last executing test programs: 6.545523869s ago: executing program 3 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r5, 0x0, 0x0, 0x0) prctl$PR_GET_TSC(0x19, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 5.083113617s ago: executing program 4 (id=698): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000034a, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) 3.632290805s ago: executing program 2 (id=705): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) 3.359398887s ago: executing program 4 (id=708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x4001000) 3.160841723s ago: executing program 4 (id=709): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2.557026002s ago: executing program 2 (id=711): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.244883727s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xff, 0x9, 0x4, 0x6, 0x17, "d9ff994437d56ff8bc3263adf5458d62da3139"}) 2.21452501s ago: executing program 4 (id=715): mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x18f4c0, 0x11d) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0xc, 0x4, @thr={&(0x7f00000002c0), 0x0}}, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f00000031c0)={0x1, 0x0, 0x8002, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 2.21345029s ago: executing program 2 (id=716): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.875993947s ago: executing program 2 (id=717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.363115859s ago: executing program 0 (id=719): r0 = syz_open_dev$evdev(0x0, 0x24c3, 0x101002) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.340234871s ago: executing program 4 (id=720): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() time(&(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1.257816668s ago: executing program 3 (id=721): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x49) 1.252526158s ago: executing program 3 (id=722): socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) 987.788159ms ago: executing program 0 (id=723): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) fallocate(r2, 0x0, 0x0, 0x1001f0) 755.992988ms ago: executing program 0 (id=724): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000) 749.649969ms ago: executing program 2 (id=725): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x108000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 605.30601ms ago: executing program 0 (id=726): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_socket_connect_nvme_tcp() 546.752965ms ago: executing program 0 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") unlink(&(0x7f0000000180)='./file1\x00') 546.075945ms ago: executing program 1 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) 470.415831ms ago: executing program 0 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000003ac0)={0x102, 0x8001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") 459.081743ms ago: executing program 2 (id=731): clock_adjtime(0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 458.311613ms ago: executing program 4 (id=732): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xff, 0x9, 0x4, 0x6, 0x17, "d9ff994437d56ff8bc3263adf5458d62da3139"}) 420.079145ms ago: executing program 1 (id=733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") 393.289358ms ago: executing program 3 (id=734): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 347.332592ms ago: executing program 1 (id=735): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) fallocate(r2, 0x0, 0x0, 0x1001f0) 127.269549ms ago: executing program 3 (id=736): socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_submit(0x0, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000033aefa517daadf7428d34a9e3bed886d6e20043581b4c72335de27ae71fd411541ded6c140986e7ed3c7ce929650a1bf65c8f6fee087021f52d2dd388e162270505c809fad1b0f78d9d1afa1fc4eb444658a6fda989f53e9d2c09fa174764a1d6df7836dac6c9d636f4bb3f258d083e97b6f41256b5f3b390000000000000000d3b8fa2a01592fbd9c2d4b40c44071380ef6509ef8de224398db307c1274671f5e0bee6acd882a5f2ffdd4ca4ce88076886d7a7758748a9c7a2d017dd9d6e5dbdd259d96f3d47709138b1dd08aaedb425f7585c7625b047ba7ec032fd4d3c37dffa7481e0f942f4e507bd77f7009602a50747d550ac6e7825fb543d2cf748a39c5dd540a2d673b282302252b30c525d0fd44ce9303b4628e5b0518fd74e5ff4d0a73a9cc2b876c0499ab3e836a60f2f032b549e351a4ac691f17ddf54919e570"], &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="11"], 0x14) 115.683701ms ago: executing program 1 (id=737): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 12.872158ms ago: executing program 1 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 1 (id=739): process_vm_writev(0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/255, 0xff}], 0x5, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2042021, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x22500, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0x129040, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_DISALLOCATE(r6, 0x5608) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 25.602940][ T29] audit: type=1400 audit(1755707976.033:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.603800][ T3290] cgroup: Unknown subsys name 'net' [ 25.625926][ T29] audit: type=1400 audit(1755707976.033:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.653555][ T29] audit: type=1400 audit(1755707976.063:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.771155][ T3290] cgroup: Unknown subsys name 'cpuset' [ 25.777665][ T3290] cgroup: Unknown subsys name 'rlimit' [ 25.925908][ T29] audit: type=1400 audit(1755707976.353:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.949432][ T29] audit: type=1400 audit(1755707976.353:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.969999][ T29] audit: type=1400 audit(1755707976.353:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.990744][ T29] audit: type=1400 audit(1755707976.353:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.011020][ T29] audit: type=1400 audit(1755707976.373:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.018052][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.036058][ T29] audit: type=1400 audit(1755707976.373:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.068663][ T29] audit: type=1400 audit(1755707976.483:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.109704][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.213447][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.302337][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.309422][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.316888][ T3300] bridge_slave_0: entered allmulticast mode [ 27.323721][ T3300] bridge_slave_0: entered promiscuous mode [ 27.345303][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.352501][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.359850][ T3300] bridge_slave_1: entered allmulticast mode [ 27.366439][ T3300] bridge_slave_1: entered promiscuous mode [ 27.377217][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.407751][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.420293][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.429601][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.465024][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.476912][ T3300] team0: Port device team_slave_0 added [ 27.495485][ T3300] team0: Port device team_slave_1 added [ 27.523855][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.542757][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.549817][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.557067][ T3301] bridge_slave_0: entered allmulticast mode [ 27.563458][ T3301] bridge_slave_0: entered promiscuous mode [ 27.578921][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.586443][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.612481][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.623595][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.630868][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.638235][ T3301] bridge_slave_1: entered allmulticast mode [ 27.644701][ T3301] bridge_slave_1: entered promiscuous mode [ 27.665510][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.672536][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.698704][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.722841][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.729999][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.737606][ T3311] bridge_slave_0: entered allmulticast mode [ 27.744288][ T3311] bridge_slave_0: entered promiscuous mode [ 27.754162][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.761701][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.768953][ T3311] bridge_slave_1: entered allmulticast mode [ 27.775920][ T3311] bridge_slave_1: entered promiscuous mode [ 27.785763][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.804941][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.812060][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.819509][ T3309] bridge_slave_0: entered allmulticast mode [ 27.826613][ T3309] bridge_slave_0: entered promiscuous mode [ 27.840364][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.850526][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.857765][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.864949][ T3309] bridge_slave_1: entered allmulticast mode [ 27.871770][ T3309] bridge_slave_1: entered promiscuous mode [ 27.909067][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.929418][ T3300] hsr_slave_0: entered promiscuous mode [ 27.935627][ T3300] hsr_slave_1: entered promiscuous mode [ 27.943068][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.959365][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.977629][ T3301] team0: Port device team_slave_0 added [ 27.984334][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.003469][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.010671][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.017902][ T3306] bridge_slave_0: entered allmulticast mode [ 28.024648][ T3306] bridge_slave_0: entered promiscuous mode [ 28.032309][ T3301] team0: Port device team_slave_1 added [ 28.038360][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.045616][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.053102][ T3306] bridge_slave_1: entered allmulticast mode [ 28.059770][ T3306] bridge_slave_1: entered promiscuous mode [ 28.078531][ T3311] team0: Port device team_slave_0 added [ 28.102779][ T3309] team0: Port device team_slave_0 added [ 28.109622][ T3311] team0: Port device team_slave_1 added [ 28.123439][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.130531][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.156827][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.168803][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.178855][ T3309] team0: Port device team_slave_1 added [ 28.191766][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.198737][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.225619][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.237523][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.280566][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.287666][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.314332][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.333567][ T3306] team0: Port device team_slave_0 added [ 28.339807][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.346974][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.373114][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.384116][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.391135][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.417043][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.435972][ T3306] team0: Port device team_slave_1 added [ 28.446332][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.453437][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.479468][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.507508][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.514529][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.541332][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.555172][ T3301] hsr_slave_0: entered promiscuous mode [ 28.561492][ T3301] hsr_slave_1: entered promiscuous mode [ 28.567347][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 28.573097][ T3301] Cannot create hsr debugfs directory [ 28.583862][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.590879][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.616876][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.640179][ T3309] hsr_slave_0: entered promiscuous mode [ 28.646399][ T3309] hsr_slave_1: entered promiscuous mode [ 28.652391][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.658190][ T3309] Cannot create hsr debugfs directory [ 28.678473][ T3311] hsr_slave_0: entered promiscuous mode [ 28.684507][ T3311] hsr_slave_1: entered promiscuous mode [ 28.690576][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.696374][ T3311] Cannot create hsr debugfs directory [ 28.775715][ T3306] hsr_slave_0: entered promiscuous mode [ 28.781946][ T3306] hsr_slave_1: entered promiscuous mode [ 28.787837][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 28.793586][ T3306] Cannot create hsr debugfs directory [ 28.819218][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.841222][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.861391][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.883291][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.957988][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.967355][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.979438][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.987798][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.017052][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.026959][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.042444][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.051427][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.077058][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.086261][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.101855][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.112605][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.131920][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.145918][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.154920][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.164153][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.193364][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.204018][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.236058][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.248780][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.268075][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.275328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.289887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.297188][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.306291][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.313363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.325178][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.332464][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.343495][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.358830][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.375863][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.389539][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.396903][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.406620][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.413825][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.438749][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.453491][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.469593][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.480188][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.492946][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.500249][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.508991][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.516150][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.542374][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.558476][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.583819][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.590914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.599563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.606711][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.672458][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.701450][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.744811][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.762701][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.838039][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.848385][ T3309] veth0_vlan: entered promiscuous mode [ 29.873654][ T3301] veth0_vlan: entered promiscuous mode [ 29.890936][ T3309] veth1_vlan: entered promiscuous mode [ 29.901806][ T3301] veth1_vlan: entered promiscuous mode [ 29.942034][ T3309] veth0_macvtap: entered promiscuous mode [ 29.950005][ T3301] veth0_macvtap: entered promiscuous mode [ 29.964453][ T3309] veth1_macvtap: entered promiscuous mode [ 29.971423][ T3301] veth1_macvtap: entered promiscuous mode [ 29.983695][ T3311] veth0_vlan: entered promiscuous mode [ 30.002032][ T3311] veth1_vlan: entered promiscuous mode [ 30.014602][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.023398][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.040550][ T3300] veth0_vlan: entered promiscuous mode [ 30.048999][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.068094][ T3300] veth1_vlan: entered promiscuous mode [ 30.076088][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.087052][ T3311] veth0_macvtap: entered promiscuous mode [ 30.094776][ T3311] veth1_macvtap: entered promiscuous mode [ 30.109307][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.119119][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.129938][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.147664][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.165017][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.175380][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.186625][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.199549][ T3306] veth0_vlan: entered promiscuous mode [ 30.209751][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.219455][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.228698][ T3300] veth0_macvtap: entered promiscuous mode [ 30.241169][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.250265][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.272681][ T3300] veth1_macvtap: entered promiscuous mode [ 30.284390][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.296011][ T3306] veth1_vlan: entered promiscuous mode [ 30.328974][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.341056][ T3473] loop2: detected capacity change from 0 to 1024 [ 30.346577][ T3306] veth0_macvtap: entered promiscuous mode [ 30.347841][ T3473] ======================================================= [ 30.347841][ T3473] WARNING: The mand mount option has been deprecated and [ 30.347841][ T3473] and is ignored by this kernel. Remove the mand [ 30.347841][ T3473] option from the mount to silence this warning. [ 30.347841][ T3473] ======================================================= [ 30.388482][ T3473] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.394981][ T3473] EXT4-fs: Ignoring removed bh option [ 30.408947][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.418458][ T1457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.428875][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.442101][ T3306] veth1_macvtap: entered promiscuous mode [ 30.451771][ T3473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.474210][ T1457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.483481][ T1457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.493721][ T1457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.503612][ T1457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.514994][ T1457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.582870][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.128318][ T3486] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 31.174151][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 31.174166][ T29] audit: type=1400 audit(1755707981.343:102): avc: denied { write } for pid=3471 comm="syz.2.3" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.358330][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.397535][ T29] audit: type=1400 audit(1755707981.823:103): avc: denied { name_bind } for pid=3487 comm="syz.0.1" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 31.441535][ T3490] loop0: detected capacity change from 0 to 1024 [ 31.448009][ T29] audit: type=1400 audit(1755707981.863:104): avc: denied { create } for pid=3489 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.478244][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.495406][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.530032][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.579361][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.617386][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.624466][ T29] audit: type=1400 audit(1755707982.043:105): avc: denied { create } for pid=3497 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.758141][ T29] audit: type=1400 audit(1755707982.183:106): avc: denied { getopt } for pid=3489 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.077291][ T3507] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 32.161543][ T29] audit: type=1400 audit(1755707982.503:107): avc: denied { execute } for pid=3493 comm="syz.3.4" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.183978][ T29] audit: type=1400 audit(1755707982.523:108): avc: denied { execute_no_trans } for pid=3493 comm="syz.3.4" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.374735][ T29] audit: type=1400 audit(1755707982.643:109): avc: denied { connect } for pid=3509 comm="syz.2.12" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.395253][ T29] audit: type=1400 audit(1755707982.643:110): avc: denied { setopt } for pid=3509 comm="syz.2.12" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.417285][ T29] audit: type=1400 audit(1755707982.643:111): avc: denied { write } for pid=3509 comm="syz.2.12" path="socket:[5015]" dev="sockfs" ino=5015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.608819][ T3516] loop2: detected capacity change from 0 to 8192 [ 32.642475][ T3525] syz.0.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.747877][ T3531] loop0: detected capacity change from 0 to 512 [ 33.089316][ T3531] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.124869][ T3531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 33.140237][ T3536] Zero length message leads to an empty skb [ 33.147212][ T3531] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.153851][ T3531] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.19: bad orphan inode 267 [ 33.175195][ T3531] EXT4-fs (loop0): Remounting filesystem read-only [ 33.184131][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 33.202136][ T3531] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.19: dx entry: limit 0 != root limit 125 [ 33.214028][ T3531] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.19: Corrupt directory, running e2fsck is recommended [ 33.252858][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 33.439434][ T3546] loop4: detected capacity change from 0 to 128 [ 33.505664][ T3551] loop2: detected capacity change from 0 to 128 [ 33.540701][ T3551] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.555239][ T3553] tipc: Started in network mode [ 33.560294][ T3553] tipc: Node identity d28446937dba, cluster identity 4711 [ 33.567458][ T3551] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.567614][ T3553] tipc: Enabled bearer , priority 0 [ 33.594272][ T3553] syzkaller0: entered promiscuous mode [ 33.599970][ T3553] syzkaller0: entered allmulticast mode [ 33.611632][ T3553] tipc: Resetting bearer [ 33.620856][ T3552] tipc: Resetting bearer [ 33.628909][ T3552] tipc: Disabling bearer [ 33.654055][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.682972][ T3558] loop2: detected capacity change from 0 to 512 [ 33.742794][ T3558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.770660][ T3558] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.933235][ C1] hrtimer: interrupt took 71041 ns [ 34.094347][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.192251][ T3577] loop1: detected capacity change from 0 to 4096 [ 34.224004][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.075825][ T3590] loop4: detected capacity change from 0 to 128 [ 36.098166][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.875356][ T3618] loop2: detected capacity change from 0 to 512 [ 36.894310][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.908255][ T3618] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.926504][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 36.926520][ T29] audit: type=1400 audit(1755707987.353:160): avc: denied { setattr } for pid=3615 comm="syz.2.46" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.969608][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.604616][ T29] audit: type=1400 audit(1755707988.033:161): avc: denied { read write } for pid=3638 comm="syz.4.53" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.605009][ T3639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.628052][ T29] audit: type=1400 audit(1755707988.033:162): avc: denied { open } for pid=3638 comm="syz.4.53" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.640014][ T3639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.659848][ T29] audit: type=1400 audit(1755707988.033:163): avc: denied { ioctl } for pid=3638 comm="syz.4.53" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.678956][ T3639] netlink: 168 bytes leftover after parsing attributes in process `syz.4.53'. [ 37.694083][ T29] audit: type=1400 audit(1755707988.103:164): avc: denied { read } for pid=3638 comm="syz.4.53" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.722957][ T29] audit: type=1400 audit(1755707988.103:165): avc: denied { open } for pid=3638 comm="syz.4.53" path="net:[4026532835]" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.035297][ T3651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.043968][ T3651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.052741][ T29] audit: type=1400 audit(1755707988.463:166): avc: denied { watch watch_reads } for pid=3644 comm="syz.3.55" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.350511][ T29] audit: type=1326 audit(1755707988.533:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38fbdebe9 code=0x7ffc0000 [ 38.373687][ T29] audit: type=1326 audit(1755707988.533:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38fbdebe9 code=0x7ffc0000 [ 38.397386][ T29] audit: type=1326 audit(1755707988.533:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa38fbdebe9 code=0x7ffc0000 [ 38.427974][ T3660] loop4: detected capacity change from 0 to 512 [ 38.440659][ T3661] loop1: detected capacity change from 0 to 1024 [ 38.460224][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.486380][ T3661] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.492535][ T3660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.508171][ T3660] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.539884][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.540948][ T3660] syz.4.60 (3660) used greatest stack depth: 10872 bytes left [ 38.557525][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.595782][ T3671] loop1: detected capacity change from 0 to 512 [ 38.604606][ T3671] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.617759][ T3671] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.632096][ T3671] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.646690][ T3671] EXT4-fs (loop1): 1 truncate cleaned up [ 38.652964][ T3671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.687058][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.924426][ T3677] netlink: 71 bytes leftover after parsing attributes in process `syz.1.65'. [ 39.083849][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.091317][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.098668][ T3683] bridge0: entered allmulticast mode [ 39.106643][ T3683] bridge_slave_1: left allmulticast mode [ 39.112424][ T3683] bridge_slave_1: left promiscuous mode [ 39.118331][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.126938][ T3683] bridge_slave_0: left allmulticast mode [ 39.133040][ T3683] bridge_slave_0: left promiscuous mode [ 39.138984][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.148343][ T3684] loop0: detected capacity change from 0 to 128 [ 39.220184][ T3686] loop1: detected capacity change from 0 to 512 [ 39.242817][ T3686] EXT4-fs (loop1): too many log groups per flexible block group [ 39.250741][ T3686] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 39.257577][ T3686] EXT4-fs (loop1): mount failed [ 39.371133][ T3693] 9pnet_fd: p9_fd_create_tcp (3693): problem connecting socket to 127.0.0.1 [ 39.401413][ T3695] tipc: Started in network mode [ 39.406694][ T3695] tipc: Node identity 4609c18c4a45, cluster identity 4711 [ 39.414380][ T3695] tipc: Enabled bearer , priority 0 [ 39.422017][ T3695] syzkaller0: entered promiscuous mode [ 39.427561][ T3695] syzkaller0: entered allmulticast mode [ 39.447402][ T3695] tipc: Resetting bearer [ 39.454348][ T3694] tipc: Resetting bearer [ 39.462247][ T3694] tipc: Disabling bearer [ 39.482028][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.491475][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.502040][ T3697] netlink: 168 bytes leftover after parsing attributes in process `syz.4.71'. [ 39.762943][ T3702] loop2: detected capacity change from 0 to 1024 [ 39.777074][ T3702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.792884][ T3702] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.809062][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.448688][ T3716] netlink: 71 bytes leftover after parsing attributes in process `syz.4.77'. [ 40.577103][ T3723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 40.587673][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 40.596956][ T3723] veth0_to_hsr: entered promiscuous mode [ 40.602761][ T3723] veth0_to_hsr: entered allmulticast mode [ 40.853800][ T3731] loop0: detected capacity change from 0 to 512 [ 40.861123][ T3731] EXT4-fs: inline encryption not supported [ 40.875964][ T3731] EXT4-fs: dax option not supported [ 41.167052][ T3739] loop2: detected capacity change from 0 to 512 [ 41.219167][ T3741] loop3: detected capacity change from 0 to 512 [ 41.383264][ T3741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.413756][ T3739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.426652][ T3739] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.494907][ T3741] EXT4-fs (loop3): 1 truncate cleaned up [ 41.546282][ T3741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.581535][ T3746] loop4: detected capacity change from 0 to 512 [ 41.613290][ T3746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.715378][ T3746] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.728540][ T3750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.739621][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.754509][ T3750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.787594][ T3750] netlink: 168 bytes leftover after parsing attributes in process `syz.0.87'. [ 42.058217][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.084584][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 42.084598][ T29] audit: type=1400 audit(1755707992.513:197): avc: denied { create } for pid=3751 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.532381][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.586965][ T3769] loop4: detected capacity change from 0 to 512 [ 42.603802][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.617932][ T3769] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.735704][ T29] audit: type=1400 audit(1755707993.163:198): avc: denied { read append open } for pid=3768 comm="syz.4.95" path="/19/file0/blkio.bfq.io_service_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.772018][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.379198][ T3788] loop1: detected capacity change from 0 to 128 [ 43.516631][ T29] audit: type=1400 audit(1755707993.643:199): avc: denied { create } for pid=3782 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.535973][ T29] audit: type=1400 audit(1755707993.643:200): avc: denied { connect } for pid=3782 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.555471][ T29] audit: type=1400 audit(1755707993.643:201): avc: denied { ioctl } for pid=3782 comm="syz.4.98" path="socket:[5487]" dev="sockfs" ino=5487 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.621094][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.670675][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.692655][ T3792] netlink: 128 bytes leftover after parsing attributes in process `syz.1.102'. [ 43.711992][ T3792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 43.908158][ T3796] loop4: detected capacity change from 0 to 1024 [ 43.941852][ T3798] bridge_slave_1: left allmulticast mode [ 43.947672][ T3798] bridge_slave_1: left promiscuous mode [ 43.953652][ T3798] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.962861][ T3798] bridge_slave_0: left allmulticast mode [ 43.968595][ T3798] bridge_slave_0: left promiscuous mode [ 43.974381][ T3798] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.155792][ T3805] loop0: detected capacity change from 0 to 512 [ 44.165561][ T3805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.178889][ T3805] EXT4-fs (loop0): 1 truncate cleaned up [ 44.185703][ T3805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.522599][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 44.531499][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 44.554257][ T3811] veth1_macvtap: entered allmulticast mode [ 44.573955][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 44.613373][ T3820] loop1: detected capacity change from 0 to 512 [ 44.621008][ T3820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.642838][ T3820] EXT4-fs (loop1): 1 truncate cleaned up [ 44.648977][ T3820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.675040][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.707933][ T3824] loop1: detected capacity change from 0 to 1024 [ 44.721782][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.283285][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.315698][ T29] audit: type=1400 audit(1755707995.723:202): avc: denied { read write } for pid=3823 comm="syz.1.112" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.338565][ T29] audit: type=1400 audit(1755707995.723:203): avc: denied { open } for pid=3823 comm="syz.1.112" path="/23/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.594461][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.613251][ T29] audit: type=1400 audit(1755707995.963:204): avc: denied { bind } for pid=3836 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.632993][ T29] audit: type=1400 audit(1755707995.963:205): avc: denied { setopt } for pid=3836 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.655330][ T3839] loop3: detected capacity change from 0 to 128 [ 45.840495][ T29] audit: type=1400 audit(1755707996.213:206): avc: denied { mount } for pid=3836 comm="syz.0.114" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.202385][ T3847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.211151][ T3847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.431080][ T3851] loop3: detected capacity change from 0 to 4096 [ 46.442081][ T3851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.457395][ T3851] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 80: comm syz.3.120: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 46.478148][ T3851] EXT4-fs (loop3): Remounting filesystem read-only [ 46.484716][ T3851] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz.3.120: directory missing '..' [ 46.525735][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.536376][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.545279][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.566197][ T3858] loop1: detected capacity change from 0 to 512 [ 46.572723][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.599847][ T3858] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.613949][ T3858] EXT4-fs (loop1): 1 truncate cleaned up [ 46.620079][ T3858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.658153][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.825490][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 47.825504][ T29] audit: type=1400 audit(1755707998.253:212): avc: denied { create } for pid=3883 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.936109][ T29] audit: type=1400 audit(1755707998.283:213): avc: denied { setopt } for pid=3885 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.956123][ T29] audit: type=1400 audit(1755707998.283:214): avc: denied { write } for pid=3885 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.975609][ T29] audit: type=1400 audit(1755707998.293:215): avc: denied { write } for pid=3883 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.995781][ T29] audit: type=1400 audit(1755707998.293:216): avc: denied { nlmsg_write } for pid=3883 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.036276][ T3895] loop0: detected capacity change from 0 to 512 [ 48.036962][ T3894] loop3: detected capacity change from 0 to 1024 [ 48.046441][ T3895] EXT4-fs: Ignoring removed oldalloc option [ 48.056419][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 48.065441][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 48.067355][ T29] audit: type=1400 audit(1755707998.473:217): avc: denied { search } for pid=3031 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.079265][ T3894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.096504][ T29] audit: type=1400 audit(1755707998.473:218): avc: denied { search } for pid=3031 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.112390][ T3894] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.127123][ T29] audit: type=1400 audit(1755707998.473:219): avc: denied { search } for pid=3031 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.138214][ T3894] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 48.160080][ T29] audit: type=1400 audit(1755707998.473:220): avc: denied { read } for pid=3031 comm="dhcpcd" name="n27" dev="tmpfs" ino=1576 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.160102][ T29] audit: type=1400 audit(1755707998.473:221): avc: denied { open } for pid=3031 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=1576 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.179038][ T3894] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.217778][ T3895] EXT4-fs (loop0): 1 truncate cleaned up [ 48.224944][ T3894] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 48.231995][ T3895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.239316][ T3894] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 48.356164][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.381590][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.401256][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.693863][ T3962] __nla_validate_parse: 1 callbacks suppressed [ 49.693877][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 49.709260][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 49.721110][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 49.738396][ T3960] loop4: detected capacity change from 0 to 1024 [ 49.749577][ T3960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.862278][ T3960] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.029822][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.155141][ T3968] loop0: detected capacity change from 0 to 1024 [ 50.184940][ T3968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.252616][ T3968] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 50.263632][ T3968] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 50.279227][ T3968] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.289537][ T3968] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 50.298261][ T3968] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 50.492002][ T3983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.502233][ T3983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.667991][ T3996] loop3: detected capacity change from 0 to 256 [ 50.686748][ T3996] FAT-fs (loop3): codepage cp852 not found [ 50.769658][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 50.778580][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 50.788166][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 51.028794][ T4004] tipc: Enabled bearer , priority 0 [ 51.036523][ T4004] syzkaller0: entered promiscuous mode [ 51.042034][ T4004] syzkaller0: entered allmulticast mode [ 51.051805][ T4004] tipc: Resetting bearer [ 51.058339][ T4003] tipc: Resetting bearer [ 51.066374][ T4003] tipc: Disabling bearer [ 51.316364][ T4009] loop0: detected capacity change from 0 to 1024 [ 51.325269][ T4009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.339803][ T4009] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 51.350784][ T4009] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 51.361048][ T4009] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.362814][ T4011] loop2: detected capacity change from 0 to 512 [ 51.371300][ T4009] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 51.381626][ T4011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.386415][ T4009] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 51.425891][ T4011] EXT4-fs (loop2): 1 truncate cleaned up [ 51.432174][ T4011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.459257][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.597078][ T4018] loop3: detected capacity change from 0 to 8192 [ 51.767532][ T4030] hub 8-0:1.0: USB hub found [ 51.773393][ T4030] hub 8-0:1.0: 8 ports detected [ 51.944863][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 51.953796][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 52.106126][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 52.254246][ T4038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.717901][ T4038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.798551][ T4038] netlink: 128 bytes leftover after parsing attributes in process `syz.4.172'. [ 53.076406][ T4054] loop0: detected capacity change from 0 to 1024 [ 53.087158][ T4054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.108021][ T4054] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 53.119160][ T4054] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 53.161323][ T4056] loop3: detected capacity change from 0 to 512 [ 53.167973][ T4054] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.178651][ T4054] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 53.187502][ T4054] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 53.201917][ T4056] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.229436][ T4056] EXT4-fs (loop3): 1 truncate cleaned up [ 53.238473][ T4056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.267444][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.707928][ T4069] loop2: detected capacity change from 0 to 128 [ 53.759858][ T4075] loop0: detected capacity change from 0 to 512 [ 53.777250][ T4077] tipc: Enabled bearer , priority 0 [ 53.790257][ T4075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.800418][ T4074] loop3: detected capacity change from 0 to 8192 [ 53.809618][ T4077] syzkaller0: entered promiscuous mode [ 53.814558][ T4075] EXT4-fs (loop0): 1 truncate cleaned up [ 53.815246][ T4077] syzkaller0: entered allmulticast mode [ 53.821335][ T4075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.845345][ T4077] tipc: Resetting bearer [ 53.852743][ T4076] tipc: Resetting bearer [ 53.853069][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.881958][ T4076] tipc: Disabling bearer [ 53.975605][ T4083] loop2: detected capacity change from 0 to 512 [ 53.982324][ T4083] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.988839][ T4083] EXT4-fs: inline encryption not supported [ 54.002510][ T4083] EXT4-fs: test_dummy_encryption option not supported [ 54.227574][ T4093] loop3: detected capacity change from 0 to 512 [ 54.861733][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.874379][ T4093] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.109391][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 55.109407][ T29] audit: type=1400 audit(1755708005.533:232): avc: denied { name_bind } for pid=4106 comm="syz.2.193" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.156413][ T4058] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 56.223172][ T4111] loop2: detected capacity change from 0 to 4096 [ 56.294107][ T4111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.876130][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.919333][ T4122] loop1: detected capacity change from 0 to 1024 [ 56.955174][ T4122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.990197][ T4122] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 57.001351][ T4122] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 57.229783][ T4127] netlink: 'syz.3.197': attribute type 17 has an invalid length. [ 57.237833][ T4127] __nla_validate_parse: 3 callbacks suppressed [ 57.237847][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 57.554757][ T4122] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.565064][ T4122] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 57.573805][ T4122] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 57.583353][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.588635][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 57.662106][ T4133] tipc: Enabled bearer , priority 0 [ 57.682458][ T4133] syzkaller0: entered promiscuous mode [ 57.688001][ T4133] syzkaller0: entered allmulticast mode [ 57.762202][ T4133] tipc: Resetting bearer [ 57.762760][ T29] audit: type=1400 audit(1755708008.193:233): avc: denied { create } for pid=4138 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.782196][ T4139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.803815][ T4132] tipc: Resetting bearer [ 57.817535][ T4132] tipc: Disabling bearer [ 57.825332][ T29] audit: type=1400 audit(1755708008.193:234): avc: denied { setopt } for pid=4138 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.894854][ T29] audit: type=1400 audit(1755708008.263:235): avc: denied { ioctl } for pid=4138 comm="syz.1.203" path="socket:[6067]" dev="sockfs" ino=6067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.919511][ T29] audit: type=1400 audit(1755708008.263:236): avc: denied { bind } for pid=4138 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.124999][ T4148] loop4: detected capacity change from 0 to 4096 [ 58.137589][ T4148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.343859][ T4153] hub 8-0:1.0: USB hub found [ 58.419768][ T4153] hub 8-0:1.0: 8 ports detected [ 59.186058][ T4159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.225325][ T4159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.266430][ T29] audit: type=1400 audit(1755708009.693:237): avc: denied { bind } for pid=4158 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.634028][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.034586][ T4169] loop2: detected capacity change from 0 to 4096 [ 60.082076][ T4169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.827051][ T29] audit: type=1400 audit(1755708012.253:238): avc: denied { bind } for pid=4179 comm="syz.4.216" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.847710][ T29] audit: type=1400 audit(1755708012.253:239): avc: denied { node_bind } for pid=4179 comm="syz.4.216" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.259618][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.265130][ T4188] loop4: detected capacity change from 0 to 512 [ 62.295519][ T4188] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.362903][ T29] audit: type=1400 audit(1755708012.793:240): avc: denied { bind } for pid=4184 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.457418][ T29] audit: type=1400 audit(1755708012.833:241): avc: denied { setopt } for pid=4184 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.501801][ T4188] EXT4-fs (loop4): 1 truncate cleaned up [ 62.557521][ T4188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.712247][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.846408][ T4216] loop0: detected capacity change from 0 to 512 [ 63.990850][ T4216] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.025239][ T4216] EXT4-fs (loop0): 1 truncate cleaned up [ 64.040791][ T4216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.148820][ T4223] loop1: detected capacity change from 0 to 4096 [ 64.232796][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.363219][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.278345][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 65.287929][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 65.324994][ T4244] hub 8-0:1.0: USB hub found [ 65.329939][ T4244] hub 8-0:1.0: 8 ports detected [ 65.393573][ T4249] loop0: detected capacity change from 0 to 512 [ 65.403367][ T4249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.421119][ T4249] EXT4-fs (loop0): 1 truncate cleaned up [ 65.427472][ T4249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.455923][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.636274][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.683650][ T4256] loop1: detected capacity change from 0 to 1024 [ 65.694014][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.709986][ T4256] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.732211][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.884735][ T4259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4259 comm=syz.0.243 [ 66.352017][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 66.361593][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 66.401980][ T4279] loop2: detected capacity change from 0 to 1024 [ 66.409692][ T4279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.418655][ T4279] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 66.429705][ T4279] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 66.440418][ T4279] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.450633][ T4279] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 66.459539][ T4279] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 66.495504][ T29] audit: type=1400 audit(1755708016.923:242): avc: denied { create } for pid=4280 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.516338][ T29] audit: type=1400 audit(1755708016.923:243): avc: denied { connect } for pid=4280 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.683679][ T4285] loop2: detected capacity change from 0 to 4096 [ 66.697808][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.742863][ T4299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4299 comm=syz.4.257 [ 67.768220][ T4303] hub 8-0:1.0: USB hub found [ 67.772936][ T4303] hub 8-0:1.0: 8 ports detected [ 67.931491][ T4307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'. [ 67.969619][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 68.077472][ T4313] tipc: Enabled bearer , priority 0 [ 68.086057][ T4313] syzkaller0: entered promiscuous mode [ 68.091556][ T4313] syzkaller0: entered allmulticast mode [ 68.103152][ T4313] tipc: Resetting bearer [ 68.109963][ T4312] tipc: Resetting bearer [ 68.119539][ T4312] tipc: Disabling bearer [ 68.396045][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.640137][ T4328] loop2: detected capacity change from 0 to 128 [ 69.448696][ T4337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4337 comm=syz.4.270 [ 69.694197][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.720408][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.733359][ T29] audit: type=1400 audit(1755708020.163:244): avc: denied { read } for pid=4342 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.783718][ T29] audit: type=1400 audit(1755708020.213:245): avc: denied { write } for pid=4342 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.712020][ T4354] loop1: detected capacity change from 0 to 512 [ 70.741924][ T4354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.781270][ T4354] EXT4-fs (loop1): 1 truncate cleaned up [ 70.798361][ T4354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.851952][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.275025][ T4379] IPv6: sit1: Disabled Multicast RS [ 72.836310][ T4386] hub 8-0:1.0: USB hub found [ 72.842362][ T4386] hub 8-0:1.0: 8 ports detected [ 72.881497][ T29] audit: type=1400 audit(1755708023.313:246): avc: denied { connect } for pid=4391 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.913579][ T29] audit: type=1400 audit(1755708023.313:247): avc: denied { write } for pid=4391 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.975441][ T4397] loop4: detected capacity change from 0 to 512 [ 72.987023][ T4397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.000008][ T4395] loop3: detected capacity change from 0 to 8192 [ 73.007168][ T4397] EXT4-fs (loop4): 1 truncate cleaned up [ 73.015958][ T4397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.071338][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.771640][ T29] audit: type=1326 audit(1755708024.193:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7adebe9 code=0x7ffc0000 [ 73.920739][ T29] audit: type=1326 audit(1755708024.233:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f77f7adebe9 code=0x7ffc0000 [ 73.944214][ T29] audit: type=1326 audit(1755708024.233:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7adebe9 code=0x7ffc0000 [ 73.967693][ T29] audit: type=1326 audit(1755708024.233:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f77f7adebe9 code=0x7ffc0000 [ 73.991236][ T29] audit: type=1326 audit(1755708024.233:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7adebe9 code=0x7ffc0000 [ 74.014740][ T29] audit: type=1326 audit(1755708024.233:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7adebe9 code=0x7ffc0000 [ 74.079348][ T4418] tipc: Enabled bearer , priority 0 [ 74.119642][ T4418] syzkaller0: entered promiscuous mode [ 74.125282][ T4418] syzkaller0: entered allmulticast mode [ 74.186224][ T4418] tipc: Resetting bearer [ 74.193600][ T4417] tipc: Resetting bearer [ 74.207100][ T4417] tipc: Disabling bearer [ 74.305401][ T4424] loop2: detected capacity change from 0 to 512 [ 74.325298][ T4424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.365497][ T4424] EXT4-fs (loop2): 1 truncate cleaned up [ 74.373305][ T4422] hub 8-0:1.0: USB hub found [ 74.385811][ T4428] loop3: detected capacity change from 0 to 128 [ 74.421662][ T4424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.435246][ T4422] hub 8-0:1.0: 8 ports detected [ 74.472865][ T4416] syz.0.295 (4416) used greatest stack depth: 10176 bytes left [ 74.584266][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.609033][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.673732][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.690126][ T4441] loop1: detected capacity change from 0 to 1024 [ 75.715654][ T4441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.763630][ T4441] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 75.774791][ T4441] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 75.851392][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 75.851410][ T29] audit: type=1400 audit(1755708026.263:260): avc: denied { create } for pid=4443 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.884507][ T4441] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 75.894868][ T4441] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 75.903751][ T4441] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 75.992257][ T4449] loop4: detected capacity change from 0 to 2048 [ 76.081145][ T3580] loop4: p1 < > p4 [ 76.087500][ T3580] loop4: p4 size 8388608 extends beyond EOD, truncated [ 76.108468][ T4449] loop4: p1 < > p4 [ 76.118139][ T4449] loop4: p4 size 8388608 extends beyond EOD, truncated [ 76.156350][ T29] audit: type=1400 audit(1755708026.583:261): avc: denied { read write } for pid=4448 comm="syz.4.308" name="loop4p4" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.179723][ T29] audit: type=1400 audit(1755708026.583:262): avc: denied { open } for pid=4448 comm="syz.4.308" path="/dev/loop4p4" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.222208][ T4454] netlink: 87 bytes leftover after parsing attributes in process `syz.2.311'. [ 76.236860][ T29] audit: type=1400 audit(1755708026.663:263): avc: denied { map } for pid=4448 comm="syz.4.308" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.260916][ T4449] vhci_hcd: invalid port number 96 [ 76.266124][ T4449] vhci_hcd: default hub control req: 0300 v0003 i0060 l0 [ 76.282350][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 76.396580][ T4464] hub 8-0:1.0: USB hub found [ 76.412398][ T4464] hub 8-0:1.0: 8 ports detected [ 76.835070][ T4498] tipc: Started in network mode [ 76.840010][ T4498] tipc: Node identity b27542b36e63, cluster identity 4711 [ 76.847278][ T4498] tipc: Enabled bearer , priority 0 [ 76.977275][ T4499] syzkaller0: entered promiscuous mode [ 76.982910][ T4499] syzkaller0: entered allmulticast mode [ 77.001224][ T4497] tipc: Resetting bearer [ 77.009282][ T4497] tipc: Disabling bearer [ 77.183803][ T4506] loop3: detected capacity change from 0 to 128 [ 77.729479][ T4514] loop4: detected capacity change from 0 to 1024 [ 77.775197][ T4514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.838705][ T4514] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 77.849692][ T4514] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 78.012914][ T29] audit: type=1400 audit(1755708028.443:264): avc: denied { execmem } for pid=4518 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.040494][ T4514] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.050685][ T4514] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 78.059387][ T4514] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 78.854843][ T29] audit: type=1400 audit(1755708029.283:265): avc: denied { setcheckreqprot } for pid=4534 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.184994][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.192394][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.200698][ T4547] loop1: detected capacity change from 0 to 128 [ 79.329008][ T4546] bridge0: entered allmulticast mode [ 79.398305][ T4548] bridge_slave_1: left allmulticast mode [ 79.404354][ T4548] bridge_slave_1: left promiscuous mode [ 79.410119][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.477490][ T4546] loop2: detected capacity change from 0 to 512 [ 79.523681][ T4548] bridge_slave_0: left allmulticast mode [ 79.529496][ T4548] bridge_slave_0: left promiscuous mode [ 79.535369][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.640889][ T4546] EXT4-fs (loop2): too many log groups per flexible block group [ 79.648905][ T4546] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 79.738462][ T4546] EXT4-fs (loop2): mount failed [ 79.784279][ T4553] tipc: Started in network mode [ 79.789341][ T4553] tipc: Node identity ca03bbeeee28, cluster identity 4711 [ 79.796711][ T4553] tipc: Enabled bearer , priority 0 [ 79.808634][ T4554] syzkaller0: entered promiscuous mode [ 79.814217][ T4554] syzkaller0: entered allmulticast mode [ 79.833663][ T4549] tipc: Resetting bearer [ 79.844265][ T4549] tipc: Disabling bearer [ 80.462340][ T4596] loop2: detected capacity change from 0 to 4096 [ 80.493841][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.663962][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 80.968505][ T4616] loop1: detected capacity change from 0 to 512 [ 81.021594][ T4616] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.095155][ T4616] EXT4-fs (loop1): 1 truncate cleaned up [ 81.121747][ T4616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.142487][ T4615] loop4: detected capacity change from 0 to 8192 [ 81.244995][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.780973][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.941084][ T4649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.951257][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.616337][ T4679] loop0: detected capacity change from 0 to 8192 [ 82.946667][ T4694] loop2: detected capacity change from 0 to 512 [ 82.954235][ T4694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.967741][ T4694] EXT4-fs (loop2): 1 truncate cleaned up [ 82.979073][ T4694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.006036][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.032512][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.041239][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.045773][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.063289][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.385284][ T4711] loop4: detected capacity change from 0 to 512 [ 83.392872][ T4711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.416932][ T4711] EXT4-fs (loop4): 1 truncate cleaned up [ 83.424323][ T4711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.462641][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.748777][ T4727] loop0: detected capacity change from 0 to 512 [ 83.775749][ T4727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.816151][ T4727] EXT4-fs (loop0): 1 truncate cleaned up [ 83.839700][ T4727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.961758][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.007599][ T4739] loop2: detected capacity change from 0 to 128 [ 84.164055][ T4748] loop2: detected capacity change from 0 to 512 [ 84.174239][ T4748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.194282][ T4748] EXT4-fs (loop2): 1 truncate cleaned up [ 84.200960][ T4748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.228755][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.238243][ T4750] loop0: detected capacity change from 0 to 8192 [ 84.339795][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.385453][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.439690][ T4764] loop2: detected capacity change from 0 to 512 [ 84.472909][ T4764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.510011][ T4764] EXT4-fs (loop2): 1 truncate cleaned up [ 84.521542][ T4764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.561977][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.613967][ T29] audit: type=1400 audit(1755708035.043:266): avc: denied { create } for pid=4771 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.625938][ T4774] loop3: detected capacity change from 0 to 128 [ 84.840910][ T29] audit: type=1400 audit(1755708035.263:267): avc: denied { write } for pid=4771 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.861022][ T29] audit: type=1400 audit(1755708035.263:268): avc: denied { nlmsg_write } for pid=4771 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.652582][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.661205][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.242026][ T4810] hub 8-0:1.0: USB hub found [ 87.247219][ T4810] hub 8-0:1.0: 8 ports detected [ 87.659765][ T4819] loop3: detected capacity change from 0 to 512 [ 89.545585][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.596211][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.645278][ T4819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.657971][ T4819] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.872557][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.104379][ T4844] loop4: detected capacity change from 0 to 8192 [ 90.505274][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.519223][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.757041][ T4862] hub 8-0:1.0: USB hub found [ 90.762153][ T4862] hub 8-0:1.0: 8 ports detected [ 91.847688][ T4874] loop3: detected capacity change from 0 to 4096 [ 92.503364][ T4874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.629961][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.739846][ T4885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 92.749683][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 92.872971][ T4889] loop4: detected capacity change from 0 to 512 [ 92.924723][ T4889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.937610][ T4889] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.455549][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.770665][ T4910] hub 8-0:1.0: USB hub found [ 94.775386][ T4910] hub 8-0:1.0: 8 ports detected [ 95.229296][ T4912] loop4: detected capacity change from 0 to 8192 [ 95.615191][ T29] audit: type=1400 audit(1755708046.043:269): avc: denied { write } for pid=4933 comm="syz.1.442" name="fib_triestat" dev="proc" ino=4026532507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.797113][ T4944] hub 8-0:1.0: USB hub found [ 95.802122][ T4944] hub 8-0:1.0: 8 ports detected [ 97.592930][ T4961] loop2: detected capacity change from 0 to 128 [ 97.741033][ T4966] loop1: detected capacity change from 0 to 4096 [ 97.757924][ T4966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.330193][ T4987] hub 8-0:1.0: USB hub found [ 98.340534][ T4987] hub 8-0:1.0: 8 ports detected [ 98.505640][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.721633][ T4991] loop1: detected capacity change from 0 to 2048 [ 98.788117][ T3580] loop1: p1 < > p4 [ 98.800254][ T3580] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.816411][ T4993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.816538][ T4991] loop1: p1 < > p4 [ 98.850023][ T4991] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.872372][ T4993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.916528][ T4991] vhci_hcd: invalid port number 96 [ 98.921874][ T4991] vhci_hcd: default hub control req: 0300 v0003 i0060 l0 [ 99.035494][ T3580] udevd[3580]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 99.058854][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 99.133944][ T4997] loop4: detected capacity change from 0 to 512 [ 99.141267][ T4997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.174147][ T4997] EXT4-fs (loop4): 1 truncate cleaned up [ 99.180192][ T4997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.201313][ T4995] loop1: detected capacity change from 0 to 8192 [ 99.211350][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.156902][ T5019] loop0: detected capacity change from 0 to 128 [ 101.160752][ T5042] loop1: detected capacity change from 0 to 8192 [ 101.187179][ T5045] loop4: detected capacity change from 0 to 4096 [ 101.204750][ T5045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.960933][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.211951][ T29] audit: type=1400 audit(1755708052.623:270): avc: denied { ioctl } for pid=5060 comm="syz.0.489" path="socket:[9682]" dev="sockfs" ino=9682 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.237160][ T5070] loop4: detected capacity change from 0 to 128 [ 103.278197][ T5080] loop2: detected capacity change from 0 to 4096 [ 103.286903][ T5080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.509988][ T5085] loop0: detected capacity change from 0 to 512 [ 103.534190][ T5085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.573516][ T5085] EXT4-fs (loop0): 1 truncate cleaned up [ 103.594128][ T5085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.638519][ T5090] loop1: detected capacity change from 0 to 512 [ 103.663787][ T5090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.683119][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.698875][ T5090] EXT4-fs (loop1): 1 truncate cleaned up [ 103.713641][ T5090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.765296][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.841550][ T5093] loop3: detected capacity change from 0 to 512 [ 103.852585][ T5093] EXT4-fs (loop3): too many log groups per flexible block group [ 103.860450][ T5093] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 103.877553][ T5093] EXT4-fs (loop3): mount failed [ 103.976905][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.228326][ T5107] loop0: detected capacity change from 0 to 4096 [ 104.368635][ T5106] loop2: detected capacity change from 0 to 1024 [ 104.386715][ T5107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.006847][ T5106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.147889][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.423136][ T5124] tap0: tun_chr_ioctl cmd 2147767511 [ 105.706163][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.758087][ T5132] loop0: detected capacity change from 0 to 512 [ 105.767295][ T5132] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.780112][ T5132] EXT4-fs (loop0): 1 truncate cleaned up [ 105.786519][ T5132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.817007][ T5135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.818783][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.825695][ T5135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.100221][ T5147] loop3: detected capacity change from 0 to 128 [ 106.864185][ T5161] loop4: detected capacity change from 0 to 1024 [ 106.963054][ T5161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.990360][ T29] audit: type=1400 audit(1755708057.413:271): avc: denied { write } for pid=5159 comm="syz.4.521" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.538392][ T5171] loop2: detected capacity change from 0 to 4096 [ 107.672353][ T5171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.832761][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.710533][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.809184][ T5193] mmap: syz.4.532 (5193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.959406][ T5202] cgroup: Unknown subsys name 'cpuset' [ 109.281817][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 109.293991][ T5208] dummy0: entered promiscuous mode [ 109.299284][ T5208] macvtap1: entered promiscuous mode [ 109.304005][ T29] audit: type=1400 audit(1755708059.723:272): avc: denied { load_policy } for pid=5197 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.307602][ T5208] macvtap1: entered allmulticast mode [ 109.331113][ T5208] dummy0: entered allmulticast mode [ 109.353052][ T5204] SELinux: ebitmap: truncated map [ 109.369049][ T5204] SELinux: failed to load policy [ 109.860814][ T5218] loop2: detected capacity change from 0 to 8192 [ 111.078645][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 111.089375][ T5256] hub 8-0:1.0: USB hub found [ 111.099104][ T5256] hub 8-0:1.0: 8 ports detected [ 111.113203][ T5255] dummy0: entered promiscuous mode [ 111.133788][ T5255] macvtap1: entered promiscuous mode [ 111.176852][ T5255] macvtap1: entered allmulticast mode [ 111.290469][ T5255] dummy0: entered allmulticast mode [ 111.773844][ T5268] loop1: detected capacity change from 0 to 512 [ 111.809067][ T5268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.850372][ T5268] EXT4-fs (loop1): 1 truncate cleaned up [ 111.863295][ T5276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.882607][ T5268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.897351][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 111.907511][ T5276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.928971][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.589647][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 112.603868][ T5290] dummy0: entered promiscuous mode [ 112.609175][ T5290] macvtap1: entered promiscuous mode [ 112.616886][ T5290] macvtap1: entered allmulticast mode [ 112.623295][ T5290] dummy0: entered allmulticast mode [ 112.685488][ T5294] loop4: detected capacity change from 0 to 2048 [ 112.770921][ T3580] loop4: p1 < > p4 [ 112.775967][ T3580] loop4: p4 size 8388608 extends beyond EOD, truncated [ 112.787839][ T5294] loop4: p1 < > p4 [ 112.792455][ T5294] loop4: p4 size 8388608 extends beyond EOD, truncated [ 112.834705][ T5294] vhci_hcd: invalid port number 96 [ 112.839857][ T5294] vhci_hcd: default hub control req: 0300 v0003 i0060 l0 [ 113.230032][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.244560][ T3580] udevd[3580]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 114.362932][ T5311] loop1: detected capacity change from 0 to 512 [ 114.970264][ T5311] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.093995][ T5311] EXT4-fs (loop1): 1 truncate cleaned up [ 115.104390][ T5311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.161433][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.480985][ T5328] loop1: detected capacity change from 0 to 4096 [ 115.533315][ T5328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.417176][ T5357] loop0: detected capacity change from 0 to 4096 [ 116.427047][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.470809][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.507219][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.761644][ T5365] loop4: detected capacity change from 0 to 1024 [ 117.396125][ T5380] hub 8-0:1.0: USB hub found [ 117.420358][ T5380] hub 8-0:1.0: 8 ports detected [ 118.618082][ T5394] loop0: detected capacity change from 0 to 4096 [ 118.641922][ T5394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.666608][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.808031][ T5402] loop0: detected capacity change from 0 to 1024 [ 118.826984][ T5402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.851502][ T5402] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.070840][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.488499][ T29] audit: type=1400 audit(1755708069.913:273): avc: denied { create } for pid=5410 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.613411][ T5416] loop2: detected capacity change from 0 to 128 [ 119.620195][ T5416] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.632777][ T5416] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.868796][ T5421] loop0: detected capacity change from 0 to 512 [ 120.061190][ T5421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.144349][ T5421] EXT4-fs (loop0): 1 truncate cleaned up [ 120.200470][ T5421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.411408][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.733382][ T5464] loop2: detected capacity change from 0 to 512 [ 122.751228][ T5464] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.760482][ T5464] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent [ 125.313159][ T5558] loop1: detected capacity change from 0 to 512 [ 125.331647][ T5558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.361593][ T5558] EXT4-fs (loop1): 1 truncate cleaned up [ 125.367663][ T5558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.467081][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.525012][ T5619] loop1: detected capacity change from 0 to 512 [ 126.537004][ T5619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.552787][ T5619] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 126.561771][ T5619] System zones: 0-2, 18-18, 34-34 [ 126.567856][ T5619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.580948][ T5619] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.619015][ T29] audit: type=1400 audit(1755708077.043:274): avc: denied { rename } for pid=5618 comm="syz.1.653" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.641718][ T29] audit: type=1400 audit(1755708077.043:275): avc: denied { rename } for pid=5618 comm="syz.1.653" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.663903][ T29] audit: type=1400 audit(1755708077.043:276): avc: denied { unlink } for pid=5618 comm="syz.1.653" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.696831][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.785635][ T5626] loop3: detected capacity change from 0 to 4096 [ 127.297018][ T5626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.387889][ T5645] loop0: detected capacity change from 0 to 128 [ 127.456119][ T5645] syz.0.662: attempt to access beyond end of device [ 127.456119][ T5645] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 127.495790][ T5645] syz.0.662: attempt to access beyond end of device [ 127.495790][ T5645] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 127.511326][ T5645] syz.0.662: attempt to access beyond end of device [ 127.511326][ T5645] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 127.527493][ T5647] syz.0.662: attempt to access beyond end of device [ 127.527493][ T5647] loop0: rw=2049, sector=305, nr_sectors = 1 limit=128 [ 127.570181][ T5645] syz.0.662: attempt to access beyond end of device [ 127.570181][ T5645] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 127.600969][ T5650] syz.0.662: attempt to access beyond end of device [ 127.600969][ T5650] loop0: rw=524288, sector=305, nr_sectors = 1 limit=128 [ 127.630840][ T5645] syz.0.662: attempt to access beyond end of device [ 127.630840][ T5645] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 127.664753][ T5650] syz.0.662: attempt to access beyond end of device [ 127.664753][ T5650] loop0: rw=0, sector=305, nr_sectors = 1 limit=128 [ 127.693438][ T5645] syz.0.662: attempt to access beyond end of device [ 127.693438][ T5645] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 127.722349][ T5650] syz.0.662: attempt to access beyond end of device [ 127.722349][ T5650] loop0: rw=0, sector=305, nr_sectors = 1 limit=128 [ 128.305499][ T5660] loop0: detected capacity change from 0 to 512 [ 128.388677][ T5660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.420904][ T5660] EXT4-fs (loop0): 1 truncate cleaned up [ 128.427516][ T5660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.459072][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.961863][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.118404][ T5692] loop2: detected capacity change from 0 to 128 [ 130.854177][ T5707] loop1: detected capacity change from 0 to 512 [ 130.905803][ T5707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.918424][ T5707] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.939470][ T29] audit: type=1400 audit(1755708081.363:277): avc: denied { mounton } for pid=5705 comm="syz.1.681" path="/140/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.410568][ T5718] hub 8-0:1.0: USB hub found [ 131.440395][ T5718] hub 8-0:1.0: 8 ports detected [ 131.904194][ T5724] loop3: detected capacity change from 0 to 2048 [ 131.929166][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.014632][ T5724] loop3: p1 < > p4 [ 132.043343][ T5724] loop3: p4 size 8388608 extends beyond EOD, truncated [ 132.120419][ T5729] loop1: detected capacity change from 0 to 1024 [ 132.211308][ T5729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.260020][ T3580] udevd[3580]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 132.271323][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 132.331310][ T5729] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.412681][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.442126][ T5737] loop4: detected capacity change from 0 to 128 [ 132.474415][ T5739] loop1: detected capacity change from 0 to 512 [ 132.488687][ T5739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.518499][ T5739] EXT4-fs (loop1): 1 truncate cleaned up [ 132.526268][ T5739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.565939][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.613457][ T5743] loop3: detected capacity change from 0 to 512 [ 132.619885][ T5746] loop4: detected capacity change from 0 to 512 [ 132.639964][ T5743] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 132.668605][ T5746] EXT4-fs (loop4): too many log groups per flexible block group [ 132.676651][ T5746] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 132.688949][ T5746] EXT4-fs (loop4): mount failed [ 133.662577][ T5761] loop1: detected capacity change from 0 to 512 [ 133.722921][ T5761] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.764104][ T5761] EXT4-fs (loop1): 1 truncate cleaned up [ 133.773250][ T5761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.899687][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.943103][ T5781] syzkaller0: entered promiscuous mode [ 134.948684][ T5781] syzkaller0: entered allmulticast mode [ 136.329412][ T5807] loop2: detected capacity change from 0 to 1024 [ 136.384756][ T5807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.489776][ T5807] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 136.578600][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.958223][ T5824] loop0: detected capacity change from 0 to 4096 [ 137.006516][ T5824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.347316][ T5831] loop1: detected capacity change from 0 to 8192 [ 137.429928][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.155919][ T5851] loop2: detected capacity change from 0 to 2048 [ 138.211094][ T5851] loop2: p1 < > p4 [ 138.220908][ T5851] loop2: p4 size 8388608 extends beyond EOD, truncated [ 138.231806][ T5859] loop0: detected capacity change from 0 to 512 [ 138.242790][ T5859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.262200][ T5859] EXT4-fs (loop0): 1 truncate cleaned up [ 138.269901][ T5859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.285862][ T5851] vhci_hcd: invalid port number 96 [ 138.291062][ T5851] vhci_hcd: default hub control req: 0300 v0003 i0060 l0 [ 138.322893][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.391993][ T5872] loop1: detected capacity change from 0 to 128 [ 138.444493][ T5868] loop2: detected capacity change from 0 to 8192 [ 138.458457][ T5874] loop3: detected capacity change from 0 to 1024 [ 138.501983][ T5878] loop0: detected capacity change from 0 to 4096 [ 138.520764][ T5874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.522269][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.595301][ T5874] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.665768][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.994255][ T2992] ================================================================== [ 138.994282][ T2992] BUG: KCSAN: data-race in set_nlink / set_nlink [ 138.994303][ T2992] [ 138.994309][ T2992] write to 0xffff888106d1bac0 of 4 bytes by task 3293 on cpu 0: [ 138.994323][ T2992] set_nlink+0x99/0xb0 [ 138.994339][ T2992] kernfs_iop_permission+0x1e2/0x220 [ 138.994370][ T2992] inode_permission+0x1ca/0x310 [ 138.994394][ T2992] link_path_walk+0x162/0x900 [ 138.994414][ T2992] path_openat+0x1de/0x2170 [ 138.994428][ T2992] do_filp_open+0x109/0x230 [ 138.994442][ T2992] do_sys_openat2+0xa6/0x110 [ 138.994468][ T2992] __x64_sys_openat+0xf2/0x120 [ 138.994493][ T2992] x64_sys_call+0x2e9c/0x2ff0 [ 138.994512][ T2992] do_syscall_64+0xd2/0x200 [ 138.994534][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.994554][ T2992] [ 138.994559][ T2992] read to 0xffff888106d1bac0 of 4 bytes by task 2992 on cpu 1: [ 138.994575][ T2992] set_nlink+0x29/0xb0 [ 138.994594][ T2992] kernfs_iop_permission+0x1e2/0x220 [ 138.994613][ T2992] inode_permission+0x1ca/0x310 [ 138.994637][ T2992] link_path_walk+0x162/0x900 [ 138.994656][ T2992] path_openat+0x1de/0x2170 [ 138.994670][ T2992] do_filp_open+0x109/0x230 [ 138.994683][ T2992] do_sys_openat2+0xa6/0x110 [ 138.994705][ T2992] __x64_sys_openat+0xf2/0x120 [ 138.994728][ T2992] x64_sys_call+0x2e9c/0x2ff0 [ 138.994748][ T2992] do_syscall_64+0xd2/0x200 [ 138.994771][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.994790][ T2992] [ 138.994794][ T2992] value changed: 0x00000018 -> 0x00000017 [ 138.994803][ T2992] [ 138.994806][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 138.994833][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.994855][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.994864][ T2992] ================================================================== [ 140.448886][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.