last executing test programs: 1.613407759s ago: executing program 3 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) 1.589985809s ago: executing program 3 (id=625): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x80000001}, 0x18) write$selinux_access(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a3a73302075c7224b25caf3f405c26e636f6e66696e65642030"], 0x3f) 1.56201279s ago: executing program 3 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 1.52573471s ago: executing program 3 (id=630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1}, 0xc) 772.22828ms ago: executing program 1 (id=680): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$get_security(0x11, r0, 0x0, 0x0) 735.78795ms ago: executing program 1 (id=683): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x150, 0x24, 0xf0b, 0x4, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0xffff0000, 0x3, 0x3, 0x0, 0x1a, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}}, 0x8000) 631.746372ms ago: executing program 3 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 609.216852ms ago: executing program 1 (id=692): unshare(0x28040680) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) 587.197583ms ago: executing program 3 (id=694): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xa) syz_usb_disconnect(0xffffffffffffffff) 550.649123ms ago: executing program 2 (id=697): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 545.608213ms ago: executing program 1 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001b40)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 445.103944ms ago: executing program 4 (id=699): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0) 421.167584ms ago: executing program 1 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 374.273305ms ago: executing program 4 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000380)="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"/301, 0x12d, r1) 334.917286ms ago: executing program 1 (id=703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xdf1) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 320.759596ms ago: executing program 4 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 304.414806ms ago: executing program 4 (id=705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c5a7b796e1d5ec8b59e2ac10928dbfd5"}]}}}}}}}}, 0x0) 282.337866ms ago: executing program 2 (id=707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000001000000000000cf2781ec850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000003c0)={0x1, 0x2, 0xffffffffffff7bbb, 0x100000001}) 281.959296ms ago: executing program 4 (id=708): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, &(0x7f0000000140)={0x10004, 0x1, 0x401, 0xf, 0xffffffffffffffff, 0xb, 0x28a7, 0x0, 0x6}) 269.536186ms ago: executing program 0 (id=709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x9) 262.920986ms ago: executing program 2 (id=710): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 213.112147ms ago: executing program 2 (id=711): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000000, 0x0) 161.325458ms ago: executing program 0 (id=712): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000014c0)=""/4093, 0xffd) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) 148.196468ms ago: executing program 0 (id=713): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 117.444428ms ago: executing program 0 (id=714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xd) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80) 87.767509ms ago: executing program 2 (id=715): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000002c001a8028000480"], 0x4c}}, 0x0) 65.105069ms ago: executing program 2 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) 55.153619ms ago: executing program 0 (id=717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.17748ms ago: executing program 4 (id=718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 24.731544][ T29] audit: type=1400 audit(1748418780.289:65): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.732324][ T3308] cgroup: Unknown subsys name 'net' [ 24.761209][ T29] audit: type=1400 audit(1748418780.289:66): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.783423][ T29] audit: type=1400 audit(1748418780.319:67): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.932501][ T3308] cgroup: Unknown subsys name 'cpuset' [ 24.938563][ T3308] cgroup: Unknown subsys name 'rlimit' [ 25.087386][ T29] audit: type=1400 audit(1748418780.649:68): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.110792][ T29] audit: type=1400 audit(1748418780.649:69): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.131290][ T29] audit: type=1400 audit(1748418780.649:70): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.151738][ T29] audit: type=1400 audit(1748418780.649:71): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.158915][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.172014][ T29] audit: type=1400 audit(1748418780.669:72): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.205412][ T29] audit: type=1400 audit(1748418780.669:73): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.228673][ T29] audit: type=1400 audit(1748418780.749:74): avc: denied { relabelto } for pid=3312 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.266129][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.943200][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.982591][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.013027][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 27.070733][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.077841][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.085161][ T3319] bridge_slave_0: entered allmulticast mode [ 27.091510][ T3319] bridge_slave_0: entered promiscuous mode [ 27.112304][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.119563][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.127296][ T3319] bridge_slave_1: entered allmulticast mode [ 27.133883][ T3319] bridge_slave_1: entered promiscuous mode [ 27.148824][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.156049][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.163397][ T3318] bridge_slave_0: entered allmulticast mode [ 27.169650][ T3318] bridge_slave_0: entered promiscuous mode [ 27.183811][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.203471][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.210623][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.217887][ T3318] bridge_slave_1: entered allmulticast mode [ 27.224378][ T3318] bridge_slave_1: entered promiscuous mode [ 27.239152][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.261616][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.271024][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.278226][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.285348][ T3324] bridge_slave_0: entered allmulticast mode [ 27.291742][ T3324] bridge_slave_0: entered promiscuous mode [ 27.300511][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.308059][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.315272][ T3324] bridge_slave_1: entered allmulticast mode [ 27.321909][ T3324] bridge_slave_1: entered promiscuous mode [ 27.330906][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.340844][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.351178][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.376281][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.400888][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.422145][ T3318] team0: Port device team_slave_0 added [ 27.432297][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.439364][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.446496][ T3321] bridge_slave_0: entered allmulticast mode [ 27.452995][ T3321] bridge_slave_0: entered promiscuous mode [ 27.464678][ T3319] team0: Port device team_slave_0 added [ 27.471172][ T3318] team0: Port device team_slave_1 added [ 27.487380][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.494460][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.501575][ T3321] bridge_slave_1: entered allmulticast mode [ 27.508343][ T3321] bridge_slave_1: entered promiscuous mode [ 27.519993][ T3319] team0: Port device team_slave_1 added [ 27.543371][ T3324] team0: Port device team_slave_0 added [ 27.553787][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.560740][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.586834][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.597619][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.605017][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.612319][ T3322] bridge_slave_0: entered allmulticast mode [ 27.618971][ T3322] bridge_slave_0: entered promiscuous mode [ 27.630776][ T3324] team0: Port device team_slave_1 added [ 27.636694][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.643698][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.669630][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.680876][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.687877][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.714060][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.725038][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.732039][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.757996][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.768744][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.775853][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.783457][ T3322] bridge_slave_1: entered allmulticast mode [ 27.789736][ T3322] bridge_slave_1: entered promiscuous mode [ 27.797084][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.820574][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.840091][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.847232][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.873229][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.890754][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.901405][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.910885][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.918006][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.944002][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.981682][ T3321] team0: Port device team_slave_0 added [ 27.988381][ T3321] team0: Port device team_slave_1 added [ 28.002908][ T3322] team0: Port device team_slave_0 added [ 28.011117][ T3319] hsr_slave_0: entered promiscuous mode [ 28.017151][ T3319] hsr_slave_1: entered promiscuous mode [ 28.029536][ T3318] hsr_slave_0: entered promiscuous mode [ 28.035576][ T3318] hsr_slave_1: entered promiscuous mode [ 28.041364][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.049663][ T3318] Cannot create hsr debugfs directory [ 28.060991][ T3322] team0: Port device team_slave_1 added [ 28.076236][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.083254][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.109697][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.138782][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.145857][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.171931][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.186984][ T3324] hsr_slave_0: entered promiscuous mode [ 28.193350][ T3324] hsr_slave_1: entered promiscuous mode [ 28.199095][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.206675][ T3324] Cannot create hsr debugfs directory [ 28.212617][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.219568][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.245631][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.270306][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.277321][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.303532][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.328296][ T3321] hsr_slave_0: entered promiscuous mode [ 28.334508][ T3321] hsr_slave_1: entered promiscuous mode [ 28.340235][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.347815][ T3321] Cannot create hsr debugfs directory [ 28.400477][ T3322] hsr_slave_0: entered promiscuous mode [ 28.406587][ T3322] hsr_slave_1: entered promiscuous mode [ 28.412484][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.420031][ T3322] Cannot create hsr debugfs directory [ 28.546211][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.554689][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.572249][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.580581][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.599446][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.612102][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.626500][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.635127][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.649953][ T3324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.661536][ T3324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.677357][ T3324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.685943][ T3324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.711950][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.730021][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.741351][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.750104][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.781367][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.791249][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.812780][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.822063][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.835844][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.843802][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.860774][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.875206][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.882323][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.892924][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.904878][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.911930][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.922435][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.929550][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.952774][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.959870][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.977393][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.988099][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.029374][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.041237][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.050648][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.057860][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.066480][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.073522][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.099599][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.127604][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.134759][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.143686][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.150830][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.170677][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.188297][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.195789][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.215880][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.223093][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.241483][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.275069][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.314871][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.350925][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.391112][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.470024][ T3322] veth0_vlan: entered promiscuous mode [ 29.489038][ T3319] veth0_vlan: entered promiscuous mode [ 29.504679][ T3322] veth1_vlan: entered promiscuous mode [ 29.511035][ T3321] veth0_vlan: entered promiscuous mode [ 29.529484][ T3319] veth1_vlan: entered promiscuous mode [ 29.540630][ T3321] veth1_vlan: entered promiscuous mode [ 29.556903][ T3322] veth0_macvtap: entered promiscuous mode [ 29.573384][ T3322] veth1_macvtap: entered promiscuous mode [ 29.586732][ T3319] veth0_macvtap: entered promiscuous mode [ 29.611434][ T3319] veth1_macvtap: entered promiscuous mode [ 29.618488][ T3321] veth0_macvtap: entered promiscuous mode [ 29.629988][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.640767][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.651366][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.659922][ T3324] veth0_vlan: entered promiscuous mode [ 29.666074][ T3321] veth1_macvtap: entered promiscuous mode [ 29.675695][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.684559][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.693299][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.702078][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.715271][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.734736][ T3318] veth0_vlan: entered promiscuous mode [ 29.743376][ T3319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.752536][ T3319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.761279][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.770676][ T3319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.784564][ T3324] veth1_vlan: entered promiscuous mode [ 29.792814][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.800617][ T3318] veth1_vlan: entered promiscuous mode [ 29.817999][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.828633][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.828647][ T29] audit: type=1400 audit(1748418785.389:84): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.TptaSR/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.860391][ T29] audit: type=1400 audit(1748418785.399:85): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.882496][ T29] audit: type=1400 audit(1748418785.399:86): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.TptaSR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.907813][ T29] audit: type=1400 audit(1748418785.399:87): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.929755][ T29] audit: type=1400 audit(1748418785.399:88): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.TptaSR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.956304][ T29] audit: type=1400 audit(1748418785.399:89): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.TptaSR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.983947][ T29] audit: type=1400 audit(1748418785.399:90): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.003507][ T29] audit: type=1400 audit(1748418785.419:91): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.027578][ T29] audit: type=1400 audit(1748418785.419:92): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=4142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.049747][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.059259][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.068030][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.076812][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.087023][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.116313][ T3324] veth0_macvtap: entered promiscuous mode [ 30.127769][ T29] audit: type=1400 audit(1748418785.689:93): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.153607][ T3318] veth0_macvtap: entered promiscuous mode [ 30.161301][ T3318] veth1_macvtap: entered promiscuous mode [ 30.175112][ T3324] veth1_macvtap: entered promiscuous mode [ 30.195525][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.204611][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.233615][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.250926][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.259893][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.268707][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.269746][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.277588][ T3466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.295231][ T3324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.304058][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.312801][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.321582][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.334784][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.343759][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352537][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361446][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.370371][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.379252][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.388154][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.396887][ T3466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.424322][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.433152][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.654651][ T3502] loop2: detected capacity change from 0 to 128 [ 30.667212][ T3502] FAT-fs (loop2): Directory bread(block 162) failed [ 30.677075][ T3502] FAT-fs (loop2): Directory bread(block 163) failed [ 30.689862][ T3502] FAT-fs (loop2): Directory bread(block 164) failed [ 30.697052][ T3502] FAT-fs (loop2): Directory bread(block 165) failed [ 30.705319][ T3502] FAT-fs (loop2): Directory bread(block 166) failed [ 30.712354][ T3502] FAT-fs (loop2): Directory bread(block 167) failed [ 30.726795][ T3502] FAT-fs (loop2): Directory bread(block 168) failed [ 30.734455][ T3502] FAT-fs (loop2): Directory bread(block 169) failed [ 30.883528][ T3526] loop0: detected capacity change from 0 to 256 [ 30.945084][ T3534] loop0: detected capacity change from 0 to 256 [ 30.972010][ T3534] ======================================================= [ 30.972010][ T3534] WARNING: The mand mount option has been deprecated and [ 30.972010][ T3534] and is ignored by this kernel. Remove the mand [ 30.972010][ T3534] option from the mount to silence this warning. [ 30.972010][ T3534] ======================================================= [ 31.042010][ T3534] FAT-fs (loop0): codepage cp864 not found [ 31.272618][ T3566] openvswitch: netlink: Message has 6 unknown bytes. [ 31.308768][ T3571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 31.434639][ T3583] SELinux: syz.0.55 (3583) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 31.451282][ T3586] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.504478][ T3589] loop2: detected capacity change from 0 to 1024 [ 31.548614][ T3595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.573028][ T3589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.594795][ T3595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.616292][ T3595] bond0: (slave bond1): Enslaving as an active interface with an up link [ 31.627839][ T3589] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 31.643526][ T3603] Zero length message leads to an empty skb [ 31.697078][ T3609] netlink: 'syz.3.67': attribute type 21 has an invalid length. [ 31.715499][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.758066][ T3616] loop1: detected capacity change from 0 to 4096 [ 31.775080][ T3616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.827894][ T3620] serio: Serial port ptm0 [ 31.836217][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.890749][ T3633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3633 comm=syz.1.77 [ 32.063907][ T3659] capability: warning: `syz.0.88' uses deprecated v2 capabilities in a way that may be insecure [ 32.097449][ T3659] loop0: detected capacity change from 0 to 512 [ 32.124071][ T3659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.142717][ T3659] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.182273][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.207500][ T3678] loop2: detected capacity change from 0 to 256 [ 32.221568][ T3678] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 32.312105][ T3689] syz.2.100 uses obsolete (PF_INET,SOCK_PACKET) [ 32.795081][ T3743] sctp: [Deprecated]: syz.4.123 (pid 3743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 32.795081][ T3743] Use struct sctp_sack_info instead [ 33.097940][ T3772] ref_ctr_offset mismatch. inode: 0xd3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 33.143857][ T3774] loop0: detected capacity change from 0 to 764 [ 33.249335][ T3780] SELinux: failed to load policy [ 33.438467][ T3812] loop1: detected capacity change from 0 to 512 [ 33.489207][ T3812] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.534191][ T3812] EXT4-fs (loop1): mount failed [ 33.788170][ T3870] loop0: detected capacity change from 0 to 128 [ 33.806431][ T3870] syz.0.178: attempt to access beyond end of device [ 33.806431][ T3870] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 33.828162][ T3870] Buffer I/O error on dev loop0, logical block 2065, async page read [ 33.838831][ T3870] syz.0.178: attempt to access beyond end of device [ 33.838831][ T3870] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 33.852178][ T3870] Buffer I/O error on dev loop0, logical block 2066, async page read [ 33.862983][ T3870] syz.0.178: attempt to access beyond end of device [ 33.862983][ T3870] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 33.876563][ T3870] Buffer I/O error on dev loop0, logical block 2067, async page read [ 33.886861][ T3870] syz.0.178: attempt to access beyond end of device [ 33.886861][ T3870] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 33.900130][ T3870] Buffer I/O error on dev loop0, logical block 2068, async page read [ 33.909435][ T3870] syz.0.178: attempt to access beyond end of device [ 33.909435][ T3870] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 33.922732][ T3870] Buffer I/O error on dev loop0, logical block 2069, async page read [ 33.930870][ T3870] syz.0.178: attempt to access beyond end of device [ 33.930870][ T3870] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 33.944324][ T3870] Buffer I/O error on dev loop0, logical block 2070, async page read [ 33.953443][ T3870] syz.0.178: attempt to access beyond end of device [ 33.953443][ T3870] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 33.966859][ T3870] Buffer I/O error on dev loop0, logical block 2071, async page read [ 33.969800][ T3878] process 'syz.2.182' launched './file0' with NULL argv: empty string added [ 33.975211][ T3870] syz.0.178: attempt to access beyond end of device [ 33.975211][ T3870] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 33.997267][ T3870] Buffer I/O error on dev loop0, logical block 2072, async page read [ 34.009423][ T3870] syz.0.178: attempt to access beyond end of device [ 34.009423][ T3870] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 34.022847][ T3870] Buffer I/O error on dev loop0, logical block 2065, async page read [ 34.031726][ T3870] syz.0.178: attempt to access beyond end of device [ 34.031726][ T3870] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 34.045094][ T3870] Buffer I/O error on dev loop0, logical block 2066, async page read [ 34.084522][ T3885] sit0: entered promiscuous mode [ 34.092865][ T3885] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 34.305770][ T3917] loop1: detected capacity change from 0 to 1024 [ 34.324068][ T3917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.342263][ T3917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.201: bg 0: block 88: padding at end of block bitmap is not set [ 34.357488][ T3917] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 34.396383][ T3924] loop3: detected capacity change from 0 to 512 [ 34.408530][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.430139][ T3924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.448122][ T3924] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.511384][ T3924] EXT4-fs warning (device loop3): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 34.583136][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.979623][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 34.979641][ T29] audit: type=1400 audit(1748418790.539:297): avc: denied { listen } for pid=3971 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.075090][ T29] audit: type=1400 audit(1748418790.639:298): avc: denied { execute } for pid=3977 comm="syz.1.221" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 35.225765][ T29] audit: type=1400 audit(1748418790.679:299): avc: denied { shutdown } for pid=3971 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.406777][ T4000] netlink: 'syz.4.228': attribute type 6 has an invalid length. [ 35.530523][ T4008] loop4: detected capacity change from 0 to 128 [ 35.545975][ T4006] bridge_slave_0: left allmulticast mode [ 35.551719][ T4006] bridge_slave_0: left promiscuous mode [ 35.558134][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.568349][ T4008] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.576900][ T3929] kexec: Could not allocate swap buffer [ 35.589573][ T4008] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.641240][ T4006] bridge_slave_1: left allmulticast mode [ 35.647111][ T4006] bridge_slave_1: left promiscuous mode [ 35.652987][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.666434][ T1912] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.693915][ T29] audit: type=1400 audit(1748418791.259:300): avc: denied { read } for pid=4016 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.720297][ T4006] bond0: (slave bond_slave_0): Releasing backup interface [ 35.736301][ T4006] bond0: (slave bond_slave_1): Releasing backup interface [ 35.765654][ T4006] team0: Port device team_slave_0 removed [ 35.773194][ T4034] __nla_validate_parse: 9 callbacks suppressed [ 35.773212][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 35.794367][ T4006] team0: Port device team_slave_1 removed [ 35.801698][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.809323][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.824445][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.832027][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.849762][ T4037] loop3: detected capacity change from 0 to 164 [ 35.868482][ T4034] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 35.881919][ T4037] rock: directory entry would overflow storage [ 35.888208][ T4037] rock: sig=0x66, size=4, remaining=3 [ 35.913455][ T4037] rock: directory entry would overflow storage [ 35.919694][ T4037] rock: sig=0x66, size=4, remaining=3 [ 35.936410][ T29] audit: type=1400 audit(1748418791.499:301): avc: denied { mount } for pid=4038 comm="syz.4.244" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 35.968075][ T29] audit: type=1400 audit(1748418791.529:302): avc: denied { unmount } for pid=4038 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 36.001767][ T4043] netem: incorrect ge model size [ 36.007085][ T4043] netem: change failed [ 36.018009][ T4046] loop4: detected capacity change from 0 to 128 [ 36.021075][ T4006] syz.1.234 (4006) used greatest stack depth: 10928 bytes left [ 36.058370][ T29] audit: type=1400 audit(1748418791.619:303): avc: denied { name_connect } for pid=4051 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 36.080527][ T4054] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 36.086912][ T4047] loop0: detected capacity change from 0 to 1024 [ 36.103737][ T4047] ext4: Unknown parameter 'nouser_xattr' [ 36.379823][ T29] audit: type=1326 audit(1748418791.939:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645c97e969 code=0x7ffc0000 [ 36.404226][ T29] audit: type=1326 audit(1748418791.969:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f645c97e969 code=0x7ffc0000 [ 36.427763][ T29] audit: type=1326 audit(1748418791.969:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645c97e969 code=0x7ffc0000 [ 36.485553][ T4090] bridge0: port 3(vlan2) entered blocking state [ 36.492043][ T4090] bridge0: port 3(vlan2) entered disabled state [ 36.500897][ T4090] vlan2: entered allmulticast mode [ 36.506225][ T4090] bridge0: entered allmulticast mode [ 36.513650][ T4090] vlan2: left allmulticast mode [ 36.518553][ T4090] bridge0: left allmulticast mode [ 36.573855][ T4092] syz.0.264 (4092) used greatest stack depth: 10840 bytes left [ 36.604554][ T4103] loop1: detected capacity change from 0 to 1024 [ 36.641632][ T4103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.679905][ T4108] syz.4.272 (4108) used greatest stack depth: 9440 bytes left [ 36.700291][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.830789][ T4133] netlink: 160 bytes leftover after parsing attributes in process `syz.1.282'. [ 36.948039][ T4150] 9pnet_fd: Insufficient options for proto=fd [ 36.966619][ T4154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 36.975826][ T4154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 36.993974][ T4154] gretap0: entered promiscuous mode [ 37.033371][ T4154] batadv_slave_1: entered promiscuous mode [ 37.235159][ T4185] loop2: detected capacity change from 0 to 1024 [ 37.247167][ T4187] loop4: detected capacity change from 0 to 1024 [ 37.260668][ T4187] EXT4-fs: Ignoring removed oldalloc option [ 37.266930][ T4187] EXT4-fs: Ignoring removed orlov option [ 37.282232][ T4185] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 37.294628][ T4185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.310315][ T4187] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 37.334259][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.355488][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.408542][ T4187] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.307: Allocating blocks 481-513 which overlap fs metadata [ 37.434411][ T4187] EXT4-fs (loop4): Remounting filesystem read-only [ 37.442937][ T4186] EXT4-fs (loop4): pa ffff888107187000: logic 0, phys. 145, len 23 [ 37.463408][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.503109][ T4207] loop3: detected capacity change from 0 to 512 [ 37.510141][ T4207] EXT4-fs: Ignoring removed oldalloc option [ 37.533667][ T4207] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.316: Parent and EA inode have the same ino 15 [ 37.550373][ T4207] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.316: Parent and EA inode have the same ino 15 [ 37.564496][ T4207] EXT4-fs (loop3): 1 orphan inode deleted [ 37.576203][ T4207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.630530][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.711578][ T4227] loop3: detected capacity change from 0 to 1024 [ 37.754516][ T4227] EXT4-fs: Ignoring removed oldalloc option [ 37.760592][ T4227] EXT4-fs: Ignoring removed i_version option [ 37.793633][ C1] hrtimer: interrupt took 39530 ns [ 37.810455][ T4238] loop4: detected capacity change from 0 to 2048 [ 37.844862][ T4227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.875944][ T4238] EXT4-fs (loop4): failed to initialize system zone (-117) [ 37.883307][ T4238] EXT4-fs (loop4): mount failed [ 37.919777][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.994883][ T4259] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 38.002974][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 38.028720][ T4263] Invalid ELF header magic: != ELF [ 38.079290][ T4268] netlink: 9 bytes leftover after parsing attributes in process `syz.2.342'. [ 38.096658][ T4272] loop4: detected capacity change from 0 to 1024 [ 38.103467][ T4272] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.111694][ T4272] EXT4-fs: Ignoring removed nobh option [ 38.117623][ T4272] EXT4-fs: Ignoring removed bh option [ 38.160547][ T4283] usb usb9: check_ctrlrecip: process 4283 (syz.3.349) requesting ep 01 but needs 81 [ 38.170153][ T4283] usb usb9: usbfs: process 4283 (syz.3.349) did not claim interface 0 before use [ 38.179352][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.198900][ T4272] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.343: corrupted xattr block 145: invalid header [ 38.214001][ T4272] EXT4-fs (loop4): Remounting filesystem read-only [ 38.220815][ T4272] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 38.251178][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.323002][ T4304] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.357' sets config #0 [ 38.585737][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.593647][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.601421][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.609257][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.617060][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.624960][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.632828][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.640631][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.648541][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.656610][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.664614][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.672597][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.680740][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.688712][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.696638][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.704542][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.712407][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.720446][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.728338][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.736239][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.744050][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.751862][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.759713][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.767593][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.775390][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.783185][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.791118][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.798950][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.806779][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.814566][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.822401][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.830209][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.838086][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.845952][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.853850][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.861991][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.870012][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.877917][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.885753][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.893549][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.901413][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.909274][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.917220][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.925782][ T2972] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.975370][ T4353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.379'. [ 39.066805][ T4365] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 39.121893][ T4376] loop3: detected capacity change from 0 to 128 [ 39.190843][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 39.200239][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 39.210944][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 39.845386][ T4459] netlink: 'syz.0.427': attribute type 14 has an invalid length. [ 39.905814][ T4467] loop3: detected capacity change from 0 to 1024 [ 39.931415][ T4471] loop4: detected capacity change from 0 to 128 [ 39.955649][ T4467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.980509][ T4471] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.991562][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 39.991578][ T29] audit: type=1400 audit(1748418795.549:414): avc: denied { create } for pid=4482 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.019153][ T29] audit: type=1400 audit(1748418795.549:415): avc: denied { write } for pid=4482 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.019458][ T4467] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.431: Abort forced by user [ 40.039581][ T29] audit: type=1400 audit(1748418795.549:416): avc: denied { read } for pid=4482 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.070171][ T4471] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.072026][ T4467] EXT4-fs (loop3): Remounting filesystem read-only [ 40.083671][ T29] audit: type=1400 audit(1748418795.559:417): avc: denied { create } for pid=4484 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.087096][ T4467] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.106372][ T29] audit: type=1400 audit(1748418795.559:418): avc: denied { setopt } for pid=4484 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.134069][ T29] audit: type=1400 audit(1748418795.559:419): avc: denied { write } for pid=4484 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.153365][ T29] audit: type=1400 audit(1748418795.559:420): avc: denied { connect } for pid=4484 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.172802][ T29] audit: type=1400 audit(1748418795.559:421): avc: denied { name_connect } for pid=4484 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 40.193673][ T29] audit: type=1400 audit(1748418795.749:422): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.224309][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.253138][ T29] audit: type=1400 audit(1748418795.799:423): avc: denied { audit_write } for pid=4488 comm="syz.1.441" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 40.277037][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.316818][ T4499] loop3: detected capacity change from 0 to 512 [ 40.323774][ T4499] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.330856][ T4499] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.341599][ T4499] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 40.351263][ T4499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 40.361014][ T4499] System zones: 0-2, 18-18, 34-34 [ 40.366657][ T4499] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 40.382166][ T4499] EXT4-fs (loop3): 1 truncate cleaned up [ 40.389757][ T4499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.397267][ T4509] loop4: detected capacity change from 0 to 512 [ 40.410411][ T4509] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.424255][ T4509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.438368][ T4509] EXT4-fs (loop4): 1 truncate cleaned up [ 40.445081][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.454342][ T4512] loop1: detected capacity change from 0 to 512 [ 40.454719][ T4509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.482868][ T4512] EXT4-fs (loop1): too many log groups per flexible block group [ 40.490659][ T4512] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 40.498291][ T4512] EXT4-fs (loop1): mount failed [ 40.532704][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.552488][ T4520] loop4: detected capacity change from 0 to 512 [ 40.560351][ T4520] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.453: corrupted in-inode xattr: invalid ea_ino [ 40.574841][ T4520] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.453: couldn't read orphan inode 15 (err -117) [ 40.587276][ T4520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.606417][ T4520] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.453: bg 0: block 5: invalid block bitmap [ 40.619937][ T4520] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 40.632304][ T4520] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.632304][ T4520] [ 40.641994][ T4520] EXT4-fs (loop4): Total free blocks count 0 [ 40.648139][ T4520] EXT4-fs (loop4): Free/Dirty block details [ 40.654077][ T4520] EXT4-fs (loop4): free_blocks=0 [ 40.659026][ T4520] EXT4-fs (loop4): dirty_blocks=16 [ 40.664203][ T4520] EXT4-fs (loop4): Block reservation details [ 40.670252][ T4520] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 40.856906][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.931558][ T4532] loop4: detected capacity change from 0 to 128 [ 40.953248][ T4532] vfat: Bad value for 'shortname' [ 41.099908][ T4539] loop4: detected capacity change from 0 to 2048 [ 41.127445][ T4539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.150328][ T4539] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.218728][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.623778][ T4580] __nla_validate_parse: 8 callbacks suppressed [ 41.623798][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 41.862664][ T4619] 9pnet: p9_errstr2errno: server reported unknown error [ 41.892718][ T4623] unsupported nla_type 52263 [ 42.048095][ T4653] bridge0: port 2(bridge_slave_1) entered learning state [ 42.059125][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.150003][ T4669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.520'. [ 42.150450][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.176986][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.238619][ T4679] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 42.268244][ T4687] loop4: detected capacity change from 0 to 128 [ 42.282989][ T4687] capability: warning: `syz.4.529' uses 32-bit capabilities (legacy support in use) [ 42.319321][ T4694] loop4: detected capacity change from 0 to 1024 [ 42.329195][ T4694] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.530: Failed to acquire dquot type 0 [ 42.334475][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 42.340881][ T4694] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.367088][ T4694] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.530: corrupted inode contents [ 42.379346][ T4694] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.530: mark_inode_dirty error [ 42.393375][ T4694] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.530: corrupted inode contents [ 42.407978][ T4694] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.530: mark_inode_dirty error [ 42.435708][ T4694] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.530: corrupted inode contents [ 42.448670][ T4694] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 42.458825][ T4706] netlink: 136 bytes leftover after parsing attributes in process `syz.0.535'. [ 42.459992][ T4694] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.530: corrupted inode contents [ 42.467932][ T4706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.497650][ T4694] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.530: mark_inode_dirty error [ 42.509879][ T4694] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 42.522322][ T4694] EXT4-fs (loop4): 1 truncate cleaned up [ 42.529781][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.558454][ T4715] usb usb7: usbfs: process 4715 (syz.0.539) did not claim interface 0 before use [ 42.646253][ T4721] loop0: detected capacity change from 0 to 1024 [ 42.667669][ T4721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.686918][ T4721] EXT4-fs error (device loop0): ext4_lookup:1789: inode #14: comm syz.0.542: iget: immutable or append flags not allowed on symlinks [ 42.719534][ T4721] EXT4-fs (loop0): Remounting filesystem read-only [ 42.722621][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.785945][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.940764][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 42.968567][ T4755] macsec1: entered allmulticast mode [ 43.020932][ T4772] vhci_hcd: default hub control req: 000d v0010 i0005 l0 [ 43.052333][ T4776] netlink: 92 bytes leftover after parsing attributes in process `syz.4.567'. [ 43.115030][ T4790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.130010][ T4790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.244468][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 43.363060][ T4825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 43.701352][ T4856] loop4: detected capacity change from 0 to 1024 [ 43.703361][ T4856] EXT4-fs: Ignoring removed nobh option [ 43.713446][ T4856] EXT4-fs: Ignoring removed bh option [ 43.725505][ T4856] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.603: bad orphan inode 32767 [ 43.725998][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.799636][ T4856] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 43.819751][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.868244][ T4870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.609'. [ 43.873462][ T4872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.610'. [ 44.042421][ T4889] bond1: entered promiscuous mode [ 44.047662][ T4889] bond1: entered allmulticast mode [ 44.065717][ T4889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.186241][ T4910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.244616][ T4910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.284957][ T4927] loop4: detected capacity change from 0 to 512 [ 44.292534][ T4910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.320100][ T4927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.335409][ T4927] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.350630][ T4910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.363600][ T4927] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz.4.635: invalid size [ 44.374063][ T4927] EXT4-fs (loop4): Remounting filesystem read-only [ 44.389169][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.398462][ T1912] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.411370][ T1912] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.416693][ T4910] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.433658][ T4910] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.445411][ T4910] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.459010][ T4910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.500129][ T4944] loop0: detected capacity change from 0 to 512 [ 44.510434][ T4944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.542823][ T4944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.571390][ T4944] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.627750][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.794428][ T4992] 9pnet: Could not find request transport: r [ 44.830965][ T4999] program syz.1.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.951905][ T1053] kernel read not supported for file /vcs (pid: 1053 comm: kworker/1:2) [ 45.017241][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 45.017259][ T29] audit: type=1400 audit(1748418800.579:582): avc: denied { name_bind } for pid=5031 comm="syz.2.684" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.071221][ T5030] openvswitch: netlink: Message has 6 unknown bytes. [ 45.088062][ T29] audit: type=1400 audit(1748418800.649:583): avc: denied { getopt } for pid=5038 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.180286][ T5056] vti0: entered allmulticast mode [ 45.200974][ T29] audit: type=1326 audit(1748418800.749:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.224530][ T29] audit: type=1326 audit(1748418800.749:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.247917][ T29] audit: type=1326 audit(1748418800.759:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.271592][ T29] audit: type=1326 audit(1748418800.759:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.295214][ T29] audit: type=1326 audit(1748418800.759:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.318848][ T29] audit: type=1326 audit(1748418800.759:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.342458][ T29] audit: type=1326 audit(1748418800.759:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.365991][ T29] audit: type=1326 audit(1748418800.759:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7975f4e969 code=0x7ffc0000 [ 45.413515][ T5070] vlan2: entered allmulticast mode [ 45.471018][ T5083] loop4: detected capacity change from 0 to 1024 [ 45.478597][ T5083] EXT4-fs: inline encryption not supported [ 45.484663][ T5083] EXT4-fs: Ignoring removed i_version option [ 45.491337][ T5083] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.503954][ T5083] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.708: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.518327][ T5083] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.708: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.533678][ T5083] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.708: Failed to acquire dquot type 0 [ 45.546010][ T5083] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.555744][ T5083] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.708: mark_inode_dirty error [ 45.567996][ T5083] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 45.579299][ T5083] EXT4-fs (loop4): 1 orphan inode deleted [ 45.585542][ T5083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.598752][ T1912] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.623082][ T1912] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 45.623132][ T5083] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm syz.4.708: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.649527][ T5083] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.708: Failed to acquire dquot type 0 [ 45.684880][ T5100] can0: slcan on ttyS3. [ 45.698202][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.707722][ T3318] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.721083][ T3318] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.734231][ T3318] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 45.747112][ T3318] ================================================================== [ 45.755236][ T3318] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 45.762999][ T3318] [ 45.765341][ T3318] write to 0xffff888237d25e68 of 1 bytes by task 5103 on cpu 1: [ 45.773088][ T3318] folios_put_refs+0x25c/0x2d0 [ 45.777876][ T3318] folio_batch_move_lru+0x1fd/0x230 [ 45.783089][ T3318] folio_add_lru+0x14a/0x1f0 [ 45.787696][ T3318] folio_add_lru_vma+0x49/0x70 [ 45.792476][ T3318] do_wp_page+0x1318/0x23d0 [ 45.796998][ T3318] handle_mm_fault+0x77d/0x2c00 [ 45.801868][ T3318] do_user_addr_fault+0x636/0x1090 [ 45.807014][ T3318] exc_page_fault+0x62/0xa0 [ 45.811538][ T3318] asm_exc_page_fault+0x26/0x30 [ 45.816404][ T3318] [ 45.818735][ T3318] read to 0xffff888237d25e68 of 1 bytes by task 3318 on cpu 0: [ 45.826286][ T3318] __lru_add_drain_all+0x12b/0x3f0 [ 45.831417][ T3318] lru_add_drain_all+0x10/0x20 [ 45.836197][ T3318] invalidate_bdev+0x47/0x70 [ 45.840804][ T3318] ext4_put_super+0x624/0x7d0 [ 45.845500][ T3318] generic_shutdown_super+0xe6/0x210 [ 45.850990][ T3318] kill_block_super+0x2a/0x70 [ 45.855780][ T3318] ext4_kill_sb+0x42/0x80 [ 45.860151][ T3318] deactivate_locked_super+0x72/0x1c0 [ 45.865647][ T3318] deactivate_super+0x97/0xa0 [ 45.870790][ T3318] cleanup_mnt+0x269/0x2e0 [ 45.875215][ T3318] __cleanup_mnt+0x19/0x20 [ 45.879727][ T3318] task_work_run+0x12e/0x1a0 [ 45.884333][ T3318] exit_to_user_mode_loop+0xe4/0x100 [ 45.889631][ T3318] do_syscall_64+0x1d6/0x200 [ 45.894243][ T3318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.900203][ T3318] [ 45.902539][ T3318] value changed: 0x1f -> 0x00 [ 45.907231][ T3318] [ 45.909591][ T3318] Reported by Kernel Concurrency Sanitizer on: [ 45.915759][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(voluntary) [ 45.928024][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.938090][ T3318] ================================================================== [ 45.951943][ T5099] can0 (unregistered): slcan off ttyS3.