last executing test programs: 1.078987211s ago: executing program 0 (id=505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.047576403s ago: executing program 0 (id=506): mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 1.027168765s ago: executing program 0 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) 994.576308ms ago: executing program 0 (id=509): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1}) 940.732673ms ago: executing program 2 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x6, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, 0x0}, 0x20) 912.317486ms ago: executing program 2 (id=513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xa, &(0x7f0000000080)={&(0x7f0000000100)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000a5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) 882.126948ms ago: executing program 2 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 796.634987ms ago: executing program 2 (id=521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x47) 699.468115ms ago: executing program 2 (id=527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 590.399145ms ago: executing program 2 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 485.916835ms ago: executing program 1 (id=541): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80005520, 0x0) 435.23847ms ago: executing program 3 (id=542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 409.410252ms ago: executing program 4 (id=544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 389.487114ms ago: executing program 4 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 378.752595ms ago: executing program 3 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x70bd24, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}}, 0x0) 352.243208ms ago: executing program 3 (id=547): unshare(0x68040200) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) 351.922288ms ago: executing program 4 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 324.65413ms ago: executing program 4 (id=549): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r1, 0x0, 0x28) 304.306912ms ago: executing program 4 (id=550): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 276.263934ms ago: executing program 3 (id=551): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818, &(0x7f0000000140)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@i_version, 0x0}, {@nomblk_io_submit}, {@bsdgroups}, {@jqfmt_vfsold}, {@block_validity}, {@minixdf}, {@noinit_itable}, {@sysvgroups}, {@acl}, {@oldalloc}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@audit}, {@subj_role={'subj_role', 0x3d, '\x00\x00\x00]\xd0B\xa41.9\xdf\xd7\x86\r.LV4\xbd\x8f\xd0\xc8\xc6\x9c\xa3\a\xa7\x1c\x01\xf6|\xe4\x81&Yv\xfc\x9b\xbb`\'\xe2y\x9cp\xff\xf8\xad\xe3Y\x88\x84\x84d+\x8d\b;\xef\xd5\xf3b\xa29\xa3\x98\xbc&\x18Q\xf9\xd4\v\x03'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}], 0x2c}, 0x0, 0x4f9, &(0x7f0000000a80)="$eJzs3ctrXNUfAPDvnTya/PrI/Pp7aB/aaBWDj6ZJnws3ikI3gqBIXcYkLbVpK02EtgQTRSoIKv0LfOwE/wJXuhF1pbhV3IpQJJtWFzJyZ+6dTjrJZKbJJG3m84Fpz7n33HvOueeezjn39CYBdKzB9I8kYltE/BwRA5Xo4gSDlb9uLsyO/7kwO55EqfTSH0k53Y2F2fE8aX7c1iwyVIgovJvEniXynb585ezY1NTkxSw+PFPIQufGTk+enjw/evz44UP9x46OHlmTeqZlurH7rQt7d5149doL4yevvfbdF2l5S9n+2npUFFvMoatuy2AMLr6WNR5t8ex3u+014aR7AwtCS9K7Nm2unnL/H4iuuNV4A/H8OxtaOKCtSqVSaUvd1up32XypVpJUDgA2iaT5Lp2OidtaFmA95V/0NxbSmerseP08eHO7/kyUZ0BpvW9mn8qe7iikc/hiZW7U06b8/xsRJ+f/+jj9RN1ziHblCgB0sq/S8c+TlXFH/qnsKcT/a9LtyNaGihHx74jYGRH/ycYv/4sop70vIu6P3uox6Yiy/tnSYoO3xevHnz/2r7KKDaXjv6ezta3F4798PSqKXVlse7n+PcmpM1OTB7NrMhQ9W9L4SP2pq1X/+rmfPlou/8Ga8V/6SfPPx4JZOX7vvu0iTozNjK223rnrb5en9HNpvvPZdajsSaorAWk77oqI3c2csG9xNL1mZx7/fO9yyVeu/4fL57UG60ylTyMeq9R7Pha1f2XlrjcLDc+ce2N4+vKVp87Urk+OHDs6emS4L6YmDw7nd0W973+4+mIWrBvQr1z/9krb/19L3v/VlctiUrteO916Hld/eW/ZOeWd3v+9ycvlcNo+H0TEpbGZmYsjEb3JfHV75NtHbx17aaz/1vaRSv2H9i/d/3dG/P1JdtyeiEhv4gci4sGI2JeV/aGIeDgi9jeo/7fPPvL6cpO5u6H9J1pq/9YDXWe/+bIu4/cHm6x/2v6Hy6GhbMvE2EzfSvVqtoCrvoAAAABwD9gXEdsiKRyoPOMszUUUDhyI2Fp9gjI988SpC2+en6i8I1CMnkL+pGug5nnoSPZsOI2nR41GdBdr9h8qPzculUql/jSezt+ntm9s1aHjbc36f1+2xrEtCuX+n/qt/pUWYLNpaR1tuTfagHvSHayjH93RjoIA68772tC59H/oXE33f++jwaZzW/8v9/K5iJsbVBxgHS31/f/KBpQDWH/m/9C59H/oXPo/dKTVvNffKLDzRIM0SXd7Ml0+UIjGPwWgGJFvyf+DY+MT/lqIWJsSdq1pTfubaNO+WIu8orBimu4WfhBDFsh/d8BKiQtNpGl0+Prefo0DWyJihbu3erPN5YEr7S5YuRk+28B/mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANbEPwEAAP//4nTJbg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x4, @empty, 0x5, 0x4}, 0x20) 266.923555ms ago: executing program 1 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) 241.324508ms ago: executing program 1 (id=553): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 180.829463ms ago: executing program 1 (id=554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) 146.072557ms ago: executing program 1 (id=555): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03900000000000003c0012800b00010067726574617000002c00028006001800000000000800140000000000080007007f00000105000a0001000000080014002d5d000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x6c}}, 0x0) 145.163907ms ago: executing program 0 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000040)="fb6bba", 0x3}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 72.235554ms ago: executing program 0 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)="c40f84b194c378662a67fe0fd489efece85b2e86b0f4c3a330095b9e4e9f0790f1b6bcfb5e51bf4e868cbf", 0x2b}, {&(0x7f00000003c0)="adb4f63531ed3689d01b5a2650af0fc544029d9e15734597ea936a4f6b06c93b43bb2d364506db065b5ec53a33048fbf35d8c6321592103b163c5f09eec40b74c08d3bfbc0d22431856a6c215f3d32bade4eb0a52ddb6746c85d21e039b315361fe80c2c056e6711f056dcd117155614de3d13c83aa93fab8ace6e47408aff4fe07b89310ff23f03ab75479a74541d048f6227e52de2836e62a628099569ee13b2eb111673db6d73ee9c758869d20a0a7b0d28f5aab1b093adec4c26cfecbc31276a34b6941df8b788b0599df1bab16e9b0127d39e30e8cd953fe6af09dd2548361911cc3a555516903867e8ae5082451310c6a52cc4ab3e2f", 0xf9}], 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51], 0x30}], 0x1, 0x0) 23.127858ms ago: executing program 1 (id=558): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 22.947988ms ago: executing program 3 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 3.50879ms ago: executing program 4 (id=560): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00faffffff"], 0x1, 0x576, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='./bus\x00', 0xc6000173) getdents(r0, 0x0, 0x58) 0s ago: executing program 3 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): e=1 [ 18.541539][ T29] audit: type=1400 audit(1728361946.357:80): avc: denied { siginh } for pid=3145 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.542588][ T29] audit: type=1400 audit(1728361949.377:81): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 26.623774][ T29] audit: type=1400 audit(1728361954.447:82): avc: denied { mounton } for pid=3255 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.625026][ T3255] cgroup: Unknown subsys name 'net' [ 26.646530][ T29] audit: type=1400 audit(1728361954.447:83): avc: denied { mount } for pid=3255 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.674312][ T29] audit: type=1400 audit(1728361954.477:84): avc: denied { unmount } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.795946][ T3255] cgroup: Unknown subsys name 'cpuset' [ 26.802075][ T3255] cgroup: Unknown subsys name 'rlimit' [ 26.890841][ T29] audit: type=1400 audit(1728361954.717:85): avc: denied { setattr } for pid=3255 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.916050][ T29] audit: type=1400 audit(1728361954.717:86): avc: denied { create } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.929957][ T3258] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.936528][ T29] audit: type=1400 audit(1728361954.717:87): avc: denied { write } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.965011][ T3255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.965473][ T29] audit: type=1400 audit(1728361954.717:88): avc: denied { read } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.994469][ T29] audit: type=1400 audit(1728361954.727:89): avc: denied { mounton } for pid=3255 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.019327][ T29] audit: type=1400 audit(1728361954.727:90): avc: denied { mount } for pid=3255 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.042617][ T29] audit: type=1400 audit(1728361954.777:91): avc: denied { relabelto } for pid=3258 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.158777][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 28.201140][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 28.213975][ T3270] chnl_net:caif_netlink_parms(): no params data found [ 28.308242][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.315368][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.322494][ T3265] bridge_slave_0: entered allmulticast mode [ 28.328866][ T3265] bridge_slave_0: entered promiscuous mode [ 28.335376][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.342422][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.349555][ T3266] bridge_slave_0: entered allmulticast mode [ 28.355809][ T3266] bridge_slave_0: entered promiscuous mode [ 28.362143][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 28.383421][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.390529][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.397722][ T3265] bridge_slave_1: entered allmulticast mode [ 28.404002][ T3265] bridge_slave_1: entered promiscuous mode [ 28.410218][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417379][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.424438][ T3266] bridge_slave_1: entered allmulticast mode [ 28.430875][ T3266] bridge_slave_1: entered promiscuous mode [ 28.448794][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.455970][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.463232][ T3270] bridge_slave_0: entered allmulticast mode [ 28.469821][ T3270] bridge_slave_0: entered promiscuous mode [ 28.492820][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.502044][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.509132][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.516369][ T3270] bridge_slave_1: entered allmulticast mode [ 28.522584][ T3270] bridge_slave_1: entered promiscuous mode [ 28.533450][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 28.542936][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.565080][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.583239][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.615065][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.633211][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.640323][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.647599][ T3271] bridge_slave_0: entered allmulticast mode [ 28.654021][ T3271] bridge_slave_0: entered promiscuous mode [ 28.665901][ T3266] team0: Port device team_slave_0 added [ 28.672690][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.686910][ T3265] team0: Port device team_slave_0 added [ 28.704763][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.711871][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.719127][ T3271] bridge_slave_1: entered allmulticast mode [ 28.725597][ T3271] bridge_slave_1: entered promiscuous mode [ 28.732353][ T3266] team0: Port device team_slave_1 added [ 28.743670][ T3265] team0: Port device team_slave_1 added [ 28.770642][ T3270] team0: Port device team_slave_0 added [ 28.791707][ T3270] team0: Port device team_slave_1 added [ 28.802076][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.809046][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.835013][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.851499][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.861038][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.868020][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.894060][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.909487][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.916467][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.942369][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.961536][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.971027][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.978010][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.004008][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.017038][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.023993][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.049946][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.061126][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.068152][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.094066][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.105739][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.112802][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.120084][ T3269] bridge_slave_0: entered allmulticast mode [ 29.126473][ T3269] bridge_slave_0: entered promiscuous mode [ 29.150680][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.157897][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.165133][ T3269] bridge_slave_1: entered allmulticast mode [ 29.171659][ T3269] bridge_slave_1: entered promiscuous mode [ 29.183611][ T3271] team0: Port device team_slave_0 added [ 29.207649][ T3265] hsr_slave_0: entered promiscuous mode [ 29.213736][ T3265] hsr_slave_1: entered promiscuous mode [ 29.230505][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.240415][ T3271] team0: Port device team_slave_1 added [ 29.256874][ T3270] hsr_slave_0: entered promiscuous mode [ 29.262801][ T3270] hsr_slave_1: entered promiscuous mode [ 29.268828][ T3270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.276412][ T3270] Cannot create hsr debugfs directory [ 29.288749][ T3266] hsr_slave_0: entered promiscuous mode [ 29.294748][ T3266] hsr_slave_1: entered promiscuous mode [ 29.300994][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.308745][ T3266] Cannot create hsr debugfs directory [ 29.315249][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.329635][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.336612][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.362515][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.383483][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.390553][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.416571][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.443110][ T3269] team0: Port device team_slave_0 added [ 29.461707][ T3269] team0: Port device team_slave_1 added [ 29.482550][ T3271] hsr_slave_0: entered promiscuous mode [ 29.488662][ T3271] hsr_slave_1: entered promiscuous mode [ 29.494598][ T3271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.502216][ T3271] Cannot create hsr debugfs directory [ 29.533118][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.540100][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.566025][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.579441][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.586461][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.612526][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.663991][ T3269] hsr_slave_0: entered promiscuous mode [ 29.671000][ T3269] hsr_slave_1: entered promiscuous mode [ 29.676969][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.684514][ T3269] Cannot create hsr debugfs directory [ 29.811244][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.819903][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.830568][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.845407][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.869743][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.878704][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.889782][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.898926][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.922500][ T3271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.931521][ T3271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.940563][ T3271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.954772][ T3271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.981403][ T3270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.990720][ T3270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.000084][ T3270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.011528][ T3270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.052164][ T3269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.065227][ T3269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.078759][ T3269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.089427][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.098272][ T3269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.136494][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.148576][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.159955][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.167123][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.180554][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.201099][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.208182][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.227231][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.237022][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.252148][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.265659][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.272751][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.282317][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.289369][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.299587][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.306719][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.325873][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.332989][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.347928][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.375791][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.382962][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.409501][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.416662][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.432887][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.442709][ T3270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.474642][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.504509][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.516187][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.523296][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.547061][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.554374][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.594895][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.614501][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.667595][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.686541][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.799874][ T3271] veth0_vlan: entered promiscuous mode [ 30.814810][ T3270] veth0_vlan: entered promiscuous mode [ 30.837275][ T3270] veth1_vlan: entered promiscuous mode [ 30.850277][ T3271] veth1_vlan: entered promiscuous mode [ 30.872079][ T3266] veth0_vlan: entered promiscuous mode [ 30.884910][ T3266] veth1_vlan: entered promiscuous mode [ 30.901318][ T3265] veth0_vlan: entered promiscuous mode [ 30.908803][ T3269] veth0_vlan: entered promiscuous mode [ 30.920893][ T3265] veth1_vlan: entered promiscuous mode [ 30.929350][ T3269] veth1_vlan: entered promiscuous mode [ 30.944366][ T3270] veth0_macvtap: entered promiscuous mode [ 30.951924][ T3270] veth1_macvtap: entered promiscuous mode [ 30.959461][ T3271] veth0_macvtap: entered promiscuous mode [ 30.972389][ T3271] veth1_macvtap: entered promiscuous mode [ 30.982977][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.993370][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.001207][ T3266] veth0_macvtap: entered promiscuous mode [ 31.014600][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.025123][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.036558][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.044511][ T3266] veth1_macvtap: entered promiscuous mode [ 31.056907][ T3265] veth0_macvtap: entered promiscuous mode [ 31.063446][ T3270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.072239][ T3270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.081054][ T3270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.089807][ T3270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.104358][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.114829][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.125628][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.133110][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.143669][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.153549][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.164068][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.175512][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.183828][ T3265] veth1_macvtap: entered promiscuous mode [ 31.200508][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.211030][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.220951][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.231428][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.242258][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.251855][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.260638][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.269353][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.278116][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.292369][ T3269] veth0_macvtap: entered promiscuous mode [ 31.301656][ T3269] veth1_macvtap: entered promiscuous mode [ 31.308631][ T3271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.317393][ T3271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.326121][ T3271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.334795][ T3271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.363688][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.374273][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.384119][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.394583][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.404493][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.414933][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.427510][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.435781][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.446409][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.456318][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.466900][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.476755][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.487313][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.497216][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.507674][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.519419][ T3270] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.520032][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.563177][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.573822][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.583685][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.594177][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.604212][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.614751][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.627208][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.635916][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.646411][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.656242][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.666701][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.676600][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.687113][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.696936][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.707491][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.719560][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.734138][ T3408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6'. [ 31.749409][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.758245][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.763308][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 31.763323][ T29] audit: type=1400 audit(1728361959.587:128): avc: denied { open } for pid=3410 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.766999][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.773085][ T29] audit: type=1400 audit(1728361959.587:129): avc: denied { kernel } for pid=3410 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.791957][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.834272][ T29] audit: type=1400 audit(1728361959.657:130): avc: denied { create } for pid=3410 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.836271][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.862390][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.871175][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.879915][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.891277][ T29] audit: type=1400 audit(1728361959.717:131): avc: denied { create } for pid=3415 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.912045][ T29] audit: type=1400 audit(1728361959.717:132): avc: denied { setopt } for pid=3410 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.931298][ T29] audit: type=1400 audit(1728361959.737:133): avc: denied { write } for pid=3415 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.950377][ T29] audit: type=1400 audit(1728361959.737:134): avc: denied { write } for pid=3415 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.053345][ T3423] ALSA: seq fatal error: cannot create timer (-22) [ 32.102162][ T29] audit: type=1400 audit(1728361959.927:135): avc: denied { read } for pid=3424 comm="syz.0.1" name="mISDNtimer" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.125152][ T29] audit: type=1400 audit(1728361959.927:136): avc: denied { open } for pid=3424 comm="syz.0.1" path="/dev/mISDNtimer" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.148316][ T29] audit: type=1400 audit(1728361959.927:137): avc: denied { ioctl } for pid=3424 comm="syz.0.1" path="/dev/mISDNtimer" dev="devtmpfs" ino=225 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.299581][ T3445] loop2: detected capacity change from 0 to 128 [ 32.314429][ T3445] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.327421][ T3445] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.333063][ T3449] syz.1.17[3449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.363543][ T3449] syz.1.17[3449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.377193][ T3449] syz.1.17[3449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.391147][ T3269] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.467323][ T3453] program syz.2.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.533430][ T3463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.553414][ T3462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 32.596996][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 32.606051][ T3467] bridge_slave_1: left allmulticast mode [ 32.611710][ T3467] bridge_slave_1: left promiscuous mode [ 32.617566][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.626096][ T3467] bridge_slave_0: left allmulticast mode [ 32.631821][ T3467] bridge_slave_0: left promiscuous mode [ 32.637516][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.668285][ T3473] mmap: syz.0.29 (3473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.879620][ T3501] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 32.892384][ T3501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.904064][ T3501] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.915899][ T3499] pimreg: entered allmulticast mode [ 32.923967][ T3499] pimreg: left allmulticast mode [ 33.063759][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.293489][ T3563] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 33.301777][ T3563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 33.482620][ T3598] Process accounting resumed [ 33.487372][ T3598] kernel write not supported for file /asound/timers (pid: 3598 comm: syz.2.62) [ 33.519789][ T3604] syz.2.63 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.641141][ T3625] loop2: detected capacity change from 0 to 512 [ 33.647934][ T3625] ======================================================= [ 33.647934][ T3625] WARNING: The mand mount option has been deprecated and [ 33.647934][ T3625] and is ignored by this kernel. Remove the mand [ 33.647934][ T3625] option from the mount to silence this warning. [ 33.647934][ T3625] ======================================================= [ 33.696124][ T3625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 33.704345][ T3625] System zones: 0-2, 18-18, 34-34 [ 33.710901][ T3625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.66: bg 0: block 248: padding at end of block bitmap is not set [ 33.726213][ T3625] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.66: Failed to acquire dquot type 1 [ 33.739341][ T3625] EXT4-fs (loop2): 1 truncate cleaned up [ 33.747940][ T3625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.766479][ T3625] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.768884][ T3643] loop1: detected capacity change from 0 to 1024 [ 33.808364][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.809658][ T3625] syz.2.66 (3625) used greatest stack depth: 9376 bytes left [ 33.829047][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.860844][ T28] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.897134][ T3672] process 'syz.3.71' launched './file1' with NULL argv: empty string added [ 33.985163][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 33.997439][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.997439][ T28] [ 34.007193][ T28] EXT4-fs (loop1): Total free blocks count 0 [ 34.013232][ T28] EXT4-fs (loop1): Free/Dirty block details [ 34.019159][ T28] EXT4-fs (loop1): free_blocks=68451041280 [ 34.025214][ T28] EXT4-fs (loop1): dirty_blocks=16 [ 34.030339][ T28] EXT4-fs (loop1): Block reservation details [ 34.036368][ T28] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 34.062109][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.125003][ C0] hrtimer: interrupt took 27279 ns [ 34.129378][ T3710] loop3: detected capacity change from 0 to 1024 [ 34.160512][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.198834][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.257535][ T3729] loop3: detected capacity change from 0 to 164 [ 34.274089][ T3729] syz.3.82: attempt to access beyond end of device [ 34.274089][ T3729] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.289077][ T3729] syz.3.82: attempt to access beyond end of device [ 34.289077][ T3729] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.521198][ T3762] netlink: 'syz.2.97': attribute type 10 has an invalid length. [ 34.529830][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.537251][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.548479][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.555594][ T3762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.563018][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.570172][ T3762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.582883][ T3762] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 34.889731][ T3790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.015920][ T3801] loop2: detected capacity change from 0 to 1024 [ 35.038892][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.073884][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.495499][ T3838] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.562148][ T3847] bridge0: port 3(vlan2) entered blocking state [ 35.568656][ T3847] bridge0: port 3(vlan2) entered disabled state [ 35.586529][ T3847] vlan2: entered allmulticast mode [ 35.618028][ T3847] vlan2: left allmulticast mode [ 35.633586][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 35.700172][ T3856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3856 comm=syz.1.137 [ 35.742768][ T3864] syz.0.141[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.742938][ T3864] syz.0.141[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.749933][ T3865] loop3: detected capacity change from 0 to 128 [ 35.754758][ T3864] syz.0.141[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.804449][ T3865] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.852173][ T3874] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 35.860396][ T3865] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.877989][ T3874] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 35.972843][ T3270] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.066544][ T3908] loop1: detected capacity change from 0 to 512 [ 36.092663][ T3908] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.162: casefold flag without casefold feature [ 36.101106][ T3906] bond1: entered promiscuous mode [ 36.110946][ T3906] bond1: entered allmulticast mode [ 36.112933][ T3908] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.162: couldn't read orphan inode 15 (err -117) [ 36.116656][ T3906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.144811][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.161037][ T3914] loop3: detected capacity change from 0 to 1024 [ 36.174743][ T3906] bond1 (unregistering): Released all slaves [ 36.179618][ T3916] loop4: detected capacity change from 0 to 1024 [ 36.188293][ T3914] EXT4-fs: Ignoring removed orlov option [ 36.194049][ T3914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.210416][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.238071][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.250931][ T3924] loop2: detected capacity change from 0 to 512 [ 36.259610][ T3924] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.273069][ T3924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.303643][ T3914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.322708][ T3931] Zero length message leads to an empty skb [ 36.322776][ T3916] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.344065][ T3916] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 36.356990][ T3916] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.356990][ T3916] [ 36.360343][ T3924] EXT4-fs (loop2): 1 truncate cleaned up [ 36.367188][ T3916] EXT4-fs (loop4): Total free blocks count 0 [ 36.373923][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.378559][ T3916] EXT4-fs (loop4): Free/Dirty block details [ 36.396506][ T3916] EXT4-fs (loop4): free_blocks=68451041280 [ 36.402328][ T3916] EXT4-fs (loop4): dirty_blocks=16 [ 36.407478][ T3916] EXT4-fs (loop4): Block reservation details [ 36.413486][ T3916] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 36.458048][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.474839][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.522833][ T3943] loop1: detected capacity change from 0 to 2048 [ 36.553972][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.578445][ T3943] loop1: p1 < > p2 p3 < p5 > [ 36.591393][ T3943] loop1: p2 start 16908804 is beyond EOD, truncated [ 36.620477][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.627964][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.635430][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.642818][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.650311][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.657738][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.659951][ T3961] syz.0.179[3961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.665232][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.665260][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.691289][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.698707][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.705855][ T3943] loop1: p5 start 16908804 is beyond EOD, truncated [ 36.706161][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.720104][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.727589][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.735048][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.736881][ T2967] loop1: p1 < > p2 p3 < p5 > [ 36.742424][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.748348][ T2967] loop1: p2 start 16908804 is beyond EOD, [ 36.754717][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.760544][ T2967] truncated [ 36.762791][ T2967] loop1: p5 start 16908804 is beyond EOD, [ 36.768321][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.768349][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.771456][ T2967] truncated [ 36.777252][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.802713][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.810208][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.817698][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.825328][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.826256][ T3943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.175'. [ 36.832801][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.849293][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.856830][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.864282][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.868623][ T3961] syz.0.179[3961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.871686][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.878456][ T3961] syz.0.179[3961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.882965][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.909661][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.917338][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.924815][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.928511][ T3971] netlink: 'syz.0.179': attribute type 322 has an invalid length. [ 36.932218][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.947438][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.954870][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.962299][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.964696][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.969909][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.986367][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 36.987398][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.003424][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 37.003440][ T29] audit: type=1400 audit(1728361964.827:416): avc: denied { write } for pid=3973 comm="syz.3.182" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.004502][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.041598][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.049040][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.056619][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.064049][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.075614][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.147142][ T3974] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 37.245752][ T4002] block device autoloading is deprecated and will be removed. [ 37.253318][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 37.263591][ T4002] syz.2.192: attempt to access beyond end of device [ 37.263591][ T4002] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.266322][ T4005] smc: net device bond0 applied user defined pnetid SYZ0 [ 37.289232][ T4005] smc: net device bond0 erased user defined pnetid SYZ0 [ 37.306952][ T29] audit: type=1326 audit(1728361965.137:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2c7bdff9 code=0x7ffc0000 [ 37.344049][ T29] audit: type=1326 audit(1728361965.137:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fcf2c7bdff9 code=0x7ffc0000 [ 37.367336][ T29] audit: type=1326 audit(1728361965.137:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2c7bdff9 code=0x7ffc0000 [ 37.391139][ T29] audit: type=1326 audit(1728361965.137:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fcf2c7bdff9 code=0x7ffc0000 [ 37.414452][ T29] audit: type=1326 audit(1728361965.137:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2c7bdff9 code=0x7ffc0000 [ 37.437797][ T29] audit: type=1326 audit(1728361965.157:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2c7bdff9 code=0x7ffc0000 [ 37.439412][ T4014] tipc: Started in network mode [ 37.466466][ T4014] tipc: Node identity ac1414aa, cluster identity 4711 [ 37.474080][ T4016] loop1: detected capacity change from 0 to 2048 [ 37.476075][ T8] IPVS: starting estimator thread 0... [ 37.499009][ T4014] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 37.505947][ T4014] tipc: Enabled bearer , priority 10 [ 37.519894][ T4016] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.195: bad orphan inode 8192 [ 37.536824][ T4016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.578387][ T29] audit: type=1400 audit(1728361965.407:423): avc: denied { module_load } for pid=4022 comm="syz.0.199" path="/sys/kernel/notes" dev="sysfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 37.602327][ T4015] IPVS: using max 1968 ests per chain, 98400 per kthread [ 37.603716][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.614942][ T4024] Invalid ELF header magic: != ELF [ 37.635075][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 37.645035][ T29] audit: type=1400 audit(1728361965.407:424): avc: denied { execute } for pid=4009 comm="syz.1.195" path="/32/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.675728][ T29] audit: type=1400 audit(1728361965.497:425): avc: denied { watch watch_reads } for pid=4034 comm="syz.0.206" path="/48/file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.759891][ T4045] capability: warning: `syz.0.209' uses 32-bit capabilities (legacy support in use) [ 37.775052][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 37.915031][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 37.988811][ T4083] block device autoloading is deprecated and will be removed. [ 37.990068][ T4085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 38.015162][ T4087] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 38.039089][ T4090] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 38.055075][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 38.110291][ T4099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 38.195099][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 38.205398][ T4114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4114 comm=syz.4.241 [ 38.255074][ T4118] Driver unsupported XDP return value 0 on prog (id 177) dev N/A, expect packet loss! [ 38.330761][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 38.335056][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 38.462251][ T4142] ALSA: seq fatal error: cannot create timer (-22) [ 38.475067][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 38.552301][ T4155] loop2: detected capacity change from 0 to 128 [ 38.613958][ T4161] loop2: detected capacity change from 0 to 512 [ 38.620564][ T8] tipc: Node number set to 2886997162 [ 38.639060][ T4161] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.655406][ T4161] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.684359][ T4165] loop0: detected capacity change from 0 to 256 [ 38.685999][ T4161] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.705489][ T4161] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 38.714206][ T4161] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.264: bg 0: block 40: padding at end of block bitmap is not set [ 38.729750][ T4161] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 38.739843][ T4161] EXT4-fs (loop2): 1 truncate cleaned up [ 38.745998][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.758436][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 38.773832][ T4161] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.264: corrupted xattr block 31: invalid header [ 38.788268][ T4161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 38.797299][ T4161] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.264: corrupted xattr block 31: invalid header [ 38.797892][ T4173] ieee802154 phy0 wpan0: encryption failed: -22 [ 38.833213][ T4161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 38.845206][ T4161] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.264: bad symlink. [ 38.877703][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.974085][ T4190] syz.2.277[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.974156][ T4190] syz.2.277[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.987000][ T4190] syz.2.277[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.025046][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 39.205716][ T4219] SELinux: policydb version -570608695 does not match my version range 15-33 [ 39.223052][ T4219] SELinux: failed to load policy [ 39.259935][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115a26e00: rx timeout, send abort [ 39.268549][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115a26e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 39.282911][ C0] ------------[ cut here ]------------ [ 39.288406][ C0] refcount_t: underflow; use-after-free. [ 39.294266][ C0] WARNING: CPU: 0 PID: 4227 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 39.303726][ C0] Modules linked in: [ 39.307668][ C0] CPU: 0 UID: 0 PID: 4227 Comm: syz.2.295 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 39.318340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.328450][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 39.334676][ C0] Code: 72 ff ff ff e8 ab 89 71 ff 48 c7 c7 3e d7 b2 86 e8 5f 6f 8a ff c6 05 f6 33 f4 04 01 90 48 c7 c7 f5 a7 1b 86 e8 8b 50 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 89 71 ff 48 c7 c7 3b d7 b2 86 e8 [ 39.354373][ C0] RSP: 0018:ffffc90000003b40 EFLAGS: 00010246 [ 39.360542][ C0] RAX: babe75d27d97e000 RBX: ffff8881042d8ae4 RCX: ffff8881154a6300 [ 39.368578][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.376597][ C0] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 39.384607][ C0] R10: 0001ffffffffffff R11: ffff8881154a6300 R12: ffff888115a26e68 [ 39.392631][ C0] R13: 0000000000000000 R14: ffff8881042d8ae4 R15: 0000000000000000 [ 39.400735][ C0] FS: 00007f82210176c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.409822][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.416455][ C0] CR2: 0000000020248000 CR3: 000000011895a000 CR4: 00000000003506f0 [ 39.424723][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.432775][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.440027][ T4231] loop4: detected capacity change from 0 to 1764 [ 39.440769][ C0] Call Trace: [ 39.440781][ C0] [ 39.453404][ C0] ? __warn+0x141/0x350 [ 39.457917][ C0] ? report_bug+0x315/0x420 [ 39.462461][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 39.468100][ C0] ? handle_bug+0x60/0x90 [ 39.472477][ C0] ? exc_invalid_op+0x1a/0x50 [ 39.477238][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 39.482332][ C0] ? __warn_printk+0x167/0x1b0 [ 39.487177][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 39.492756][ C0] sk_skb_reason_drop+0xe9/0x290 [ 39.497767][ C0] j1939_session_put+0x157/0x2a0 [ 39.502739][ C0] j1939_xtp_rx_abort_one+0x9d/0x410 [ 39.508072][ C0] j1939_tp_recv+0x71e/0xa80 [ 39.512698][ C0] j1939_can_recv+0x45f/0x550 [ 39.517422][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 39.522663][ C0] can_rcv_filter+0x225/0x4c0 [ 39.527376][ C0] can_receive+0x182/0x1f0 [ 39.531829][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 39.536381][ C0] can_rcv+0xe7/0x180 [ 39.540399][ C0] ? __pfx_can_rcv+0x10/0x10 [ 39.545051][ C0] __netif_receive_skb+0x123/0x280 [ 39.550234][ C0] ? __list_add_valid_or_report+0x36/0xc0 [ 39.556018][ C0] process_backlog+0x22e/0x440 [ 39.560831][ C0] __napi_poll+0x63/0x3c0 [ 39.565237][ C0] ? net_rx_action+0x376/0x7f0 [ 39.570058][ C0] net_rx_action+0x3a1/0x7f0 [ 39.574708][ C0] handle_softirqs+0xbf/0x280 [ 39.579423][ C0] irq_exit_rcu+0x3e/0x90 [ 39.583787][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 39.589541][ C0] [ 39.592494][ C0] [ 39.595468][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 39.601498][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x9d/0x120 [ 39.608131][ C0] Code: 00 00 4d 85 d2 0f 84 8b 00 00 00 4c 8b 4c 24 20 65 4c 8b 1c 25 40 e3 02 00 31 d2 eb 08 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 <65> 8b 05 44 b0 d2 7e 25 00 01 ff 00 74 11 3d 00 01 00 00 75 de 41 [ 39.627778][ C0] RSP: 0018:ffffc90000e4ba00 EFLAGS: 00000212 [ 39.633839][ C0] RAX: 0000000000000002 RBX: ffff888117ae46c0 RCX: ffffffff852bf4b5 [ 39.641854][ C0] RDX: 0000000000000007 RSI: ffffffff86b14220 RDI: 0000000000000008 [ 39.649849][ C0] RBP: ffffffff8617e805 R08: 0000000000000001 R09: ffffffff852bdf92 [ 39.657866][ C0] R10: 0000000000000012 R11: ffff8881154a6300 R12: 0000000000000004 [ 39.665868][ C0] R13: ffff888117ae4016 R14: 0000000000000007 R15: ffff0a00ffffff08 [ 39.673916][ C0] ? vsnprintf+0xe2/0xe30 [ 39.678305][ C0] ? format_decode+0x7c5/0x8a0 [ 39.683127][ C0] vsnprintf+0xe2/0xe30 [ 39.687370][ C0] audit_log_vformat+0x1ff/0x490 [ 39.692332][ C0] ? should_failslab+0x8f/0xb0 [ 39.697160][ C0] audit_log_format+0x8b/0xc0 [ 39.701880][ C0] audit_log_start+0x5e4/0x6b0 [ 39.706683][ C0] ? __pfx_avc_audit_pre_callback+0x10/0x10 [ 39.712621][ C0] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 39.718676][ C0] common_lsm_audit+0x65/0xfc0 [ 39.723487][ C0] ? avc_perm_nonode+0xcd/0xe0 [ 39.728330][ C0] slow_avc_audit+0xf9/0x140 [ 39.732961][ C0] avc_has_perm+0x129/0x160 [ 39.737526][ C0] selinux_socket_create+0xfe/0x180 [ 39.742772][ C0] security_socket_create+0x4f/0x90 [ 39.748016][ C0] __sock_create+0xe2/0x4f0 [ 39.752572][ C0] ? xfd_validate_state+0x46/0xf0 [ 39.757650][ C0] __sys_socket+0xae/0x240 [ 39.762115][ C0] __x64_sys_socket+0x3f/0x50 [ 39.766913][ C0] x64_sys_call+0x2c97/0x2d60 [ 39.771638][ C0] do_syscall_64+0xc9/0x1c0 [ 39.776166][ C0] ? clear_bhb_loop+0x55/0xb0 [ 39.780879][ C0] ? clear_bhb_loop+0x55/0xb0 [ 39.785613][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.791558][ C0] RIP: 0033:0x7f822239dff9 [ 39.796062][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.815727][ C0] RSP: 002b:00007f8221017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 39.824153][ C0] RAX: ffffffffffffffda RBX: 00007f8222555f80 RCX: 00007f822239dff9 [ 39.832151][ C0] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 0000000000000010 [ 39.840169][ C0] RBP: 00007f8222410296 R08: 0000000000000000 R09: 0000000000000000 [ 39.848167][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.856178][ C0] R13: 0000000000000000 R14: 00007f8222555f80 R15: 00007fff4b939698 [ 39.864179][ C0] [ 39.867223][ C0] ---[ end trace 0000000000000000 ]--- [ 39.872906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 39.978465][ T4244] loop2: detected capacity change from 0 to 512 [ 39.999182][ T4244] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.006232][ T4252] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 40.029465][ T4244] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.075163][ T4244] EXT4-fs (loop2): 1 truncate cleaned up [ 40.087000][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.103875][ T4267] syz.4.311[4267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.103964][ T4267] syz.4.311[4267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.116789][ T4266] netlink: 22 bytes leftover after parsing attributes in process `syz.0.313'. [ 40.136918][ T4266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.313'. [ 40.157845][ T4267] syz.4.311[4267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.285682][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.344341][ T4279] loop4: detected capacity change from 0 to 512 [ 40.358800][ T4282] loop0: detected capacity change from 0 to 1024 [ 40.368906][ T4279] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.415205][ T4279] EXT4-fs (loop4): 1 truncate cleaned up [ 40.417451][ T4282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.439786][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.453806][ T4288] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 40.482163][ T4282] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.508293][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.515889][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.521450][ T4297] loop2: detected capacity change from 0 to 1764 [ 40.523279][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.534879][ T4282] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 40.537105][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.549553][ T4282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.549553][ T4282] [ 40.556946][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.566564][ T4282] EXT4-fs (loop0): Total free blocks count 0 [ 40.573937][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.579910][ T4282] EXT4-fs (loop0): Free/Dirty block details [ 40.587298][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.593177][ T4282] EXT4-fs (loop0): free_blocks=68451041280 [ 40.600585][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.606353][ T4282] EXT4-fs (loop0): dirty_blocks=16 [ 40.613709][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.618856][ T4282] EXT4-fs (loop0): Block reservation details [ 40.626215][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.632152][ T4282] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 40.639533][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.653224][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.660710][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.668235][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.675747][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.683146][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.690645][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.698083][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.705914][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.713495][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.721169][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.728677][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.736119][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.743504][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.751068][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.758478][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.765918][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.773307][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.780708][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.788161][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.795584][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.802971][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.810437][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.817912][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.825310][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.832756][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.840276][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.847765][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.855174][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.862570][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.869984][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.877458][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.884836][ T3342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.898581][ T3342] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 40.901727][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.908290][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 40.953146][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.033893][ T4319] loop1: detected capacity change from 0 to 1024 [ 41.053631][ T4318] loop4: detected capacity change from 0 to 2048 [ 41.074387][ T4321] vhci_hcd: default hub control req: 2017 v0080 i0000 l0 [ 41.078773][ T4318] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.334: bad orphan inode 8192 [ 41.087828][ T4319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.092595][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.110970][ T4319] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.131989][ T4319] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 41.144561][ T4319] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.144561][ T4319] [ 41.154275][ T4319] EXT4-fs (loop1): Total free blocks count 0 [ 41.160416][ T4319] EXT4-fs (loop1): Free/Dirty block details [ 41.166451][ T4319] EXT4-fs (loop1): free_blocks=68451041280 [ 41.172363][ T4319] EXT4-fs (loop1): dirty_blocks=16 [ 41.177577][ T4319] EXT4-fs (loop1): Block reservation details [ 41.183575][ T4319] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 41.231746][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.243507][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.247864][ T4334] loop3: detected capacity change from 0 to 2048 [ 41.287764][ T4334] loop3: p1 < > p2 p3 < p5 > [ 41.296604][ T4334] loop3: p2 start 16908804 is beyond EOD, truncated [ 41.304824][ T4334] loop3: p5 start 16908804 is beyond EOD, truncated [ 41.338539][ T4334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.341'. [ 41.362790][ T4347] loop2: detected capacity change from 0 to 1024 [ 41.379193][ T4349] pimreg: entered allmulticast mode [ 41.416871][ T4349] pimreg: left allmulticast mode [ 41.422489][ T4347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.491131][ T4359] loop3: detected capacity change from 0 to 2048 [ 41.496161][ T36] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.513822][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 41.526062][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.526062][ T36] [ 41.535758][ T36] EXT4-fs (loop2): Total free blocks count 0 [ 41.541771][ T36] EXT4-fs (loop2): Free/Dirty block details [ 41.547759][ T36] EXT4-fs (loop2): free_blocks=68451041280 [ 41.553674][ T36] EXT4-fs (loop2): dirty_blocks=16 [ 41.558845][ T36] EXT4-fs (loop2): Block reservation details [ 41.564840][ T36] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 41.587065][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.594539][ T4359] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.352: bad orphan inode 8192 [ 41.607133][ T4359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.620676][ T4362] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 41.637280][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.645652][ T4362] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 41.701235][ T4372] loop2: detected capacity change from 0 to 1024 [ 41.727072][ T4372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.742867][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.804052][ T4382] loop3: detected capacity change from 0 to 1024 [ 41.847267][ T4385] loop4: detected capacity change from 0 to 2048 [ 41.856953][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.900960][ T4382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.931324][ T4385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.945060][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 41.956653][ T4382] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.980388][ T4382] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 41.993097][ T4382] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.993097][ T4382] [ 42.002966][ T4382] EXT4-fs (loop3): Total free blocks count 0 [ 42.009038][ T4382] EXT4-fs (loop3): Free/Dirty block details [ 42.014966][ T4382] EXT4-fs (loop3): free_blocks=68451041280 [ 42.020921][ T4382] EXT4-fs (loop3): dirty_blocks=16 [ 42.026089][ T4382] EXT4-fs (loop3): Block reservation details [ 42.032083][ T4382] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 42.041212][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.053277][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 42.053293][ T29] audit: type=1400 audit(1728361969.877:694): avc: denied { block_suspend } for pid=4410 comm="syz.1.362" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.110289][ T4416] loop1: detected capacity change from 0 to 164 [ 42.111248][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.147334][ T4419] syz.2.367 uses obsolete (PF_INET,SOCK_PACKET) [ 42.156595][ T4416] Unable to read rock-ridge attributes [ 42.166128][ T4422] loop4: detected capacity change from 0 to 512 [ 42.187736][ T4416] Unable to read rock-ridge attributes [ 42.218908][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 42.236473][ T4422] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.258889][ T4430] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 42.275317][ T4422] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.283503][ T4422] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 42.297520][ T4422] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.316759][ T4422] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 42.324045][ T4422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.363: bg 0: block 40: padding at end of block bitmap is not set [ 42.338687][ T4422] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.348640][ T4422] EXT4-fs (loop4): 1 truncate cleaned up [ 42.356508][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.365281][ T29] audit: type=1400 audit(1728361970.187:695): avc: denied { read } for pid=4442 comm="syz.1.373" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 42.392056][ T29] audit: type=1400 audit(1728361970.187:696): avc: denied { open } for pid=4442 comm="syz.1.373" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 42.423289][ T4422] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.363: corrupted xattr block 31: invalid header [ 42.453803][ T4422] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 42.463058][ T4422] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.363: corrupted xattr block 31: invalid header [ 42.478277][ T4422] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 42.487424][ T4422] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.363: bad symlink. [ 42.510007][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.530558][ T4451] loop3: detected capacity change from 0 to 1024 [ 42.545675][ T29] audit: type=1400 audit(1728361970.377:697): avc: denied { create } for pid=4452 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.576295][ T4457] loop1: detected capacity change from 0 to 128 [ 42.582738][ T29] audit: type=1400 audit(1728361970.407:698): avc: denied { write } for pid=4452 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.606413][ T4455] syzkaller0: entered promiscuous mode [ 42.611924][ T4455] syzkaller0: entered allmulticast mode [ 42.631705][ T29] audit: type=1400 audit(1728361970.457:699): avc: denied { setopt } for pid=4452 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.656132][ T4457] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.662399][ T29] audit: type=1400 audit(1728361970.477:700): avc: denied { create } for pid=4452 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.670050][ T4457] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.688964][ T29] audit: type=1400 audit(1728361970.487:701): avc: denied { write } for pid=4452 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.719425][ T29] audit: type=1400 audit(1728361970.487:702): avc: denied { nlmsg_read } for pid=4452 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.728145][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.768330][ T3271] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.777725][ T4466] loop2: detected capacity change from 0 to 512 [ 42.800152][ T4466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.818812][ T4466] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.854809][ T1670] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.880301][ T1670] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 42.887915][ T4466] EXT4-fs (loop2): shut down requested (0) [ 42.892586][ T1670] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.892586][ T1670] [ 42.908128][ T1670] EXT4-fs (loop3): Total free blocks count 0 [ 42.914126][ T1670] EXT4-fs (loop3): Free/Dirty block details [ 42.920061][ T1670] EXT4-fs (loop3): free_blocks=68451041280 [ 42.925978][ T1670] EXT4-fs (loop3): dirty_blocks=16 [ 42.931108][ T1670] EXT4-fs (loop3): Block reservation details [ 42.937133][ T1670] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 42.945033][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.982364][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.985051][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 43.002188][ T4484] loop0: detected capacity change from 0 to 512 [ 43.050274][ T4494] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 43.050500][ T4484] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.084846][ T4484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.096789][ T4484] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.125518][ T4484] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 43.143526][ T4501] program syz.1.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.146670][ T4484] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.390: bg 0: block 40: padding at end of block bitmap is not set [ 43.179532][ T4484] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.191128][ T4484] EXT4-fs (loop0): 1 truncate cleaned up [ 43.203810][ T4510] can0: slcan on ttyS3. [ 43.213049][ T4484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.250310][ T4484] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.390: corrupted xattr block 31: invalid header [ 43.277412][ T4484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 43.291650][ T4484] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.390: corrupted xattr block 31: invalid header [ 43.305581][ T4510] can0 (unregistered): slcan off ttyS3. [ 43.328384][ T4510] Falling back ldisc for ttyS3. [ 43.351031][ T4484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 43.374517][ T4533] netdevsim netdevsim2 netdevsim2: Unsupported IPsec algorithm [ 43.392933][ T4484] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.390: bad symlink. [ 43.436954][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.528070][ T4550] loop0: detected capacity change from 0 to 2048 [ 43.690372][ T4581] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 43.690372][ T4581] program syz.0.418 not setting count and/or reply_len properly [ 43.694733][ T4584] loop3: detected capacity change from 0 to 512 [ 43.737961][ T4584] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.757234][ T4584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.763956][ T4584] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.779569][ T4584] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 43.796984][ T4584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.420: bg 0: block 40: padding at end of block bitmap is not set [ 43.811337][ T4593] veth0_vlan: entered allmulticast mode [ 43.815391][ T4584] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.825933][ T4584] EXT4-fs (loop3): 1 truncate cleaned up [ 43.832086][ T4584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.832631][ T4595] smc: adding net device pimreg with user defined pnetid SYZ1 [ 43.851415][ T4584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.420: corrupted xattr block 31: invalid header [ 43.855899][ T4595] pimreg: entered allmulticast mode [ 43.870848][ T4584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 43.888732][ T4584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.420: corrupted xattr block 31: invalid header [ 43.904522][ T4584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 43.914787][ T4584] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.420: bad symlink. [ 43.943200][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.970679][ T4603] loop0: detected capacity change from 0 to 1764 [ 44.025061][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 44.034114][ T4609] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 44.071014][ T4613] loop2: detected capacity change from 0 to 1024 [ 44.096303][ T4613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.118921][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.138973][ T4620] syz.2.436[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.139077][ T4620] syz.2.436[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.151973][ T4620] syz.2.436[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.196827][ T4622] loop0: detected capacity change from 0 to 164 [ 44.288440][ T4626] No such timeout policy "syz0" [ 44.369965][ T4634] loop1: detected capacity change from 0 to 512 [ 44.389928][ T4634] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.415135][ T4634] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.434055][ T4634] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.493325][ T4634] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 44.521240][ T4634] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.440: bg 0: block 40: padding at end of block bitmap is not set [ 44.545221][ T4634] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.554340][ T4634] EXT4-fs (loop1): 1 truncate cleaned up [ 44.560768][ T4634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.580967][ T4634] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.440: corrupted xattr block 31: invalid header [ 44.603719][ T4634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 44.613040][ T4634] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.440: corrupted xattr block 31: invalid header [ 44.628434][ T4634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 44.647737][ T4634] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.440: bad symlink. [ 44.696737][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.752391][ T4661] syzkaller0: renamed from bridge_slave_1 (while UP) [ 44.808516][ T4670] netlink: 124 bytes leftover after parsing attributes in process `syz.4.459'. [ 44.939684][ T4689] loop4: detected capacity change from 0 to 512 [ 44.941520][ T4693] loop0: detected capacity change from 0 to 512 [ 44.951893][ T4689] EXT4-fs: Ignoring removed orlov option [ 44.962035][ T4689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.986516][ T4693] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.988419][ T4689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.994581][ T4693] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.008862][ T4689] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.027907][ T4689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.465: bg 0: block 255: padding at end of block bitmap is not set [ 45.042493][ T4693] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.062881][ T4693] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 45.071482][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 45.083854][ T4693] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.466: bg 0: block 40: padding at end of block bitmap is not set [ 45.099051][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.106530][ T4693] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 45.118290][ T4693] EXT4-fs (loop0): 1 truncate cleaned up [ 45.124522][ T4693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.156829][ T4693] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.466: corrupted xattr block 31: invalid header [ 45.172138][ T4693] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 45.190135][ T4693] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.466: corrupted xattr block 31: invalid header [ 45.210884][ T4693] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 45.234860][ T4693] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.466: bad symlink. [ 45.282505][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.337164][ T4740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.471'. [ 45.398427][ T4750] loop4: detected capacity change from 0 to 256 [ 45.437293][ T4758] loop2: detected capacity change from 0 to 256 [ 45.481734][ T4765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.478'. [ 45.563770][ T4764] infiniband syz1: set down [ 45.568393][ T4764] infiniband syz1: added syzkaller0 [ 45.601251][ T4764] RDS/IB: syz1: added [ 45.610201][ T4764] smc: adding ib device syz1 with port count 1 [ 45.616534][ T4764] smc: ib device syz1 port 1 has pnetid [ 45.695107][ T4788] loop1: detected capacity change from 0 to 512 [ 45.721155][ T4788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.761859][ T4788] EXT4-fs (loop1): 1 orphan inode deleted [ 45.767848][ T4788] EXT4-fs (loop1): 1 truncate cleaned up [ 45.842792][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.105088][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 46.366543][ T3682] smc: removing ib device syz1 [ 47.145047][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 48.105127][ T4617] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.185044][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 48.286641][ T4617] EXT4-fs (loop1): Remounting filesystem read-only [ 48.855216][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.864097][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 49.225056][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 50.190602][ T4878] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.199654][ T4878] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.219238][ T4878] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.231501][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 50.231515][ T29] audit: type=1400 audit(1728361978.057:763): avc: denied { watch watch_reads } for pid=4887 comm="syz.4.488" path="/90" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.260354][ T29] audit: type=1326 audit(1728361978.057:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1c50dff9 code=0x0 [ 50.283303][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 50.296712][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.297160][ T29] audit: type=1400 audit(1728361978.087:765): avc: denied { compute_member } for pid=4889 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.308769][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.328869][ T29] audit: type=1400 audit(1728361978.137:766): avc: denied { read write } for pid=4893 comm="syz.3.489" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.357690][ T29] audit: type=1400 audit(1728361978.137:767): avc: denied { open } for pid=4893 comm="syz.3.489" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.381052][ T29] audit: type=1400 audit(1728361978.137:768): avc: denied { ioctl } for pid=4893 comm="syz.3.489" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.406245][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.423995][ T29] audit: type=1400 audit(1728361978.247:769): avc: denied { read } for pid=4893 comm="syz.3.489" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.441985][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.447091][ T29] audit: type=1400 audit(1728361978.247:770): avc: denied { open } for pid=4893 comm="syz.3.489" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.480158][ T29] audit: type=1400 audit(1728361978.247:771): avc: denied { write } for pid=4893 comm="syz.3.489" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.523055][ T29] audit: type=1400 audit(1728361978.347:772): avc: denied { read write } for pid=3269 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.538377][ T4902] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 50.567089][ T4902] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 50.647464][ T4913] syz.2.499[4913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.647578][ T4913] syz.2.499[4913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.685379][ T4918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.708395][ T4913] syz.2.499[4913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.769326][ T4918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.852457][ T4918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.916612][ T4918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.964373][ T4965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 50.989436][ T4918] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.001315][ T4918] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.030368][ T4918] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.057366][ T4918] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.078454][ T4977] batadv0: entered promiscuous mode [ 51.270086][ T5004] rdma_op ffff888119048180 conn xmit_rdma 0000000000000000 [ 51.305084][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 51.382491][ T5019] loop1: detected capacity change from 0 to 2048 [ 51.444840][ T5024] batman_adv: batadv0: Adding interface: gretap1 [ 51.451428][ T5024] batman_adv: batadv0: Interface activated: gretap1 [ 51.463803][ T5027] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 51.477026][ T5028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.559917][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.570017][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.693104][ T5050] loop3: detected capacity change from 0 to 512 [ 51.705630][ T5050] EXT4-fs: Ignoring removed i_version option [ 51.748952][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 51.761192][ T5050] EXT4-fs error (device loop3): __ext4_iget:4952: inode #11: block 393240: comm syz.3.551: invalid block [ 51.783394][ T5050] EXT4-fs (loop3): Remounting filesystem read-only [ 51.791435][ T5050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.805463][ T5050] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 51.812378][ T5050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.871430][ T5060] batman_adv: batadv0: Adding interface: gretap1 [ 51.878798][ T5060] batman_adv: batadv0: Interface activated: gretap1 [ 51.944933][ T5072] loop4: detected capacity change from 0 to 2048 [ 51.953680][ T3713] ================================================================== [ 51.961801][ T3713] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 51.969207][ T3713] [ 51.971539][ T3713] write to 0xffff8881004c236e of 1 bytes by task 5072 on cpu 0: [ 51.979178][ T3713] set_blocksize+0x215/0x270 [ 51.983788][ T3713] sb_min_blocksize+0x63/0xe0 [ 51.988481][ T3713] fat_fill_super+0x33a/0x1bf0 [ 51.993259][ T3713] vfat_fill_super+0x24/0x30 [ 51.997854][ T3713] get_tree_bdev+0x256/0x2e0 [ 52.002462][ T3713] vfat_get_tree+0x1c/0x30 [ 52.006881][ T3713] vfs_get_tree+0x56/0x1e0 [ 52.011316][ T3713] do_new_mount+0x227/0x690 [ 52.015835][ T3713] path_mount+0x49b/0xb30 [ 52.020180][ T3713] __se_sys_mount+0x27c/0x2d0 [ 52.024872][ T3713] __x64_sys_mount+0x67/0x80 [ 52.029485][ T3713] x64_sys_call+0x203e/0x2d60 [ 52.034178][ T3713] do_syscall_64+0xc9/0x1c0 [ 52.038688][ T3713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.044600][ T3713] [ 52.046927][ T3713] read to 0xffff8881004c236e of 1 bytes by task 3713 on cpu 1: [ 52.054470][ T3713] do_mpage_readpage+0x55/0xcb0 [ 52.059337][ T3713] mpage_readahead+0x1ad/0x2d0 [ 52.064120][ T3713] blkdev_readahead+0x1c/0x30 [ 52.068821][ T3713] read_pages+0xa0/0x540 [ 52.073119][ T3713] page_cache_ra_unbounded+0x2d6/0x310 [ 52.078600][ T3713] page_cache_sync_ra+0x252/0x670 [ 52.083639][ T3713] filemap_get_pages+0x2c1/0x10e0 [ 52.088681][ T3713] filemap_read+0x216/0x680 [ 52.093201][ T3713] blkdev_read_iter+0x20e/0x2c0 [ 52.098058][ T3713] vfs_read+0x5f6/0x720 [ 52.102230][ T3713] ksys_read+0xeb/0x1b0 [ 52.106404][ T3713] __x64_sys_read+0x42/0x50 [ 52.111013][ T3713] x64_sys_call+0x27d3/0x2d60 [ 52.115701][ T3713] do_syscall_64+0xc9/0x1c0 [ 52.120213][ T3713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.126126][ T3713] [ 52.128450][ T3713] value changed: 0x0c -> 0x09 [ 52.133145][ T3713] [ 52.135469][ T3713] Reported by Kernel Concurrency Sanitizer on: [ 52.141623][ T3713] CPU: 1 UID: 0 PID: 3713 Comm: udevd Tainted: G W 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 52.153351][ T3713] Tainted: [W]=WARN [ 52.157150][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.167399][ T3713] ================================================================== [ 52.345139][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 53.395076][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 54.425083][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 55.465158][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 56.515073][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 57.545078][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.595071][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 59.625059][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 60.665043][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 61.705829][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available