last executing test programs: 1.928778934s ago: executing program 2 (id=1632): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.524985247s ago: executing program 3 (id=1653): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) 1.49113275s ago: executing program 3 (id=1656): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 1.173139366s ago: executing program 3 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000700)=""/35, 0x23}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3}, 0x10020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0) 1.11326247s ago: executing program 4 (id=1674): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.106717101s ago: executing program 3 (id=1676): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.086293423s ago: executing program 3 (id=1678): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) syz_usb_disconnect(r0) 1.075811624s ago: executing program 2 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.030153727s ago: executing program 2 (id=1683): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 986.651201ms ago: executing program 0 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 970.224892ms ago: executing program 0 (id=1690): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 884.220679ms ago: executing program 0 (id=1693): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)=0x1d00) 356.265422ms ago: executing program 3 (id=1694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 254.90599ms ago: executing program 4 (id=1695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 254.74123ms ago: executing program 1 (id=1696): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 254.45728ms ago: executing program 4 (id=1697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1bd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000001850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 238.040951ms ago: executing program 4 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) tgkill(0x0, 0x0, 0x13) 237.765512ms ago: executing program 1 (id=1699): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) 221.645103ms ago: executing program 4 (id=1700): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) 186.216156ms ago: executing program 2 (id=1701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) socket$phonet(0x23, 0x2, 0x1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 177.628376ms ago: executing program 1 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 148.758538ms ago: executing program 1 (id=1703): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 147.004168ms ago: executing program 2 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 133.95212ms ago: executing program 0 (id=1706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) 64.951156ms ago: executing program 0 (id=1707): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 62.555256ms ago: executing program 1 (id=1708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) uname(0x0) 1.34912ms ago: executing program 0 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 950.35µs ago: executing program 1 (id=1710): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x70bd2b, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xa, 0x6, 0x9}}]}, 0xffc6}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) 578.6µs ago: executing program 2 (id=1711): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000040)="8469e156", 0x4, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 25.115150][ T29] audit: type=1400 audit(1755832515.242:62): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.115941][ T3288] cgroup: Unknown subsys name 'net' [ 25.138094][ T29] audit: type=1400 audit(1755832515.242:63): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.165486][ T29] audit: type=1400 audit(1755832515.272:64): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.320304][ T3288] cgroup: Unknown subsys name 'cpuset' [ 25.326524][ T3288] cgroup: Unknown subsys name 'rlimit' [ 25.475710][ T29] audit: type=1400 audit(1755832515.602:65): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.498999][ T29] audit: type=1400 audit(1755832515.602:66): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.519589][ T29] audit: type=1400 audit(1755832515.602:67): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.539992][ T29] audit: type=1400 audit(1755832515.602:68): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.560380][ T29] audit: type=1400 audit(1755832515.632:69): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.585352][ T29] audit: type=1400 audit(1755832515.632:70): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.592583][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.617381][ T29] audit: type=1400 audit(1755832515.742:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.648620][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.656383][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 26.716067][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.723359][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.730699][ T3301] bridge_slave_0: entered allmulticast mode [ 26.736988][ T3301] bridge_slave_0: entered promiscuous mode [ 26.744700][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.751808][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.759037][ T3301] bridge_slave_1: entered allmulticast mode [ 26.765585][ T3301] bridge_slave_1: entered promiscuous mode [ 26.797740][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.817543][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.830933][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.854148][ T3301] team0: Port device team_slave_0 added [ 26.876924][ T3301] team0: Port device team_slave_1 added [ 26.911163][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.918205][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.944546][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.956360][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.963358][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.989283][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.007476][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.030295][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.054205][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.061448][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.068561][ T3304] bridge_slave_0: entered allmulticast mode [ 27.075158][ T3304] bridge_slave_0: entered promiscuous mode [ 27.086955][ T3301] hsr_slave_0: entered promiscuous mode [ 27.093081][ T3301] hsr_slave_1: entered promiscuous mode [ 27.106935][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.114119][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.121384][ T3304] bridge_slave_1: entered allmulticast mode [ 27.127831][ T3304] bridge_slave_1: entered promiscuous mode [ 27.171693][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.182004][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.221169][ T3304] team0: Port device team_slave_0 added [ 27.241490][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.248556][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.255760][ T3300] bridge_slave_0: entered allmulticast mode [ 27.262102][ T3300] bridge_slave_0: entered promiscuous mode [ 27.271466][ T3304] team0: Port device team_slave_1 added [ 27.279802][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.286861][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.294079][ T3307] bridge_slave_0: entered allmulticast mode [ 27.300481][ T3307] bridge_slave_0: entered promiscuous mode [ 27.306892][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.315736][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.322793][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.329897][ T3300] bridge_slave_1: entered allmulticast mode [ 27.336219][ T3300] bridge_slave_1: entered promiscuous mode [ 27.348934][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.356125][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.363349][ T3307] bridge_slave_1: entered allmulticast mode [ 27.369700][ T3307] bridge_slave_1: entered promiscuous mode [ 27.403887][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.422251][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.429256][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.455170][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.466379][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.473384][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.499295][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.514997][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.533252][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.565282][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.575071][ T3307] team0: Port device team_slave_0 added [ 27.601896][ T3307] team0: Port device team_slave_1 added [ 27.614655][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.621737][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.628802][ T3309] bridge_slave_0: entered allmulticast mode [ 27.635393][ T3309] bridge_slave_0: entered promiscuous mode [ 27.648503][ T3304] hsr_slave_0: entered promiscuous mode [ 27.655220][ T3304] hsr_slave_1: entered promiscuous mode [ 27.661092][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 27.666831][ T3304] Cannot create hsr debugfs directory [ 27.677737][ T3300] team0: Port device team_slave_0 added [ 27.686235][ T3300] team0: Port device team_slave_1 added [ 27.692788][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.699890][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.706954][ T3309] bridge_slave_1: entered allmulticast mode [ 27.713434][ T3309] bridge_slave_1: entered promiscuous mode [ 27.752492][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.759471][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.785443][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.799137][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.806125][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.832077][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.848012][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.857130][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.866417][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.873464][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.899494][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.912661][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.919634][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.945708][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.964351][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.979638][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.988643][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.021032][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.030241][ T3309] team0: Port device team_slave_0 added [ 28.044848][ T3307] hsr_slave_0: entered promiscuous mode [ 28.051001][ T3307] hsr_slave_1: entered promiscuous mode [ 28.056858][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 28.062614][ T3307] Cannot create hsr debugfs directory [ 28.074112][ T3309] team0: Port device team_slave_1 added [ 28.086182][ T3300] hsr_slave_0: entered promiscuous mode [ 28.092929][ T3300] hsr_slave_1: entered promiscuous mode [ 28.098728][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 28.104509][ T3300] Cannot create hsr debugfs directory [ 28.141423][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.148469][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.174426][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.200535][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.207495][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.233610][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.296549][ T3309] hsr_slave_0: entered promiscuous mode [ 28.302734][ T3309] hsr_slave_1: entered promiscuous mode [ 28.308672][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.314448][ T3309] Cannot create hsr debugfs directory [ 28.340301][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.360690][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.385569][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.412151][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.456789][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.467596][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.477620][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.491448][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.498669][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.542148][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.557971][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.572913][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.589000][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.596174][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.604929][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.613505][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.625790][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.632938][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.642674][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.667639][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.677637][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.692592][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.700825][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.709558][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.721337][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.728397][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.748730][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.757040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.764205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.779808][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.799432][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.821031][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.828250][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.848457][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.855564][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.882933][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.893439][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.948630][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.971853][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.987285][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.003822][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.016684][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.023839][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.040345][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.047513][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.068854][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.116470][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.130297][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.140632][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.147770][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.183490][ T3307] veth0_vlan: entered promiscuous mode [ 29.192699][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.199796][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.229527][ T3307] veth1_vlan: entered promiscuous mode [ 29.243071][ T3301] veth0_vlan: entered promiscuous mode [ 29.260608][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.271038][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.291040][ T3301] veth1_vlan: entered promiscuous mode [ 29.320139][ T3307] veth0_macvtap: entered promiscuous mode [ 29.333377][ T3301] veth0_macvtap: entered promiscuous mode [ 29.343530][ T3307] veth1_macvtap: entered promiscuous mode [ 29.360864][ T3301] veth1_macvtap: entered promiscuous mode [ 29.373926][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.384274][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.397276][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.408068][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.418722][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.445263][ T377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.456592][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.470066][ T3304] veth0_vlan: entered promiscuous mode [ 29.476482][ T377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.502430][ T3304] veth1_vlan: entered promiscuous mode [ 29.511377][ T377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.552514][ T377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.569103][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.576588][ T377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.596243][ T3304] veth0_macvtap: entered promiscuous mode [ 29.614912][ T3304] veth1_macvtap: entered promiscuous mode [ 29.641871][ T377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670998][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.681560][ T3300] veth0_vlan: entered promiscuous mode [ 29.687279][ T377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.699060][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.709392][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.738087][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.750967][ T3300] veth1_vlan: entered promiscuous mode [ 29.757473][ T3309] veth0_vlan: entered promiscuous mode [ 29.801824][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.836850][ T3309] veth1_vlan: entered promiscuous mode [ 29.858977][ T3486] loop3: detected capacity change from 0 to 2048 [ 29.866668][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.876544][ T3300] veth0_macvtap: entered promiscuous mode [ 29.896680][ T3300] veth1_macvtap: entered promiscuous mode [ 29.908590][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920562][ T3488] loop4: detected capacity change from 0 to 256 [ 29.922006][ T3486] loop3: p1 < > p3 < p5 > p4 [ 29.931622][ T3486] loop3: partition table partially beyond EOD, truncated [ 29.942503][ T3309] veth0_macvtap: entered promiscuous mode [ 29.949284][ T3486] loop3: p1 start 100663296 is beyond EOD, truncated [ 29.950374][ T3488] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.969774][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.978964][ T3486] loop3: p4 size 395008 extends beyond EOD, truncated [ 29.980126][ T3309] veth1_macvtap: entered promiscuous mode [ 29.992866][ T3488] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.005011][ T3486] loop3: p5 size 395008 extends beyond EOD, truncated [ 30.017633][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.026094][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.048159][ T123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.080658][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.099509][ T123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.123270][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 30.123287][ T29] audit: type=1400 audit(1755832520.252:98): avc: denied { map_create } for pid=3492 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.153997][ T29] audit: type=1400 audit(1755832520.282:99): avc: denied { map_read map_write } for pid=3492 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.173629][ T29] audit: type=1326 audit(1755832520.282:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.3.11" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ba954ebe9 code=0x0 [ 30.197935][ T123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.234272][ T29] audit: type=1400 audit(1755832520.352:101): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.235131][ T123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.276754][ T3496] atomic_op ffff888119acb128 conn xmit_atomic 0000000000000000 [ 30.286753][ T29] audit: type=1400 audit(1755832520.392:102): avc: denied { open } for pid=3494 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.305798][ T29] audit: type=1400 audit(1755832520.392:103): avc: denied { kernel } for pid=3494 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.324882][ T29] audit: type=1400 audit(1755832520.392:104): avc: denied { tracepoint } for pid=3494 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.344274][ T29] audit: type=1400 audit(1755832520.402:105): avc: denied { create } for pid=3494 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.346312][ T123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.363413][ T29] audit: type=1400 audit(1755832520.402:106): avc: denied { bind } for pid=3494 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.363444][ T29] audit: type=1400 audit(1755832520.402:107): avc: denied { write } for pid=3494 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.443619][ T123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.459058][ T123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.491290][ T123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.614535][ T3524] random: crng reseeded on system resumption [ 30.625750][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 30.674687][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 30.676136][ T3536] loop0: detected capacity change from 0 to 256 [ 30.774617][ T3546] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.34'. [ 30.784236][ T3544] netlink: 92 bytes leftover after parsing attributes in process `syz.0.33'. [ 30.808168][ T3544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 30.817074][ T3544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 31.305877][ T3604] syz.1.59 (3604) used greatest stack depth: 10184 bytes left [ 31.384685][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 31.410919][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 31.425625][ T3618] tap0: tun_chr_ioctl cmd 1074025681 [ 31.544514][ T3648] loop1: detected capacity change from 0 to 128 [ 31.577348][ T3650] loop2: detected capacity change from 0 to 2048 [ 31.612000][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.625896][ T3650] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.695895][ T3650] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.726459][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.784700][ T3678] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 31.835235][ T3680] SELinux: failed to load policy [ 31.936088][ T3695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 32.124115][ T3720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 32.256744][ T3740] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.340705][ T3741] syz.2.118 (3741) used greatest stack depth: 9152 bytes left [ 32.426028][ T3761] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 32.545018][ T3781] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.819855][ C1] hrtimer: interrupt took 23592 ns [ 32.843118][ T3829] loop4: detected capacity change from 0 to 2048 [ 32.859630][ T3829] EXT4-fs: Ignoring removed bh option [ 32.882730][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.925273][ T3829] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.943555][ T3829] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 210 with error 28 [ 32.956036][ T3829] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.956036][ T3829] [ 32.965932][ T3829] EXT4-fs (loop4): Total free blocks count 0 [ 32.972037][ T3829] EXT4-fs (loop4): Free/Dirty block details [ 32.977963][ T3829] EXT4-fs (loop4): free_blocks=2415919104 [ 32.983720][ T3829] EXT4-fs (loop4): dirty_blocks=224 [ 32.988930][ T3829] EXT4-fs (loop4): Block reservation details [ 32.994940][ T3829] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 33.034278][ T3845] hub 9-0:1.0: USB hub found [ 33.039163][ T3845] hub 9-0:1.0: 8 ports detected [ 33.047924][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.153792][ T3861] mmap: syz.0.171 (3861) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.284032][ T3879] Zero length message leads to an empty skb [ 33.362568][ T3888] loop4: detected capacity change from 0 to 1024 [ 33.370507][ T3888] ======================================================= [ 33.370507][ T3888] WARNING: The mand mount option has been deprecated and [ 33.370507][ T3888] and is ignored by this kernel. Remove the mand [ 33.370507][ T3888] option from the mount to silence this warning. [ 33.370507][ T3888] ======================================================= [ 33.412434][ T3888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.447942][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.516126][ T3897] pimreg: tun_chr_ioctl cmd 1074812118 [ 33.613365][ T3914] 9pnet_fd: Insufficient options for proto=fd [ 33.660658][ T3923] loop4: detected capacity change from 0 to 256 [ 33.671920][ T3923] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.845263][ T3949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3949 comm=syz.3.211 [ 33.887948][ T3955] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 33.896945][ T3955] batman_adv: batadv0: Adding interface: macvlan0 [ 33.903547][ T3955] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.929470][ T3955] batman_adv: batadv0: Interface activated: macvlan0 [ 34.231178][ T3979] capability: warning: `syz.0.224' uses deprecated v2 capabilities in a way that may be insecure [ 34.676137][ T2955] kernel write not supported for file /input/event2 (pid: 2955 comm: kworker/0:2) [ 34.904894][ T4065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4065 comm=syz.3.263 [ 34.967576][ T4076] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.045709][ T4089] loop4: detected capacity change from 0 to 512 [ 35.076066][ T4089] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.089224][ T4089] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.127360][ T4089] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.146381][ T4092] SELinux: failed to load policy [ 35.153353][ T4089] EXT4-fs (loop4): 1 truncate cleaned up [ 35.168935][ T4089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.204275][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 35.204291][ T29] audit: type=1400 audit(1755832525.332:289): avc: denied { read append open } for pid=4086 comm="syz.4.273" path="/58/file2/blkio.bfq.idle_time" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.213467][ T4108] loop2: detected capacity change from 0 to 512 [ 35.243049][ T4089] EXT4-fs (loop4): shut down requested (0) [ 35.249516][ T29] audit: type=1400 audit(1755832525.372:290): avc: denied { ioctl } for pid=4086 comm="syz.4.273" path="/58/file2/blkio.bfq.idle_time" dev="loop4" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.277560][ T29] audit: type=1400 audit(1755832525.382:291): avc: denied { read } for pid=2974 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 35.278346][ T4089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 35.299673][ T29] audit: type=1400 audit(1755832525.382:292): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.299704][ T29] audit: type=1400 audit(1755832525.382:293): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.345197][ T4106] loop3: detected capacity change from 0 to 4096 [ 35.351668][ T29] audit: type=1400 audit(1755832525.382:294): avc: denied { add_name } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.378725][ T29] audit: type=1400 audit(1755832525.382:295): avc: denied { create } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.393105][ T4089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 35.399364][ T29] audit: type=1400 audit(1755832525.382:296): avc: denied { append open } for pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.409682][ T4089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 35.431445][ T29] audit: type=1400 audit(1755832525.382:297): avc: denied { getattr } for pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.464036][ T29] audit: type=1400 audit(1755832525.532:298): avc: denied { read write } for pid=4086 comm="syz.4.273" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.492151][ T4106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.507795][ T4113] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 35.532900][ T4117] loop2: detected capacity change from 0 to 512 [ 35.545361][ T4117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.559807][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.573621][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.591309][ T4117] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.635754][ T4124] netlink: 'syz.1.288': attribute type 3 has an invalid length. [ 35.643486][ T4124] __nla_validate_parse: 8 callbacks suppressed [ 35.643503][ T4124] netlink: 456 bytes leftover after parsing attributes in process `syz.1.288'. [ 35.676695][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.693857][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.866162][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.873440][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.949085][ T4155] loop4: detected capacity change from 0 to 256 [ 35.963249][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.972119][ T4155] vfat: Unknown parameter 'nnnumtail' [ 35.981859][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.031473][ T4161] loop4: detected capacity change from 0 to 512 [ 36.044147][ T4161] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.064130][ T412] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.073276][ T412] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 36.082537][ T412] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.085623][ T4161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e09c, mo2=0002] [ 36.091559][ T412] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 36.108559][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.117568][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 36.129602][ T4161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.135979][ T4161] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.304: bad orphan inode 267 [ 36.158987][ T4161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.170024][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.179853][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 36.284572][ T4161] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.304: dx entry: limit 0 != root limit 125 [ 36.296346][ T4161] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.304: Corrupt directory, running e2fsck is recommended [ 36.358403][ T4182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.312'. [ 36.379588][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.473568][ T4194] netlink: 152 bytes leftover after parsing attributes in process `syz.4.317'. [ 36.550434][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 36.622415][ T4213] loop4: detected capacity change from 0 to 1024 [ 36.629031][ T4213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.632234][ T4215] loop1: detected capacity change from 0 to 128 [ 36.677051][ T4213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.723709][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.776187][ T4209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.791338][ T4209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.856291][ T4253] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 36.864084][ T4253] netlink: 'syz.3.344': attribute type 2 has an invalid length. [ 36.876708][ T4253] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 36.884455][ T4253] netlink: 'syz.3.344': attribute type 2 has an invalid length. [ 36.919703][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 36.930382][ T4258] loop4: detected capacity change from 0 to 1024 [ 36.973222][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.985974][ T4258] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.025722][ T4258] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.347: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.059655][ T4258] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 37.072164][ T4258] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.072164][ T4258] [ 37.128765][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.244560][ T4306] loop1: detected capacity change from 0 to 256 [ 37.260911][ T4306] FAT-fs (loop1): codepage cp861 not found [ 37.444777][ T4335] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 37.454837][ T4335] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 37.539523][ T4345] SELinux: Context Ü is not valid (left unmapped). [ 37.563369][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 37.572265][ T4342] netlink: 'syz.2.385': attribute type 20 has an invalid length. [ 37.580085][ T4342] netlink: 'syz.2.385': attribute type 21 has an invalid length. [ 37.715486][ T4377] SELinux: security policydb version 17 (MLS) not backwards compatible [ 37.724448][ T4377] SELinux: failed to load policy [ 37.849430][ T4405] loop0: detected capacity change from 0 to 512 [ 37.860646][ T4405] EXT4-fs: Ignoring removed bh option [ 37.873505][ T4405] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 37.916892][ T4405] EXT4-fs (loop0): 1 truncate cleaned up [ 37.930341][ T4405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.959595][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.326344][ T4492] netlink: 7 bytes leftover after parsing attributes in process `syz.3.449'. [ 38.391279][ T4501] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.403252][ T4504] loop2: detected capacity change from 0 to 164 [ 38.410076][ T4501] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.427864][ T4504] process 'syz.2.456' launched './file0' with NULL argv: empty string added [ 38.437101][ T4504] syz.2.456: attempt to access beyond end of device [ 38.437101][ T4504] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.452873][ T4504] syz.2.456: attempt to access beyond end of device [ 38.452873][ T4504] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.471570][ T4510] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 38.482019][ T4510] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 38.519652][ T377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.563639][ T377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.576653][ T4522] loop2: detected capacity change from 0 to 512 [ 38.583404][ T4522] EXT4-fs: Ignoring removed bh option [ 38.590824][ T4522] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 38.605256][ T4522] EXT4-fs (loop2): 1 truncate cleaned up [ 38.623252][ T4522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.641616][ T377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.689140][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.702115][ T377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.722254][ T4539] loop3: detected capacity change from 0 to 164 [ 38.722755][ T4542] loop2: detected capacity change from 0 to 256 [ 38.743925][ T4545] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 38.745640][ T4539] syz.3.471: attempt to access beyond end of device [ 38.745640][ T4539] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.754327][ T4545] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 38.770014][ T4539] syz.3.471: attempt to access beyond end of device [ 38.770014][ T4539] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.778698][ T4542] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.819928][ T4542] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.900816][ T377] bridge_slave_1: left allmulticast mode [ 38.906536][ T377] bridge_slave_1: left promiscuous mode [ 38.912463][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.933076][ T377] bridge_slave_0: left allmulticast mode [ 38.938754][ T377] bridge_slave_0: left promiscuous mode [ 38.944667][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.988887][ T4563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.480'. [ 39.064403][ T4578] loop2: detected capacity change from 0 to 164 [ 39.082338][ T377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.092882][ T377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.105549][ T377] bond0 (unregistering): Released all slaves [ 39.178778][ T4563] 0ªX¹¦À: renamed from caif0 [ 39.222389][ T4563] 0ªX¹¦À: entered allmulticast mode [ 39.227653][ T4563] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 39.357796][ T4604] loop0: detected capacity change from 0 to 1024 [ 39.390272][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.397910][ T377] hsr_slave_0: left promiscuous mode [ 39.411529][ T377] hsr_slave_1: left promiscuous mode [ 39.417390][ T377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.425007][ T377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.455026][ T4604] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.493: Allocating blocks 449-513 which overlap fs metadata [ 39.475354][ T377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.482806][ T377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.500673][ T4601] EXT4-fs (loop0): pa ffff888105512070: logic 48, phys. 177, len 21 [ 39.508720][ T4601] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 39.527049][ T377] veth1_macvtap: left promiscuous mode [ 39.532682][ T377] veth0_macvtap: left promiscuous mode [ 39.540588][ T377] veth1_vlan: left promiscuous mode [ 39.546178][ T377] veth0_vlan: left promiscuous mode [ 39.547250][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.675027][ T377] team0 (unregistering): Port device team_slave_1 removed [ 39.689138][ T377] team0 (unregistering): Port device team_slave_0 removed [ 39.698728][ T4634] loop3: detected capacity change from 0 to 128 [ 39.786825][ T4526] chnl_net:caif_netlink_parms(): no params data found [ 39.914546][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.921836][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.940493][ T4526] bridge_slave_0: entered allmulticast mode [ 39.946904][ T4526] bridge_slave_0: entered promiscuous mode [ 39.971922][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.979054][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.994990][ T4526] bridge_slave_1: entered allmulticast mode [ 40.001666][ T4526] bridge_slave_1: entered promiscuous mode [ 40.020481][ T4670] syz_tun: entered promiscuous mode [ 40.028286][ T4670] syz_tun: left promiscuous mode [ 40.113636][ T4526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.124150][ T4526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.149571][ T4526] team0: Port device team_slave_0 added [ 40.156081][ T4526] team0: Port device team_slave_1 added [ 40.191616][ T4526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.198607][ T4526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.224661][ T4526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.231112][ T4526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.231127][ T4526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.231181][ T4526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.262475][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 40.262490][ T29] audit: type=1400 audit(1755832759.384:527): avc: denied { ioctl } for pid=4684 comm="syz.0.522" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.292323][ T4526] hsr_slave_0: entered promiscuous mode [ 40.338272][ T4526] hsr_slave_1: entered promiscuous mode [ 40.345221][ T4526] debugfs: 'hsr0' already exists in 'hsr' [ 40.351072][ T4526] Cannot create hsr debugfs directory [ 40.583158][ T4526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.592245][ T4526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.601704][ T4526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.614665][ T4526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.663286][ T4526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.674589][ T4526] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.687679][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.694865][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.732914][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.740018][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.762335][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 40.805613][ T29] audit: type=1400 audit(1755832759.924:528): avc: denied { create } for pid=4718 comm="syz.4.534" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.834607][ T29] audit: type=1400 audit(1755832759.924:529): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.903886][ T4526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.940747][ T4737] loop2: detected capacity change from 0 to 128 [ 40.989415][ T29] audit: type=1400 audit(1755832760.104:530): avc: denied { remount } for pid=4736 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.058920][ T4526] veth0_vlan: entered promiscuous mode [ 41.069046][ T4526] veth1_vlan: entered promiscuous mode [ 41.083963][ T4752] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 41.088718][ T4526] veth0_macvtap: entered promiscuous mode [ 41.102898][ T4526] veth1_macvtap: entered promiscuous mode [ 41.122196][ T4526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.141259][ T29] audit: type=1400 audit(1755832760.254:531): avc: denied { mounton } for pid=4753 comm="syz.0.547" path="/102/file1" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.170570][ T4526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.187632][ T377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.207717][ T29] audit: type=1400 audit(1755832760.324:532): avc: denied { create } for pid=4755 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.238091][ T377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.241935][ T29] audit: type=1400 audit(1755832760.354:533): avc: denied { bind } for pid=4755 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.266470][ T29] audit: type=1400 audit(1755832760.354:534): avc: denied { listen } for pid=4755 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.267414][ T377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.286344][ T29] audit: type=1400 audit(1755832760.354:535): avc: denied { getopt } for pid=4755 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.326432][ T377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.353631][ T29] audit: type=1400 audit(1755832760.464:536): avc: denied { mount } for pid=4526 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.426317][ T4779] loop2: detected capacity change from 0 to 512 [ 41.493602][ T4779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.507528][ T4779] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.532423][ T4779] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.557: corrupted inode contents [ 41.547382][ T4779] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.557: mark_inode_dirty error [ 41.560647][ T4779] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.557: corrupted inode contents [ 41.578615][ T4779] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.557: mark_inode_dirty error [ 41.637003][ T4807] loop1: detected capacity change from 0 to 512 [ 41.647882][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.667809][ T4807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.689659][ T4807] EXT4-fs (loop1): 1 truncate cleaned up [ 41.695623][ T4807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.732630][ T4817] batman_adv: batadv0: Interface deactivated: macvlan0 [ 41.770072][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.780935][ T4817] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 41.788706][ T4817] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 41.899931][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 41.978076][ T4851] loop0: detected capacity change from 0 to 512 [ 41.992264][ T4853] netlink: 'syz.3.590': attribute type 21 has an invalid length. [ 42.036766][ T4851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.076035][ T4851] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.146575][ T4851] EXT4-fs (loop0): shut down requested (0) [ 42.179353][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.260128][ T4875] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 42.434350][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 42.480028][ T4900] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.480028][ T4900] program syz.0.611 not setting count and/or reply_len properly [ 42.905914][ T3404] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 42.913371][ T3404] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 42.920846][ T3404] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 42.929295][ T3404] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 42.999468][ T4955] unsupported nla_type 52263 [ 43.008403][ T4958] loop2: detected capacity change from 0 to 1024 [ 43.043556][ T4958] EXT4-fs: Ignoring removed nobh option [ 43.049180][ T4958] EXT4-fs: Ignoring removed bh option [ 43.090751][ T4958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.120655][ T4978] program syz.1.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.165181][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.273731][ T5002] loop0: detected capacity change from 0 to 512 [ 43.319401][ T5002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.333800][ T5002] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.381883][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.465468][ T5032] netlink: 'syz.1.666': attribute type 14 has an invalid length. [ 43.491435][ T5034] loop0: detected capacity change from 0 to 512 [ 43.507143][ T5036] loop2: detected capacity change from 0 to 128 [ 43.519635][ T5036] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.533808][ T5034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.546511][ T5044] loop4: detected capacity change from 0 to 2048 [ 43.553599][ T5036] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.562748][ T5034] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.600209][ T5044] loop4: p1 < > p4 [ 43.610476][ T5044] loop4: p4 size 8388608 extends beyond EOD, truncated [ 43.635816][ T5034] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.668: corrupted inode contents [ 43.700273][ T5034] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.668: mark_inode_dirty error [ 43.721019][ T5060] program syz.4.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.730595][ T5034] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.668: corrupted inode contents [ 43.730714][ T5058] sctp: [Deprecated]: syz.1.688 (pid 5058) Use of int in max_burst socket option deprecated. [ 43.730714][ T5058] Use struct sctp_assoc_value instead [ 43.759417][ T5064] netlink: 168 bytes leftover after parsing attributes in process `syz.3.680'. [ 43.768810][ T5034] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.668: mark_inode_dirty error [ 43.839326][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.865074][ T5073] ipvlan2: entered allmulticast mode [ 43.879320][ T5073] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 43.895827][ T5078] netlink: 'syz.0.686': attribute type 6 has an invalid length. [ 43.953653][ T5082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.689'. [ 43.975254][ T5086] loop1: detected capacity change from 0 to 128 [ 44.015746][ T5088] sctp: [Deprecated]: syz.2.693 (pid 5088) Use of int in max_burst socket option deprecated. [ 44.015746][ T5088] Use struct sctp_assoc_value instead [ 44.041088][ T31] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 44.049322][ T31] FAT-fs (loop1): Filesystem has been set read-only [ 44.057329][ T31] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 44.236969][ T5119] loop1: detected capacity change from 0 to 2048 [ 44.281404][ T5132] loop3: detected capacity change from 0 to 512 [ 44.288262][ T5132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.300023][ T5132] EXT4-fs (loop3): 1 truncate cleaned up [ 44.306064][ T5132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.318691][ T5119] loop1: p1 < > p4 [ 44.324316][ T5119] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.342967][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.400172][ T5145] loop3: detected capacity change from 0 to 512 [ 44.413344][ T5145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.434614][ T5145] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.454636][ T5145] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.715: corrupted inode contents [ 44.467112][ T5145] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.715: mark_inode_dirty error [ 44.472445][ T5152] loop4: detected capacity change from 0 to 512 [ 44.478804][ T5145] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.715: corrupted inode contents [ 44.497182][ T5152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.505754][ T5145] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.715: mark_inode_dirty error [ 44.521186][ T5152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.533862][ T5152] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.542369][ T5145] EXT4-fs error (device loop3): ext4_lookup:1784: inode #18: comm syz.3.715: 'file0' linked to parent dir [ 44.571251][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.587551][ T5160] netlink: 168 bytes leftover after parsing attributes in process `syz.1.721'. [ 44.588840][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.626076][ T5166] netlink: 5 bytes leftover after parsing attributes in process `syz.3.724'. [ 44.635109][ T5167] loop1: detected capacity change from 0 to 512 [ 44.635625][ T5166] 0ªî{X¹¦: renamed from gretap0 [ 44.646497][ T5167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.659353][ T5166] 0ªî{X¹¦: entered allmulticast mode [ 44.670749][ T5166] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 44.698787][ T5167] EXT4-fs (loop1): 1 truncate cleaned up [ 44.705004][ T5167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.747585][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.803439][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.731'. [ 44.812380][ T5193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'. [ 44.821327][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.731'. [ 44.878744][ T5201] sd 0:0:1:0: device reset [ 44.935087][ T5209] loop3: detected capacity change from 0 to 512 [ 44.953095][ T5209] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.962983][ T5209] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.981669][ T5209] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.741: corrupted inode contents [ 45.002821][ T5209] EXT4-fs (loop3): Remounting filesystem read-only [ 45.009699][ T5209] EXT4-fs (loop3): 1 truncate cleaned up [ 45.015509][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.026179][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.038301][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.049100][ T5209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.078421][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.127500][ T5239] sd 0:0:1:0: device reset [ 45.141903][ T5241] loop3: detected capacity change from 0 to 512 [ 45.156957][ T5241] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 45.272953][ T5265] sd 0:0:1:0: device reset [ 45.317668][ T5269] loop2: detected capacity change from 0 to 512 [ 45.342834][ T5269] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 45.387524][ T5276] loop2: detected capacity change from 0 to 512 [ 45.397057][ T5276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.423376][ T5276] EXT4-fs (loop2): 1 truncate cleaned up [ 45.430048][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.470934][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.554688][ T5299] loop2: detected capacity change from 0 to 128 [ 45.568030][ T5299] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.589677][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 45.589695][ T29] audit: type=1400 audit(45.578:603): avc: denied { mount } for pid=5305 comm="syz.0.785" name="/" dev="rpc_pipefs" ino=11022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 45.601563][ T5299] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.638350][ T29] audit: type=1400 audit(45.578:604): avc: denied { unmount } for pid=5305 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 45.657807][ T29] audit: type=1400 audit(45.618:605): avc: denied { mount } for pid=5298 comm="syz.2.782" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.739036][ T29] audit: type=1326 audit(45.718:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 45.761769][ T29] audit: type=1326 audit(45.718:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 45.822359][ T412] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.861906][ T29] audit: type=1326 audit(45.718:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 45.884478][ T29] audit: type=1326 audit(45.718:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 45.907218][ T29] audit: type=1326 audit(45.718:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 45.912729][ T5332] can0: slcan on ttyS3. [ 45.930019][ T29] audit: type=1326 audit(45.768:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ba954d550 code=0x7ffc0000 [ 45.935398][ T5333] __nla_validate_parse: 6 callbacks suppressed [ 45.935412][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 45.956912][ T29] audit: type=1326 audit(45.768:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1ba9550417 code=0x7ffc0000 [ 46.060673][ T5332] can0 (unregistered): slcan off ttyS3. [ 46.341247][ T5400] tap0: tun_chr_ioctl cmd 1074025677 [ 46.346634][ T5400] tap0: linktype set to 6 [ 46.386227][ T2955] kernel write not supported for file /tty/ldiscs (pid: 2955 comm: kworker/0:2) [ 46.446286][ T5416] loop0: detected capacity change from 0 to 512 [ 46.462846][ T5416] EXT4-fs: Ignoring removed bh option [ 46.469562][ T5416] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.495979][ T5418] loop1: detected capacity change from 0 to 8192 [ 46.499781][ T5416] EXT4-fs (loop0): 1 truncate cleaned up [ 46.508463][ T5416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.519136][ T5423] loop3: detected capacity change from 0 to 1024 [ 46.551262][ T5423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.575511][ T5431] loop4: detected capacity change from 0 to 512 [ 46.582635][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.612213][ T5431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.633544][ T5423] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 46.655580][ T5423] EXT4-fs (loop3): Remounting filesystem read-only [ 46.681679][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.694770][ T5445] loop1: detected capacity change from 0 to 1024 [ 46.701900][ T5445] EXT4-fs: Ignoring removed orlov option [ 46.713542][ T5445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.739762][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.755110][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.003321][ T5506] netlink: 1 bytes leftover after parsing attributes in process `syz.4.878'. [ 47.203663][ T5551] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 47.203663][ T5551] The task syz.3.886 (5551) triggered the difference, watch for misbehavior. [ 47.287757][ T5565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 47.316386][ T5569] option changes via remount are deprecated (pid=5567 comm=syz.2.907) [ 47.404405][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.413049][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.425133][ T5585] 9pnet_fd: Insufficient options for proto=fd [ 47.622453][ T5600] binfmt_misc: register: failed to install interpreter file ./file0 [ 47.698962][ T5610] bridge0: entered promiscuous mode [ 47.784988][ T5618] loop0: detected capacity change from 0 to 4096 [ 47.793630][ T5618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.807752][ T5626] loop1: detected capacity change from 0 to 512 [ 47.816832][ T5626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 47.832606][ T5626] System zones: 1-12 [ 47.841154][ T5626] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.934: Directory hole found for htree index block 0 [ 47.854928][ T5626] EXT4-fs (loop1): Remounting filesystem read-only [ 47.861587][ T5626] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 47.872202][ T5626] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 47.881096][ T5626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.911640][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.020979][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.092131][ T5660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.949'. [ 48.224273][ T5679] program syz.3.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.308542][ T5696] ALSA: seq fatal error: cannot create timer (-19) [ 48.430490][ T5725] netlink: 'syz.4.978': attribute type 2 has an invalid length. [ 48.570666][ T5748] netlink: 'syz.3.984': attribute type 21 has an invalid length. [ 48.570776][ T5748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.984'. [ 48.670882][ T5754] loop3: detected capacity change from 0 to 1024 [ 48.677692][ T5754] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.677730][ T5754] EXT4-fs: dax option not supported [ 48.774055][ T5765] loop1: detected capacity change from 0 to 512 [ 48.791627][ T5765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.850708][ T5773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 48.876258][ T5776] loop3: detected capacity change from 0 to 1024 [ 48.876871][ T5773] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 48.894910][ T5773] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.894910][ T5773] [ 48.894931][ T5773] EXT4-fs (loop1): Total free blocks count 0 [ 48.894945][ T5773] EXT4-fs (loop1): Free/Dirty block details [ 48.894957][ T5773] EXT4-fs (loop1): free_blocks=65280 [ 48.894974][ T5773] EXT4-fs (loop1): dirty_blocks=1767 [ 48.894989][ T5773] EXT4-fs (loop1): Block reservation details [ 48.895001][ T5773] EXT4-fs (loop1): i_reserved_data_blocks=1769 [ 48.945471][ T5776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.960102][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.160207][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2048 with error 28 [ 49.403695][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 49.597025][ T5848] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 49.605380][ T5848] netlink: 'syz.1.1028': attribute type 3 has an invalid length. [ 49.613173][ T5848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1028'. [ 49.689115][ T5864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1036'. [ 49.745167][ T5874] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1041'. [ 49.792158][ T5879] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1043'. [ 49.853310][ T5885] msdos: Unknown parameter 'ÿ' [ 49.968598][ T5901] loop1: detected capacity change from 0 to 512 [ 49.992203][ T5901] EXT4-fs: Ignoring removed bh option [ 50.010496][ T5901] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.035223][ T5901] EXT4-fs (loop1): 1 truncate cleaned up [ 50.055765][ T5901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.205063][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.253097][ T5930] loop1: detected capacity change from 0 to 512 [ 50.269828][ T5930] EXT4-fs: Ignoring removed nobh option [ 50.311039][ T5930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1066: corrupted inode contents [ 50.334230][ T5930] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1066: mark_inode_dirty error [ 50.373823][ T5930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1066: corrupted inode contents [ 50.425720][ T5930] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1066: mark_inode_dirty error [ 50.470295][ T5930] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1066: Failed to acquire dquot type 0 [ 50.503670][ T5930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1066: corrupted inode contents [ 50.519986][ T5948] Falling back ldisc for ttyS3. [ 50.527677][ T5930] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1066: mark_inode_dirty error [ 50.554555][ T5952] Illegal XDP return value 4294967294 on prog (id 390) dev N/A, expect packet loss! [ 50.565391][ T5930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1066: corrupted inode contents [ 50.591486][ T5930] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1066: mark_inode_dirty error [ 50.613317][ T5930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1066: corrupted inode contents [ 50.635458][ T5930] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 50.636482][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 50.636496][ T29] audit: type=1400 audit(50.620:743): avc: denied { getopt } for pid=5953 comm="syz.2.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.677419][ T5930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1066: corrupted inode contents [ 50.706647][ T5930] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1066: mark_inode_dirty error [ 50.740105][ T5930] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 50.760933][ T5930] EXT4-fs (loop1): 1 truncate cleaned up [ 50.777160][ T5930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.812790][ T5930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.862958][ T29] audit: type=1400 audit(50.852:744): avc: denied { connect } for pid=5968 comm="syz.4.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.903768][ T5973] loop1: detected capacity change from 0 to 128 [ 50.961974][ T5978] __nla_validate_parse: 2 callbacks suppressed [ 50.961993][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 51.000641][ T5979] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 51.006790][ T5979] syzkaller1: linktype set to 823 [ 51.032787][ T29] audit: type=1400 audit(51.023:745): avc: denied { name_bind } for pid=5982 comm="syz.2.1092" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.059961][ T29] audit: type=1400 audit(51.053:746): avc: denied { listen } for pid=5984 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.100233][ T5987] loop1: detected capacity change from 0 to 128 [ 51.108492][ T5987] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.140598][ T4526] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.222602][ T6005] loop3: detected capacity change from 0 to 512 [ 51.240273][ T6005] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 51.253999][ T6005] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.314558][ T6005] EXT4-fs (loop3): mount failed [ 51.378116][ T6017] openvswitch: netlink: Message has 6 unknown bytes. [ 51.395107][ T6020] loop0: detected capacity change from 0 to 1024 [ 51.413230][ T6023] loop1: detected capacity change from 0 to 1024 [ 51.419941][ T6023] EXT4-fs: inline encryption not supported [ 51.426025][ T6023] EXT4-fs: Ignoring removed i_version option [ 51.438409][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.466074][ T6023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.479291][ T6031] 9pnet_fd: Insufficient options for proto=fd [ 51.499911][ T29] audit: type=1400 audit(51.497:747): avc: denied { rename } for pid=6018 comm="syz.0.1105" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.500015][ T6020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1105: missing EA_INODE flag [ 51.552208][ T6020] EXT4-fs (loop0): Remounting filesystem read-only [ 51.558808][ T6020] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1221: inode #18: comm syz.0.1105: ea_inode dec ref err=-30 [ 51.559046][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.574231][ T6020] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 51.599421][ T6036] loop4: detected capacity change from 0 to 512 [ 51.616755][ T6036] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 51.663747][ T6036] loop4: detected capacity change from 0 to 4096 [ 51.675033][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.692038][ T6036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.739477][ T6036] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #12: block 80: comm syz.4.1112: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.740317][ T29] audit: type=1400 audit(51.748:748): avc: denied { rename } for pid=6035 comm="syz.4.1112" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 51.786744][ T6036] EXT4-fs warning (device loop4): ext4_empty_dir:3099: inode #12: comm syz.4.1112: directory missing '..' [ 51.832647][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.875742][ T6059] loop2: detected capacity change from 0 to 512 [ 51.903252][ T6059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.942683][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.953599][ T6070] netlink: 'syz.0.1125': attribute type 21 has an invalid length. [ 51.961684][ T6070] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1125'. [ 52.013200][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.021706][ T29] audit: type=1326 audit(52.010:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf9debe9 code=0x7ffc0000 [ 52.044421][ T29] audit: type=1326 audit(52.010:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fe8cf9debe9 code=0x7ffc0000 [ 52.067098][ T29] audit: type=1326 audit(52.010:751): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf9debe9 code=0x7ffc0000 [ 52.075956][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.166394][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.176738][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.195834][ T6098] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1139'. [ 52.357081][ T6124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6124 comm=syz.2.1152 [ 52.401367][ T6129] geneve2: entered promiscuous mode [ 52.406733][ T6129] geneve2: entered allmulticast mode [ 52.591390][ T123] tipc: Subscription rejected, illegal request [ 52.641952][ T6150] capability: warning: `syz.2.1164' uses 32-bit capabilities (legacy support in use) [ 52.653718][ T6150] program syz.2.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.842293][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 52.852292][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 52.907846][ T6181] geneve2: entered promiscuous mode [ 52.913125][ T6181] geneve2: entered allmulticast mode [ 52.925019][ T6183] loop3: detected capacity change from 0 to 4096 [ 52.994056][ T6194] 9pnet_fd: Insufficient options for proto=fd [ 53.208510][ T6240] loop0: detected capacity change from 0 to 1024 [ 53.252613][ T6240] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.252687][ T6240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 53.252786][ T6240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.252786][ T6240] [ 53.252801][ T6240] EXT4-fs (loop0): Total free blocks count 0 [ 53.252815][ T6240] EXT4-fs (loop0): Free/Dirty block details [ 53.252826][ T6240] EXT4-fs (loop0): free_blocks=4293918720 [ 53.252838][ T6240] EXT4-fs (loop0): dirty_blocks=16 [ 53.252849][ T6240] EXT4-fs (loop0): Block reservation details [ 53.252859][ T6240] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 53.359162][ T6252] loop3: detected capacity change from 0 to 512 [ 53.415731][ T6254] team0 (unregistering): Port device team_slave_0 removed [ 53.441592][ T6254] team0 (unregistering): Port device team_slave_1 removed [ 53.577279][ T6270] IPv6: Can't replace route, no match found [ 53.667130][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 53.822518][ T6288] loop0: detected capacity change from 0 to 1024 [ 53.883681][ T6298] atomic_op ffff888118806128 conn xmit_atomic 0000000000000000 [ 53.930214][ T6288] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.1228: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.930900][ T6288] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.930929][ T6288] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.930929][ T6288] [ 54.007836][ T6288] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.1228: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.008022][ T6288] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.008052][ T6288] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.008052][ T6288] [ 54.074692][ T412] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 54.091548][ T412] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 54.104026][ T412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.104026][ T412] [ 54.270481][ T3404] kernel write not supported for file /526/coredump_filter (pid: 3404 comm: kworker/1:5) [ 54.436933][ T6371] loop0: detected capacity change from 0 to 512 [ 54.494167][ T6383] program syz.0.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.677167][ T6417] syz.0.1297 uses obsolete (PF_INET,SOCK_PACKET) [ 54.742073][ T6427] loop3: detected capacity change from 0 to 512 [ 54.753628][ T6427] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.768751][ T6427] EXT4-fs (loop3): mount failed [ 54.816108][ T6437] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1294'. [ 54.841592][ T6439] loop3: detected capacity change from 0 to 128 [ 54.849907][ T6439] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.866932][ T6439] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.902123][ T6447] loop1: detected capacity change from 0 to 256 [ 54.908922][ T377] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.932227][ T6450] C: renamed from team_slave_0 [ 54.938880][ T6450] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 54.946838][ T6450] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 55.019961][ T6460] loop2: detected capacity change from 0 to 512 [ 55.027572][ T6460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.048633][ T6460] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1307: invalid indirect mapped block 4294967295 (level 0) [ 55.075570][ T6460] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1307: invalid indirect mapped block 4294967295 (level 1) [ 55.099864][ T6460] EXT4-fs (loop2): 1 orphan inode deleted [ 55.105668][ T6460] EXT4-fs (loop2): 1 truncate cleaned up [ 55.236815][ T6486] loop2: detected capacity change from 0 to 1024 [ 55.271342][ T6486] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1314: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.299156][ T6486] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 55.311572][ T6486] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.311572][ T6486] [ 55.377225][ T6497] can0: slcan on ttyS3. [ 55.396546][ T6486] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.1314: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.433224][ T6497] can0 (unregistered): slcan off ttyS3. [ 55.459109][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 55.481463][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 55.493956][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.493956][ T12] [ 55.503654][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 55.509657][ T12] EXT4-fs (loop2): Free/Dirty block details [ 55.515642][ T12] EXT4-fs (loop2): free_blocks=4293918720 [ 55.521425][ T12] EXT4-fs (loop2): dirty_blocks=16 [ 55.526547][ T12] EXT4-fs (loop2): Block reservation details [ 55.532667][ T12] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 55.609892][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 55.616497][ T29] audit: type=1400 audit(55.637:984): avc: denied { unmount } for pid=4526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.640077][ T29] audit: type=1326 audit(55.647:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.662843][ T29] audit: type=1326 audit(55.647:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.685636][ T29] audit: type=1326 audit(55.647:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.708511][ T29] audit: type=1326 audit(55.647:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.713515][ T3404] kernel write not supported for file /tty/ldiscs (pid: 3404 comm: kworker/1:5) [ 55.731418][ T29] audit: type=1326 audit(55.647:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.762955][ T29] audit: type=1326 audit(55.647:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.785973][ T29] audit: type=1326 audit(55.647:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.808704][ T29] audit: type=1326 audit(55.647:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.831498][ T29] audit: type=1326 audit(55.647:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09a49ebe9 code=0x7ffc0000 [ 55.857342][ T6532] loop2: detected capacity change from 0 to 512 [ 55.866412][ T6532] EXT4-fs: Ignoring removed bh option [ 55.889333][ T6532] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 55.920473][ T6532] EXT4-fs (loop2): 1 truncate cleaned up [ 56.130173][ T6576] loop0: detected capacity change from 0 to 1024 [ 56.141345][ T6576] EXT4-fs: Ignoring removed orlov option [ 56.347566][ T6604] tap0: tun_chr_ioctl cmd 1074025677 [ 56.353102][ T6604] tap0: linktype set to 6 [ 56.357633][ T6605] loop1: detected capacity change from 0 to 512 [ 56.375593][ T6605] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.383542][ T6605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 56.392729][ T6605] System zones: 0-1, 15-15, 18-18, 34-34 [ 56.398606][ T6605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.407927][ T6605] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 56.422566][ T6605] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 56.434744][ T6605] EXT4-fs (loop1): 1 truncate cleaned up [ 56.511311][ T6615] loop4: detected capacity change from 0 to 1024 [ 56.523132][ T6620] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1372'. [ 56.665079][ T6642] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1383'. [ 56.703696][ T6642] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 56.719637][ T6615] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 56.735382][ T6615] EXT4-fs (loop4): Remounting filesystem read-only [ 56.752896][ T6642] 0ªî{X¹¦: entered allmulticast mode [ 56.768668][ T6650] random: crng reseeded on system resumption [ 56.768813][ T6642] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 56.888481][ T6671] 9pnet_fd: Insufficient options for proto=fd [ 56.891662][ T6672] option changes via remount are deprecated (pid=6670 comm=syz.1.1398) [ 56.994574][ T6690] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1417'. [ 57.008683][ T6690] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 57.016883][ T6690] 0ªî{X¹¦: entered allmulticast mode [ 57.023033][ T6690] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 57.284787][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.299392][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.352639][ T6746] bond0: entered promiscuous mode [ 57.357785][ T6746] bond_slave_0: entered promiscuous mode [ 57.363580][ T6746] bond_slave_1: entered promiscuous mode [ 57.371268][ T6746] batadv0: entered promiscuous mode [ 57.377159][ T6746] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 57.387075][ T6746] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 57.411241][ T6746] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 57.637837][ T6777] ALSA: seq fatal error: cannot create timer (-19) [ 57.699645][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'. [ 57.766387][ T6800] wireguard0: entered promiscuous mode [ 57.771965][ T6800] wireguard0: entered allmulticast mode [ 57.773636][ T6801] loop4: detected capacity change from 0 to 4096 [ 57.838428][ T6815] loop2: detected capacity change from 0 to 512 [ 57.855746][ T6815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 57.863790][ T6815] System zones: 1-12 [ 57.876584][ T6815] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1464: corrupted in-inode xattr: e_value size too large [ 57.897395][ T6815] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1464: couldn't read orphan inode 15 (err -117) [ 57.918233][ T6815] EXT4-fs (loop2): shut down requested (1) [ 57.981751][ T6824] netlink: 'syz.3.1477': attribute type 2 has an invalid length. [ 57.991218][ T6830] program syz.1.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.203231][ T6863] loop1: detected capacity change from 0 to 1024 [ 58.232642][ T6863] EXT4-fs: Ignoring removed orlov option [ 58.637850][ T6911] vhci_hcd: invalid port number 23 [ 58.666442][ T6917] loop4: detected capacity change from 0 to 1024 [ 58.683287][ T6919] loop1: detected capacity change from 0 to 512 [ 58.691317][ T6919] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 58.769429][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 58.773672][ T6919] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6 [ 58.778391][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 58.818236][ T123] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.834405][ T123] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.853333][ T123] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.878075][ T123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.175696][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1540'. [ 59.262325][ T78] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 59.505451][ T7028] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 59.507410][ T7034] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1561'. [ 59.513432][ T7028] netlink: 'syz.2.1559': attribute type 3 has an invalid length. [ 59.530541][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1559'. [ 59.585136][ T7042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1564'. [ 59.738566][ T7073] msdos: Unknown parameter 'ÿ' [ 59.865129][ T7099] loop4: detected capacity change from 0 to 128 [ 60.155366][ T7145] Falling back ldisc for ttyS3. [ 60.161041][ T7147] pim6reg1: entered promiscuous mode [ 60.161062][ T7147] pim6reg1: entered allmulticast mode [ 60.213998][ T7157] loop3: detected capacity change from 0 to 128 [ 60.666618][ T7180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 60.666683][ T7180] syzkaller1: linktype set to 823 [ 60.706608][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 60.706624][ T29] audit: type=1400 audit(61.764:1179): avc: denied { listen } for pid=7181 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.749064][ T7184] loop3: detected capacity change from 0 to 128 [ 60.755453][ T29] audit: type=1400 audit(61.814:1180): avc: denied { create } for pid=7183 comm="syz.3.1628" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.862226][ T7198] program syz.1.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.888485][ T29] audit: type=1400 audit(61.944:1181): avc: denied { name_bind } for pid=7200 comm="syz.1.1635" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.924579][ T29] audit: type=1326 audit(61.984:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 60.950649][ T29] audit: type=1326 audit(61.984:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 60.973462][ T29] audit: type=1326 audit(61.984:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 60.996198][ T29] audit: type=1326 audit(61.984:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 61.018923][ T29] audit: type=1326 audit(61.984:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 61.041702][ T29] audit: type=1326 audit(61.984:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 61.064457][ T29] audit: type=1326 audit(61.984:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba954ebe9 code=0x7ffc0000 [ 61.240624][ T7239] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 61.269656][ T7246] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 61.510063][ T7277] loop1: detected capacity change from 0 to 512 [ 61.536930][ T7277] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 61.583699][ T7281] __nla_validate_parse: 5 callbacks suppressed [ 61.583801][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1672'. [ 61.599130][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1672'. [ 61.644719][ T7289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7289 comm=syz.1.1677 [ 61.735682][ T7308] vcan0: tx drop: invalid sa for name 0x1ffffffffffffffd [ 61.818761][ T12] tipc: Subscription rejected, illegal request [ 61.864408][ T7322] program syz.1.1692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.075047][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.083591][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.391853][ T7327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.400294][ T7327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.529641][ T7341] loop4: detected capacity change from 0 to 512 [ 62.582382][ T7341] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1700: corrupted inode contents [ 62.597052][ T7341] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1700: mark_inode_dirty error [ 62.616154][ T7341] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1700: corrupted inode contents [ 62.632678][ T7341] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1700: corrupted inode contents [ 62.644893][ T7341] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1700: mark_inode_dirty error [ 62.656491][ T7341] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1700: corrupted inode contents [ 62.685604][ T7341] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1700: mark_inode_dirty error [ 62.697196][ T7341] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1700: corrupted inode contents [ 62.709647][ T7341] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1700: mark_inode_dirty error [ 62.749648][ T3304] ================================================================== [ 62.757768][ T3304] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 62.765379][ T3304] [ 62.767722][ T3304] read-write to 0xffff888237c25ea8 of 1 bytes by task 7361 on cpu 0: [ 62.775824][ T3304] folio_add_lru+0xa5/0x1f0 [ 62.780361][ T3304] folio_add_lru_vma+0x49/0x70 [ 62.785147][ T3304] do_wp_page+0x1458/0x24e0 [ 62.789662][ T3304] handle_mm_fault+0x77d/0x2c20 [ 62.794522][ T3304] do_user_addr_fault+0x636/0x1090 [ 62.799652][ T3304] exc_page_fault+0x62/0xa0 [ 62.804198][ T3304] asm_exc_page_fault+0x26/0x30 [ 62.809068][ T3304] [ 62.811405][ T3304] read to 0xffff888237c25ea8 of 1 bytes by task 3304 on cpu 1: [ 62.818960][ T3304] __lru_add_drain_all+0x12b/0x3f0 [ 62.824092][ T3304] lru_add_drain_all+0x10/0x20 [ 62.828871][ T3304] invalidate_bdev+0x47/0x70 [ 62.833470][ T3304] ext4_put_super+0x624/0x7d0 [ 62.838148][ T3304] generic_shutdown_super+0xe6/0x210 [ 62.843446][ T3304] kill_block_super+0x2a/0x70 [ 62.848128][ T3304] ext4_kill_sb+0x42/0x80 [ 62.852473][ T3304] deactivate_locked_super+0x72/0x1c0 [ 62.857859][ T3304] deactivate_super+0x97/0xa0 [ 62.862543][ T3304] cleanup_mnt+0x269/0x2e0 [ 62.866997][ T3304] __cleanup_mnt+0x19/0x20 [ 62.871417][ T3304] task_work_run+0x131/0x1a0 [ 62.876009][ T3304] exit_to_user_mode_loop+0xe4/0x100 [ 62.881293][ T3304] do_syscall_64+0x1d6/0x200 [ 62.885893][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.891799][ T3304] [ 62.894119][ T3304] value changed: 0x1c -> 0x1f [ 62.898785][ T3304] [ 62.901107][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 62.907252][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.917148][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.927203][ T3304] ==================================================================