last executing test programs: 1.604449407s ago: executing program 0 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/8, 0x8}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.367459822s ago: executing program 4 (id=897): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.315264703s ago: executing program 0 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.315157173s ago: executing program 4 (id=901): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x140c00, 0x5, 0x6, 0x2, 0x5, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3}) close(r1) 1.299492614s ago: executing program 0 (id=903): syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0xffff) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.289019234s ago: executing program 4 (id=904): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 1.266375274s ago: executing program 4 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.117615337s ago: executing program 4 (id=909): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd31, 0x0, {{@in6=@loopback, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 759.095344ms ago: executing program 1 (id=927): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) fchdir(r0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x40000000}) mq_timedreceive(r0, &(0x7f00000003c0)=""/169, 0xa9, 0x200040000a9b, 0x0) 726.473165ms ago: executing program 1 (id=928): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 439.257961ms ago: executing program 1 (id=937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 388.947212ms ago: executing program 0 (id=939): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 388.795892ms ago: executing program 1 (id=940): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 318.199693ms ago: executing program 0 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/375], 0x1a, 0xa06, &(0x7f00000005c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) 317.916873ms ago: executing program 2 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 219.503185ms ago: executing program 4 (id=944): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)={0x69, 0x75, 0x2, {0x5e, "e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be98b6891a5b3e2127ef1bc89e84525d27"}}, 0x69) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 219.332025ms ago: executing program 0 (id=945): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24044890) 219.250315ms ago: executing program 3 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x798011ccc5908918, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @local, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 209.558395ms ago: executing program 1 (id=947): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000001140), 0x0) 186.692756ms ago: executing program 2 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 169.878546ms ago: executing program 3 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r2, r2) 113.644757ms ago: executing program 3 (id=950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 113.382637ms ago: executing program 2 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 113.215977ms ago: executing program 3 (id=952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 112.976837ms ago: executing program 3 (id=953): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 79.247308ms ago: executing program 3 (id=954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 42.994719ms ago: executing program 2 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 42.586249ms ago: executing program 2 (id=956): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 33.642769ms ago: executing program 1 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@i_version}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@noload}], [{@permit_directio}]}, 0x3, 0x485, &(0x7f00000003c0)="$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") 0s ago: executing program 2 (id=958): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 24.934512][ T29] audit: type=1400 audit(1758841726.259:62): avc: denied { mounton } for pid=3270 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.935613][ T3270] cgroup: Unknown subsys name 'net' [ 24.957290][ T29] audit: type=1400 audit(1758841726.259:63): avc: denied { mount } for pid=3270 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.984687][ T29] audit: type=1400 audit(1758841726.299:64): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.138495][ T3270] cgroup: Unknown subsys name 'cpuset' [ 25.144817][ T3270] cgroup: Unknown subsys name 'rlimit' [ 25.295479][ T29] audit: type=1400 audit(1758841726.619:65): avc: denied { setattr } for pid=3270 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.318749][ T29] audit: type=1400 audit(1758841726.619:66): avc: denied { create } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.339246][ T29] audit: type=1400 audit(1758841726.619:67): avc: denied { write } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.347243][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.359688][ T29] audit: type=1400 audit(1758841726.619:68): avc: denied { read } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.388525][ T29] audit: type=1400 audit(1758841726.619:69): avc: denied { mounton } for pid=3270 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.413314][ T29] audit: type=1400 audit(1758841726.619:70): avc: denied { mount } for pid=3270 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.436666][ T29] audit: type=1400 audit(1758841726.699:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.472168][ T3270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.389367][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 26.479579][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.486772][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.494098][ T3298] bridge_slave_0: entered allmulticast mode [ 26.500564][ T3298] bridge_slave_0: entered promiscuous mode [ 26.519222][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.526334][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.533555][ T3298] bridge_slave_1: entered allmulticast mode [ 26.540020][ T3298] bridge_slave_1: entered promiscuous mode [ 26.582319][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.596455][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.630963][ T3298] team0: Port device team_slave_0 added [ 26.643738][ T3298] team0: Port device team_slave_1 added [ 26.664349][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.671380][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.697303][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.708572][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.715553][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.741476][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.806370][ T3298] hsr_slave_0: entered promiscuous mode [ 26.813155][ T3298] hsr_slave_1: entered promiscuous mode [ 26.830504][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.856274][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.879289][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.985258][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.992514][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.999676][ T3309] bridge_slave_0: entered allmulticast mode [ 27.006117][ T3309] bridge_slave_0: entered promiscuous mode [ 27.018370][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.025525][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.032930][ T3308] bridge_slave_0: entered allmulticast mode [ 27.039320][ T3308] bridge_slave_0: entered promiscuous mode [ 27.045629][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.052748][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.060088][ T3311] bridge_slave_0: entered allmulticast mode [ 27.066474][ T3311] bridge_slave_0: entered promiscuous mode [ 27.075884][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.085064][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.092173][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.099416][ T3309] bridge_slave_1: entered allmulticast mode [ 27.105762][ T3309] bridge_slave_1: entered promiscuous mode [ 27.116771][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.123885][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.131115][ T3308] bridge_slave_1: entered allmulticast mode [ 27.137577][ T3308] bridge_slave_1: entered promiscuous mode [ 27.143935][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.151013][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.158553][ T3311] bridge_slave_1: entered allmulticast mode [ 27.164962][ T3311] bridge_slave_1: entered promiscuous mode [ 27.205255][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.216558][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.228671][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.239156][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.249833][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.264471][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.313177][ T3308] team0: Port device team_slave_0 added [ 27.320000][ T3311] team0: Port device team_slave_0 added [ 27.331342][ T3309] team0: Port device team_slave_0 added [ 27.342266][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.349377][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.356499][ T3307] bridge_slave_0: entered allmulticast mode [ 27.363042][ T3307] bridge_slave_0: entered promiscuous mode [ 27.370199][ T3308] team0: Port device team_slave_1 added [ 27.375973][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.383109][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.390313][ T3307] bridge_slave_1: entered allmulticast mode [ 27.396781][ T3307] bridge_slave_1: entered promiscuous mode [ 27.403596][ T3311] team0: Port device team_slave_1 added [ 27.409816][ T3309] team0: Port device team_slave_1 added [ 27.462341][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.471647][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.478649][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.504615][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.515753][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.522795][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.548780][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.562156][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.569148][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.595139][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.606229][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.613219][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.639119][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.650797][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.670208][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.677247][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.703229][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.714310][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.721304][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.747342][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.768353][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.786593][ T3307] team0: Port device team_slave_0 added [ 27.797117][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.815859][ T3307] team0: Port device team_slave_1 added [ 27.826770][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.841762][ T3308] hsr_slave_0: entered promiscuous mode [ 27.847914][ T3308] hsr_slave_1: entered promiscuous mode [ 27.853621][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.859404][ T3308] Cannot create hsr debugfs directory [ 27.871916][ T3311] hsr_slave_0: entered promiscuous mode [ 27.878042][ T3311] hsr_slave_1: entered promiscuous mode [ 27.883870][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.889723][ T3311] Cannot create hsr debugfs directory [ 27.895234][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.905902][ T3309] hsr_slave_0: entered promiscuous mode [ 27.911921][ T3309] hsr_slave_1: entered promiscuous mode [ 27.917796][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.923525][ T3309] Cannot create hsr debugfs directory [ 27.942062][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.949100][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.975047][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.986314][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.993326][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.019278][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.073878][ T3307] hsr_slave_0: entered promiscuous mode [ 28.080070][ T3307] hsr_slave_1: entered promiscuous mode [ 28.085992][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 28.091808][ T3307] Cannot create hsr debugfs directory [ 28.246353][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.255418][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.264342][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.274658][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.302149][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.314629][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.321786][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.335380][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.344500][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.371891][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.394062][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.401278][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.410327][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417366][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.428022][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.436388][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.448833][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.458003][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.512012][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.530497][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.539464][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.554651][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.573917][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.591340][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.607518][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.619768][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.626847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.659863][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.666942][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.679006][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.705746][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.714571][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.723646][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.734943][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.753560][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.760680][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.772011][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.779099][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.789298][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.800587][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.807676][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.823806][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.834262][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.847370][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.854463][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.868735][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.875934][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.884550][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.891734][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.937175][ T3298] veth0_vlan: entered promiscuous mode [ 28.947243][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.982494][ T3298] veth1_vlan: entered promiscuous mode [ 29.018827][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.040784][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.052015][ T3298] veth0_macvtap: entered promiscuous mode [ 29.064460][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.080371][ T3298] veth1_macvtap: entered promiscuous mode [ 29.095278][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.109734][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.132598][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.147832][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.195338][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.234729][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.250776][ T3308] veth0_vlan: entered promiscuous mode [ 29.263713][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.274485][ T3308] veth1_vlan: entered promiscuous mode [ 29.297928][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.311818][ T3308] veth0_macvtap: entered promiscuous mode [ 29.323975][ T3309] veth0_vlan: entered promiscuous mode [ 29.342748][ T3308] veth1_macvtap: entered promiscuous mode [ 29.354207][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.364719][ T3309] veth1_vlan: entered promiscuous mode [ 29.392163][ T3311] veth0_vlan: entered promiscuous mode [ 29.400570][ T3311] veth1_vlan: entered promiscuous mode [ 29.416287][ T3311] veth0_macvtap: entered promiscuous mode [ 29.424125][ T3311] veth1_macvtap: entered promiscuous mode [ 29.431719][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.458473][ T3448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.476519][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.492006][ T3309] veth0_macvtap: entered promiscuous mode [ 29.500144][ T3448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.516656][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.534635][ T3309] veth1_macvtap: entered promiscuous mode [ 29.543926][ T3448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.584533][ T3448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.593396][ T3448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.610702][ T3448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.625781][ T3307] veth0_vlan: entered promiscuous mode [ 29.648924][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.663105][ T3448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.673533][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.685762][ T3448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.699532][ T3307] veth1_vlan: entered promiscuous mode [ 29.715021][ T3448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.733491][ T3448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.766073][ T3448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.791594][ T3307] veth0_macvtap: entered promiscuous mode [ 29.818519][ T3448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.841883][ T3307] veth1_macvtap: entered promiscuous mode [ 29.876785][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.905252][ T3491] loop3: detected capacity change from 0 to 512 [ 29.913765][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.939515][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 29.939531][ T29] audit: type=1400 audit(1758841731.269:123): avc: denied { create } for pid=3495 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.965884][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.991311][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.020165][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.021267][ T3491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.049888][ T29] audit: type=1400 audit(1758841731.309:124): avc: denied { create } for pid=3495 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.064183][ T3448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.069263][ T29] audit: type=1400 audit(1758841731.319:125): avc: denied { connect } for pid=3495 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.086664][ T3499] process 'syz.0.16' launched './file1' with NULL argv: empty string added [ 30.097345][ T29] audit: type=1400 audit(1758841731.339:126): avc: denied { create } for pid=3497 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.124801][ T29] audit: type=1400 audit(1758841731.339:127): avc: denied { bind } for pid=3497 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.143501][ T29] audit: type=1400 audit(1758841731.339:128): avc: denied { write } for pid=3497 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.149723][ T3491] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.170929][ T29] audit: type=1400 audit(1758841731.409:129): avc: denied { execute } for pid=3498 comm="syz.0.16" name="file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.194433][ T29] audit: type=1400 audit(1758841731.439:130): avc: denied { execute_no_trans } for pid=3498 comm="syz.0.16" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.217402][ T29] audit: type=1400 audit(1758841731.479:131): avc: denied { mount } for pid=3490 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.238774][ T29] audit: type=1326 audit(1758841731.499:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3505 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 30.314194][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.515245][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 30.662297][ T3543] 9pnet: p9_errstr2errno: server reported unknown error 9YTPX: [ 30.729877][ T3545] netlink: 'syz.0.33': attribute type 13 has an invalid length. [ 30.807265][ T3545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 30.943751][ T3557] loop0: detected capacity change from 0 to 1024 [ 30.974789][ T3557] ======================================================= [ 30.974789][ T3557] WARNING: The mand mount option has been deprecated and [ 30.974789][ T3557] and is ignored by this kernel. Remove the mand [ 30.974789][ T3557] option from the mount to silence this warning. [ 30.974789][ T3557] ======================================================= [ 31.079612][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.192556][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.283697][ T3584] loop2: detected capacity change from 0 to 128 [ 31.294413][ T3586] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 31.302159][ T3586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.49'. [ 31.311643][ T3586] dummy0: entered promiscuous mode [ 31.317360][ T3586] bridge0: port 3(dummy0) entered blocking state [ 31.323891][ T3586] bridge0: port 3(dummy0) entered disabled state [ 31.331417][ T3586] dummy0: entered allmulticast mode [ 31.340241][ T3586] bridge0: port 3(dummy0) entered blocking state [ 31.346721][ T3586] bridge0: port 3(dummy0) entered forwarding state [ 31.525174][ T3598] kernel read not supported for file /policy (pid: 3598 comm: syz.0.54) [ 31.667891][ T3615] SELinux: failed to load policy [ 31.683630][ T3632] loop1: detected capacity change from 0 to 512 [ 31.701949][ T3632] EXT4-fs: Ignoring removed i_version option [ 31.708147][ T3632] EXT4-fs: Ignoring removed bh option [ 31.749000][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.757797][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.766521][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.786205][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.804908][ T3645] loop3: detected capacity change from 0 to 512 [ 31.815214][ T3645] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.828395][ T3645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.839176][ T3632] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.869080][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.877859][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.886558][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.935659][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.955543][ T3645] EXT4-fs (loop3): 1 truncate cleaned up [ 31.968156][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.969243][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 31.989530][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 32.046347][ T3655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.059208][ T3653] ref_ctr_offset mismatch. inode: 0x69 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 32.071041][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.081040][ T3655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.201267][ T3662] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 32.273059][ T3671] pimreg: entered allmulticast mode [ 32.280566][ T3671] pimreg: left allmulticast mode [ 32.402992][ T3678] loop2: detected capacity change from 0 to 1024 [ 32.419247][ T3678] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.425739][ T3678] EXT4-fs: Ignoring removed bh option [ 32.444085][ T3678] ext3: Unknown parameter 'subj_type' [ 32.455340][ C0] hrtimer: interrupt took 48311 ns [ 32.463123][ T3678] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 32.480817][ T3683] loop0: detected capacity change from 0 to 1024 [ 32.492184][ T3683] EXT4-fs: Ignoring removed orlov option [ 32.515325][ T3683] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 32.550366][ T3683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.584403][ T3685] loop3: detected capacity change from 0 to 8192 [ 32.588174][ T3683] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.662219][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.766676][ T3706] bridge0: entered promiscuous mode [ 32.772281][ T3706] macsec1: entered promiscuous mode [ 32.779931][ T3706] bridge0: port 4(macsec1) entered blocking state [ 32.786450][ T3706] bridge0: port 4(macsec1) entered disabled state [ 32.795373][ T3706] macsec1: entered allmulticast mode [ 32.800783][ T3706] bridge0: entered allmulticast mode [ 32.808504][ T3706] macsec1: left allmulticast mode [ 32.813654][ T3706] bridge0: left allmulticast mode [ 32.821126][ T3706] bridge0: left promiscuous mode [ 32.869435][ T3713] loop1: detected capacity change from 0 to 512 [ 32.878422][ T3713] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 33.674979][ T3733] loop2: detected capacity change from 0 to 128 [ 33.696960][ T3733] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.726298][ T3733] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.736762][ T3735] loop0: detected capacity change from 0 to 128 [ 33.754055][ T3735] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.810312][ T3448] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.840923][ T3735] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.214468][ T3759] random: crng reseeded on system resumption [ 34.235207][ T3759] Restarting kernel threads ... [ 34.243243][ T3759] Done restarting kernel threads. [ 34.392413][ T3772] Zero length message leads to an empty skb [ 34.970165][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 34.970183][ T29] audit: type=1400 audit(1758841736.299:328): avc: denied { listen } for pid=3818 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.010316][ T29] audit: type=1326 audit(1758841736.339:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.033696][ T29] audit: type=1326 audit(1758841736.339:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.093536][ T29] audit: type=1326 audit(1758841736.339:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.116867][ T29] audit: type=1326 audit(1758841736.339:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.140296][ T29] audit: type=1326 audit(1758841736.339:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.163702][ T29] audit: type=1326 audit(1758841736.389:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.187995][ T29] audit: type=1326 audit(1758841736.389:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.211528][ T29] audit: type=1326 audit(1758841736.389:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.234824][ T29] audit: type=1326 audit(1758841736.389:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693dd5eec9 code=0x7ffc0000 [ 35.266540][ T3828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.316660][ T3746] syz.3.112 (3746) used greatest stack depth: 7288 bytes left [ 35.327474][ T3828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.373824][ T3828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.431141][ T3828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.461073][ T3847] loop4: detected capacity change from 0 to 1024 [ 35.470044][ T3847] EXT4-fs: Ignoring removed orlov option [ 35.494211][ T3847] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.530175][ T3847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.545075][ T3448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.575788][ T3448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.617518][ T3448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.666888][ T3448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.686775][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.884779][ T3875] netem: incorrect gi model size [ 35.889942][ T3875] netem: change failed [ 36.013773][ T3883] __nla_validate_parse: 2 callbacks suppressed [ 36.013788][ T3883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 36.172355][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 36.203930][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 36.240222][ T3904] netlink: 7 bytes leftover after parsing attributes in process `syz.3.179'. [ 36.262551][ T3904] netlink: 7 bytes leftover after parsing attributes in process `syz.3.179'. [ 36.663138][ T3928] sctp: [Deprecated]: syz.3.185 (pid 3928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 36.663138][ T3928] Use struct sctp_sack_info instead [ 37.050533][ T3945] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 37.119141][ T3947] 9pnet_fd: Insufficient options for proto=fd [ 37.223971][ T3953] 9pnet: p9_errstr2errno: server reported unknown error 1 [ 37.467611][ T3981] loop4: detected capacity change from 0 to 512 [ 37.499178][ T3985] netlink: 3 bytes leftover after parsing attributes in process `syz.1.210'. [ 37.521917][ T3981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.537037][ T3985] batadv1: entered promiscuous mode [ 37.542473][ T3985] batadv1: entered allmulticast mode [ 37.558895][ T3981] EXT4-fs error (device loop4): __ext4_iget:5464: inode #15: block 1803188595: comm syz.4.208: invalid block [ 37.589702][ T3981] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.208: couldn't read orphan inode 15 (err -117) [ 37.618963][ T3981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.662354][ T3981] EXT4-fs error (device loop4): ext4_get_parent:1838: comm syz.4.208: inode #2: comm syz.4.208: iget: illegal inode # [ 37.682956][ T3995] netlink: 'syz.3.215': attribute type 3 has an invalid length. [ 37.733965][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.911007][ T4025] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 38.434718][ T4111] SELinux: failed to load policy [ 38.486773][ T4119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.594304][ T4137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.671642][ T4150] dummy0: entered allmulticast mode [ 38.674485][ T4152] loop4: detected capacity change from 0 to 512 [ 38.684810][ T4150] dummy0: left allmulticast mode [ 38.698725][ T4152] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.747613][ T4152] EXT4-fs (loop4): 1 truncate cleaned up [ 38.772601][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.875471][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.098904][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 39.119328][ T4189] netlink: 2 bytes leftover after parsing attributes in process `syz.0.290'. [ 39.221667][ T4203] netlink: 256 bytes leftover after parsing attributes in process `syz.3.297'. [ 39.294491][ T4222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 39.379036][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 39.450133][ T4255] capability: warning: `syz.4.320' uses 32-bit capabilities (legacy support in use) [ 39.700875][ T4291] rdma_op ffff888139532980 conn xmit_rdma 0000000000000000 [ 39.734332][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 39.742124][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 39.758489][ T4297] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 39.770696][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.778512][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.786285][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.794077][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.801746][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.809509][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.817270][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.824979][ T3415] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 39.834315][ T3415] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.870738][ T4302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.033628][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 40.033646][ T29] audit: type=1326 audit(40.057:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 40.114765][ T29] audit: type=1400 audit(40.057:588): avc: denied { read write } for pid=4321 comm="syz.0.349" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.138125][ T29] audit: type=1400 audit(40.057:589): avc: denied { open } for pid=4321 comm="syz.0.349" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.161235][ T29] audit: type=1400 audit(40.057:590): avc: denied { ioctl } for pid=4321 comm="syz.0.349" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.185936][ T29] audit: type=1326 audit(40.087:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 40.208592][ T29] audit: type=1326 audit(40.087:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 40.231178][ T29] audit: type=1326 audit(40.087:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 40.253931][ T29] audit: type=1326 audit(40.087:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 40.276521][ T29] audit: type=1400 audit(40.107:595): avc: denied { lock } for pid=4324 comm="syz.0.352" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.408614][ T29] audit: type=1326 audit(40.337:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4922c7eec9 code=0x7ffc0000 [ 40.491159][ T4361] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 40.536855][ T4368] loop2: detected capacity change from 0 to 512 [ 40.560608][ T4368] EXT4-fs warning (device loop2): ext4_xattr_inode_get:542: inode #11: comm syz.2.372: ea_inode file size=0 entry size=6 [ 40.575513][ T4368] ------------[ cut here ]------------ [ 40.577475][ T4378] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 40.580998][ T4368] EA inode 11 i_nlink=2 [ 40.581251][ T4368] WARNING: CPU: 1 PID: 4368 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 40.603046][ T4368] Modules linked in: [ 40.606995][ T4368] CPU: 1 UID: 0 PID: 4368 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.616730][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 40.626984][ T4368] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 40.633669][ T4368] Code: 90 49 8d 7e 40 e8 9c f8 b7 ff 4d 8b 6e 40 4c 89 e7 e8 b0 f3 b7 ff 41 8b 56 48 48 c7 c7 07 9c 54 86 4c 89 ee e8 bd de 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 ee 5c ad 03 66 66 66 66 66 2e 0f 1f [ 40.653764][ T4368] RSP: 0018:ffffc90001c6b7c8 EFLAGS: 00010246 [ 40.659963][ T4368] RAX: daf421a984f34800 RBX: ffff88811a069760 RCX: 0000000000080000 [ 40.668087][ T4368] RDX: ffffc900025fb000 RSI: 000000000000435b RDI: 000000000000435c [ 40.676129][ T4368] RBP: 0000000000000002 R08: 0001ffff86847f7f R09: 0000000000000000 [ 40.684173][ T4368] R10: ffffc90001c6b4a0 R11: 0001c90001c6b4a0 R12: ffff88811a069710 [ 40.692229][ T4368] R13: 000000000000000b R14: ffff88811a0696c8 R15: 0000000000000001 [ 40.700240][ T4368] FS: 00007f0f33f376c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 40.705716][ T4380] random: crng reseeded on system resumption [ 40.709336][ T4368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.721921][ T4368] CR2: 00007ffc2f211868 CR3: 000000013e182000 CR4: 00000000003506f0 [ 40.729984][ T4368] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 40.738011][ T4368] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 40.746041][ T4368] Call Trace: [ 40.749546][ T4368] [ 40.752561][ T4368] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 40.758662][ T4368] ? errseq_check+0x2c/0x50 [ 40.763254][ T4368] ext4_xattr_delete_inode+0x6b7/0x790 [ 40.768753][ T4368] ? ext4_truncate+0x92e/0xae0 [ 40.773576][ T4368] ext4_evict_inode+0xa6a/0xd90 [ 40.778573][ T4368] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.784025][ T4368] evict+0x2e0/0x550 [ 40.787969][ T4368] ? __dquot_initialize+0x146/0x7c0 [ 40.793376][ T4368] iput+0x447/0x5b0 [ 40.797223][ T4368] ext4_process_orphan+0x1a9/0x1c0 [ 40.802504][ T4368] ext4_orphan_cleanup+0x6a8/0xa00 [ 40.808045][ T4368] ext4_fill_super+0x3260/0x35d0 [ 40.813148][ T4368] ? set_blocksize+0x1a8/0x310 [ 40.818288][ T4368] ? sb_set_blocksize+0xe3/0x100 [ 40.823315][ T4368] ? setup_bdev_super+0x30e/0x370 [ 40.828372][ T4368] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.833878][ T4368] get_tree_bdev_flags+0x291/0x300 [ 40.839044][ T4368] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.844420][ T4368] get_tree_bdev+0x1f/0x30 [ 40.848920][ T4368] ext4_get_tree+0x1c/0x30 [ 40.853401][ T4368] vfs_get_tree+0x54/0x1d0 [ 40.857842][ T4368] do_new_mount+0x207/0x5e0 [ 40.862413][ T4368] ? security_capable+0x83/0x90 [ 40.867317][ T4368] path_mount+0x4a4/0xb20 [ 40.871688][ T4368] ? user_path_at+0x109/0x130 [ 40.876472][ T4368] __se_sys_mount+0x28f/0x2e0 [ 40.881212][ T4368] ? do_mkdirat+0x3ac/0x3f0 [ 40.885772][ T4368] __x64_sys_mount+0x67/0x80 [ 40.890486][ T4368] x64_sys_call+0x2b4d/0x2ff0 [ 40.895208][ T4368] do_syscall_64+0xd2/0x200 [ 40.899827][ T4368] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.906016][ T4368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.911816][ T4368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.917760][ T4368] RIP: 0033:0x7f0f354d066a [ 40.922304][ T4368] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.941963][ T4368] RSP: 002b:00007f0f33f36e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.950462][ T4368] RAX: ffffffffffffffda RBX: 00007f0f33f36ef0 RCX: 00007f0f354d066a [ 40.958474][ T4368] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0f33f36eb0 [ 40.966654][ T4368] RBP: 0000200000000180 R08: 00007f0f33f36ef0 R09: 0000000000800700 [ 40.974684][ T4368] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 40.982729][ T4368] R13: 00007f0f33f36eb0 R14: 0000000000000473 R15: 0000200000000680 [ 40.990748][ T4368] [ 40.993882][ T4368] ---[ end trace 0000000000000000 ]--- [ 40.999989][ T4368] EXT4-fs (loop2): 1 orphan inode deleted [ 41.006192][ T4368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.075413][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.166390][ T4398] usb usb1: usbfs: process 4398 (syz.4.384) did not claim interface 0 before use [ 41.247226][ T4404] random: crng reseeded on system resumption [ 41.377585][ T4422] loop4: detected capacity change from 0 to 8192 [ 41.400189][ T4434] __nla_validate_parse: 8 callbacks suppressed [ 41.400206][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 41.422581][ T4433] program syz.1.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.519245][ T4444] random: crng reseeded on system resumption [ 41.572628][ T4459] rdma_op ffff88811a839d80 conn xmit_rdma 0000000000000000 [ 41.687363][ T416] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 41.811783][ T4495] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 41.944200][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 41.953211][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 41.962051][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 41.970838][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 41.987867][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 41.996721][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 42.005624][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 42.014428][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 42.045225][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 42.391686][ T4542] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 42.713818][ T4588] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 42.844836][ T4594] loop4: detected capacity change from 0 to 512 [ 42.876814][ T4594] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.917110][ T4594] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.471: Failed to acquire dquot type 1 [ 42.938377][ T4594] EXT4-fs (loop4): 1 truncate cleaned up [ 42.952397][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.014016][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.343135][ T4654] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.356236][ T3415] Process accounting resumed [ 43.904093][ T4717] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 43.916644][ T4719] loop2: detected capacity change from 0 to 512 [ 43.947536][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.965964][ T4723] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 43.965964][ T4723] program syz.1.527 not setting count and/or reply_len properly [ 44.067355][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.184441][ T4745] loop2: detected capacity change from 0 to 512 [ 44.277959][ T4745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.311039][ T4745] EXT4-fs (loop2): 1 truncate cleaned up [ 44.335723][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.513130][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.104736][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 45.104754][ T29] audit: type=1326 audit(45.127:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 45.157397][ T29] audit: type=1326 audit(45.127:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 45.180134][ T29] audit: type=1326 audit(45.127:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 45.202724][ T29] audit: type=1326 audit(45.127:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 45.229522][ T29] audit: type=1326 audit(45.197:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 45.252272][ T29] audit: type=1326 audit(45.197:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 45.274919][ T29] audit: type=1326 audit(45.247:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 45.297560][ T29] audit: type=1326 audit(45.247:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 45.320141][ T29] audit: type=1326 audit(45.247:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 45.342743][ T29] audit: type=1326 audit(45.247:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 45.509944][ T4825] loop4: detected capacity change from 0 to 8192 [ 45.608800][ T4838] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.870821][ T4873] loop4: detected capacity change from 0 to 2048 [ 45.917193][ T4873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.266811][ T4921] : renamed from vlan0 (while UP) [ 46.319319][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.366514][ T4932] 9pnet: p9_errstr2errno: server reported unknown error  [ 46.419930][ T4940] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.693948][ T4970] __nla_validate_parse: 51 callbacks suppressed [ 46.693964][ T4970] netlink: 2 bytes leftover after parsing attributes in process `syz.0.635'. [ 46.755119][ T4976] mmap: syz.1.639 (4976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.797239][ T4980] SELinux: failed to load policy [ 47.255018][ T5020] capability: warning: `syz.0.658' uses deprecated v2 capabilities in a way that may be insecure [ 47.425152][ T5048] openvswitch: netlink: Message has 6 unknown bytes. [ 47.540285][ T5067] syzkaller0: entered promiscuous mode [ 47.545914][ T5067] syzkaller0: entered allmulticast mode [ 47.587595][ T5077] loop4: detected capacity change from 0 to 512 [ 47.594960][ T5077] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.659006][ T5084] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 47.719898][ T5094] Illegal XDP return value 65535 on prog (id 500) dev syz_tun, expect packet loss! [ 47.743033][ T5096] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 47.760651][ T5101] rdma_op ffff8881281da980 conn xmit_rdma 0000000000000000 [ 47.803418][ T5105] syz.4.696 uses obsolete (PF_INET,SOCK_PACKET) [ 47.855861][ T5114] loop3: detected capacity change from 0 to 164 [ 47.863894][ T5114] isofs_fill_super: root inode is not a directory. Corrupted media? [ 47.901316][ T5118] loop4: detected capacity change from 0 to 512 [ 48.031916][ T3393] Process accounting resumed [ 48.120947][ T5151] loop2: detected capacity change from 0 to 1024 [ 48.128861][ T5151] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.141910][ T5151] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.717: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.156590][ T5151] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.717: Failed to acquire dquot type 0 [ 48.173940][ T5151] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.717: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.192471][ T5151] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.717: Invalid inode bitmap blk 0 in block_group 0 [ 48.207907][ T5159] unsupported nla_type 52263 [ 48.222277][ T422] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.237264][ T5151] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 48.240260][ T422] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 48.263478][ T5151] EXT4-fs (loop2): 1 orphan inode deleted [ 48.270062][ T5151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.346695][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.530204][ T5203] loop4: detected capacity change from 0 to 1024 [ 48.544719][ T5203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.558979][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.574927][ T5203] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 48.587329][ T5203] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.587329][ T5203] [ 48.597919][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.612221][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.626521][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.641055][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.656367][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.671238][ T5206] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.686413][ T5206] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 48.705225][ T5206] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 48.712101][ T5203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.741: lblock 4 mapped to illegal pblock 4 (length 1) [ 48.716755][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 48.736539][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 48.812387][ T5212] Falling back ldisc for ttyS3. [ 48.894293][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 49.025320][ T5232] loop2: detected capacity change from 0 to 512 [ 49.033509][ T5232] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.094861][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 49.179875][ T5240] syzkaller1: entered promiscuous mode [ 49.185564][ T5240] syzkaller1: entered allmulticast mode [ 49.192085][ T5238] loop2: detected capacity change from 0 to 8192 [ 49.230838][ T5242] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 49.420389][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 49.432886][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.432886][ T31] [ 49.525826][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.562751][ T5280] atomic_op ffff888104b50528 conn xmit_atomic 0000000000000000 [ 49.583946][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 49.593004][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 49.677486][ T5296] netlink: 340 bytes leftover after parsing attributes in process `syz.0.783'. [ 49.677550][ T5299] program syz.1.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.870792][ T5333] loop3: detected capacity change from 0 to 512 [ 49.877904][ T5333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.890222][ T5333] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.898271][ T5333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 49.907917][ T5333] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 49.917447][ T5333] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 49.928562][ T5333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.941810][ T5333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.957117][ T5333] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 49.989570][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.164204][ T5382] 9pnet_fd: Insufficient options for proto=fd [ 50.224558][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 50.224650][ T29] audit: type=1326 audit(50.247:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35e0905d67 code=0x7ffc0000 [ 50.295563][ T5422] loop3: detected capacity change from 0 to 512 [ 50.319960][ T5422] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.328278][ T5429] loop2: detected capacity change from 0 to 7 [ 50.336036][ T29] audit: type=1326 audit(50.277:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f35e08aaf79 code=0x7ffc0000 [ 50.358264][ T29] audit: type=1326 audit(50.277:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35e0905d67 code=0x7ffc0000 [ 50.380375][ T29] audit: type=1326 audit(50.277:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f35e08aaf79 code=0x7ffc0000 [ 50.402556][ T29] audit: type=1326 audit(50.277:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 50.424645][ T29] audit: type=1326 audit(50.277:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 50.425244][ T5422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.446895][ T29] audit: type=1326 audit(50.277:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 50.478772][ T29] audit: type=1326 audit(50.277:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 50.500885][ T29] audit: type=1326 audit(50.277:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e090eec9 code=0x7ffc0000 [ 50.560463][ T5422] EXT4-fs (loop3): 1 truncate cleaned up [ 50.570102][ T5422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.610715][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.618091][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.768061][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.797998][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.941338][ T5445] ipvlan2: entered promiscuous mode [ 50.966389][ T5445] bridge0: port 3(ipvlan2) entered blocking state [ 50.973104][ T5445] bridge0: port 3(ipvlan2) entered disabled state [ 50.990475][ T5445] ipvlan2: entered allmulticast mode [ 50.995952][ T5445] bridge0: entered allmulticast mode [ 51.002499][ T5445] ipvlan2: left allmulticast mode [ 51.007663][ T5445] bridge0: left allmulticast mode [ 51.061937][ T5432] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.075854][ T5432] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.089737][ T5447] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.100460][ T5447] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.130219][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 51.161183][ T5452] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 51.167278][ T5452] syzkaller1: group set to 0 [ 51.181159][ T5454] veth1_macvtap: left promiscuous mode [ 51.197545][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.235517][ T5465] netlink: 'syz.0.832': attribute type 3 has an invalid length. [ 51.275195][ T5470] loop3: detected capacity change from 0 to 2048 [ 51.320772][ T5470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.572060][ T29] audit: type=1326 audit(51.587:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f354ceec9 code=0x7ffc0000 [ 51.618380][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.663549][ T5512] pim6reg1: entered promiscuous mode [ 51.668876][ T5512] pim6reg1: entered allmulticast mode [ 51.690447][ T5515] netlink: 204 bytes leftover after parsing attributes in process `syz.0.855'. [ 51.713163][ T5519] loop1: detected capacity change from 0 to 512 [ 51.732577][ T5519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.775479][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.801056][ T5533] SELinux: security_context_str_to_sid () failed with errno=-22 [ 51.866101][ T5545] pim6reg1: entered promiscuous mode [ 51.871478][ T5545] pim6reg1: entered allmulticast mode [ 51.979955][ T5565] loop3: detected capacity change from 0 to 164 [ 52.080308][ T5583] netlink: 'syz.4.887': attribute type 21 has an invalid length. [ 52.088206][ T5583] netlink: 128 bytes leftover after parsing attributes in process `syz.4.887'. [ 52.103534][ T5583] netlink: 'syz.4.887': attribute type 5 has an invalid length. [ 52.111237][ T5583] netlink: 'syz.4.887': attribute type 6 has an invalid length. [ 52.119008][ T5583] netlink: 3 bytes leftover after parsing attributes in process `syz.4.887'. [ 52.133387][ T5586] netlink: 'syz.1.888': attribute type 12 has an invalid length. [ 52.141251][ T5586] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 52.149085][ T5586] netlink: 148 bytes leftover after parsing attributes in process `syz.1.888'. [ 52.189051][ T5590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.890'. [ 52.226162][ T5598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5598 comm=syz.4.894 [ 52.299995][ T5614] netlink: 'syz.0.900': attribute type 3 has an invalid length. [ 52.329098][ T5616] loop3: detected capacity change from 0 to 512 [ 52.369975][ T5616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.425076][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.461282][ T5633] loop3: detected capacity change from 0 to 512 [ 52.477272][ T5635] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.522801][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.573957][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.819285][ T5670] netlink: 'syz.2.924': attribute type 3 has an invalid length. [ 53.113989][ T5697] loop2: detected capacity change from 0 to 164 [ 53.250570][ T5712] ipvlan2: entered promiscuous mode [ 53.257178][ T5712] bridge0: port 3(ipvlan2) entered blocking state [ 53.263867][ T5712] bridge0: port 3(ipvlan2) entered disabled state [ 53.272655][ T5712] ipvlan2: entered allmulticast mode [ 53.277986][ T5712] bridge0: entered allmulticast mode [ 53.292278][ T5712] ipvlan2: left allmulticast mode [ 53.297391][ T5712] bridge0: left allmulticast mode [ 53.312982][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 53.328690][ T5717] veth1_macvtap: left promiscuous mode [ 53.370831][ T5719] loop4: detected capacity change from 0 to 512 [ 53.378833][ T5719] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.388483][ T5719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.403883][ T5719] EXT4-fs (loop4): 1 truncate cleaned up [ 53.412651][ T5719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.615783][ T5747] loop1: detected capacity change from 0 to 512 [ 53.624585][ T5747] EXT4-fs: Ignoring removed i_version option [ 53.631161][ T5747] EXT4-fs: quotafile must be on filesystem root [ 53.661833][ T5734] ================================================================== [ 53.670071][ T5734] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 53.678441][ T5734] [ 53.680773][ T5734] write to 0xffff88811a06b254 of 4 bytes by task 5719 on cpu 1: [ 53.688411][ T5734] __xa_set_mark+0x172/0x1a0 [ 53.693024][ T5734] __folio_mark_dirty+0x3af/0x4d0 [ 53.698058][ T5734] mark_buffer_dirty+0x11e/0x210 [ 53.703010][ T5734] block_write_end+0x12d/0x210 [ 53.707795][ T5734] ext4_write_end+0x134/0x730 [ 53.712488][ T5734] generic_perform_write+0x30f/0x490 [ 53.717788][ T5734] ext4_buffered_write_iter+0x1ee/0x3c0 [ 53.723349][ T5734] ext4_file_write_iter+0xdbf/0xf00 [ 53.728559][ T5734] iter_file_splice_write+0x663/0xa60 [ 53.733938][ T5734] direct_splice_actor+0x153/0x2a0 [ 53.739049][ T5734] splice_direct_to_actor+0x30f/0x680 [ 53.744424][ T5734] do_splice_direct+0xda/0x150 [ 53.749191][ T5734] do_sendfile+0x380/0x650 [ 53.753628][ T5734] __x64_sys_sendfile64+0x105/0x150 [ 53.758836][ T5734] x64_sys_call+0x2bb0/0x2ff0 [ 53.763520][ T5734] do_syscall_64+0xd2/0x200 [ 53.768035][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.773935][ T5734] [ 53.776265][ T5734] read to 0xffff88811a06b254 of 4 bytes by task 5734 on cpu 0: [ 53.783807][ T5734] filemap_write_and_wait_range+0xfc/0x340 [ 53.789627][ T5734] ext4_file_write_iter+0xe04/0xf00 [ 53.794838][ T5734] iter_file_splice_write+0x663/0xa60 [ 53.800218][ T5734] direct_splice_actor+0x153/0x2a0 [ 53.805328][ T5734] splice_direct_to_actor+0x30f/0x680 [ 53.810718][ T5734] do_splice_direct+0xda/0x150 [ 53.815487][ T5734] do_sendfile+0x380/0x650 [ 53.819908][ T5734] __x64_sys_sendfile64+0x105/0x150 [ 53.825137][ T5734] x64_sys_call+0x2bb0/0x2ff0 [ 53.829820][ T5734] do_syscall_64+0xd2/0x200 [ 53.834330][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.840224][ T5734] [ 53.842543][ T5734] value changed: 0x00000021 -> 0x0a000021 [ 53.848255][ T5734] [ 53.850581][ T5734] Reported by Kernel Concurrency Sanitizer on: [ 53.856739][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz.4.944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.867937][ T5734] Tainted: [W]=WARN [ 53.871738][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.881803][ T5734] ================================================================== [ 54.137209][ T5734] ================================================================== [ 54.145433][ T5734] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 54.153449][ T5734] [ 54.155787][ T5734] write to 0xffff88811a06b254 of 4 bytes by task 5719 on cpu 0: [ 54.163427][ T5734] xas_set_mark+0x12b/0x140 [ 54.167962][ T5734] tag_pages_for_writeback+0xc2/0x290 [ 54.173369][ T5734] ext4_do_writepages+0x6b2/0x2750 [ 54.178510][ T5734] ext4_writepages+0x176/0x300 [ 54.183294][ T5734] do_writepages+0x1c6/0x310 [ 54.187902][ T5734] filemap_write_and_wait_range+0x144/0x340 [ 54.193830][ T5734] filemap_invalidate_pages+0xa4/0x1a0 [ 54.199309][ T5734] kiocb_invalidate_pages+0x6e/0x80 [ 54.204542][ T5734] __iomap_dio_rw+0x5d4/0x1250 [ 54.209330][ T5734] iomap_dio_rw+0x40/0x90 [ 54.213673][ T5734] ext4_file_write_iter+0xad9/0xf00 [ 54.218914][ T5734] iter_file_splice_write+0x663/0xa60 [ 54.224309][ T5734] direct_splice_actor+0x153/0x2a0 [ 54.229442][ T5734] splice_direct_to_actor+0x30f/0x680 [ 54.234841][ T5734] do_splice_direct+0xda/0x150 [ 54.239672][ T5734] do_sendfile+0x380/0x650 [ 54.244124][ T5734] __x64_sys_sendfile64+0x105/0x150 [ 54.249359][ T5734] x64_sys_call+0x2bb0/0x2ff0 [ 54.254056][ T5734] do_syscall_64+0xd2/0x200 [ 54.258610][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.264536][ T5734] [ 54.266871][ T5734] read to 0xffff88811a06b254 of 4 bytes by task 5734 on cpu 1: [ 54.274530][ T5734] file_write_and_wait_range+0x10e/0x2c0 [ 54.280204][ T5734] generic_buffers_fsync_noflush+0x45/0x120 [ 54.286123][ T5734] ext4_sync_file+0x1ab/0x690 [ 54.290822][ T5734] vfs_fsync_range+0x10d/0x130 [ 54.295622][ T5734] ext4_buffered_write_iter+0x34f/0x3c0 [ 54.301200][ T5734] ext4_file_write_iter+0xdbf/0xf00 [ 54.306430][ T5734] iter_file_splice_write+0x663/0xa60 [ 54.311822][ T5734] direct_splice_actor+0x153/0x2a0 [ 54.316965][ T5734] splice_direct_to_actor+0x30f/0x680 [ 54.322370][ T5734] do_splice_direct+0xda/0x150 [ 54.327162][ T5734] do_sendfile+0x380/0x650 [ 54.331605][ T5734] __x64_sys_sendfile64+0x105/0x150 [ 54.336848][ T5734] x64_sys_call+0x2bb0/0x2ff0 [ 54.341546][ T5734] do_syscall_64+0xd2/0x200 [ 54.346086][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.351998][ T5734] [ 54.354333][ T5734] value changed: 0x02000021 -> 0x04000021 [ 54.360056][ T5734] [ 54.362393][ T5734] Reported by Kernel Concurrency Sanitizer on: [ 54.368559][ T5734] CPU: 1 UID: 0 PID: 5734 Comm: syz.4.944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.379783][ T5734] Tainted: [W]=WARN [ 54.383608][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.393673][ T5734] ================================================================== [ 54.496600][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.