867611][ T3741] syz.1.108: attempt to access beyond end of device [ 35.867611][ T3741] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 35.883031][ T3741] syz.1.108: attempt to access beyond end of device [ 35.883031][ T3741] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 35.897769][ T3741] syz.1.108: attempt to access beyond end of device [ 35.897769][ T3741] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 35.950659][ T3741] syz.1.108: attempt to access beyond end of device [ 35.950659][ T3741] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 35.988270][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 35.992923][ T3741] syz.1.108: attempt to access beyond end of device [ 35.992923][ T3741] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 36.010837][ T3741] syz.1.108: attempt to access beyond end of device [ 36.010837][ T3741] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 36.115018][ T3764] loop2: detected capacity change from 0 to 1024 [ 36.144572][ T3764] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 36.188085][ T3755] syz.4.116 (3755) used greatest stack depth: 9984 bytes left [ 36.209209][ T3784] netlink: 'syz.0.124': attribute type 10 has an invalid length. [ 36.220910][ T3784] team0: Port device dummy0 added [ 36.230849][ T3773] SELinux: failed to load policy [ 36.261702][ T3784] netlink: 'syz.0.124': attribute type 10 has an invalid length. [ 36.293110][ T3784] team0: Port device dummy0 removed [ 36.303535][ T3784] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 36.363241][ T3802] rdma_op ffff88811bcf4d80 conn xmit_rdma 0000000000000000 [ 36.446011][ T3818] loop0: detected capacity change from 0 to 512 [ 36.482150][ T3822] netlink: 'syz.4.137': attribute type 21 has an invalid length. [ 36.490515][ T3822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.137'. [ 36.499830][ T3822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 36.536513][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.549348][ T3818] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.628886][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.695626][ T3854] syz.2.146 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.823028][ T3884] loop2: detected capacity change from 0 to 512 [ 36.864471][ T3884] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.877613][ T3884] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.932152][ T3884] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.947871][ T3884] EXT4-fs (loop2): 1 truncate cleaned up [ 36.956339][ T3884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.995247][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.091251][ T3935] syz.4.167 uses obsolete (PF_INET,SOCK_PACKET) [ 37.101309][ T2625] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 37.119181][ T3935] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 37.125088][ T3935] syzkaller1: Linktype set failed because interface is up [ 37.127686][ T10] syzkaller1: tun_net_xmit 90 [ 37.151266][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 37.151284][ T29] audit: type=1400 audit(1759664402.080:321): avc: denied { mount } for pid=3946 comm="syz.3.170" name="/" dev="configfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.168363][ T3950] loop0: detected capacity change from 0 to 512 [ 37.196073][ T29] audit: type=1400 audit(1759664402.120:322): avc: denied { search } for pid=3946 comm="syz.3.170" name="/" dev="configfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.218094][ T29] audit: type=1400 audit(1759664402.120:323): avc: denied { search } for pid=3946 comm="syz.3.170" name="/" dev="configfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.241998][ T3950] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 37.262238][ T29] audit: type=1400 audit(1759664402.190:324): avc: denied { create } for pid=3949 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.282528][ T3957] loop3: detected capacity change from 0 to 1024 [ 37.290652][ T29] audit: type=1400 audit(1759664402.190:325): avc: denied { setopt } for pid=3949 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.312388][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.331946][ T3957] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.346975][ T3966] loop4: detected capacity change from 0 to 512 [ 37.374051][ T29] audit: type=1400 audit(1759664402.290:326): avc: denied { read } for pid=3967 comm="syz.0.175" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.395381][ T3972] loop0: detected capacity change from 0 to 128 [ 37.403358][ T3966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.444456][ T3966] EXT4-fs (loop4): 1 truncate cleaned up [ 37.465632][ T3966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.508134][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.517372][ T29] audit: type=1400 audit(1759664402.420:327): avc: denied { rename } for pid=3965 comm="syz.4.174" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.542556][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.622906][ T29] audit: type=1400 audit(1759664402.550:328): avc: denied { create } for pid=3993 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.676044][ T3998] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 37.680854][ T29] audit: type=1400 audit(1759664402.570:329): avc: denied { write } for pid=3993 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.703854][ T29] audit: type=1400 audit(1759664402.570:330): avc: denied { nlmsg_write } for pid=3993 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.735906][ T4004] loop4: detected capacity change from 0 to 128 [ 37.760606][ T4004] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 37.776435][ T4004] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.784372][ T4004] FAT-fs (loop4): Filesystem has been set read-only [ 37.807873][ T4015] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 37.807873][ T4015] program syz.1.187 not setting count and/or reply_len properly [ 37.859051][ T4029] loop1: detected capacity change from 0 to 1024 [ 37.866055][ T4029] EXT4-fs: Ignoring removed orlov option [ 37.872421][ T4029] EXT4-fs: Ignoring removed nobh option [ 37.878320][ T4029] EXT4-fs: Ignoring removed bh option [ 37.930526][ T4029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.953884][ T4045] 8021q: VLANs not supported on ip6_vti0 [ 37.992169][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.068864][ T4066] loop3: detected capacity change from 0 to 512 [ 38.100330][ T4066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.136636][ T4066] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.166326][ T4066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.225803][ T4092] Driver unsupported XDP return value 0 on prog (id 148) dev N/A, expect packet loss! [ 38.308715][ T4103] loop1: detected capacity change from 0 to 164 [ 38.726961][ T4195] loop2: detected capacity change from 0 to 1024 [ 38.742637][ T4199] __nla_validate_parse: 2 callbacks suppressed [ 38.742652][ T4199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 38.764930][ T4195] EXT4-fs: Ignoring removed orlov option [ 38.795352][ T4199] netem: change failed [ 38.817597][ T4195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.918496][ T4195] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.007195][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.203894][ T4286] loop2: detected capacity change from 0 to 512 [ 39.278952][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.313275][ T4286] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.385996][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.411021][ T4316] SELinux: ebitmap: truncated map [ 39.416660][ T4316] SELinux: failed to load policy [ 39.430757][ T4326] loop0: detected capacity change from 0 to 1024 [ 39.472627][ T4326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.518120][ T4326] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.589069][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.618827][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 39.702211][ T4379] SELinux: ebitmap: truncated map [ 39.708236][ T4379] SELinux: failed to load policy [ 39.734883][ T4389] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 39.787799][ T4397] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 39.789238][ T4389] team0: Port device dummy0 added [ 39.843719][ T4397] team0: Port device dummy0 removed [ 39.876687][ T4397] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.047825][ T4426] netlink: 264 bytes leftover after parsing attributes in process `syz.1.278'. [ 40.059718][ T4416] loop0: detected capacity change from 0 to 8192 [ 40.147220][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 40.215438][ T4471] loop3: detected capacity change from 0 to 1024 [ 40.248059][ T4480] loop0: detected capacity change from 0 to 512 [ 40.255595][ T4471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.289281][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.301997][ T4480] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.317157][ T4480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.435969][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 40.456670][ T4503] netem: change failed [ 40.547748][ T4516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.293'. [ 40.608062][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.615358][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.676571][ T4513] loop1: detected capacity change from 0 to 8192 [ 40.677383][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.693283][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.787756][ T4540] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 40.796511][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.826401][ T4540] team0: Port device dummy0 added [ 40.832697][ T4550] loop3: detected capacity change from 0 to 128 [ 40.840381][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.849513][ T4540] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 40.878407][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.902799][ T4540] team0: Port device dummy0 removed [ 40.922608][ T4540] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.955531][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.965089][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.019112][ T4589] loop3: detected capacity change from 0 to 512 [ 41.037010][ T4601] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 41.038681][ T4589] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.075950][ T4589] /dev/loop3: Can't open blockdev [ 41.181026][ T4627] loop3: detected capacity change from 0 to 128 [ 41.202329][ T4627] bio_check_eod: 213 callbacks suppressed [ 41.202349][ T4627] syz.3.314: attempt to access beyond end of device [ 41.202349][ T4627] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 41.225557][ T4627] syz.3.314: attempt to access beyond end of device [ 41.225557][ T4627] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 41.241143][ T4627] syz.3.314: attempt to access beyond end of device [ 41.241143][ T4627] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 41.254800][ T4627] syz.3.314: attempt to access beyond end of device [ 41.254800][ T4627] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 41.268598][ T4627] syz.3.314: attempt to access beyond end of device [ 41.268598][ T4627] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 41.293176][ T4627] syz.3.314: attempt to access beyond end of device [ 41.293176][ T4627] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 41.306709][ T4627] syz.3.314: attempt to access beyond end of device [ 41.306709][ T4627] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 41.320313][ T4627] syz.3.314: attempt to access beyond end of device [ 41.320313][ T4627] loop3: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 41.333998][ T4627] syz.3.314: attempt to access beyond end of device [ 41.333998][ T4627] loop3: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 41.358712][ T4627] syz.3.314: attempt to access beyond end of device [ 41.358712][ T4627] loop3: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 41.498480][ T4680] loop3: detected capacity change from 0 to 1024 [ 41.510669][ T4680] EXT4-fs: Ignoring removed i_version option [ 41.516749][ T4680] EXT4-fs: Ignoring removed nobh option [ 41.532504][ T4680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.572952][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.617786][ T4706] loop0: detected capacity change from 0 to 128 [ 41.653063][ T4706] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.673458][ T4706] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.712901][ T4706] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.327: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 41.732053][ T4706] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem [ 41.758068][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.819547][ T4737] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 41.849040][ T4744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.330'. [ 41.863010][ T4743] loop0: detected capacity change from 0 to 1024 [ 41.881139][ T4748] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 41.907990][ T4743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.062220][ T4781] loop3: detected capacity change from 0 to 1024 [ 42.139536][ T4781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.189088][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 42.189104][ T29] audit: type=1400 audit(1759664407.120:453): avc: denied { mounton } for pid=4780 comm="syz.3.346" path="/77/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.257600][ T4781] loop3: detected capacity change from 1024 to 0 [ 42.269122][ T4781] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.277675][ T29] audit: type=1400 audit(1759664407.200:454): avc: denied { remount } for pid=4780 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.279444][ T4781] EXT4-fs (loop3): I/O error while writing superblock [ 42.305408][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.326025][ T3301] EXT4-fs error (device loop3): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block [ 42.339212][ T3301] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.347857][ T3301] EXT4-fs (loop3): I/O error while writing superblock [ 42.354672][ T3301] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6305: IO failure [ 42.359078][ T4800] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 42.363932][ T3301] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.379364][ T3301] EXT4-fs (loop3): I/O error while writing superblock [ 42.386157][ T3301] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz-executor: mark_inode_dirty error [ 42.397717][ T3301] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.406087][ T3301] EXT4-fs (loop3): I/O error while writing superblock [ 42.432756][ T296] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4955: inode #2: block 5: comm kworker/u8:7: unable to read itable block [ 42.451534][ T4806] loop9: detected capacity change from 0 to 7 [ 42.458001][ T296] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.458988][ T4806] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.474742][ T4806] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.482612][ T4806] loop9: unable to read partition table [ 42.486679][ T296] EXT4-fs (loop3): I/O error while writing superblock [ 42.496638][ T4279] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.505894][ T4806] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 42.505894][ T4806] ) failed (rc=-5) [ 42.511157][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.528467][ T4279] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.536988][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.537040][ T4279] EXT4-fs (loop3): I/O error while writing superblock [ 42.581775][ T4816] loop2: detected capacity change from 0 to 512 [ 42.617249][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.632403][ T4816] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.643506][ C1] hrtimer: interrupt took 31283 ns [ 42.664721][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.706482][ T29] audit: type=1400 audit(1759664407.630:455): avc: denied { ioctl } for pid=4838 comm="syz.2.359" path="socket:[7243]" dev="sockfs" ino=7243 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.774362][ T296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.784736][ T296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.836828][ T29] audit: type=1326 audit(1759664407.660:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 42.860247][ T29] audit: type=1326 audit(1759664407.660:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 42.883542][ T29] audit: type=1326 audit(1759664407.660:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 42.907073][ T29] audit: type=1326 audit(1759664407.680:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 42.930819][ T29] audit: type=1326 audit(1759664407.680:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 42.954106][ T29] audit: type=1326 audit(1759664407.680:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 42.977385][ T29] audit: type=1326 audit(1759664407.680:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902355eec9 code=0x7ffc0000 [ 43.050742][ T296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.061221][ T296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.092680][ T4865] loop2: detected capacity change from 0 to 1024 [ 43.111049][ T296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.121471][ T296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.121988][ T4865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.163987][ T3294] udevd[3294]: failed to send result of seq 8059 to main daemon: Connection refused [ 43.177900][ T4865] loop2: detected capacity change from 1024 to 0 [ 43.185671][ T4865] EXT4-fs (loop2): I/O error while writing superblock [ 43.193707][ T4878] loop4: detected capacity change from 0 to 512 [ 43.204680][ T296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.215183][ T296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.216592][ T3308] EXT4-fs error (device loop2): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block [ 43.238609][ T3308] EXT4-fs (loop2): I/O error while writing superblock [ 43.245444][ T3308] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: IO failure [ 43.254301][ T3308] EXT4-fs (loop2): I/O error while writing superblock [ 43.261141][ T3308] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz-executor: mark_inode_dirty error [ 43.268325][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.272879][ T3308] EXT4-fs (loop2): I/O error while writing superblock [ 43.292273][ T4883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'. [ 43.301460][ T4883] netem: change failed [ 43.308020][ T4878] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.320031][ T37] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4955: inode #2: block 5: comm kworker/u8:2: unable to read itable block [ 43.352751][ T4889] loop0: detected capacity change from 0 to 512 [ 43.361436][ T37] EXT4-fs (loop2): I/O error while writing superblock [ 43.364121][ T4889] EXT4-fs: Ignoring removed bh option [ 43.374823][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.384372][ T296] bridge_slave_1: left allmulticast mode [ 43.390127][ T296] bridge_slave_1: left promiscuous mode [ 43.395792][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.404001][ T296] bridge_slave_0: left allmulticast mode [ 43.404384][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.409860][ T296] bridge_slave_0: left promiscuous mode [ 43.421559][ T4889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.424614][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.437318][ T4889] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.460144][ T3308] EXT4-fs (loop2): I/O error while writing superblock [ 43.469407][ T4911] program syz.4.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.535143][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.561111][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.571823][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.583704][ T296] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 43.593249][ T4921] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 43.604812][ T296] bond0 (unregistering): Released all slaves [ 43.710571][ T296] hsr_slave_0: left promiscuous mode [ 43.721057][ T296] hsr_slave_1: left promiscuous mode [ 43.726757][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.734266][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.748641][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.756146][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.784112][ T296] veth1_macvtap: left promiscuous mode [ 43.791987][ T296] veth0_macvtap: left promiscuous mode [ 43.804694][ T296] veth1_vlan: left promiscuous mode [ 43.827741][ T296] veth0_vlan: left promiscuous mode [ 43.862170][ T5037] loop4: detected capacity change from 0 to 128 [ 43.919923][ T5037] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.933119][ T5037] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.976150][ T5037] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 63: comm syz.4.387: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 43.994632][ T5037] EXT4-fs error (device loop4) in do_split:2029: Corrupt filesystem [ 44.017104][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.072183][ T296] team0 (unregistering): Port device team_slave_1 removed [ 44.082644][ T296] team0 (unregistering): Port device team_slave_0 removed [ 44.127964][ T4863] chnl_net:caif_netlink_parms(): no params data found [ 44.240093][ T5084] loop4: detected capacity change from 0 to 1024 [ 44.251399][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.265319][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.272506][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.280116][ T4863] bridge_slave_0: entered allmulticast mode [ 44.287068][ T4863] bridge_slave_0: entered promiscuous mode [ 44.298874][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.305979][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.313318][ T4863] bridge_slave_1: entered allmulticast mode [ 44.320025][ T4863] bridge_slave_1: entered promiscuous mode [ 44.327697][ T5084] loop4: detected capacity change from 1024 to 0 [ 44.336542][ T5084] EXT4-fs (loop4): I/O error while writing superblock [ 44.375086][ T4863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.385459][ T3311] EXT4-fs error (device loop4): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block [ 44.416169][ T3311] EXT4-fs (loop4): I/O error while writing superblock [ 44.423019][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: IO failure [ 44.432007][ T5163] loop1: detected capacity change from 0 to 512 [ 44.432854][ T3311] EXT4-fs (loop4): I/O error while writing superblock [ 44.445187][ T3311] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz-executor: mark_inode_dirty error [ 44.457936][ T4863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.461097][ T3311] EXT4-fs (loop4): I/O error while writing superblock [ 44.492863][ T5163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.506048][ T58] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4955: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 44.507723][ T5163] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.520233][ T58] EXT4-fs (loop4): I/O error while writing superblock [ 44.547936][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.571070][ T3311] EXT4-fs (loop4): I/O error while writing superblock [ 44.580741][ T4863] team0: Port device team_slave_0 added [ 44.590657][ T4863] team0: Port device team_slave_1 added [ 44.618198][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.625254][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.651296][ T4863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.663427][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.663807][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.670506][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.705598][ T4863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.730358][ T5031] chnl_net:caif_netlink_parms(): no params data found [ 44.798220][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 44.824001][ T4863] hsr_slave_0: entered promiscuous mode [ 44.830572][ T4863] hsr_slave_1: entered promiscuous mode [ 44.884911][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.892255][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.900173][ T5031] bridge_slave_0: entered allmulticast mode [ 44.908621][ T5031] bridge_slave_0: entered promiscuous mode [ 44.932132][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.939349][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.950505][ T5031] bridge_slave_1: entered allmulticast mode [ 44.961846][ T5031] bridge_slave_1: entered promiscuous mode [ 44.970141][ T5434] program syz.1.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.016654][ T5031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.055335][ T5031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.066473][ T5506] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 45.097177][ T5031] team0: Port device team_slave_0 added [ 45.111229][ T296] bridge_slave_1: left allmulticast mode [ 45.116920][ T296] bridge_slave_1: left promiscuous mode [ 45.122675][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.134305][ T296] bridge_slave_0: left allmulticast mode [ 45.140130][ T296] bridge_slave_0: left promiscuous mode [ 45.145871][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.202674][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.212253][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.221495][ T296] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 45.231693][ T296] bond0 (unregistering): Released all slaves [ 45.241388][ T5031] team0: Port device team_slave_1 added [ 45.296611][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.303733][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.329700][ T5031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.341877][ T4863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.356279][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.363571][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.389547][ T5031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.405291][ T4863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.422115][ T4863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.455789][ T296] hsr_slave_0: left promiscuous mode [ 45.464027][ T296] hsr_slave_1: left promiscuous mode [ 45.470138][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.480568][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.526924][ T296] team0 (unregistering): Port device team_slave_1 removed [ 45.539375][ T296] team0 (unregistering): Port device team_slave_0 removed [ 45.592071][ T4863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.671767][ T5031] hsr_slave_0: entered promiscuous mode [ 45.680793][ T5031] hsr_slave_1: entered promiscuous mode [ 45.686883][ T5031] debugfs: 'hsr0' already exists in 'hsr' [ 45.692699][ T5031] Cannot create hsr debugfs directory [ 45.709251][ T58] ================================================================== [ 45.717379][ T58] BUG: KCSAN: data-race in alloc_pid / copy_process [ 45.724079][ T58] [ 45.726415][ T58] read-write to 0xffffffff8685feb8 of 4 bytes by task 5586 on cpu 0: [ 45.734483][ T58] alloc_pid+0x539/0x720 [ 45.738733][ T58] copy_process+0xe25/0x2000 [ 45.743340][ T58] kernel_clone+0x16c/0x5c0 [ 45.747855][ T58] user_mode_thread+0x7d/0xb0 [ 45.752547][ T58] call_usermodehelper_exec_work+0x41/0x160 [ 45.758461][ T58] process_scheduled_works+0x4ce/0x9d0 [ 45.763937][ T58] worker_thread+0x582/0x770 [ 45.768545][ T58] kthread+0x489/0x510 [ 45.772626][ T58] ret_from_fork+0x122/0x1b0 [ 45.777243][ T58] ret_from_fork_asm+0x1a/0x30 [ 45.782015][ T58] [ 45.784340][ T58] read to 0xffffffff8685feb8 of 4 bytes by task 58 on cpu 1: [ 45.791715][ T58] copy_process+0x17fc/0x2000 [ 45.796407][ T58] kernel_clone+0x16c/0x5c0 [ 45.800927][ T58] user_mode_thread+0x7d/0xb0 [ 45.805620][ T58] call_usermodehelper_exec_work+0x41/0x160 [ 45.811543][ T58] process_scheduled_works+0x4ce/0x9d0 [ 45.817024][ T58] worker_thread+0x582/0x770 [ 45.821632][ T58] kthread+0x489/0x510 [ 45.825712][ T58] ret_from_fork+0x122/0x1b0 [ 45.830311][ T58] ret_from_fork_asm+0x1a/0x30 [ 45.835083][ T58] [ 45.837406][ T58] value changed: 0x80000119 -> 0x8000011a [ 45.843142][ T58] [ 45.845471][ T58] Reported by Kernel Concurrency Sanitizer on: [ 45.851635][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.861366][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.871430][ T58] Workqueue: events_unbound call_usermodehelper_exec_work [ 45.878573][ T58] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 45.913168][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.381487][ T296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.430210][ T296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.500053][ T296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.571008][ T296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.664143][ T296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.700274][ T296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.800539][ T296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.850066][ T296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.111166][ T296] bridge_slave_1: left allmulticast mode [ 47.116831][ T296] bridge_slave_1: left promiscuous mode [ 47.122631][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.130539][ T296] bridge_slave_0: left allmulticast mode [ 47.136182][ T296] bridge_slave_0: left promiscuous mode [ 47.141951][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.150969][ T296] bridge_slave_1: left allmulticast mode [ 47.156618][ T296] bridge_slave_1: left promiscuous mode [ 47.163125][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.170799][ T296] bridge_slave_0: left allmulticast mode [ 47.176499][ T296] bridge_slave_0: left promiscuous mode [ 47.182276][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.190420][ T296] bridge_slave_1: left allmulticast mode [ 47.196076][ T296] bridge_slave_1: left promiscuous mode [ 47.201977][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.209841][ T296] bridge_slave_0: left allmulticast mode [ 47.215502][ T296] bridge_slave_0: left promiscuous mode [ 47.221256][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.229494][ T296] bridge_slave_1: left allmulticast mode [ 47.235142][ T296] bridge_slave_1: left promiscuous mode [ 47.240884][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.248504][ T296] bridge_slave_0: left allmulticast mode [ 47.254161][ T296] bridge_slave_0: left promiscuous mode [ 47.259902][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.409399][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.419183][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.429033][ T296] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 47.437997][ T296] bond0 (unregistering): Released all slaves [ 47.488680][ T296] bond0 (unregistering): Released all slaves [ 47.569455][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.578948][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.588324][ T296] bond0 (unregistering): Released all slaves [ 47.660498][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.670409][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.679983][ T296] bond0 (unregistering): Released all slaves [ 47.729903][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.739319][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.748335][ T296] bond0 (unregistering): Released all slaves [ 47.783362][ T296] tipc: Left network mode [ 47.792241][ T296] hsr_slave_0: left promiscuous mode [ 47.797917][ T296] hsr_slave_1: left promiscuous mode [ 47.803572][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.810990][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.818583][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.825967][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.833566][ T296] hsr_slave_0: left promiscuous mode [ 47.839359][ T296] hsr_slave_1: left promiscuous mode [ 47.845038][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.852574][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.861753][ T296] hsr_slave_0: left promiscuous mode [ 47.867398][ T296] hsr_slave_1: left promiscuous mode [ 47.872990][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.880399][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.887984][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.895400][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.904482][ T296] hsr_slave_0: left promiscuous mode [ 47.910290][ T296] hsr_slave_1: left promiscuous mode [ 47.915917][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.923668][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.935262][ T296] veth1_macvtap: left promiscuous mode [ 47.940846][ T296] veth0_macvtap: left promiscuous mode [ 47.946455][ T296] veth1_vlan: left promiscuous mode [ 47.951707][ T296] veth0_vlan: left promiscuous mode [ 47.957549][ T296] veth1_macvtap: left promiscuous mode [ 47.963082][ T296] veth0_macvtap: left promiscuous mode [ 47.968800][ T296] veth1_vlan: left promiscuous mode [ 47.974067][ T296] veth0_vlan: left promiscuous mode [ 48.066439][ T296] team0 (unregistering): Port device team_slave_1 removed [ 48.075859][ T296] team0 (unregistering): Port device team_slave_0 removed [ 48.122713][ T296] team0 (unregistering): Port device team_slave_1 removed [ 48.132056][ T296] team0 (unregistering): Port device team_slave_0 removed [ 48.183043][ T296] team0 (unregistering): Port device team_slave_1 removed [ 48.192502][ T296] team0 (unregistering): Port device team_slave_0 removed [ 48.248158][ T296] team0 (unregistering): Port device team_slave_1 removed [ 48.257648][ T296] team0 (unregistering): Port device team_slave_0 removed [ 49.390957][ T296] bridge_slave_1: left allmulticast mode [ 49.396688][ T296] bridge_slave_1: left promiscuous mode [ 49.402406][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.410107][ T296] bridge_slave_0: left allmulticast mode [ 49.415756][ T296] bridge_slave_0: left promiscuous mode [ 49.421524][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.490054][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.499661][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.508757][ T296] bond0 (unregistering): Released all slaves [ 49.571459][ T296] hsr_slave_0: left promiscuous mode [ 49.577094][ T296] hsr_slave_1: left promiscuous mode [ 49.582689][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.590111][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.621516][ T296] team0 (unregistering): Port device team_slave_1 removed [ 49.631071][ T296] team0 (unregistering): Port device team_slave_0 removed