last executing test programs: 1.072371973s ago: executing program 1 (id=724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.048542764s ago: executing program 1 (id=729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.028604874s ago: executing program 1 (id=734): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 1.001869904s ago: executing program 1 (id=737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe0140", 0x0, 0xf}) 1.001016885s ago: executing program 1 (id=740): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 834.977357ms ago: executing program 1 (id=752): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff}, 0x24}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x0) r3 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 333.181645ms ago: executing program 2 (id=776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 312.645835ms ago: executing program 2 (id=778): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 312.344995ms ago: executing program 2 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) 265.045505ms ago: executing program 2 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "504a72fc460b8cd26e095f24ab83e591"}}}}}}}, 0x0) 205.375106ms ago: executing program 4 (id=787): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) 197.380777ms ago: executing program 2 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x2, &(0x7f00000002c0)=0x6) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 197.065577ms ago: executing program 4 (id=789): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x38}}, 0x0) 165.613237ms ago: executing program 4 (id=790): mkdirat(0xffffffffffffff9c, 0x0, 0x1e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21) 112.819268ms ago: executing program 0 (id=791): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) creat(&(0x7f0000000280)='./bus\x00', 0x1) lsetxattr$security_selinux(&(0x7f00000019c0)='./bus\x00', &(0x7f0000001a00), &(0x7f0000001a40)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) 112.591318ms ago: executing program 3 (id=792): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 112.482818ms ago: executing program 0 (id=793): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "f011080e5ed843409540610089449b1619305dfa0cb86281f78c9e53acce03b12a0ec87f46c8effb9cb9498a85c35f71aababa68b938362633f07d4959f7d55f", 0x23}, 0x48, r0) keyctl$invalidate(0x15, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x30, 0x37, 0x66, 0x33, 0x30, 0x31, 0x39, 0x34, 0x39, 0x36, 0x33, 0x33, 0x65, 0x32, 0x37]}, &(0x7f00000004c0)={0x0, "c5d780182e66bc270346153dc5df8fb9facaa06ff61e908715355f6b0aa7ce6d717aa7b6ec05f1205ba475193673b3f7774a3bed4b1b0d14350e1a7b40d24d47", 0x23}, 0x48, r0) keyctl$unlink(0x9, r2, r0) 112.312238ms ago: executing program 3 (id=794): unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 106.958008ms ago: executing program 3 (id=795): set_robust_list(&(0x7f0000000000)={0x0, 0xffffffffffffff7f}, 0x18) 100.810868ms ago: executing program 0 (id=796): unshare(0x20000600) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="17000000000000001b000000020000000000", @ANYRES32=0x1], 0x50) 72.819628ms ago: executing program 3 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 72.643159ms ago: executing program 0 (id=798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "da0877814adbc404", "c02d8b6d242ab24a6c5a9455a9a3ccaa", "d00e8580", "60444b4b68830226"}, 0x2) 72.199668ms ago: executing program 4 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 17.21798ms ago: executing program 0 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) unshare(0x20000400) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 17.030029ms ago: executing program 3 (id=801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 16.92804ms ago: executing program 4 (id=802): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 16.78482ms ago: executing program 4 (id=803): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffa8}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) 16.592629ms ago: executing program 0 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14.082839ms ago: executing program 3 (id=805): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x200, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500000000746404000000000000003de5c064", 0x14}, {0x0}], 0x2}}], 0x1, 0x4004840) 0s ago: executing program 2 (id=806): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x2000007d, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESOCT=r2, @ANYRES32, @ANYRESHEX=r1], 0x0, 0x82a, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) timerfd_gettime(r3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 17.521296][ T24] audit: type=1400 audit(1752180984.210:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.521877][ T267] cgroup: Unknown subsys name 'net' [ 17.524322][ T24] audit: type=1400 audit(1752180984.210:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.527959][ T24] audit: type=1400 audit(1752180984.210:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.528039][ T267] cgroup: Unknown subsys name 'devices' [ 17.707755][ T267] cgroup: Unknown subsys name 'hugetlb' [ 17.713315][ T267] cgroup: Unknown subsys name 'rlimit' [ 17.875440][ T24] audit: type=1400 audit(1752180984.560:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 17.898601][ T24] audit: type=1400 audit(1752180984.560:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 17.901775][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 17.923266][ T24] audit: type=1400 audit(1752180984.560:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 17.954899][ T24] audit: type=1400 audit(1752180984.630:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.980331][ T24] audit: type=1400 audit(1752180984.630:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.007548][ T24] audit: type=1400 audit(1752180984.700:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.033008][ T24] audit: type=1400 audit(1752180984.700:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.059111][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.813879][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.820933][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.828244][ T275] device bridge_slave_0 entered promiscuous mode [ 18.835339][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.842403][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.849683][ T275] device bridge_slave_1 entered promiscuous mode [ 18.885568][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.892603][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.899836][ T276] device bridge_slave_0 entered promiscuous mode [ 18.921488][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.928501][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.935609][ T276] device bridge_slave_1 entered promiscuous mode [ 18.955818][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.962839][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.970091][ T278] device bridge_slave_0 entered promiscuous mode [ 18.979682][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.986775][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.993963][ T279] device bridge_slave_0 entered promiscuous mode [ 19.001980][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.008997][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.016169][ T279] device bridge_slave_1 entered promiscuous mode [ 19.023952][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.030977][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.038159][ T278] device bridge_slave_1 entered promiscuous mode [ 19.068618][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.075623][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.084403][ T277] device bridge_slave_0 entered promiscuous mode [ 19.091205][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.098265][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.105420][ T277] device bridge_slave_1 entered promiscuous mode [ 19.136299][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.143320][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.150557][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.157551][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.170987][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.178013][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.185206][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.192210][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.221262][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.228294][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.235489][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.242491][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.257837][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.264844][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.272061][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.279060][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.287443][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.294439][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.301696][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.308696][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.330025][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.337466][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.344488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.352082][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.359177][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.366296][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.373682][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.380809][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.387917][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.395012][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.402122][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.410530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.418628][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.425620][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.456487][ T276] device veth0_vlan entered promiscuous mode [ 19.462949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.470477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.478699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.486984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.494734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.502819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.510263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.518311][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.525290][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.532530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.540561][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.547564][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.554864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.562986][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.569990][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.577233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.585241][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.592238][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.599528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.607353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.615107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.622931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.630713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.638098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.645325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.653453][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.660461][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.667678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.675701][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.682696][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.689924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.697991][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.704970][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.712224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.720081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.737061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.744811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.753002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.761232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.768531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.775770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.783832][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.790827][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.798115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.806120][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.813116][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.820423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.828273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.840550][ T278] device veth0_vlan entered promiscuous mode [ 19.847116][ T277] device veth0_vlan entered promiscuous mode [ 19.858061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.866519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.875292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.882698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.890574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.898526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.909909][ T276] device veth1_macvtap entered promiscuous mode [ 19.917639][ T278] device veth1_macvtap entered promiscuous mode [ 19.925223][ T277] device veth1_macvtap entered promiscuous mode [ 19.933144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.941344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.949438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.957064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.965012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.973241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.980739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.988769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.996825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.005429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.013684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.028330][ T275] device veth0_vlan entered promiscuous mode [ 20.034583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.042855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.051117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.059567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.067955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.075994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.084186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.091920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.106017][ T279] device veth0_vlan entered promiscuous mode [ 20.112088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.119453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.126785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.134852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.143310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.151638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.159871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.167976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.176086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.184173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.192368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.200169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.208057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.215345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.230957][ T278] request_module fs-gadgetfs succeeded, but still no fs? [ 20.232976][ T275] device veth1_macvtap entered promiscuous mode [ 20.244620][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.252876][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.261037][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.269122][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.277279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.285239][ T279] device veth1_macvtap entered promiscuous mode [ 20.293850][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.310365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.319436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.327680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.335988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.344999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.374784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.383092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.392160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.397386][ T303] ====================================================== [ 20.397386][ T303] WARNING: the mand mount option is being deprecated and [ 20.397386][ T303] will be removed in v5.15! [ 20.397386][ T303] ====================================================== [ 20.400581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.452995][ T303] exfat: Deprecated parameter 'utf8' [ 20.458466][ T303] exfat: Deprecated parameter 'namecase' [ 20.464072][ T303] exfat: Deprecated parameter 'utf8' [ 20.473275][ T303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 20.555961][ T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 20.857275][ T305] F2FS-fs (loop0): fault_injection options not supported [ 20.865057][ T305] F2FS-fs (loop0): invalid crc value [ 20.923379][ T305] F2FS-fs (loop0): Found nat_bits in checkpoint [ 20.955455][ T305] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 23.190192][ T275] attempt to access beyond end of device [ 23.190192][ T275] loop0: rw=2049, want=45104, limit=40427 [ 23.247249][ T350] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 23.321874][ T350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 23.335676][ T350] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 23.416774][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 23.416841][ T24] audit: type=1400 audit(1752180990.100:122): avc: denied { create } for pid=348 comm="syz.1.12" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.607713][ T360] exfat: Deprecated parameter 'namecase' [ 23.613528][ T360] exfat: Deprecated parameter 'utf8' [ 23.817724][ T350] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 23.935013][ T360] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 24.077010][ T24] audit: type=1400 audit(1752180990.770:123): avc: denied { mount } for pid=368 comm="syz.2.16" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 24.141175][ T369] attempt to access beyond end of device [ 24.141175][ T369] loop2: rw=2049, want=1041, limit=128 [ 24.166126][ T24] audit: type=1400 audit(1752180990.850:124): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 24.254263][ T24] audit: type=1400 audit(1752180990.940:125): avc: denied { create } for pid=380 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.511263][ T24] audit: type=1400 audit(1752180991.070:126): avc: denied { create } for pid=380 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.251092][ T385] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.19: Invalid block bitmap block 0 in block_group 0 [ 25.264678][ T385] Quota error (device loop4): write_blk: dquota write failed [ 25.272086][ T385] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 25.282033][ T385] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.19: Failed to acquire dquot type 0 [ 25.293518][ T385] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.19: Freeing blocks not in datazone - block = 0, count = 4096 [ 25.307085][ T385] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.19: Invalid inode bitmap blk 0 in block_group 0 [ 25.320039][ T385] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 25.329490][ T385] EXT4-fs (loop4): 1 orphan inode deleted [ 25.335221][ T385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 25.506911][ T9] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 25.520380][ T379] attempt to access beyond end of device [ 25.520380][ T379] loop3: rw=2049, want=1041, limit=128 [ 25.545838][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 25.771879][ T24] audit: type=1400 audit(1752180991.090:127): avc: denied { create } for pid=380 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.795372][ T24] audit: type=1400 audit(1752180991.120:128): avc: denied { write } for pid=380 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.950467][ T398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 25.998970][ T398] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.909863][ T420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 26.928914][ T420] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.207337][ T429] tipc: Enabling of bearer rejected, failed to enable media [ 27.926880][ T440] exfat: Deprecated parameter 'namecase' [ 27.932539][ T440] exfat: Deprecated parameter 'utf8' [ 27.941903][ T440] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 28.298231][ T447] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 28.305741][ T447] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.341347][ T447] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 28.608762][ T447] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 29.661434][ T453] attempt to access beyond end of device [ 29.661434][ T453] loop3: rw=2049, want=1041, limit=128 [ 30.205511][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 30.205523][ T24] audit: type=1400 audit(1752180996.890:137): avc: denied { create } for pid=468 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.250485][ T466] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 30.305153][ T24] audit: type=1400 audit(1752180996.950:138): avc: denied { connect } for pid=468 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.352055][ T466] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.522157][ T24] audit: type=1400 audit(1752180997.070:139): avc: denied { create } for pid=468 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.552769][ T24] audit: type=1400 audit(1752180997.070:140): avc: denied { map } for pid=468 comm="syz.4.37" path="socket:[15908]" dev="sockfs" ino=15908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.590237][ T24] audit: type=1400 audit(1752180997.070:141): avc: denied { read accept } for pid=468 comm="syz.4.37" path="socket:[15908]" dev="sockfs" ino=15908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.691577][ T485] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.42: Invalid block bitmap block 0 in block_group 0 [ 31.705228][ T485] Quota error (device loop4): write_blk: dquota write failed [ 31.712716][ T485] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 31.722928][ T485] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.42: Failed to acquire dquot type 0 [ 31.734412][ T485] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.42: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.747912][ T485] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.42: Invalid inode bitmap blk 0 in block_group 0 [ 31.760549][ T485] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 31.769331][ T485] EXT4-fs (loop4): 1 orphan inode deleted [ 31.775136][ T485] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 31.828435][ T49] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 31.904230][ T49] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 32.203813][ T24] audit: type=1400 audit(1752180998.890:142): avc: denied { create } for pid=495 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.223323][ T24] audit: type=1400 audit(1752180998.890:143): avc: denied { bind } for pid=495 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.455796][ T510] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.47: Invalid block bitmap block 0 in block_group 0 [ 33.469621][ T510] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.47: Failed to acquire dquot type 0 [ 33.481124][ T510] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.47: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.494621][ T510] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.47: Invalid inode bitmap blk 0 in block_group 0 [ 33.506681][ C1] sched: RT throttling activated [ 33.512181][ T510] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 33.520866][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 33.532362][ T510] EXT4-fs (loop2): 1 orphan inode deleted [ 33.538085][ T510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 33.906212][ T519] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.931610][ T519] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.966562][ T515] F2FS-fs (loop3): fault_injection options not supported [ 33.974364][ T515] F2FS-fs (loop3): invalid crc value [ 33.980936][ T515] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.026510][ T515] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.723171][ T541] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.53: Invalid block bitmap block 0 in block_group 0 [ 34.736872][ T541] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.53: Failed to acquire dquot type 0 [ 34.748662][ T541] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.53: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.762357][ T541] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.53: Invalid inode bitmap blk 0 in block_group 0 [ 34.774984][ T541] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 34.783843][ T541] EXT4-fs (loop1): 1 orphan inode deleted [ 34.789557][ T541] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 34.904192][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 35.717561][ T551] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 35.725087][ T551] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.849328][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 35.865308][ T551] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 36.130942][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 36.130953][ T24] audit: type=1400 audit(1752181002.820:145): avc: denied { name_bind } for pid=558 comm="syz.1.58" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.159263][ T561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 36.453526][ T278] attempt to access beyond end of device [ 36.453526][ T278] loop3: rw=2049, want=45104, limit=40427 [ 36.465997][ T24] audit: type=1400 audit(1752181003.090:146): avc: denied { write } for pid=545 comm="syz.4.56" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.476921][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 36.490047][ T24] audit: type=1400 audit(1752181003.090:147): avc: denied { add_name } for pid=545 comm="syz.4.56" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.495989][ T568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 36.777194][ T24] audit: type=1400 audit(1752181003.140:148): avc: denied { node_bind } for pid=558 comm="syz.1.58" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.085859][ T584] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.65: Invalid block bitmap block 0 in block_group 0 [ 38.100072][ T584] Quota error (device loop2): write_blk: dquota write failed [ 38.107474][ T584] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 38.117399][ T584] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.65: Failed to acquire dquot type 0 [ 38.377740][ T584] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.65: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.391947][ T584] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.65: Invalid inode bitmap blk 0 in block_group 0 [ 38.404958][ T584] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 38.413651][ T547] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 38.429231][ T584] EXT4-fs (loop2): 1 orphan inode deleted [ 38.434965][ T584] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 38.492715][ T547] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 39.549268][ T24] audit: type=1400 audit(1752181006.220:149): avc: denied { create } for pid=610 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.563192][ T607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.577484][ T607] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.145023][ T24] audit: type=1400 audit(1752181006.320:150): avc: denied { append } for pid=603 comm="syz.0.69" path="/9/bus/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.420395][ T628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 46.429453][ T628] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.357610][ T655] exfat: Deprecated parameter 'namecase' [ 47.363386][ T655] exfat: Deprecated parameter 'utf8' [ 47.374450][ T655] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 47.959705][ T659] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 47.988826][ T659] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.085113][ T664] attempt to access beyond end of device [ 48.085113][ T664] loop2: rw=2049, want=1041, limit=128 [ 48.277041][ T673] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.290101][ T673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.426839][ T673] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.440223][ T673] EXT4-fs (loop0): 1 truncate cleaned up [ 48.445847][ T673] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 49.242169][ T681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.413580][ T681] EXT4-fs: failed to create workqueue [ 52.419009][ T681] EXT4-fs (loop1): mount failed [ 52.586949][ T688] exfat: Deprecated parameter 'namecase' [ 52.592715][ T688] exfat: Deprecated parameter 'utf8' [ 52.605418][ T688] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 53.028568][ T693] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 53.267678][ T705] fuse: Bad value for 'fd' [ 53.406952][ T693] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.465237][ T703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.535582][ T703] EXT4-fs (loop4): 1 truncate cleaned up [ 53.541338][ T703] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 54.528738][ T724] exfat: Deprecated parameter 'namecase' [ 54.534545][ T724] exfat: Deprecated parameter 'utf8' [ 54.620869][ T724] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 54.777309][ T727] exfat: Deprecated parameter 'namecase' [ 54.783029][ T727] exfat: Deprecated parameter 'utf8' [ 54.825573][ T727] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 56.414987][ T734] attempt to access beyond end of device [ 56.414987][ T734] loop1: rw=2049, want=1041, limit=128 [ 56.709392][ T743] attempt to access beyond end of device [ 56.709392][ T743] loop4: rw=2049, want=1041, limit=128 [ 56.720950][ T747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 57.221318][ T24] audit: type=1400 audit(1752181023.910:151): avc: denied { create } for pid=768 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.240776][ T24] audit: type=1400 audit(1752181023.910:152): avc: denied { ioctl } for pid=768 comm="syz.1.102" path="socket:[16215]" dev="sockfs" ino=16215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.382269][ T24] audit: type=1400 audit(1752181023.910:153): avc: denied { bind } for pid=768 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.431557][ T24] audit: type=1400 audit(1752181023.910:154): avc: denied { setopt } for pid=768 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.523770][ T24] audit: type=1400 audit(1752181023.910:155): avc: denied { write } for pid=768 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.586873][ T774] exfat: Deprecated parameter 'namecase' [ 57.592572][ T774] exfat: Deprecated parameter 'utf8' [ 57.604626][ T774] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 59.839290][ T788] exfat: Deprecated parameter 'namecase' [ 59.845024][ T788] exfat: Deprecated parameter 'utf8' [ 59.929649][ T788] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 60.329849][ T786] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.110: Invalid block bitmap block 0 in block_group 0 [ 60.343532][ T786] Quota error (device loop2): write_blk: dquota write failed [ 60.350918][ T786] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 60.360879][ T786] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.110: Failed to acquire dquot type 0 [ 60.372334][ T786] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.110: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.385883][ T786] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.110: Invalid inode bitmap blk 0 in block_group 0 [ 60.398573][ T786] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 60.407291][ T786] EXT4-fs (loop2): 1 orphan inode deleted [ 60.413015][ T786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 60.556861][ T7] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 60.676979][ T7] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 60.693585][ T776] attempt to access beyond end of device [ 60.693585][ T776] loop1: rw=2049, want=889, limit=128 [ 62.307705][ T807] EXT4-fs (loop2): Ignoring removed bh option [ 62.313786][ T807] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.328387][ T807] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 62.370265][ T805] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 62.377532][ T805] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.391235][ T818] tipc: Enabling of bearer rejected, failed to enable media [ 62.400949][ T805] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 64.359593][ T24] audit: type=1400 audit(1752181031.050:156): avc: denied { setattr } for pid=803 comm="syz.2.115" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.387012][ T822] exfat: Deprecated parameter 'namecase' [ 64.392774][ T822] exfat: Deprecated parameter 'utf8' [ 64.400535][ T822] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 64.437996][ T825] exfat: Deprecated parameter 'namecase' [ 64.443649][ T825] exfat: Deprecated parameter 'utf8' [ 64.469606][ T825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 66.536183][ T844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.948151][ T844] EXT4-fs (loop0): 1 truncate cleaned up [ 66.953812][ T844] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 67.515903][ T835] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 67.524802][ T835] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.697051][ T857] syz.2.125[857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.697203][ T857] syz.2.125[857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.139716][ T24] audit: type=1400 audit(1752181034.410:157): avc: denied { write } for pid=851 comm="syz.2.125" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.309207][ T857] F2FS-fs (loop2): invalid crc value [ 68.317607][ T857] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 68.340266][ T857] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 68.346877][ T857] F2FS-fs (loop2): Start checkpoint disabled! [ 68.361498][ T857] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 68.578779][ T873] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 68.586524][ T873] EXT4-fs (loop0): Test dummy encryption mode enabled [ 69.260295][ T873] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 69.472937][ T860] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 69.482537][ T860] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.280655][ T877] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 70.289742][ T877] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.918458][ T894] exfat: Deprecated parameter 'utf8' [ 70.923901][ T894] exfat: Deprecated parameter 'namecase' [ 70.939106][ T24] audit: type=1400 audit(1752181037.630:158): avc: denied { write } for pid=891 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.438458][ T894] exfat: Deprecated parameter 'utf8' [ 71.515630][ T894] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 73.287412][ T910] exfat: Deprecated parameter 'namecase' [ 73.293198][ T910] exfat: Deprecated parameter 'utf8' [ 73.305548][ T910] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 75.322430][ T934] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 75.331378][ T934] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.869343][ T940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 75.880119][ T940] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.978733][ T946] attempt to access beyond end of device [ 75.978733][ T946] loop4: rw=2049, want=1041, limit=128 [ 76.159930][ T954] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 76.168857][ T954] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.528107][ T965] exfat: Deprecated parameter 'namecase' [ 77.533896][ T965] exfat: Deprecated parameter 'utf8' [ 78.537235][ T965] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 79.334939][ T964] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.146: Invalid block bitmap block 0 in block_group 0 [ 79.386514][ T964] Quota error (device loop4): write_blk: dquota write failed [ 79.394129][ T964] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 79.404053][ T964] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.146: Failed to acquire dquot type 0 [ 79.418678][ T964] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.146: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.432044][ T964] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.146: Invalid inode bitmap blk 0 in block_group 0 [ 79.444755][ T964] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 79.453324][ T964] EXT4-fs (loop4): 1 orphan inode deleted [ 79.459052][ T964] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 79.472282][ T547] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 79.503311][ T547] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 79.831409][ T984] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 79.840452][ T984] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.092827][ T985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 80.140266][ T985] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.224509][ T1005] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.156: Invalid block bitmap block 0 in block_group 0 [ 81.238210][ T1005] Quota error (device loop2): write_blk: dquota write failed [ 81.245576][ T1005] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 81.255491][ T1005] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.156: Failed to acquire dquot type 0 [ 81.267657][ T1005] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.156: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.281229][ T1005] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.156: Invalid inode bitmap blk 0 in block_group 0 [ 81.294369][ T1005] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 81.303038][ T1005] EXT4-fs (loop2): 1 orphan inode deleted [ 81.308763][ T1005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 81.437297][ T547] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 81.705214][ T547] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 81.846968][ T1011] exfat: Deprecated parameter 'utf8' [ 81.854000][ T1011] exfat: Deprecated parameter 'namecase' [ 81.866752][ T1011] exfat: Deprecated parameter 'utf8' [ 81.964886][ T1011] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 81.987945][ T1016] exfat: Deprecated parameter 'utf8' [ 81.993228][ T1016] exfat: Deprecated parameter 'namecase' [ 82.039605][ T1016] exfat: Deprecated parameter 'utf8' [ 82.235507][ T1016] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 83.357548][ T1047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 83.366427][ T1047] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.077896][ T1059] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 84.086943][ T1059] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.986172][ T1070] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 85.986353][ T1087] exfat: Deprecated parameter 'utf8' [ 86.019720][ T1087] exfat: Deprecated parameter 'namecase' [ 86.025370][ T1087] exfat: Deprecated parameter 'utf8' [ 86.060186][ T1087] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 86.244394][ T24] audit: type=1400 audit(1752181052.930:159): avc: denied { read } for pid=1091 comm="syz.0.178" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.296778][ T24] audit: type=1400 audit(1752181052.960:160): avc: denied { open } for pid=1091 comm="syz.0.178" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.363805][ T24] audit: type=1400 audit(1752181052.960:161): avc: denied { ioctl } for pid=1091 comm="syz.0.178" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.817209][ T1098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 87.062954][ T1098] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.226499][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.237468][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.292536][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.312699][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.324031][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.332015][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.347277][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.400422][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.484176][ T1126] syz.3.186[1126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.484401][ T1126] syz.3.186[1126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.516786][ T24] audit: type=1400 audit(1752181054.200:162): avc: denied { ioctl } for pid=1119 comm="syz.3.186" path="socket:[17659]" dev="sockfs" ino=17659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.348687][ T1126] exfat: Bad value for 'uid' [ 88.558162][ T1126] EXT4-fs (loop3): Ignoring removed nobh option [ 88.775035][ T1123] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.185: Invalid block bitmap block 0 in block_group 0 [ 88.792859][ T1123] Quota error (device loop4): write_blk: dquota write failed [ 88.800403][ T1123] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 88.810791][ T1123] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.185: Failed to acquire dquot type 0 [ 88.827512][ T1123] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.185: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.842324][ T1123] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.185: Invalid inode bitmap blk 0 in block_group 0 [ 88.855063][ T1123] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 88.863888][ T1123] EXT4-fs (loop4): 1 orphan inode deleted [ 88.869624][ T1123] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 89.868997][ T7] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 89.897163][ T7] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 89.897549][ T1126] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 91.059497][ T1145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.082788][ T1145] EXT4-fs (loop2): 1 truncate cleaned up [ 91.088479][ T1145] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 91.117353][ T1148] exfat: Deprecated parameter 'namecase' [ 91.123066][ T1148] exfat: Deprecated parameter 'utf8' [ 91.279245][ T1148] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 91.564967][ T1154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 91.737282][ T1160] attempt to access beyond end of device [ 91.737282][ T1160] loop1: rw=2049, want=1041, limit=128 [ 91.785027][ T1169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 91.793960][ T1169] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.907623][ T1174] exfat: Deprecated parameter 'namecase' [ 91.913465][ T1174] exfat: Deprecated parameter 'utf8' [ 91.982938][ T1174] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 94.522376][ T1192] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.202: Invalid block bitmap block 0 in block_group 0 [ 94.535780][ T1192] Quota error (device loop2): write_blk: dquota write failed [ 94.543329][ T1192] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.553234][ T1192] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.202: Failed to acquire dquot type 0 [ 94.564581][ T1192] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.202: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.577926][ T1192] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.202: Invalid inode bitmap blk 0 in block_group 0 [ 94.590482][ T1192] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 94.599048][ T1192] EXT4-fs (loop2): 1 orphan inode deleted [ 94.604753][ T1192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 94.617930][ T547] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 94.650344][ T547] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 95.887763][ T1210] exfat: Deprecated parameter 'namecase' [ 95.893535][ T1210] exfat: Deprecated parameter 'utf8' [ 96.196564][ T1210] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 96.530266][ T1211] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.206: Invalid block bitmap block 0 in block_group 0 [ 96.543932][ T1211] Quota error (device loop0): write_blk: dquota write failed [ 96.551332][ T1211] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 96.561270][ T1211] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.206: Failed to acquire dquot type 0 [ 96.580769][ T1211] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.206: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.594339][ T1211] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.206: Invalid inode bitmap blk 0 in block_group 0 [ 96.607029][ T1211] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 96.615669][ T1211] EXT4-fs (loop0): 1 orphan inode deleted [ 96.621388][ T1211] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 96.679740][ T409] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 97.042650][ T409] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:4: Failed to release dquot type 0 [ 97.383082][ T1221] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 97.392243][ T1221] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.726867][ T1233] exfat: Deprecated parameter 'namecase' [ 97.732539][ T1233] exfat: Deprecated parameter 'utf8' [ 97.743869][ T1233] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 98.017115][ T1235] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 98.026184][ T1235] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.226637][ T1244] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.213: Invalid block bitmap block 0 in block_group 0 [ 99.240475][ T1244] Quota error (device loop2): write_blk: dquota write failed [ 99.247910][ T1244] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 99.257858][ T1244] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.213: Failed to acquire dquot type 0 [ 99.269490][ T1244] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.213: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.283369][ T1244] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.213: Invalid inode bitmap blk 0 in block_group 0 [ 99.296151][ T1244] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 99.304838][ T1244] EXT4-fs (loop2): 1 orphan inode deleted [ 99.310560][ T1244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 99.324412][ T409] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 99.404436][ T409] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:4: Failed to release dquot type 0 [ 101.406798][ T1269] exfat: Deprecated parameter 'namecase' [ 101.412484][ T1269] exfat: Deprecated parameter 'utf8' [ 101.434440][ T1269] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 101.486264][ T1270] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 101.493925][ T1270] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.514500][ T1270] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 103.767504][ T1298] exfat: Deprecated parameter 'namecase' [ 103.773224][ T1298] exfat: Deprecated parameter 'utf8' [ 103.786680][ T1298] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 104.800959][ T1313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 104.822876][ T1313] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.454037][ T1326] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 107.348891][ T1341] exfat: Deprecated parameter 'namecase' [ 107.354633][ T1341] exfat: Deprecated parameter 'utf8' [ 107.365987][ T1341] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 107.872569][ T1342] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 107.881510][ T1342] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.058919][ T1352] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.239: Invalid block bitmap block 0 in block_group 0 [ 108.072555][ T1352] Quota error (device loop1): write_blk: dquota write failed [ 108.079940][ T1352] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 108.089919][ T1352] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.239: Failed to acquire dquot type 0 [ 108.119535][ T1352] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.239: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.133343][ T1352] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.239: Invalid inode bitmap blk 0 in block_group 0 [ 108.146052][ T1352] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 108.154743][ T547] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 108.163301][ T1352] EXT4-fs (loop1): 1 orphan inode deleted [ 108.169020][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 108.203436][ T547] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 108.543813][ T1360] EXT4-fs (loop3): Ignoring removed bh option [ 108.549986][ T1360] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.586093][ T1360] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 108.716406][ T24] audit: type=1400 audit(1752181075.400:163): avc: denied { bind } for pid=1368 comm="syz.1.243" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.737559][ T24] audit: type=1400 audit(1752181075.400:164): avc: denied { node_bind } for pid=1368 comm="syz.1.243" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 108.759485][ T24] audit: type=1400 audit(1752181075.430:165): avc: denied { setopt } for pid=1368 comm="syz.1.243" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.781761][ T24] audit: type=1400 audit(1752181075.430:166): avc: denied { read } for pid=1368 comm="syz.1.243" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.028303][ T1379] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 109.037225][ T1379] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.426940][ T1393] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 109.470733][ T1393] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.288966][ T1411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 110.297888][ T1411] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.901286][ T1446] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 113.910253][ T1446] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.527520][ T1464] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 116.536406][ T1464] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.580854][ T1463] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 116.589936][ T1463] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.636430][ T1479] attempt to access beyond end of device [ 116.636430][ T1479] loop3: rw=2049, want=1041, limit=128 [ 117.807750][ T1502] EXT4-fs (loop4): Ignoring removed bh option [ 117.813844][ T1502] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.913511][ T1502] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 120.807426][ T1515] exfat: Deprecated parameter 'namecase' [ 120.813181][ T1515] exfat: Deprecated parameter 'utf8' [ 121.110524][ T1515] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 121.213596][ T24] audit: type=1400 audit(1752181087.900:167): avc: denied { remount } for pid=1527 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.367215][ T1528] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.507295][ T1534] exfat: Deprecated parameter 'namecase' [ 121.513048][ T1534] exfat: Deprecated parameter 'utf8' [ 121.533084][ T1534] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 121.666316][ T1528] EXT4-fs (loop0): 1 truncate cleaned up [ 121.671982][ T1528] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 122.950328][ T1553] exfat: Deprecated parameter 'namecase' [ 122.956267][ T1553] exfat: Deprecated parameter 'utf8' [ 124.188908][ T1553] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 125.509399][ T1562] attempt to access beyond end of device [ 125.509399][ T1562] loop1: rw=2049, want=1041, limit=128 [ 125.871585][ T1572] exfat: Deprecated parameter 'namecase' [ 125.877380][ T1572] exfat: Deprecated parameter 'utf8' [ 125.903394][ T1572] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 126.699158][ T1579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.713001][ T1579] EXT4-fs (loop4): 1 truncate cleaned up [ 126.718657][ T1579] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 126.803857][ T1580] EXT4-fs (loop3): Ignoring removed bh option [ 126.809970][ T1580] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.848263][ T1580] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 128.583176][ T1604] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 128.594609][ T1607] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 128.603522][ T1607] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.892201][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 128.900930][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.925547][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 128.946503][ T1630] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.314: Invalid block bitmap block 0 in block_group 0 [ 128.960357][ T1630] Quota error (device loop1): write_blk: dquota write failed [ 128.967761][ T1630] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 128.977769][ T1630] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.314: Failed to acquire dquot type 0 [ 128.989858][ T1630] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.314: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.003531][ T1630] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.314: Invalid inode bitmap blk 0 in block_group 0 [ 129.016220][ T1630] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 129.025004][ T547] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 129.033558][ T1630] EXT4-fs (loop1): 1 orphan inode deleted [ 129.039270][ T1630] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 129.062966][ T547] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 129.085415][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.766865][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.775130][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.783716][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.791888][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.800040][ T1638] exfat: Deprecated parameter 'namecase' [ 130.805730][ T1638] exfat: Deprecated parameter 'utf8' [ 130.816973][ T1638] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 131.299904][ T1648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 131.308961][ T1648] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.030246][ T1673] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 135.039346][ T1673] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.128165][ T1677] EXT4-fs (loop3): Ignoring removed bh option [ 135.134293][ T1677] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.160032][ T1677] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 135.489702][ T1678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 135.886151][ T1700] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 135.893690][ T1700] EXT4-fs (loop0): Test dummy encryption mode enabled [ 135.904116][ T1700] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 136.131504][ T1696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 136.158086][ T1696] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.373351][ T1702] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 136.390005][ T1702] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.807215][ T1720] exfat: Deprecated parameter 'namecase' [ 136.812943][ T1720] exfat: Deprecated parameter 'utf8' [ 136.906680][ T1720] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 137.323587][ T1727] EXT4-fs (loop3): Ignoring removed bh option [ 137.329723][ T1727] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.349151][ T1727] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 137.410907][ T24] audit: type=1400 audit(1752181104.100:168): avc: denied { bind } for pid=1745 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.417575][ T1748] SELinux: failed to load policy [ 137.460013][ T24] audit: type=1400 audit(1752181104.100:169): avc: denied { load_policy } for pid=1747 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.481140][ T24] audit: type=1400 audit(1752181104.120:170): avc: denied { node_bind } for pid=1745 comm="syz.2.343" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 137.502172][ T24] audit: type=1400 audit(1752181104.130:171): avc: denied { write } for pid=1735 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.522553][ T24] audit: type=1400 audit(1752181104.140:172): avc: denied { mounton } for pid=1750 comm="syz.1.344" path="/65/file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.544959][ T24] audit: type=1400 audit(1752181104.200:173): avc: denied { sys_module } for pid=1742 comm="syz.4.341" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.566045][ T24] audit: type=1400 audit(1752181104.240:174): avc: denied { relabelfrom } for pid=1742 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 137.585739][ T24] audit: type=1400 audit(1752181104.240:175): avc: denied { relabelto } for pid=1742 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 137.607548][ T1755] FAT-fs (loop1): bogus number of FAT sectors [ 137.613611][ T1755] FAT-fs (loop1): Can't find a valid FAT filesystem [ 137.658348][ T1757] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.664889][ T1757] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.341: bad orphan inode 13 [ 137.674942][ T1757] ext4_test_bit(bit=12, block=18) = 1 [ 137.680330][ T1757] is_bad_inode(inode)=0 [ 137.684476][ T1757] NEXT_ORPHAN(inode)=2130706432 [ 137.689346][ T1757] max_ino=32 [ 137.692538][ T1757] i_nlink=1 [ 137.695664][ T1757] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 137.776709][ T24] audit: type=1400 audit(1752181104.470:176): avc: denied { write } for pid=1766 comm="syz.2.350" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.861282][ T24] audit: type=1326 audit(1752181104.550:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91117fd929 code=0x7ffc0000 [ 137.927601][ T1783] process 'syz.1.358' launched './file0' with NULL argv: empty string added [ 137.969501][ T1785] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.359: inode #32768: comm syz.2.359: iget: illegal inode # [ 137.983940][ T1785] EXT4-fs error (device loop2): ext4_quota_enable:6450: comm syz.2.359: Bad quota inode: 32768, type: 2 [ 137.995403][ T1785] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix. [ 138.011262][ T1785] EXT4-fs (loop2): mount failed [ 138.159261][ T1796] EXT4-fs (loop3): Ignoring removed oldalloc option [ 138.171835][ T1796] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 138.179995][ T1796] EXT4-fs (loop3): 1 truncate cleaned up [ 138.185671][ T1796] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x000000000000cd29,noblock_validity,init_itable=0x0000000000001002,journal_dev=0x0000000000000002,oldalloc,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000000,inlinecrypt,,errors=continue [ 138.212488][ T1796] EXT4-fs (loop3): re-mounted. Opts: (null) [ 138.297057][ T1813] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 138.316925][ T1813] EXT4-fs (loop1): Ignoring removed bh option [ 138.323371][ T1813] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.336205][ T1813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.349169][ T1813] EXT4-fs (loop1): 1 truncate cleaned up [ 138.354795][ T1813] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue [ 138.381264][ T1838] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 138.447226][ T1850] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 138.456789][ T1840] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 138.517923][ T1864] tipc: Started in network mode [ 138.522920][ T1864] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 138.532433][ T1864] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 138.540625][ T1864] tipc: Enabled bearer , priority 10 [ 138.795580][ T1899] 9pnet: Could not find request transport: r [ 139.069947][ T1913] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 139.267972][ T1921] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.371517][ T1921] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock, [ 139.410728][ T1921] EXT4-fs error (device loop2): ext4_read_inline_dir:1596: inode #12: block 9: comm syz.2.417: path /86/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 139.431223][ T1921] EXT4-fs (loop2): Remounting filesystem read-only [ 139.438149][ T1921] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #12: block 9: comm syz.2.417: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 139.538330][ T1947] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 139.545478][ T1947] EXT4-fs (loop1): Ignoring removed bh option [ 139.551818][ T1947] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.563872][ T1947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.583139][ T1947] EXT4-fs (loop1): 1 truncate cleaned up [ 139.588853][ T1947] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue [ 139.666685][ T5] tipc: 32-bit node address hash set to 1000000 [ 139.678711][ T1970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.438'. [ 139.688178][ T1955] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 139.711557][ T1955] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.755200][ T1955] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 139.763339][ T1955] EXT4-fs error (device loop0) in ext4_do_update_inode:5335: error 27 [ 139.771751][ T1955] EXT4-fs error (device loop0): ext4_dirty_inode:6142: inode #2: comm syz.0.433: mark_inode_dirty error [ 139.790155][ T1955] EXT4-fs error (device loop0) in ext4_do_update_inode:5335: error 27 [ 139.796577][ T1980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 139.816275][ T1987] xt_hashlimit: max too large, truncated to 1048576 [ 139.850658][ T1989] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.448' sets config #1 [ 139.877179][ T1993] 9pnet: Could not find request transport: r [ 139.946448][ T1996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 139.955407][ T1996] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.967590][ T1996] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 140.075950][ T2029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 140.087757][ T2031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 140.098572][ T2029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2029 comm=syz.1.465 [ 140.147057][ T2029] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 140.228293][ T2043] tipc: Started in network mode [ 140.233207][ T2043] tipc: Own node identity 8e2b845ec80b, cluster identity 4711 [ 140.241624][ T2043] tipc: Enabled bearer , priority 0 [ 140.253039][ T2043] tipc: Disabling bearer [ 140.297056][ T2060] device veth1_macvtap left promiscuous mode [ 140.394463][ T2064] syz.4.481[2064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.394501][ T2064] syz.4.481[2064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.450561][ T2064] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 140.472498][ T2064] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.477649][ T2078] EXT4-fs (loop1): Ignoring removed orlov option [ 140.490339][ T2078] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 140.890263][ T2120] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 140.916123][ T2120] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.994958][ T2129] EXT4-fs (loop0): Ignoring removed oldalloc option [ 141.008832][ T2129] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.043433][ T2129] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.505: Parent and EA inode have the same ino 15 [ 141.062181][ T2129] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.505: Parent and EA inode have the same ino 15 [ 141.075055][ T2129] EXT4-fs (loop0): 1 orphan inode deleted [ 141.081105][ T2129] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue [ 141.428109][ T2141] loop1: p1 p2 < > p3 p4 < p5 > [ 141.433416][ T2141] loop1: partition table partially beyond EOD, truncated [ 141.441719][ T2141] loop1: p1 size 100663296 extends beyond EOD, truncated [ 141.451954][ T2141] loop1: p2 start 591104 is beyond EOD, truncated [ 141.466681][ T2141] loop1: p3 start 33572980 is beyond EOD, truncated [ 141.521184][ T2141] loop1: p5 size 100663296 extends beyond EOD, truncated [ 141.537307][ T2151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 141.617365][ T2148] EXT4-fs (loop2): Ignoring removed nobh option [ 141.632102][ T2148] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue [ 141.644576][ T2148] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.737515][ T300] udevd[300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 141.747656][ T310] udevd[310]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 141.758023][ T528] udevd[528]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 141.864733][ T2191] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 141.867769][ T2195] netlink: 96 bytes leftover after parsing attributes in process `syz.3.533'. [ 141.947533][ T2219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 142.000027][ T2236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 142.027605][ T2237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 142.036516][ T2237] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.074983][ T2228] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.544: bg 0: block 248: padding at end of block bitmap is not set [ 142.089533][ T2228] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.544: Failed to acquire dquot type 1 [ 142.101908][ T2228] EXT4-fs (loop1): 1 truncate cleaned up [ 142.107630][ T2228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 142.116521][ T2228] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.205001][ T2255] netlink: 5 bytes leftover after parsing attributes in process `syz.1.553'. [ 142.224438][ T2262] netlink: 'syz.0.557': attribute type 3 has an invalid length. [ 142.239985][ T2265] device pim6reg1 entered promiscuous mode [ 142.282602][ T2279] netlink: 'syz.1.565': attribute type 4 has an invalid length. [ 142.436155][ T24] kauditd_printk_skb: 149 callbacks suppressed [ 142.436164][ T24] audit: type=1400 audit(1752181109.120:325): avc: denied { read write } for pid=2299 comm="syz.2.575" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.466459][ T24] audit: type=1400 audit(1752181109.120:326): avc: denied { open } for pid=2299 comm="syz.2.575" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.565779][ T24] audit: type=1400 audit(1752181109.120:327): avc: denied { ioctl } for pid=2299 comm="syz.2.575" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.615292][ T24] audit: type=1400 audit(1752181109.280:328): avc: denied { checkpoint_restore } for pid=2306 comm="syz.0.577" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.688358][ T2307] EXT4-fs (loop1): Ignoring removed bh option [ 142.706695][ T441] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 142.793479][ T2307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.801528][ T2307] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.572: bg 0: block 248: padding at end of block bitmap is not set [ 142.816487][ T2307] Quota error (device loop1): write_blk: dquota write failed [ 142.823934][ T2307] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 142.833843][ T2307] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.572: Failed to acquire dquot type 1 [ 142.846341][ T2307] EXT4-fs (loop1): 1 truncate cleaned up [ 142.852410][ T2307] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 143.057594][ T24] audit: type=1326 audit(1752181109.750:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff180529929 code=0x7ffc0000 [ 143.164893][ T24] audit: type=1326 audit(1752181109.770:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff180529929 code=0x7ffc0000 [ 143.189028][ T24] audit: type=1326 audit(1752181109.780:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff180529929 code=0x7ffc0000 [ 143.212223][ T24] audit: type=1326 audit(1752181109.780:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff180529929 code=0x7ffc0000 [ 143.312915][ T2326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 143.376694][ T441] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.386435][ T441] usb 3-1: can't read configurations, error -71 [ 143.650078][ T2355] EXT4-fs (loop0): 1 orphan inode deleted [ 143.656322][ T2355] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,,errors=continue [ 143.676891][ T2355] EXT4-fs (loop0): re-mounted. Opts: (null) [ 143.799633][ T2395] EXT4-fs warning (device loop1): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.811213][ T2395] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 143.821416][ T2395] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.606: Corrupt directory, running e2fsck is recommended [ 143.840396][ T2395] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 143.848906][ T2395] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.606: corrupted in-inode xattr [ 143.849690][ T2402] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,errors=remount-ro, [ 143.860820][ T2395] EXT4-fs (loop1): Remounting filesystem read-only [ 143.883940][ T2395] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.606: couldn't read orphan inode 15 (err -117) [ 143.895820][ T2395] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 143.928955][ T2402] EXT4-fs error (device loop2): ext4_ext_precache:607: inode #2: comm syz.2.618: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 143.946515][ T2402] EXT4-fs (loop2): Remounting filesystem read-only [ 143.959116][ T2411] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 144.177967][ T2428] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.189640][ T2428] FAT-fs (loop2): Filesystem has been set read-only [ 144.201824][ T2434] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000000005,grpjquota=,norecovery,dioread_lock,,errors=continue [ 144.245095][ T2445] SELinux: failed to load policy [ 144.290448][ T2451] device veth1_macvtap left promiscuous mode [ 144.296461][ T2451] device macsec0 entered promiscuous mode [ 144.350073][ T2453] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 144.415969][ T2468] hub 2-0:1.0: USB hub found [ 144.420831][ T2468] hub 2-0:1.0: 1 port detected [ 144.573059][ T2488] tipc: Started in network mode [ 144.579147][ T2488] tipc: Own node identity 0a925a4888dc, cluster identity 4711 [ 144.587867][ T2488] tipc: Enabled bearer , priority 0 [ 144.596009][ T2496] SELinux: failed to load policy [ 144.604159][ T2487] tipc: Resetting bearer [ 144.615497][ T2487] tipc: Disabling bearer [ 144.719701][ T2517] tipc: New replicast peer: 10.1.1.2 [ 144.725018][ T2517] tipc: Enabled bearer , priority 10 [ 144.770870][ T2514] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro, [ 144.799485][ T2514] EXT4-fs error (device loop4): ext4_ext_precache:625: inode #2: comm syz.4.665: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 144.815875][ T2521] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 144.817136][ T2535] netlink: 'syz.1.673': attribute type 8 has an invalid length. [ 144.826893][ T2521] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 144.840652][ T2536] __nla_validate_parse: 1 callbacks suppressed [ 144.840657][ T2536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 144.855813][ T2514] EXT4-fs (loop4): Remounting filesystem read-only [ 144.865427][ T2521] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,max_dir_size_kb=0x0000000000000004,grpjquota=,nomblk_io_submit,jqfmt=vfsold,,errors=continue [ 144.929540][ T2535] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.673: bg 0: block 248: padding at end of block bitmap is not set [ 144.944006][ T2535] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.673: Failed to acquire dquot type 1 [ 144.963379][ T2535] EXT4-fs (loop1): 1 truncate cleaned up [ 144.969825][ T2535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 145.025882][ T2554] serio: Serial port ptm0 [ 145.377009][ T2566] EXT4-fs (loop3): Ignoring removed oldalloc option [ 145.385151][ T2572] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=, [ 145.420475][ T2566] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 145.431602][ T2566] EXT4-fs (loop3): 1 truncate cleaned up [ 145.439538][ T2566] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x000000000000cd29,noblock_validity,init_itable=0x0000000000001002,journal_dev=0x0000000000000002,oldalloc,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000000,inlinecrypt,,errors=continue [ 145.604788][ T2586] EXT4-fs (loop3): Ignoring removed orlov option [ 145.614062][ T2589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2589 comm=syz.0.691 [ 145.626741][ T2589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2589 comm=syz.0.691 [ 145.640331][ T2586] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov, [ 145.776257][ T2595] capability: warning: `syz.1.692' uses 32-bit capabilities (legacy support in use) [ 145.790215][ T2589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 145.836697][ T15] tipc: 32-bit node address hash set to 5e842046 [ 145.962022][ T2604] ------------[ cut here ]------------ [ 145.962042][ T2604] WARNING: CPU: 1 PID: 2604 at mm/page_alloc.c:5341 __alloc_pages_nodemask+0x313/0x5f0 [ 145.962044][ T2604] Modules linked in: [ 145.962055][ T2604] CPU: 1 PID: 2604 Comm: syz.1.696 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 145.962060][ T2604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.962069][ T2604] RIP: 0010:__alloc_pages_nodemask+0x313/0x5f0 [ 145.962077][ T2604] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 fa fd ff ff <0f> 0b 31 c0 eb 9f 31 c0 e9 c8 fd ff ff 4c 89 ff e8 d8 8f f5 ff 49 [ 145.962082][ T2604] RSP: 0018:ffffc90000d671e0 EFLAGS: 00010246 [ 145.962090][ T2604] RAX: ffffc90000d67270 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.962094][ T2604] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000d67288 [ 145.962098][ T2604] RBP: ffffc90000d67310 R08: dffffc0000000000 R09: ffffc90000d67270 [ 145.962104][ T2604] R10: fffff520001ace51 R11: 1ffff920001ace4e R12: 1ffff920001ace44 [ 145.962109][ T2604] R13: dffffc0000000000 R14: 0000000000040c40 R15: 000000000000000c [ 145.962115][ T2604] FS: 00007fb0c8d936c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 145.962120][ T2604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.962125][ T2604] CR2: 00007ffcefbffbe8 CR3: 0000000133995000 CR4: 00000000003506a0 [ 145.962134][ T2604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.962138][ T2604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.962141][ T2604] Call Trace: [ 145.962149][ T2604] ? ext4_orphan_cleanup+0x96c/0xd30 [ 145.962156][ T2604] ? ext4_fill_super+0x845b/0x8b60 [ 145.962164][ T2604] ? mount_bdev+0x28b/0x3a0 [ 145.962170][ T2604] ? ext4_mount+0x34/0x40 [ 145.962178][ T2604] ? legacy_get_tree+0xed/0x190 [ 145.962184][ T2604] ? vfs_get_tree+0x89/0x260 [ 145.962192][ T2604] ? do_new_mount+0x25a/0xa20 [ 145.962198][ T2604] ? path_mount+0x572/0xc80 [ 145.962204][ T2604] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 145.962212][ T2604] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.962222][ T2604] kmalloc_order+0x4c/0x160 [ 145.962229][ T2604] kmalloc_order_trace+0x16/0x80 [ 145.962236][ T2604] __kmalloc+0x1ee/0x330 [ 145.962243][ T2604] kvmalloc_node+0xe8/0x130 [ 145.962250][ T2604] ext4_expand_extra_isize_ea+0xdda/0x1a10 [ 145.962264][ T2604] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 145.962287][ T2604] __ext4_mark_inode_dirty+0x3cf/0x610 [ 145.962295][ T2604] ext4_evict_inode+0xe31/0x16e0 [ 145.962302][ T2604] ? _raw_spin_unlock+0x4d/0x70 [ 145.962310][ T2604] ? ext4_inode_is_fast_symlink+0x340/0x340 [ 145.962317][ T2604] ? ext4_inode_is_fast_symlink+0x340/0x340 [ 145.962324][ T2604] evict+0x478/0x910 [ 145.962332][ T2604] ? mode_strip_sgid+0x160/0x160 [ 145.962340][ T2604] ? __kasan_check_write+0x14/0x20 [ 145.962346][ T2604] iput+0x638/0x7c0 [ 145.962352][ T2604] ext4_orphan_cleanup+0x96c/0xd30 [ 145.962360][ T2604] ext4_fill_super+0x845b/0x8b60 [ 145.962370][ T2604] ? ext4_mount+0x40/0x40 [ 145.962376][ T2604] ? set_blocksize+0x1fe/0x3c0 [ 145.962383][ T2604] ? sb_set_blocksize+0xaa/0xf0 [ 145.962390][ T2604] mount_bdev+0x28b/0x3a0 [ 145.962397][ T2604] ? ext4_mount+0x40/0x40 [ 145.962404][ T2604] ext4_mount+0x34/0x40 [ 145.962410][ T2604] legacy_get_tree+0xed/0x190 [ 145.962417][ T2604] ? ext4_chksum+0x160/0x160 [ 145.962424][ T2604] vfs_get_tree+0x89/0x260 [ 145.962431][ T2604] do_new_mount+0x25a/0xa20 [ 145.962438][ T2604] path_mount+0x572/0xc80 [ 145.962446][ T2604] __se_sys_mount+0x318/0x380 [ 145.962453][ T2604] ? __x64_sys_mount+0xd0/0xd0 [ 145.962460][ T2604] ? debug_smp_processor_id+0x17/0x20 [ 145.962467][ T2604] __x64_sys_mount+0xbf/0xd0 [ 145.962473][ T2604] do_syscall_64+0x31/0x40 [ 145.962481][ T2604] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.962487][ T2604] RIP: 0033:0x7fb0ca72c0ca [ 145.962493][ T2604] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.962497][ T2604] RSP: 002b:00007fb0c8d92e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 145.962505][ T2604] RAX: ffffffffffffffda RBX: 00007fb0c8d92ef0 RCX: 00007fb0ca72c0ca [ 145.962510][ T2604] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007fb0c8d92eb0 [ 145.962515][ T2604] RBP: 00002000000002c0 R08: 00007fb0c8d92ef0 R09: 0000000000800700 [ 145.962519][ T2604] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 145.962524][ T2604] R13: 00007fb0c8d92eb0 R14: 0000000000000464 R15: 000000000000002c [ 145.962530][ T2604] ---[ end trace bbe9481d3756e5de ]--- [ 145.962557][ T2604] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.696: Parent and EA inode have the same ino 15 [ 145.962656][ T2604] EXT4-fs (loop1): Remounting filesystem read-only [ 145.962702][ T2604] EXT4-fs (loop1): 1 orphan inode deleted [ 145.962712][ T2604] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000adb,bsdgroups,debug_want_extra_isize=0x000000000000005a,init_itable,errors=remount-ro,noinit_itable,nojournal_checksum, [ 146.007154][ T2612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 146.489503][ T2612] capability: warning: `syz.4.699' uses deprecated v2 capabilities in a way that may be insecure [ 146.515603][ T2626] netlink: 'syz.2.706': attribute type 4 has an invalid length. [ 146.524549][ T2626] netlink: 'syz.2.706': attribute type 4 has an invalid length. [ 146.622092][ T2648] EXT4-fs (loop1): Ignoring removed nobh option [ 146.628361][ T2648] EXT4-fs (loop1): Ignoring removed bh option [ 146.634410][ T2648] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.653993][ T2655] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 146.668880][ T2648] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 146.669490][ T2647] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 146.720731][ T2647] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.735431][ T2647] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 146.747699][ T2647] EXT4-fs (loop3): This should not happen!! Data will be lost [ 146.747699][ T2647] [ 146.757991][ T2647] EXT4-fs (loop3): Total free blocks count 0 [ 146.763991][ T2647] EXT4-fs (loop3): Free/Dirty block details [ 146.769950][ T2647] EXT4-fs (loop3): free_blocks=2415919104 [ 146.775802][ T2647] EXT4-fs (loop3): dirty_blocks=16 [ 146.780947][ T2647] EXT4-fs (loop3): Block reservation details [ 146.786948][ T2647] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 146.814164][ T2647] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 146.826377][ T2647] EXT4-fs (loop3): This should not happen!! Data will be lost [ 146.826377][ T2647] [ 146.924823][ T2692] xt_hashlimit: max too large, truncated to 1048576 [ 146.973876][ T2711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 146.983839][ T2711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'. [ 146.999964][ T2712] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.740: casefold flag without casefold feature [ 147.012771][ T2712] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.740: couldn't read orphan inode 15 (err -117) [ 147.034224][ T2712] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 147.093929][ T2723] EXT4-fs (loop0): Ignoring removed nobh option [ 147.106242][ T2723] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue [ 147.249570][ T2742] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 147.264661][ T2742] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm +}[@: lblock 0 mapped to illegal pblock 0 (length 5) [ 147.277640][ T2742] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 147.290020][ T2742] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.290020][ T2742] [ 147.334454][ T2752] tipc: Started in network mode [ 147.339349][ T2752] tipc: Own node identity 4, cluster identity 4711 [ 147.345840][ T2752] tipc: 32-bit node address hash set to 4 [ 147.357392][ T2756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 147.436838][ T24] kauditd_printk_skb: 248 callbacks suppressed [ 147.436846][ T24] audit: type=1326 audit(147.438:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8739f2e929 code=0x7ffc0000 [ 147.466547][ T24] audit: type=1326 audit(147.438:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8739f2e929 code=0x7ffc0000 [ 147.489465][ T24] audit: type=1326 audit(147.438:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f8739f2e929 code=0x7ffc0000 [ 147.512360][ T24] audit: type=1326 audit(147.438:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8739f2e929 code=0x7ffc0000 [ 147.538711][ T24] audit: type=1326 audit(147.438:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8739f2e929 code=0x7ffc0000 [ 147.561595][ T24] audit: type=1400 audit(147.538:584): avc: denied { connect } for pid=2775 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.587163][ T2780] binfmt_misc: register: failed to install interpreter file ./file2 [ 147.596236][ T24] audit: type=1400 audit(147.588:585): avc: denied { shutdown } for pid=2775 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.683368][ T24] audit: type=1400 audit(147.678:586): avc: denied { create } for pid=2799 comm="syz.3.780" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.708860][ T24] audit: type=1400 audit(147.698:587): avc: denied { mounton } for pid=2799 comm="syz.3.780" path="/163/file0" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.731267][ T2803] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 147.770156][ T2817] netlink: 'syz.3.786': attribute type 3 has an invalid length. [ 147.774873][ T24] audit: type=1400 audit(147.768:588): avc: denied { write } for pid=2819 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.844304][ T2823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.857821][ T2823] EXT4-fs (loop4): 1 truncate cleaned up [ 147.864338][ T2823] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,dioread_lock,quota,,errors=continue [ 147.899570][ T2840] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.958459][ T2852] netlink: 52 bytes leftover after parsing attributes in process `syz.4.803'. [ 147.972156][ T2855] ================================================================== [ 147.980223][ T2855] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 147.988338][ T2855] Read of size 8 at addr ffff888115e476c0 by task syz.0.804/2855 [ 147.996013][ T2855] [ 147.998313][ T2855] CPU: 1 PID: 2855 Comm: syz.0.804 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 148.009461][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.019482][ T2855] Call Trace: [ 148.023344][ T2855] __dump_stack+0x21/0x24 [ 148.027638][ T2855] dump_stack_lvl+0x169/0x1d8 [ 148.032281][ T2855] ? show_regs_print_info+0x18/0x18 [ 148.037445][ T2855] ? thaw_kernel_threads+0x220/0x220 [ 148.042695][ T2855] print_address_description+0x7f/0x2c0 [ 148.048203][ T2855] ? tc_setup_flow_action+0x842/0x3280 [ 148.053622][ T2855] kasan_report+0xe2/0x130 [ 148.058002][ T2855] ? flow_action_cookie_create+0x28/0x90 [ 148.063596][ T2855] ? tc_setup_flow_action+0x842/0x3280 [ 148.069017][ T2855] __asan_report_load8_noabort+0x14/0x20 [ 148.074613][ T2855] tc_setup_flow_action+0x842/0x3280 [ 148.079860][ T2855] ? __kmalloc+0x1a7/0x330 [ 148.084241][ T2855] ? flow_rule_alloc+0x32/0x2c0 [ 148.089056][ T2855] mall_replace_hw_filter+0x293/0x810 [ 148.094392][ T2855] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 148.100439][ T2855] ? mall_set_parms+0x410/0x410 [ 148.105265][ T2855] ? tcf_exts_destroy+0xb0/0xb0 [ 148.110088][ T2855] ? pcpu_alloc+0xf8a/0x16b0 [ 148.114645][ T2855] ? mall_set_parms+0x19d/0x410 [ 148.119463][ T2855] mall_change+0x528/0x750 [ 148.123846][ T2855] ? __kasan_check_write+0x14/0x20 [ 148.128926][ T2855] ? mall_get+0xa0/0xa0 [ 148.133049][ T2855] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 148.138910][ T2855] ? nla_strcmp+0xf4/0x140 [ 148.143310][ T2855] tc_new_tfilter+0x13f6/0x1a10 [ 148.148126][ T2855] ? mall_get+0xa0/0xa0 [ 148.152248][ T2855] ? tcf_gate_entry_destructor+0x20/0x20 [ 148.157845][ T2855] ? security_capable+0x87/0xb0 [ 148.162661][ T2855] ? ns_capable+0x8c/0xf0 [ 148.166954][ T2855] ? netlink_net_capable+0x125/0x160 [ 148.172202][ T2855] ? tcf_gate_entry_destructor+0x20/0x20 [ 148.177810][ T2855] rtnetlink_rcv_msg+0x800/0xb90 [ 148.182714][ T2855] ? rtnetlink_bind+0x80/0x80 [ 148.187355][ T2855] ? arch_stack_walk+0xee/0x140 [ 148.192171][ T2855] ? stack_trace_save+0x98/0xe0 [ 148.196985][ T2855] ? stack_trace_snprint+0xf0/0xf0 [ 148.202062][ T2855] ? memcpy+0x56/0x70 [ 148.206011][ T2855] ? avc_has_perm+0x234/0x360 [ 148.210655][ T2855] ? __kasan_slab_alloc+0xbd/0xf0 [ 148.215644][ T2855] ? slab_post_alloc_hook+0x5d/0x2f0 [ 148.221501][ T2855] ? ___sys_sendmsg+0x1f0/0x260 [ 148.226319][ T2855] ? avc_has_perm_noaudit+0x240/0x240 [ 148.231659][ T2855] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 148.236999][ T2855] netlink_rcv_skb+0x1e0/0x430 [ 148.241728][ T2855] ? rtnetlink_bind+0x80/0x80 [ 148.246368][ T2855] ? netlink_ack+0xb80/0xb80 [ 148.250923][ T2855] ? __netlink_lookup+0x387/0x3b0 [ 148.255913][ T2855] rtnetlink_rcv+0x1c/0x20 [ 148.260293][ T2855] netlink_unicast+0x87c/0xa40 [ 148.265022][ T2855] netlink_sendmsg+0x88d/0xb30 [ 148.269753][ T2855] ? netlink_getsockopt+0x530/0x530 [ 148.274920][ T2855] ? security_socket_sendmsg+0x82/0xa0 [ 148.280340][ T2855] ? netlink_getsockopt+0x530/0x530 [ 148.285499][ T2855] ____sys_sendmsg+0x5a2/0x8c0 [ 148.290225][ T2855] ? __sys_sendmsg_sock+0x40/0x40 [ 148.295212][ T2855] ? import_iovec+0x7c/0xb0 [ 148.299680][ T2855] ___sys_sendmsg+0x1f0/0x260 [ 148.304320][ T2855] ? __sys_sendmsg+0x250/0x250 [ 148.309049][ T2855] ? __fdget+0x1a1/0x230 [ 148.313256][ T2855] __x64_sys_sendmsg+0x1e2/0x2a0 [ 148.318157][ T2855] ? ___sys_sendmsg+0x260/0x260 [ 148.323565][ T2855] ? switch_fpu_return+0x197/0x340 [ 148.328641][ T2855] do_syscall_64+0x31/0x40 [ 148.333024][ T2855] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 148.338880][ T2855] RIP: 0033:0x7f8739f2e929 [ 148.343270][ T2855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.362842][ T2855] RSP: 002b:00007f8738597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.371222][ T2855] RAX: ffffffffffffffda RBX: 00007f873a155fa0 RCX: 00007f8739f2e929 [ 148.379173][ T2855] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 148.387113][ T2855] RBP: 00007f8739fb0b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.395050][ T2855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.402993][ T2855] R13: 0000000000000000 R14: 00007f873a155fa0 R15: 00007ffef7888c18 [ 148.410932][ T2855] [ 148.413227][ T2855] Allocated by task 2855: [ 148.417525][ T2855] __kasan_kmalloc+0xda/0x110 [ 148.422167][ T2855] __kmalloc+0x1a7/0x330 [ 148.426374][ T2855] tcf_idr_create+0x5f/0x790 [ 148.430927][ T2855] tcf_idr_create_from_flags+0x61/0x70 [ 148.436346][ T2855] tcf_gact_init+0x2b4/0x520 [ 148.440898][ T2855] tcf_action_init_1+0x3e1/0x670 [ 148.445797][ T2855] tcf_action_init+0x1e6/0x700 [ 148.450523][ T2855] tcf_exts_validate+0x215/0x510 [ 148.455423][ T2855] mall_set_parms+0x4b/0x410 [ 148.459976][ T2855] mall_change+0x45c/0x750 [ 148.464353][ T2855] tc_new_tfilter+0x13f6/0x1a10 [ 148.469167][ T2855] rtnetlink_rcv_msg+0x800/0xb90 [ 148.474064][ T2855] netlink_rcv_skb+0x1e0/0x430 [ 148.478789][ T2855] rtnetlink_rcv+0x1c/0x20 [ 148.483167][ T2855] netlink_unicast+0x87c/0xa40 [ 148.487894][ T2855] netlink_sendmsg+0x88d/0xb30 [ 148.492618][ T2855] ____sys_sendmsg+0x5a2/0x8c0 [ 148.497344][ T2855] ___sys_sendmsg+0x1f0/0x260 [ 148.501981][ T2855] __x64_sys_sendmsg+0x1e2/0x2a0 [ 148.506880][ T2855] do_syscall_64+0x31/0x40 [ 148.511276][ T2855] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 148.517125][ T2855] [ 148.519420][ T2855] The buggy address belongs to the object at ffff888115e47600 [ 148.519420][ T2855] which belongs to the cache kmalloc-192 of size 192 [ 148.533434][ T2855] The buggy address is located 0 bytes to the right of [ 148.533434][ T2855] 192-byte region [ffff888115e47600, ffff888115e476c0) [ 148.547010][ T2855] The buggy address belongs to the page: [ 148.552607][ T2855] page:ffffea00045791c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115e47 [ 148.562800][ T2855] flags: 0x4000000000000200(slab) [ 148.567788][ T2855] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043380 [ 148.576334][ T2855] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 148.584875][ T2855] page dumped because: kasan: bad access detected [ 148.591249][ T2855] page_owner tracks the page as allocated [ 148.596932][ T2855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 2855, ts 147971006720, free_ts 147950427042 [ 148.613030][ T2855] prep_new_page+0x179/0x180 [ 148.617583][ T2855] get_page_from_freelist+0x2235/0x23d0 [ 148.623091][ T2855] __alloc_pages_nodemask+0x268/0x5f0 [ 148.628422][ T2855] new_slab+0x84/0x3f0 [ 148.632451][ T2855] ___slab_alloc+0x2a6/0x450 [ 148.637002][ T2855] __slab_alloc+0x63/0xa0 [ 148.641292][ T2855] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 148.646626][ T2855] kset_create_and_add+0x59/0x2b0 [ 148.651613][ T2855] netdev_register_kobject+0x1a5/0x320 [ 148.657032][ T2855] register_netdevice+0xddd/0x13c0 [ 148.662108][ T2855] tun_set_iff+0x812/0xe00 [ 148.666485][ T2855] __tun_chr_ioctl+0x795/0x1cd0 [ 148.671298][ T2855] tun_chr_ioctl+0x2a/0x40 [ 148.675675][ T2855] __se_sys_ioctl+0x121/0x1a0 [ 148.680311][ T2855] __x64_sys_ioctl+0x7b/0x90 [ 148.684864][ T2855] do_syscall_64+0x31/0x40 [ 148.689243][ T2855] page last free stack trace: [ 148.693883][ T2855] free_unref_page_prepare+0x2b7/0x2d0 [ 148.699301][ T2855] free_unref_page_list+0x12e/0x9b0 [ 148.704459][ T2855] release_pages+0xe38/0xe80 [ 148.709010][ T2855] free_pages_and_swap_cache+0x86/0xa0 [ 148.714431][ T2855] tlb_finish_mmu+0x175/0x300 [ 148.719066][ T2855] exit_mmap+0x2fc/0x540 [ 148.723269][ T2855] __mmput+0x93/0x2f0 [ 148.727215][ T2855] mmput+0x4e/0x150 [ 148.730984][ T2855] do_exit+0x986/0x2470 [ 148.735101][ T2855] do_group_exit+0x141/0x310 [ 148.739655][ T2855] get_signal+0xf7d/0x12e0 [ 148.744037][ T2855] arch_do_signal_or_restart+0xbf/0x10f0 [ 148.749632][ T2855] exit_to_user_mode_loop+0xa2/0xe0 [ 148.754791][ T2855] syscall_exit_to_user_mode+0x68/0x90 [ 148.760213][ T2855] do_syscall_64+0x3d/0x40 [ 148.764594][ T2855] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 148.770444][ T2855] [ 148.772734][ T2855] Memory state around the buggy address: [ 148.778327][ T2855] ffff888115e47580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 148.786350][ T2855] ffff888115e47600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.794377][ T2855] >ffff888115e47680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 148.802401][ T2855] ^ [ 148.808514][ T2855] ffff888115e47700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.816535][ T2855] ffff888115e47780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.824554][ T2855] ================================================================== [ 148.832574][ T2855] Disabling lock debugging due to kernel taint