last executing test programs: 2.852672642s ago: executing program 2 (id=1514): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2.724218662s ago: executing program 2 (id=1522): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 2.639332683s ago: executing program 2 (id=1525): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 2.375491474s ago: executing program 1 (id=1527): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x40) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 2.268168055s ago: executing program 1 (id=1529): listen(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 1.718300679s ago: executing program 4 (id=1539): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.698189719s ago: executing program 4 (id=1540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.45598378s ago: executing program 4 (id=1543): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x40) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 590.367596ms ago: executing program 2 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 590.048446ms ago: executing program 4 (id=1546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r3, r2, 0x0) 587.589316ms ago: executing program 1 (id=1548): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x234989b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x18061, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 498.304187ms ago: executing program 4 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) 465.534937ms ago: executing program 3 (id=1551): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e) socket(0x2, 0x80805, 0x0) 465.082787ms ago: executing program 2 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000016c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 456.086257ms ago: executing program 0 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 409.366857ms ago: executing program 3 (id=1554): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 409.212257ms ago: executing program 4 (id=1556): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x6, 0x1fd, {0x8, 0xa}, {0x1, 0x7}, @const={0x0, {0x1, 0x8, 0x1, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 265.401228ms ago: executing program 2 (id=1557): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r0) r1 = getpid() r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 264.034588ms ago: executing program 1 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x5dd93000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 219.917929ms ago: executing program 3 (id=1559): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000900)=""/140, 0x8c}, {0x0}], 0x3) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 202.106449ms ago: executing program 1 (id=1560): sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x2080) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 200.673609ms ago: executing program 0 (id=1561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbff, '\\j'}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 107.603399ms ago: executing program 0 (id=1562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 107.429529ms ago: executing program 1 (id=1563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 107.239909ms ago: executing program 3 (id=1564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 107.053859ms ago: executing program 0 (id=1565): socket$igmp6(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 100.347259ms ago: executing program 0 (id=1566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES8], 0x28}}], 0x2, 0x4000004) 83.903819ms ago: executing program 0 (id=1567): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffc, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x2}]}) 31.028959ms ago: executing program 3 (id=1568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000016c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 0s ago: executing program 3 (id=1569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 27.255001][ T29] audit: type=1400 audit(1762263687.400:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.277920][ T29] audit: type=1400 audit(1762263687.420:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.278654][ T3304] cgroup: Unknown subsys name 'net' [ 27.305506][ T29] audit: type=1400 audit(1762263687.460:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.439140][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.445236][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.554367][ T29] audit: type=1400 audit(1762263687.700:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.579344][ T29] audit: type=1400 audit(1762263687.700:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.597874][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.599922][ T29] audit: type=1400 audit(1762263687.700:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.628787][ T29] audit: type=1400 audit(1762263687.700:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.644648][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.649041][ T29] audit: type=1400 audit(1762263687.700:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.682499][ T29] audit: type=1400 audit(1762263687.700:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.705736][ T29] audit: type=1400 audit(1762263687.760:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.727783][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.788991][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.796069][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.803234][ T3316] bridge_slave_0: entered allmulticast mode [ 28.809604][ T3316] bridge_slave_0: entered promiscuous mode [ 28.816289][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.823380][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.830525][ T3316] bridge_slave_1: entered allmulticast mode [ 28.836918][ T3316] bridge_slave_1: entered promiscuous mode [ 28.873373][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.885617][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.894878][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.946629][ T3316] team0: Port device team_slave_0 added [ 28.957497][ T3316] team0: Port device team_slave_1 added [ 28.988312][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.002705][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.009732][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.035618][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.046368][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.070612][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.077581][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.103556][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.121930][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.153175][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.160240][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.167309][ T3321] bridge_slave_0: entered allmulticast mode [ 29.173654][ T3321] bridge_slave_0: entered promiscuous mode [ 29.191693][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.198749][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.205806][ T3321] bridge_slave_1: entered allmulticast mode [ 29.212108][ T3321] bridge_slave_1: entered promiscuous mode [ 29.220253][ T3316] hsr_slave_0: entered promiscuous mode [ 29.226193][ T3316] hsr_slave_1: entered promiscuous mode [ 29.263511][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.279008][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.286046][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.293370][ T3315] bridge_slave_0: entered allmulticast mode [ 29.299747][ T3315] bridge_slave_0: entered promiscuous mode [ 29.311671][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.326453][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.333623][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.340863][ T3315] bridge_slave_1: entered allmulticast mode [ 29.347202][ T3315] bridge_slave_1: entered promiscuous mode [ 29.364301][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.371390][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.378515][ T3323] bridge_slave_0: entered allmulticast mode [ 29.385418][ T3323] bridge_slave_0: entered promiscuous mode [ 29.406987][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.414134][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.421290][ T3323] bridge_slave_1: entered allmulticast mode [ 29.427561][ T3323] bridge_slave_1: entered promiscuous mode [ 29.440864][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.452313][ T3321] team0: Port device team_slave_0 added [ 29.462444][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.469513][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.476653][ T3314] bridge_slave_0: entered allmulticast mode [ 29.483286][ T3314] bridge_slave_0: entered promiscuous mode [ 29.490373][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.504384][ T3321] team0: Port device team_slave_1 added [ 29.518037][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.527126][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.534198][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.541636][ T3314] bridge_slave_1: entered allmulticast mode [ 29.547903][ T3314] bridge_slave_1: entered promiscuous mode [ 29.565455][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.583987][ T3315] team0: Port device team_slave_0 added [ 29.606104][ T3315] team0: Port device team_slave_1 added [ 29.612713][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.621987][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.628932][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.654848][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.672880][ T3323] team0: Port device team_slave_0 added [ 29.683969][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.697993][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.705013][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.730920][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.746113][ T3323] team0: Port device team_slave_1 added [ 29.756424][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.763382][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.789341][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.800476][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.807400][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.833321][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.875811][ T3314] team0: Port device team_slave_0 added [ 29.882528][ T3314] team0: Port device team_slave_1 added [ 29.894530][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.901492][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.927474][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.938711][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.945706][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.971661][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.996646][ T3321] hsr_slave_0: entered promiscuous mode [ 30.002608][ T3321] hsr_slave_1: entered promiscuous mode [ 30.008330][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 30.014078][ T3321] Cannot create hsr debugfs directory [ 30.028208][ T3315] hsr_slave_0: entered promiscuous mode [ 30.034211][ T3315] hsr_slave_1: entered promiscuous mode [ 30.040010][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.045722][ T3315] Cannot create hsr debugfs directory [ 30.054306][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.061272][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.087228][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.116400][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.123406][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.149384][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.180294][ T3323] hsr_slave_0: entered promiscuous mode [ 30.186290][ T3323] hsr_slave_1: entered promiscuous mode [ 30.192537][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 30.198239][ T3323] Cannot create hsr debugfs directory [ 30.206854][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.217401][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.248530][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.259083][ T3314] hsr_slave_0: entered promiscuous mode [ 30.265022][ T3314] hsr_slave_1: entered promiscuous mode [ 30.270895][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 30.276600][ T3314] Cannot create hsr debugfs directory [ 30.297909][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.411768][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.420340][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.429727][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.441094][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.469917][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.479998][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.488590][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.497236][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.529785][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.550300][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.559801][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.568274][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.577456][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.589885][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.611322][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.618361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.627282][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.640461][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.647520][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.659090][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.667622][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.676890][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.711847][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.720541][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.747425][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.763899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.770971][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.779616][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.794961][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.802024][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.811974][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.819045][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.834815][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.841933][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856979][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.903878][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.931028][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.939577][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.956831][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.970119][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.977250][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.989242][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.996279][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021130][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.037332][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.044406][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.052585][ T3316] veth0_vlan: entered promiscuous mode [ 31.061949][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.092791][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.099932][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.122957][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.132291][ T3316] veth1_vlan: entered promiscuous mode [ 31.189729][ T3316] veth0_macvtap: entered promiscuous mode [ 31.210275][ T3316] veth1_macvtap: entered promiscuous mode [ 31.249603][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.258751][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.267673][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.276132][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.298355][ T176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.324279][ T176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.334931][ T3321] veth0_vlan: entered promiscuous mode [ 31.350022][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.358896][ T3315] veth0_vlan: entered promiscuous mode [ 31.376962][ T176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.387702][ T3321] veth1_vlan: entered promiscuous mode [ 31.409805][ T3315] veth1_vlan: entered promiscuous mode [ 31.428032][ T176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.437783][ T3321] veth0_macvtap: entered promiscuous mode [ 31.448542][ T3321] veth1_macvtap: entered promiscuous mode [ 31.477325][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.492822][ T3315] veth0_macvtap: entered promiscuous mode [ 31.500723][ T3315] veth1_macvtap: entered promiscuous mode [ 31.514533][ T3314] veth0_vlan: entered promiscuous mode [ 31.521863][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.533571][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.547910][ T3314] veth1_vlan: entered promiscuous mode [ 31.565702][ T1874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.577587][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.587958][ T3323] veth0_vlan: entered promiscuous mode [ 31.596167][ T1874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.611963][ T1874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.621431][ T3323] veth1_vlan: entered promiscuous mode [ 31.634541][ T1874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.654801][ T1874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.673053][ T1874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.704379][ T3323] veth0_macvtap: entered promiscuous mode [ 31.716540][ T1874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.730551][ T3323] veth1_macvtap: entered promiscuous mode [ 31.742658][ T3314] veth0_macvtap: entered promiscuous mode [ 31.756425][ T3314] veth1_macvtap: entered promiscuous mode [ 31.762960][ T1874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.793052][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.804418][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.824651][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.841955][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.854401][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890663][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917931][ T3503] loop4: detected capacity change from 0 to 4096 [ 31.935790][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.959487][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.971714][ T2629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.972330][ T3503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.009291][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.029997][ T2629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.042110][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 32.056128][ T3513] veth1_macvtap: left promiscuous mode [ 32.077020][ T2629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.102386][ T2629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.195687][ T3526] $H: renamed from bond0 (while UP) [ 32.223307][ T3526] $H: entered promiscuous mode [ 32.228521][ T3526] bond_slave_0: entered promiscuous mode [ 32.234461][ T3526] bond_slave_1: entered promiscuous mode [ 32.259623][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 32.268063][ T3526] syz.0.19 (3526) used greatest stack depth: 10528 bytes left [ 32.290723][ T3538] loop1: detected capacity change from 0 to 4096 [ 32.320229][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.370623][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 32.370662][ T29] audit: type=1400 audit(1762263692.500:139): avc: denied { add_name } for pid=3536 comm="syz.1.21" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.397207][ T29] audit: type=1400 audit(1762263692.500:140): avc: denied { create } for pid=3536 comm="syz.1.21" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.417237][ T29] audit: type=1400 audit(1762263692.500:141): avc: denied { read write } for pid=3536 comm="syz.1.21" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.439629][ T29] audit: type=1400 audit(1762263692.500:142): avc: denied { open } for pid=3536 comm="syz.1.21" path="/1/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.613994][ T29] audit: type=1400 audit(1762263692.590:143): avc: denied { create } for pid=3549 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.633274][ T29] audit: type=1400 audit(1762263692.590:144): avc: denied { ioctl } for pid=3549 comm="syz.3.23" path="socket:[5400]" dev="sockfs" ino=5400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.657466][ T29] audit: type=1400 audit(1762263692.590:145): avc: denied { setopt } for pid=3549 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.709526][ T29] audit: type=1400 audit(1762263692.830:146): avc: denied { name_bind } for pid=3555 comm="syz.3.25" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.731062][ T29] audit: type=1400 audit(1762263692.830:147): avc: denied { node_bind } for pid=3555 comm="syz.3.25" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.771487][ T3560] program syz.2.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.784924][ T29] audit: type=1400 audit(1762263692.910:148): avc: denied { create } for pid=3557 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 32.798579][ T3560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 32.989384][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 33.102786][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.231501][ T3584] Zero length message leads to an empty skb [ 33.318588][ C1] hrtimer: interrupt took 62961 ns [ 33.344523][ T3594] loop2: detected capacity change from 0 to 2048 [ 33.366175][ T3594] EXT4-fs: Ignoring removed bh option [ 33.433323][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.440521][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.474277][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.544426][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.561189][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.575247][ T3594] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.633675][ T3594] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 33.646167][ T3594] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.646167][ T3594] [ 33.655864][ T3594] EXT4-fs (loop2): Total free blocks count 0 [ 33.661890][ T3594] EXT4-fs (loop2): Free/Dirty block details [ 33.667938][ T3594] EXT4-fs (loop2): free_blocks=2415919104 [ 33.673733][ T3594] EXT4-fs (loop2): dirty_blocks=32 [ 33.678961][ T3594] EXT4-fs (loop2): Block reservation details [ 33.685041][ T3594] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 33.713823][ T3594] syz.2.41 (3594) used greatest stack depth: 9784 bytes left [ 33.764798][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.793793][ T3608] $H: left promiscuous mode [ 33.798684][ T3608] bond_slave_0: left promiscuous mode [ 33.804213][ T3608] bond_slave_1: left promiscuous mode [ 33.852029][ T3608] 8021q: adding VLAN 0 to HW filter on device $H [ 33.866141][ T3608] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.883651][ T3608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.900298][ T152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.929347][ T152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.938448][ T152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.952043][ T152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.041250][ T3634] netlink: 'syz.2.57': attribute type 5 has an invalid length. [ 34.303619][ T3659] netlink: 'syz.1.67': attribute type 30 has an invalid length. [ 34.441718][ T3665] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 34.746382][ T3676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 34.945442][ T3682] bridge_slave_0: left allmulticast mode [ 34.951196][ T3682] bridge_slave_0: left promiscuous mode [ 34.956903][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.990893][ T3682] bridge_slave_1: left allmulticast mode [ 34.996558][ T3682] bridge_slave_1: left promiscuous mode [ 34.998796][ T3687] loop3: detected capacity change from 0 to 512 [ 35.002675][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.034636][ T3687] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.79: error while reading EA inode 32 err=-116 [ 35.052000][ T3682] bond0: (slave bond_slave_0): Releasing backup interface [ 35.060665][ T3687] EXT4-fs (loop3): Remounting filesystem read-only [ 35.077753][ T3687] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.090798][ T3687] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 35.108051][ T3682] bond0: (slave bond_slave_1): Releasing backup interface [ 35.109919][ T3687] EXT4-fs (loop3): 1 orphan inode deleted [ 35.121406][ T3687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.138940][ T3682] team0: Port device team_slave_0 removed [ 35.153544][ T3682] team0: Port device team_slave_1 removed [ 35.160362][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.167336][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.176881][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.197556][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.205007][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.220240][ T3695] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.242583][ T3682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.468055][ T3716] loop0: detected capacity change from 0 to 512 [ 35.499108][ T3716] EXT4-fs: Ignoring removed bh option [ 35.517747][ T3716] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.530852][ T3716] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.539927][ T3716] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 35.562205][ T3716] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 35.588852][ T3716] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 35.607735][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.657914][ T3716] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.669746][ T3716] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 35.680108][ T3716] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 35.731838][ T3716] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 35.761524][ T3716] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.90: bg 0: block 353: padding at end of block bitmap is not set [ 35.795867][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.921075][ T3746] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 35.928787][ T3746] netlink: 244 bytes leftover after parsing attributes in process `syz.2.103'. [ 36.022407][ T3757] loop0: detected capacity change from 0 to 128 [ 36.051905][ T3757] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 36.059768][ T3757] FAT-fs (loop0): Filesystem has been set read-only [ 36.100459][ T3762] ======================================================= [ 36.100459][ T3762] WARNING: The mand mount option has been deprecated and [ 36.100459][ T3762] and is ignored by this kernel. Remove the mand [ 36.100459][ T3762] option from the mount to silence this warning. [ 36.100459][ T3762] ======================================================= [ 36.168709][ T3757] syz.0.106: attempt to access beyond end of device [ 36.168709][ T3757] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.259120][ T3771] netlink: 96 bytes leftover after parsing attributes in process `syz.1.112'. [ 36.897956][ T3803] loop0: detected capacity change from 0 to 512 [ 37.001537][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.052573][ T3803] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.112587][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.225920][ T3814] netlink: 96 bytes leftover after parsing attributes in process `syz.0.129'. [ 37.286594][ T3818] loop0: detected capacity change from 0 to 256 [ 37.297330][ T3818] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.345436][ T3818] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.416818][ T3819] delete_channel: no stack [ 37.499104][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 37.499117][ T29] audit: type=1400 audit(1762263697.650:283): avc: denied { write } for pid=3828 comm="syz.0.137" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.572116][ T29] audit: type=1400 audit(1762263697.650:284): avc: denied { read } for pid=3829 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.591208][ T29] audit: type=1400 audit(1762263697.700:285): avc: denied { map } for pid=3828 comm="syz.0.137" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.615133][ T29] audit: type=1400 audit(1762263697.700:286): avc: denied { read } for pid=3828 comm="syz.0.137" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.638162][ T29] audit: type=1400 audit(1762263697.700:287): avc: denied { open } for pid=3828 comm="syz.0.137" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.692345][ T2629] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.699354][ T29] audit: type=1400 audit(1762263697.850:288): avc: denied { ioctl } for pid=3836 comm="syz.0.140" path="socket:[5850]" dev="sockfs" ino=5850 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.903708][ T3851] vhci_hcd: invalid port number 96 [ 37.908883][ T3851] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 38.057920][ T3855] syz.1.147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.238331][ T29] audit: type=1400 audit(1762263698.380:289): avc: denied { bind } for pid=3863 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.299640][ T3871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3871 comm=syz.1.154 [ 38.318120][ T29] audit: type=1400 audit(1762263698.470:290): avc: denied { bind } for pid=3868 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.378425][ T3877] Illegal XDP return value 187392 on prog (id 146) dev syz_tun, expect packet loss! [ 38.392077][ T29] audit: type=1400 audit(1762263698.540:291): avc: denied { execute } for pid=3878 comm="syz.4.158" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.465514][ T29] audit: type=1400 audit(1762263698.610:292): avc: denied { mount } for pid=3883 comm="syz.2.160" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 38.568690][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 38.607695][ T3899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.614927][ T3899] IPv6: NLM_F_CREATE should be set when creating new route [ 38.622150][ T3899] IPv6: NLM_F_CREATE should be set when creating new route [ 38.669115][ T3899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.016584][ T3928] netlink: 96 bytes leftover after parsing attributes in process `syz.2.176'. [ 39.067061][ T3935] loop1: detected capacity change from 0 to 512 [ 39.075582][ T3935] EXT4-fs: Ignoring removed bh option [ 39.091641][ T3935] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.100787][ T3935] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 39.122625][ T3935] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 39.125785][ T3941] loop4: detected capacity change from 0 to 512 [ 39.165146][ T3935] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 39.173686][ T3935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.186737][ T3941] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.182: bad orphan inode 11862016 [ 39.220101][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.220690][ T3935] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.232703][ T3941] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.286297][ T3953] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 39.297901][ T3953] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 39.316236][ T3953] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 39.360465][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.392974][ T3935] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.180: bg 0: block 353: padding at end of block bitmap is not set [ 39.417849][ T3966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 39.430579][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.482921][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 39.494753][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 39.505008][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 39.514829][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 39.556918][ T3984] serio: Serial port ptm1 [ 39.636988][ T4000] loop4: detected capacity change from 0 to 512 [ 39.644782][ T4000] EXT4-fs: Ignoring removed bh option [ 39.652886][ T4000] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.662012][ T4000] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 39.685413][ T4000] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 39.695133][ T4000] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 39.706008][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.720161][ T3838] Bluetooth: hci0: command 0x1003 tx timeout [ 39.726172][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.739100][ T4000] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.757341][ T4000] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 39.785435][ T4000] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 39.793641][ T4000] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 39.836414][ T4000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.207: bg 0: block 353: padding at end of block bitmap is not set [ 39.878420][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.935433][ T4034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.958391][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 39.971951][ T4037] netlink: 96 bytes leftover after parsing attributes in process `syz.0.222'. [ 40.018358][ T176] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.158163][ T4059] loop0: detected capacity change from 0 to 512 [ 40.183113][ T4059] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.231: bad orphan inode 11862016 [ 40.196220][ T4059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.210241][ T4059] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.276381][ T4069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.302969][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.478195][ T4098] loop2: detected capacity change from 0 to 512 [ 40.502847][ T4098] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.248: bad orphan inode 11862016 [ 40.514567][ T4098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.527385][ T4098] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.617869][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.016441][ T4149] loop1: detected capacity change from 0 to 512 [ 41.031166][ T4149] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.269: inode has both inline data and extents flags [ 41.047514][ T4149] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.269: couldn't read orphan inode 15 (err -117) [ 41.059816][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.214842][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.296530][ T3004] udevd[3004]: worker [3927] terminated by signal 33 (Unknown signal 33) [ 41.305044][ T3004] udevd[3004]: worker [3927] failed while handling '/devices/virtual/block/loop1' [ 41.868213][ T4214] loop4: detected capacity change from 0 to 512 [ 41.878225][ T4214] EXT4-fs: Ignoring removed i_version option [ 41.884443][ T4214] EXT4-fs: Ignoring removed bh option [ 41.907203][ T4218] loop0: detected capacity change from 0 to 512 [ 41.916420][ T4214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.929450][ T4214] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.934585][ T4218] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.312: inode has both inline data and extents flags [ 41.953916][ T4218] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.312: couldn't read orphan inode 15 (err -117) [ 41.967785][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.987854][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.038709][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.038724][ T3838] Bluetooth: hci0: command 0x1003 tx timeout [ 42.181114][ T1046] IPVS: starting estimator thread 0... [ 42.268541][ T4245] IPVS: using max 2544 ests per chain, 127200 per kthread [ 42.300764][ T4256] __nla_validate_parse: 13 callbacks suppressed [ 42.300782][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 42.376915][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 42.399439][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 42.424099][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 42.526009][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 42.526023][ T29] audit: type=1326 audit(1762263702.670:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 42.555589][ T29] audit: type=1326 audit(1762263702.670:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 42.605180][ T4270] loop1: detected capacity change from 0 to 1024 [ 42.613132][ T4270] EXT4-fs: Ignoring removed orlov option [ 42.627095][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.642548][ T4270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.702151][ T29] audit: type=1400 audit(1762263702.840:581): avc: denied { mounton } for pid=4276 comm="syz.0.326" path="/75/file0" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.749872][ T29] audit: type=1400 audit(1762263702.900:582): avc: denied { mount } for pid=4278 comm="syz.2.329" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 42.843042][ T29] audit: type=1400 audit(1762263702.990:583): avc: denied { setopt } for pid=4282 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.902325][ T29] audit: type=1326 audit(1762263703.050:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 42.950064][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.951073][ T29] audit: type=1326 audit(1762263703.070:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 42.982255][ T29] audit: type=1326 audit(1762263703.070:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 43.005763][ T29] audit: type=1326 audit(1762263703.070:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 43.029051][ T29] audit: type=1326 audit(1762263703.080:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 43.082608][ T4291] syzkaller1: entered promiscuous mode [ 43.088116][ T4291] syzkaller1: entered allmulticast mode [ 43.281841][ T4300] bridge0: port 3(batadv1) entered blocking state [ 43.288314][ T4300] bridge0: port 3(batadv1) entered disabled state [ 43.309475][ T4300] batadv1: entered allmulticast mode [ 43.327798][ T4300] batadv1: entered promiscuous mode [ 43.489142][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.343'. [ 43.560129][ T4314] loop3: detected capacity change from 0 to 512 [ 43.575604][ T4314] EXT4-fs: Ignoring removed i_version option [ 43.581673][ T4314] EXT4-fs: Ignoring removed bh option [ 43.600074][ T4314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.612710][ T4314] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.641962][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.782919][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 43.799154][ T2629] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 43.808369][ T2629] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 43.870731][ T4342] loop2: detected capacity change from 0 to 512 [ 43.881099][ T4342] EXT4-fs: Ignoring removed orlov option [ 43.887139][ T4342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.900896][ T4342] EXT4-fs (loop2): 1 orphan inode deleted [ 43.906703][ T4342] EXT4-fs (loop2): 1 truncate cleaned up [ 43.913030][ T4342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.927757][ T4342] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.2.358: path /82/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 43.950121][ T4342] EXT4-fs (loop2): Remounting filesystem read-only [ 43.969277][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.071828][ T4353] process 'syz.3.361' launched '/dev/fd/7' with NULL argv: empty string added [ 44.116667][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'. [ 44.205436][ T4370] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 44.440307][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.464087][ T4397] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.593268][ T4412] loop1: detected capacity change from 0 to 512 [ 44.621365][ T4412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.636403][ T4412] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.674387][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 44.694627][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.752350][ T4431] loop1: detected capacity change from 0 to 512 [ 44.769318][ T4431] EXT4-fs: Ignoring removed i_version option [ 44.775459][ T4431] EXT4-fs: Ignoring removed bh option [ 44.809682][ T4431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.841762][ T4431] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.852819][ T4442] hub 1-0:1.0: USB hub found [ 44.857556][ T4442] hub 1-0:1.0: 8 ports detected [ 44.907008][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.944127][ T4450] loop1: detected capacity change from 0 to 128 [ 45.001418][ T4452] smc: net device bond0 applied user defined pnetid S [ 45.010298][ T4452] smc: net device bond0 erased user defined pnetid S [ 45.025315][ T4454] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 45.053716][ T4456] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.327161][ T4479] bridge0: entered promiscuous mode [ 45.333708][ T4479] bridge0: left promiscuous mode [ 45.357141][ T4483] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.383165][ T4485] loop3: detected capacity change from 0 to 128 [ 45.392636][ T4488] netlink: 'syz.4.420': attribute type 10 has an invalid length. [ 45.622828][ T4511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 45.820556][ T4521] serio: Serial port ttyS3 [ 45.901081][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 46.045198][ T4545] hub 1-0:1.0: USB hub found [ 46.049950][ T4545] hub 1-0:1.0: 8 ports detected [ 46.078412][ T4549] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 46.086260][ T4549] netlink: 'syz.2.444': attribute type 11 has an invalid length. [ 46.111580][ T4553] netlink: 'syz.2.446': attribute type 4 has an invalid length. [ 46.123023][ T4553] netlink: 'syz.2.446': attribute type 4 has an invalid length. [ 46.123276][ T4555] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 46.150987][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.158223][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.199827][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.209756][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.238258][ T4557] xfrm1: entered promiscuous mode [ 46.243440][ T4557] xfrm1: entered allmulticast mode [ 46.248782][ T42] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.257707][ T42] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.266766][ T42] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.278329][ T42] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.348123][ T4568] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 46.441847][ T4585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4585 comm=syz.2.459 [ 46.601297][ T4604] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.619624][ T4606] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 46.662069][ T4612] loop0: detected capacity change from 0 to 1024 [ 46.669115][ T4612] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.680145][ T4612] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.690752][ T4612] JBD2: no valid journal superblock found [ 46.696469][ T4612] EXT4-fs (loop0): Could not load journal inode [ 46.704815][ T4612] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 46.813478][ T4634] loop3: detected capacity change from 0 to 1024 [ 46.869217][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.901588][ T4649] veth0_to_team: entered promiscuous mode [ 46.928579][ T4634] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.483: Allocating blocks 497-513 which overlap fs metadata [ 46.979019][ T4634] EXT4-fs (loop3): pa ffff888107a73070: logic 16, phys. 129, len 24 [ 46.987081][ T4634] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 47.062843][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.084109][ T4672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.093461][ T4672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.123284][ T4679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4679 comm=syz.3.496 [ 47.408237][ T4704] pim6reg1: entered promiscuous mode [ 47.413714][ T4704] pim6reg1: entered allmulticast mode [ 47.683490][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 47.683505][ T29] audit: type=1400 audit(1762263707.830:797): avc: denied { setopt } for pid=4714 comm="syz.1.515" lport=57426 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 47.747779][ T29] audit: type=1400 audit(1762263707.890:798): avc: denied { create } for pid=4720 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.767455][ T29] audit: type=1400 audit(1762263707.890:799): avc: denied { sys_admin } for pid=4720 comm="syz.1.518" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.835945][ T4728] loop7: detected capacity change from 0 to 16384 [ 47.847843][ T29] audit: type=1400 audit(1762263708.000:800): avc: denied { name_bind } for pid=4729 comm="syz.1.522" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 47.905136][ T4733] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 47.911670][ T4733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.919124][ T4733] vhci_hcd vhci_hcd.0: Device attached [ 47.939976][ T4733] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 47.946574][ T4733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.954107][ T4733] vhci_hcd vhci_hcd.0: Device attached [ 47.966301][ T4733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.974459][ T4731] loop7: detected capacity change from 16384 to 0 [ 47.983232][ C1] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 47.996023][ T4733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.008828][ T4733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.018826][ T4733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.073142][ T29] audit: type=1400 audit(1762263708.220:801): avc: denied { setopt } for pid=4742 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.095006][ T4743] __nla_validate_parse: 7 callbacks suppressed [ 48.095028][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 48.095190][ T29] audit: type=1400 audit(1762263708.240:802): avc: denied { write } for pid=4742 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.129682][ T10] vhci_hcd: vhci_device speed not set [ 48.138570][ T4733] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 48.145175][ T4733] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.152759][ T4745] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(18) [ 48.159342][ T4745] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.166928][ T4733] vhci_hcd vhci_hcd.0: Device attached [ 48.166928][ T4745] vhci_hcd vhci_hcd.0: Device attached [ 48.188508][ T10] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 48.203979][ T4744] vhci_hcd: connection closed [ 48.204139][ T4737] vhci_hcd: connection closed [ 48.208966][ T4734] vhci_hcd: connection reset by peer [ 48.219148][ T2629] vhci_hcd: stop threads [ 48.223390][ T2629] vhci_hcd: release socket [ 48.227798][ T2629] vhci_hcd: disconnect device [ 48.232808][ T4747] vhci_hcd: connection closed [ 48.233053][ T2629] vhci_hcd: stop threads [ 48.242063][ T2629] vhci_hcd: release socket [ 48.246475][ T2629] vhci_hcd: disconnect device [ 48.262362][ T2629] vhci_hcd: stop threads [ 48.266696][ T2629] vhci_hcd: release socket [ 48.271147][ T2629] vhci_hcd: disconnect device [ 48.284006][ T2629] vhci_hcd: stop threads [ 48.288261][ T2629] vhci_hcd: release socket [ 48.292699][ T2629] vhci_hcd: disconnect device [ 48.302325][ T29] audit: type=1400 audit(1762263708.450:803): avc: denied { name_bind } for pid=4752 comm="syz.2.527" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.345291][ T29] audit: type=1326 audit(1762263708.490:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23897ef6c9 code=0x7ffc0000 [ 48.368620][ T29] audit: type=1326 audit(1762263708.490:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f23897ef6c9 code=0x7ffc0000 [ 48.391976][ T29] audit: type=1326 audit(1762263708.490:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23897ef6c9 code=0x7ffc0000 [ 48.442368][ T4763] mmap: syz.2.531 (4763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.603928][ T4776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 48.815092][ T4795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.546'. [ 48.838100][ T4802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.550'. [ 48.850649][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 48.870052][ T4806] ip6gre1: entered allmulticast mode [ 48.907543][ T4812] xt_l2tp: unknown flags: 51 [ 48.925020][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 48.958959][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 48.982624][ T4827] loop1: detected capacity change from 0 to 512 [ 49.000374][ T4827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.012979][ T4827] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.042192][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.133475][ T4857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4857 comm=syz.1.573 [ 49.146007][ T4854] loop2: detected capacity change from 0 to 512 [ 49.153802][ T4854] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.161294][ T4854] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.574: EA inode hash validation failed [ 49.174651][ T4854] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.187752][ T4854] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.574: corrupted inode contents [ 49.200068][ T4854] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.574: mark_inode_dirty error [ 49.211525][ T4854] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.574: corrupted inode contents [ 49.223809][ T4854] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.574: mark_inode_dirty error [ 49.235918][ T4854] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.574: mark inode dirty (error -117) [ 49.252324][ T4854] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 49.261492][ T4854] EXT4-fs (loop2): 1 orphan inode deleted [ 49.267828][ T4854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.292729][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.301907][ T4866] loop1: detected capacity change from 0 to 128 [ 49.362215][ T4878] loop9: detected capacity change from 0 to 7 [ 49.368754][ T4878] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.376749][ T4878] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.384752][ T4878] loop9: unable to read partition table [ 49.392464][ T4878] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 49.392464][ T4878] ) failed (rc=-5) [ 49.426165][ T4888] syz.3.586 uses obsolete (PF_INET,SOCK_PACKET) [ 49.469919][ T4896] loop4: detected capacity change from 0 to 128 [ 49.608353][ T4915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.800867][ T2629] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.779445][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 51.337607][ T4968] ip6gre1: left allmulticast mode [ 51.345880][ T42] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.363650][ T42] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.376996][ T42] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.390739][ T42] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.529236][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 51.878556][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.879170][ T3838] Bluetooth: hci0: command 0x1003 tx timeout [ 52.094135][ T5013] loop0: detected capacity change from 0 to 128 [ 52.126379][ T2629] kworker/u8:7: attempt to access beyond end of device [ 52.126379][ T2629] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 52.175311][ T5018] netlink: 176 bytes leftover after parsing attributes in process `syz.0.638'. [ 52.405323][ T5040] loop0: detected capacity change from 0 to 512 [ 52.455205][ T5040] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.649: corrupted in-inode xattr: invalid ea_ino [ 52.472225][ T5040] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.649: couldn't read orphan inode 15 (err -117) [ 52.494042][ T5040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.529786][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.669679][ T5067] loop1: detected capacity change from 0 to 2048 [ 52.710716][ T5067] Alternate GPT is invalid, using primary GPT. [ 52.717077][ T5067] loop1: p2 p3 p7 [ 52.810149][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 52.810164][ T29] audit: type=1400 audit(1762263712.960:931): avc: denied { mount } for pid=5079 comm="syz.1.667" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.872896][ T29] audit: type=1400 audit(1762263712.960:932): avc: denied { mounton } for pid=5079 comm="syz.1.667" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 52.897368][ T29] audit: type=1400 audit(1762263713.040:933): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.069559][ T29] audit: type=1400 audit(1762263713.220:934): avc: denied { sys_module } for pid=5103 comm="syz.0.672" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.152814][ T5118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 53.205396][ T29] audit: type=1400 audit(1762263713.350:935): avc: denied { ioctl } for pid=5123 comm="+}[@" path="socket:[10098]" dev="sockfs" ino=10098 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.229844][ T29] audit: type=1400 audit(1762263713.350:936): avc: denied { create } for pid=5125 comm="syz.0.678" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.259403][ T10] usb 9-1: enqueue for inactive port 0 [ 53.262314][ T29] audit: type=1400 audit(1762263713.380:937): avc: denied { write } for pid=5125 comm="syz.0.678" name="file0" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.264882][ T10] usb 9-1: enqueue for inactive port 0 [ 53.287083][ T29] audit: type=1400 audit(1762263713.380:938): avc: denied { open } for pid=5125 comm="syz.0.678" path="/144/file0" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.315009][ T29] audit: type=1400 audit(1762263713.380:939): avc: denied { ioctl } for pid=5125 comm="syz.0.678" path="/144/file0" dev="tmpfs" ino=761 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.379271][ T10] vhci_hcd: vhci_device speed not set [ 53.412881][ T29] audit: type=1400 audit(1762263713.560:940): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.444721][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 53.445408][ T5139] loop0: detected capacity change from 0 to 1024 [ 53.490857][ T5139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.532797][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.661572][ T5160] sctp: [Deprecated]: syz.4.693 (pid 5160) Use of int in maxseg socket option. [ 53.661572][ T5160] Use struct sctp_assoc_value instead [ 53.843924][ T5178] validate_nla: 3 callbacks suppressed [ 53.843939][ T5178] netlink: 'syz.1.699': attribute type 21 has an invalid length. [ 53.919764][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 53.952520][ T5192] loop3: detected capacity change from 0 to 1024 [ 53.979101][ T5192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.989149][ T5192] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 53.997267][ T5192] System zones: 0-1, 3-36 [ 54.011055][ T5192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.047389][ T5192] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.100463][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.165899][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 54.489161][ T5242] ip6gre1: entered allmulticast mode [ 54.614395][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 54.625583][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 54.792026][ T5284] bridge0: entered promiscuous mode [ 54.799292][ T5284] macsec0: entered promiscuous mode [ 54.806369][ T5284] bridge0: port 4(macsec0) entered blocking state [ 54.812964][ T5284] bridge0: port 4(macsec0) entered disabled state [ 54.820427][ T5284] macsec0: entered allmulticast mode [ 54.825737][ T5284] bridge0: entered allmulticast mode [ 54.832185][ T5284] macsec0: left allmulticast mode [ 54.837301][ T5284] bridge0: left allmulticast mode [ 54.843255][ T5284] bridge0: left promiscuous mode [ 55.075386][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 55.085342][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 55.131260][ T5314] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 55.166491][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 55.781669][ T5375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 55.939069][ T5384] loop3: detected capacity change from 0 to 164 [ 55.949407][ T5384] syz.3.792: attempt to access beyond end of device [ 55.949407][ T5384] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.967839][ T5384] syz.3.792: attempt to access beyond end of device [ 55.967839][ T5384] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.005770][ T5386] loop2: detected capacity change from 0 to 512 [ 56.016365][ T5386] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.179036][ T5413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5413 comm=syz.2.805 [ 56.222649][ T5419] bridge: RTM_NEWNEIGH with invalid ether address [ 56.248970][ T5421] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 56.361438][ T5448] loop4: detected capacity change from 0 to 1024 [ 56.392807][ T5448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.432778][ T5448] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.821: Allocating blocks 449-513 which overlap fs metadata [ 56.448201][ T5447] EXT4-fs (loop4): pa ffff888107a73150: logic 48, phys. 177, len 21 [ 56.456312][ T5447] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 56.460775][ T5461] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 56.479834][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.487341][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.499760][ T5461] bond0: (slave veth9): Enslaving as an active interface with a down link [ 56.525912][ T5461] bond0: (slave dummy0): making interface the new active one [ 56.534579][ T5461] dummy0: entered promiscuous mode [ 56.540034][ T5461] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.754297][ T5500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5500 comm=syz.4.842 [ 56.766753][ T5500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5500 comm=syz.4.842 [ 56.899235][ T5519] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.063638][ T5552] loop4: detected capacity change from 0 to 1024 [ 57.070463][ T5552] EXT4-fs: Ignoring removed nobh option [ 57.076444][ T5552] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.088647][ T5552] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 57.107535][ T5552] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.867: couldn't read orphan inode 11 (err -117) [ 57.120496][ T5552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.136787][ T5552] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.867: Invalid block bitmap block 0 in block_group 0 [ 57.154012][ T5552] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.867: Failed to acquire dquot type 0 [ 57.173981][ T5558] loop0: detected capacity change from 0 to 4096 [ 57.197274][ T5558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.247140][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.327924][ T5573] loop0: detected capacity change from 0 to 512 [ 57.350171][ T5573] EXT4-fs (loop0): too many log groups per flexible block group [ 57.357916][ T5573] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 57.365647][ T5573] EXT4-fs (loop0): mount failed [ 57.428436][ T5579] SELinux: failed to load policy [ 57.983776][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 57.983791][ T29] audit: type=1326 audit(1762263718.130:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.013417][ T29] audit: type=1326 audit(1762263718.130:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.037450][ T29] audit: type=1326 audit(1762263718.130:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.061558][ T29] audit: type=1326 audit(1762263718.130:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.084904][ T29] audit: type=1326 audit(1762263718.130:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.109154][ T29] audit: type=1326 audit(1762263718.130:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.132468][ T29] audit: type=1326 audit(1762263718.130:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.156527][ T29] audit: type=1326 audit(1762263718.130:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.180444][ T29] audit: type=1326 audit(1762263718.130:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.203743][ T29] audit: type=1326 audit(1762263718.130:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aa14f6c9 code=0x7ffc0000 [ 58.284481][ T5625] __nla_validate_parse: 5 callbacks suppressed [ 58.284520][ T5625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.897'. [ 58.301746][ T5625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.897'. [ 58.327730][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 58.353268][ T5633] syz.0.900(5633): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 58.525962][ T3377] IPVS: starting estimator thread 0... [ 58.539640][ T5647] loop0: detected capacity change from 0 to 512 [ 58.559965][ T5647] ------------[ cut here ]------------ [ 58.565457][ T5647] EA inode 11 i_nlink=2 [ 58.565784][ T5647] WARNING: CPU: 1 PID: 5647 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 58.580040][ T5647] Modules linked in: [ 58.583946][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: syz.0.905 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.593646][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.603723][ T5647] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 58.610414][ T5647] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 fa cc 55 86 4c 89 ee e8 07 fa 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 88 e7 b5 03 0f 1f 84 00 00 00 00 00 [ 58.630077][ T5647] RSP: 0018:ffffc90010a9f5a0 EFLAGS: 00010246 [ 58.636143][ T5647] RAX: ab3074bc490e1200 RBX: ffff888107afe468 RCX: 0000000000080000 [ 58.644156][ T5647] RDX: ffffc90001e92000 RSI: 0000000000004389 RDI: 000000000000438a [ 58.652208][ T5647] RBP: 0000000000000002 R08: 0001c90010a9f427 R09: 0000000000000000 [ 58.652722][ T5649] IPVS: using max 2544 ests per chain, 127200 per kthread [ 58.660204][ T5647] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888107afe418 [ 58.660219][ T5647] R13: 000000000000000b R14: ffff888107afe3d0 R15: 0000000000000001 [ 58.660233][ T5647] FS: 00007fb1a8baf6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 58.692262][ T5647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.698876][ T5647] CR2: 00007f4e065812f8 CR3: 000000011a2a2000 CR4: 00000000003506f0 [ 58.706894][ T5647] Call Trace: [ 58.710254][ T5647] [ 58.713192][ T5647] ext4_xattr_set_entry+0x77f/0x1020 [ 58.718583][ T5647] ext4_xattr_ibody_set+0x184/0x3c0 [ 58.723788][ T5647] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 58.729729][ T5647] __ext4_expand_extra_isize+0x246/0x280 [ 58.735369][ T5647] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 58.740884][ T5647] ext4_evict_inode+0x80e/0xd90 [ 58.745824][ T5647] ? __pfx_ext4_evict_inode+0x10/0x10 [ 58.751242][ T5647] evict+0x2e3/0x550 [ 58.755142][ T5647] ? __dquot_initialize+0x146/0x7c0 [ 58.760581][ T5647] iput+0x4ed/0x650 [ 58.764399][ T5647] ext4_process_orphan+0x1a9/0x1c0 [ 58.769633][ T5647] ext4_orphan_cleanup+0x6a8/0xa00 [ 58.774760][ T5647] ext4_fill_super+0x3483/0x3810 [ 58.779729][ T5647] ? snprintf+0x86/0xb0 [ 58.783964][ T5647] ? set_blocksize+0x1a8/0x310 [ 58.788828][ T5647] ? sb_set_blocksize+0xe3/0x100 [ 58.793836][ T5647] ? setup_bdev_super+0x30e/0x370 [ 58.798918][ T5647] ? __pfx_ext4_fill_super+0x10/0x10 [ 58.804210][ T5647] get_tree_bdev_flags+0x291/0x300 [ 58.809402][ T5647] ? __pfx_ext4_fill_super+0x10/0x10 [ 58.814702][ T5647] get_tree_bdev+0x1f/0x30 [ 58.819272][ T5647] ext4_get_tree+0x1c/0x30 [ 58.823680][ T5647] vfs_get_tree+0x57/0x1d0 [ 58.828094][ T5647] do_new_mount+0x24d/0x660 [ 58.832622][ T5647] path_mount+0x4a5/0xb70 [ 58.836962][ T5647] ? user_path_at+0x109/0x130 [ 58.841691][ T5647] __se_sys_mount+0x28c/0x2e0 [ 58.846424][ T5647] __x64_sys_mount+0x67/0x80 [ 58.851047][ T5647] x64_sys_call+0x2b51/0x3000 [ 58.855747][ T5647] do_syscall_64+0xd2/0x200 [ 58.860296][ T5647] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.866381][ T5647] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.872171][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.878146][ T5647] RIP: 0033:0x7fb1aa150e6a [ 58.882598][ T5647] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.902245][ T5647] RSP: 002b:00007fb1a8baee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.910673][ T5647] RAX: ffffffffffffffda RBX: 00007fb1a8baeef0 RCX: 00007fb1aa150e6a [ 58.918656][ T5647] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb1a8baeeb0 [ 58.926695][ T5647] RBP: 0000200000000180 R08: 00007fb1a8baeef0 R09: 0000000001a08700 [ 58.934704][ T5647] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 58.942693][ T5647] R13: 00007fb1a8baeeb0 R14: 0000000000000470 R15: 0000200000000700 [ 58.950757][ T5647] [ 58.953767][ T5647] ---[ end trace 0000000000000000 ]--- [ 58.961609][ T5647] EXT4-fs (loop0): 1 orphan inode deleted [ 58.967896][ T5647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.007625][ T5660] syz_tun: entered allmulticast mode [ 59.013314][ T5658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5658 comm=syz.2.911 [ 59.036507][ T5659] syz_tun: left allmulticast mode [ 59.042501][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.170293][ T5679] loop2: detected capacity change from 0 to 128 [ 59.238920][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 59.248266][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 59.398369][ T5696] 9pnet_fd: Insufficient options for proto=fd [ 59.544946][ T5704] loop1: detected capacity change from 0 to 1024 [ 59.561468][ T5704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.591332][ T5704] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.931: Allocating blocks 497-513 which overlap fs metadata [ 59.619670][ T5704] EXT4-fs (loop1): pa ffff888107a73230: logic 16, phys. 129, len 24 [ 59.627683][ T5704] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 59.681164][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.719203][ T5711] netlink: 'syz.1.932': attribute type 3 has an invalid length. [ 59.834908][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.951281][ T5728] syzkaller1: entered promiscuous mode [ 59.956769][ T5728] syzkaller1: entered allmulticast mode [ 60.043586][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.052835][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.187520][ T5745] loop2: detected capacity change from 0 to 1024 [ 60.206833][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 60.262828][ T5745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.343394][ T5745] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.948: Allocating blocks 449-513 which overlap fs metadata [ 60.383867][ T5744] EXT4-fs (loop2): pa ffff888107a4c690: logic 48, phys. 177, len 21 [ 60.392043][ T5744] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 60.430112][ T5761] loop4: detected capacity change from 0 to 128 [ 60.436673][ T5761] EXT4-fs: Ignoring removed nobh option [ 60.436987][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.454190][ T5761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.495157][ T5761] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.511144][ T5767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 60.556042][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.737979][ T5801] netlink: 64 bytes leftover after parsing attributes in process `syz.4.974'. [ 60.762758][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 60.777488][ T5803] ip6gre1: entered allmulticast mode [ 60.783247][ T5807] xt_l2tp: unknown flags: 51 [ 60.812673][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 60.882444][ T5823] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 61.023483][ T5842] loop0: detected capacity change from 0 to 128 [ 61.525746][ T5890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5890 comm=syz.2.1009 [ 62.924663][ T6039] loop1: detected capacity change from 0 to 128 [ 62.968278][ T12] kworker/u8:0: attempt to access beyond end of device [ 62.968278][ T12] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 62.970634][ T6043] netlink: 'syz.3.1069': attribute type 4 has an invalid length. [ 63.011811][ T6043] netlink: 'syz.3.1069': attribute type 4 has an invalid length. [ 63.044259][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.051432][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.095334][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.098728][ T6049] SELinux: failed to load policy [ 63.106546][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.142319][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.159585][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.173274][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.185558][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.277029][ T6071] loop3: detected capacity change from 0 to 512 [ 63.298032][ T6071] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1082: corrupted in-inode xattr: invalid ea_ino [ 63.320667][ T6071] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1082: couldn't read orphan inode 15 (err -117) [ 63.334228][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.362908][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.607107][ T6102] loop0: detected capacity change from 0 to 2048 [ 63.651342][ T6102] Alternate GPT is invalid, using primary GPT. [ 63.657821][ T6102] loop0: p2 p3 p7 [ 63.939861][ T6119] netlink: 'syz.0.1096': attribute type 4 has an invalid length. [ 63.959754][ T6119] netlink: 'syz.0.1096': attribute type 4 has an invalid length. [ 63.975273][ T6119] __nla_validate_parse: 5 callbacks suppressed [ 63.975289][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 64.382790][ T6141] netlink: 'syz.2.1111': attribute type 21 has an invalid length. [ 64.472161][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 64.491711][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 64.786436][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 65.078499][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.140478][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 65.140493][ T29] audit: type=1326 audit(1762263725.290:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242eecf6c9 code=0x7ffc0000 [ 65.202892][ T29] audit: type=1326 audit(1762263725.330:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f242eecf6c9 code=0x7ffc0000 [ 65.226331][ T29] audit: type=1326 audit(1762263725.330:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242eecf6c9 code=0x7ffc0000 [ 65.249789][ T29] audit: type=1326 audit(1762263725.330:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f242eecf6c9 code=0x7ffc0000 [ 65.273096][ T29] audit: type=1326 audit(1762263725.330:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f242ef01f85 code=0x7ffc0000 [ 65.331824][ T29] audit: type=1326 audit(1762263725.480:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f242eecf6c9 code=0x7ffc0000 [ 65.367279][ T29] audit: type=1326 audit(1762263725.480:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 65.390979][ T29] audit: type=1326 audit(1762263725.480:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f242eecf6c9 code=0x7ffc0000 [ 65.466742][ T6198] loop3: detected capacity change from 0 to 128 [ 65.568028][ T6201] loop2: detected capacity change from 0 to 2048 [ 65.596027][ T12] kworker/u8:0: attempt to access beyond end of device [ 65.596027][ T12] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 65.641029][ T6201] Alternate GPT is invalid, using primary GPT. [ 65.647399][ T6201] loop2: p2 p3 p7 [ 65.736220][ T6190] Set syz1 is full, maxelem 65536 reached [ 65.795314][ T29] audit: type=1326 audit(1762263725.940:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x50000 [ 65.818514][ T29] audit: type=1326 audit(1762263725.940:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x50000 [ 66.009604][ T6218] ip6gre2: entered allmulticast mode [ 66.192182][ T6224] loop4: detected capacity change from 0 to 1024 [ 66.231052][ T6224] EXT4-fs: Ignoring removed orlov option [ 66.263048][ T6224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.334897][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 66.361374][ T6233] team0: Port device team_slave_1 removed [ 66.566306][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.772609][ T6258] loop4: detected capacity change from 0 to 2048 [ 66.872900][ T6247] Set syz1 is full, maxelem 65536 reached [ 66.923267][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 66.935791][ T6258] Alternate GPT is invalid, using primary GPT. [ 66.942230][ T6258] loop4: p2 p3 p7 [ 66.969072][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 67.056265][ T6275] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 67.094760][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 67.097871][ T6277] macsec0: entered promiscuous mode [ 67.109582][ T6277] bridge0: entered promiscuous mode [ 67.115470][ T6277] bridge0: port 1(macsec0) entered blocking state [ 67.121934][ T6277] bridge0: port 1(macsec0) entered disabled state [ 67.128664][ T6277] macsec0: entered allmulticast mode [ 67.134011][ T6277] bridge0: entered allmulticast mode [ 67.140670][ T6277] macsec0: left allmulticast mode [ 67.145705][ T6277] bridge0: left allmulticast mode [ 67.151377][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 67.160597][ T6277] bridge0: left promiscuous mode [ 67.397177][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 67.491004][ T6322] loop4: detected capacity change from 0 to 164 [ 67.499779][ T6322] syz.4.1174: attempt to access beyond end of device [ 67.499779][ T6322] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 67.514240][ T6322] syz.4.1174: attempt to access beyond end of device [ 67.514240][ T6322] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.559536][ T6323] loop3: detected capacity change from 0 to 2048 [ 67.704249][ T6323] Alternate GPT is invalid, using primary GPT. [ 67.710684][ T6323] loop3: p2 p3 p7 [ 67.735459][ T6316] Set syz1 is full, maxelem 65536 reached [ 67.821969][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6337 comm=syz.0.1181 [ 67.838861][ T6339] bridge: RTM_NEWNEIGH with invalid ether address [ 67.858600][ T6342] team0: Port device team_slave_1 removed [ 68.006961][ T6358] loop3: detected capacity change from 0 to 2048 [ 68.062903][ T6358] Alternate GPT is invalid, using primary GPT. [ 68.069268][ T6358] loop3: p2 p3 p7 [ 68.364088][ T6364] loop3: detected capacity change from 0 to 2048 [ 68.420714][ T6364] Alternate GPT is invalid, using primary GPT. [ 68.427161][ T6364] loop3: p2 p3 p7 [ 68.785246][ T6380] loop2: detected capacity change from 0 to 1024 [ 68.822480][ T6380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.847177][ T6380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 68.865620][ T6380] System zones: 0-1, 3-36 [ 68.887597][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.904580][ T6394] loop0: detected capacity change from 0 to 1024 [ 68.949817][ T6380] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.959411][ T6394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.985903][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.002317][ T6394] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1220: Allocating blocks 449-513 which overlap fs metadata [ 69.036813][ T6393] EXT4-fs (loop0): pa ffff888107a732a0: logic 48, phys. 177, len 21 [ 69.045510][ T6393] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 69.082161][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.119237][ T6406] loop3: detected capacity change from 0 to 2048 [ 69.143839][ T6411] loop4: detected capacity change from 0 to 1024 [ 69.152238][ T6406] Alternate GPT is invalid, using primary GPT. [ 69.159156][ T6406] loop3: p2 p3 p7 [ 69.179833][ T6411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.226342][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.311313][ T6427] __nla_validate_parse: 4 callbacks suppressed [ 69.311327][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1224'. [ 69.434650][ T6444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6444 comm=syz.2.1233 [ 69.447220][ T6444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6444 comm=syz.2.1233 [ 69.665909][ T6476] smc: net device bond0 applied user defined pnetid S [ 69.690448][ T6476] smc: net device bond0 erased user defined pnetid S [ 69.769729][ T6483] loop4: detected capacity change from 0 to 4096 [ 69.780272][ T6483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.839029][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.865423][ T6494] bridge0: entered promiscuous mode [ 69.872051][ T6494] bridge0: left promiscuous mode [ 69.941623][ T6504] loop4: detected capacity change from 0 to 512 [ 69.972877][ T6504] EXT4-fs (loop4): too many log groups per flexible block group [ 69.981221][ T6504] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 69.985812][ T6506] SELinux: failed to load policy [ 70.007524][ T6504] EXT4-fs (loop4): mount failed [ 70.024257][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'. [ 70.126930][ T6527] loop2: detected capacity change from 0 to 128 [ 70.189891][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 70.189905][ T29] audit: type=1326 audit(1762263730.340:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23897ef6c9 code=0x7ffc0000 [ 70.220211][ T29] audit: type=1326 audit(1762263730.370:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23897ef6c9 code=0x7ffc0000 [ 70.403512][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 70.465518][ T6564] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 70.485011][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 70.495967][ T6562] xfrm1: entered promiscuous mode [ 70.501123][ T6562] xfrm1: entered allmulticast mode [ 70.506328][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 70.576147][ T6577] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 70.584665][ T6577] netlink: 'syz.3.1287': attribute type 11 has an invalid length. [ 70.587002][ T29] audit: type=1326 audit(1762263730.730:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.592593][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 70.658183][ T29] audit: type=1326 audit(1762263730.770:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.681626][ T29] audit: type=1326 audit(1762263730.770:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.705052][ T29] audit: type=1326 audit(1762263730.770:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.728507][ T29] audit: type=1326 audit(1762263730.770:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.751895][ T29] audit: type=1326 audit(1762263730.780:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.775292][ T29] audit: type=1326 audit(1762263730.780:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.798777][ T29] audit: type=1326 audit(1762263730.780:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0635f6c9 code=0x7ffc0000 [ 70.855701][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 70.888052][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1298'. [ 70.909415][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1298'. [ 71.002297][ T6608] serio: Serial port ttyS3 [ 71.264716][ T6649] loop4: detected capacity change from 0 to 1024 [ 71.271779][ T6649] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.282858][ T6649] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.294089][ T6649] JBD2: no valid journal superblock found [ 71.299880][ T6649] EXT4-fs (loop4): Could not load journal inode [ 71.312083][ T6649] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 71.418383][ T6656] loop1: detected capacity change from 0 to 1024 [ 71.426098][ T6656] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.437652][ T6656] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.448848][ T6656] JBD2: no valid journal superblock found [ 71.454582][ T6656] EXT4-fs (loop1): Could not load journal inode [ 71.457094][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.469657][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.481767][ T6656] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 71.504345][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 71.585819][ T6665] loop2: detected capacity change from 0 to 1024 [ 71.594034][ T6665] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.605104][ T6665] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.615436][ T6665] JBD2: no valid journal superblock found [ 71.621874][ T6665] EXT4-fs (loop2): Could not load journal inode [ 71.634933][ T6665] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 71.802141][ T6675] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 71.808723][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.816276][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 71.824599][ T6675] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 71.831144][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.838746][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 71.845105][ T6675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.854271][ T6675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.862904][ T6675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.871668][ T6675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.881221][ T6675] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 71.887813][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.895407][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 71.901957][ T6675] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 71.908586][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.916155][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 71.922256][ T6682] vhci_hcd: connection closed [ 71.922494][ T6676] vhci_hcd: connection closed [ 71.922533][ T6680] vhci_hcd: connection closed [ 71.927267][ T6678] vhci_hcd: connection closed [ 71.932795][ T12] vhci_hcd: stop threads [ 71.946064][ T12] vhci_hcd: release socket [ 71.950506][ T12] vhci_hcd: disconnect device [ 71.955334][ T12] vhci_hcd: stop threads [ 71.959718][ T12] vhci_hcd: release socket [ 71.964121][ T12] vhci_hcd: disconnect device [ 71.969280][ T12] vhci_hcd: stop threads [ 71.973589][ T12] vhci_hcd: release socket [ 71.977983][ T12] vhci_hcd: disconnect device [ 71.982712][ T12] vhci_hcd: stop threads [ 71.986961][ T12] vhci_hcd: release socket [ 71.991425][ T12] vhci_hcd: disconnect device [ 71.999058][ T10] vhci_hcd: vhci_device speed not set [ 72.015759][ T6685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6685 comm=syz.0.1344 [ 72.049630][ T6689] loop4: detected capacity change from 0 to 128 [ 72.094278][ T6698] loop4: detected capacity change from 0 to 128 [ 72.265861][ T6706] serio: Serial port ttyS3 [ 72.276746][ T6707] loop3: detected capacity change from 0 to 1024 [ 72.283692][ T6707] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.294963][ T6707] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.305458][ T6707] JBD2: no valid journal superblock found [ 72.311229][ T6707] EXT4-fs (loop3): Could not load journal inode [ 72.322508][ T6707] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 72.395939][ T6719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6719 comm=syz.0.1347 [ 72.476122][ T6728] netlink: 'syz.4.1351': attribute type 10 has an invalid length. [ 72.484080][ T6728] netlink: 'syz.4.1351': attribute type 11 has an invalid length. [ 72.774864][ T6748] serio: Serial port ttyS3 [ 72.865046][ T6761] loop3: detected capacity change from 0 to 128 [ 72.891058][ T6763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 72.897609][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.905262][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 72.928846][ T6763] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 72.935442][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.942954][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 72.954283][ T6763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.963618][ T6763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.984783][ T6763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.998840][ T6763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.017049][ T6763] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 73.023644][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.032024][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 73.059871][ T6763] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 73.066606][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.074229][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 73.090178][ T6766] vhci_hcd: connection closed [ 73.090230][ T6764] vhci_hcd: connection closed [ 73.091596][ T6776] vhci_hcd: connection closed [ 73.099808][ T12] vhci_hcd: stop threads [ 73.099942][ T6774] vhci_hcd: connection closed [ 73.104568][ T12] vhci_hcd: release socket [ 73.104584][ T12] vhci_hcd: disconnect device [ 73.117104][ T4990] vhci_hcd: vhci_device speed not set [ 73.130323][ T12] vhci_hcd: stop threads [ 73.134638][ T12] vhci_hcd: release socket [ 73.139072][ T12] vhci_hcd: disconnect device [ 73.154326][ T12] vhci_hcd: stop threads [ 73.159307][ T12] vhci_hcd: release socket [ 73.163741][ T12] vhci_hcd: disconnect device [ 73.201828][ T12] vhci_hcd: stop threads [ 73.206078][ T12] vhci_hcd: release socket [ 73.210525][ T12] vhci_hcd: disconnect device [ 73.566165][ T6822] loop4: detected capacity change from 0 to 128 [ 73.791650][ T6858] loop4: detected capacity change from 0 to 2048 [ 73.817819][ T6858] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 73.827541][ T6858] EXT4-fs (loop4): group descriptors corrupted! [ 74.142189][ T6882] loop9: detected capacity change from 0 to 7 [ 74.148883][ T6882] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.160483][ T6882] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.168313][ T6882] loop9: unable to read partition table [ 74.188730][ T6882] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 74.188730][ T6882] ) failed (rc=-5) [ 74.273924][ T6886] SELinux: failed to load policy [ 74.286328][ T6903] loop4: detected capacity change from 0 to 512 [ 74.293178][ T6901] loop0: detected capacity change from 0 to 512 [ 74.301739][ T6901] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1417: EA inode hash validation failed [ 74.316088][ T6903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.316622][ T6911] netlink: 'syz.2.1420': attribute type 12 has an invalid length. [ 74.328616][ T6901] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.328725][ T6901] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1417: corrupted inode contents [ 74.329292][ T6903] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.379238][ T6901] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.1417: mark_inode_dirty error [ 74.396775][ T6901] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1417: corrupted inode contents [ 74.408956][ T6901] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.1417: mark_inode_dirty error [ 74.422341][ T6901] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1417: mark inode dirty (error -117) [ 74.435332][ T6901] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 74.444442][ T6901] EXT4-fs (loop0): 1 orphan inode deleted [ 74.446397][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.450768][ T6901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.492930][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.568670][ T6924] loop0: detected capacity change from 0 to 2048 [ 74.596578][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.637223][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.691852][ T6943] loop0: detected capacity change from 0 to 128 [ 74.711002][ T6943] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.784884][ T6943] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.856507][ T6957] loop1: detected capacity change from 0 to 128 [ 74.892404][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.904796][ T6957] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.934674][ T6957] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.976243][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.032425][ T6975] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 75.125884][ T6986] __nla_validate_parse: 9 callbacks suppressed [ 75.125899][ T6986] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1454'. [ 75.199661][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1456'. [ 75.216075][ T6995] loop3: detected capacity change from 0 to 1024 [ 75.249163][ T6998] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 75.256993][ T6998] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1459'. [ 75.283403][ T6998] team0: entered promiscuous mode [ 75.288587][ T6998] team_slave_0: entered promiscuous mode [ 75.294490][ T6998] team_slave_1: entered promiscuous mode [ 75.303722][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 75.303733][ T29] audit: type=1400 audit(1762263735.450:1775): avc: denied { read } for pid=7003 comm="syz.4.1462" path="socket:[17252]" dev="sockfs" ino=17252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.308633][ T6998] bridge0: port 4(team0) entered blocking state [ 75.341425][ T6998] bridge0: port 4(team0) entered disabled state [ 75.348787][ T6995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.361358][ T6998] team0: entered allmulticast mode [ 75.366575][ T6998] team_slave_0: entered allmulticast mode [ 75.373110][ T6998] team_slave_1: entered allmulticast mode [ 75.389783][ T6998] bridge0: port 4(team0) entered blocking state [ 75.396151][ T6998] bridge0: port 4(team0) entered forwarding state [ 75.407347][ T29] audit: type=1400 audit(1762263735.560:1776): avc: denied { append } for pid=6994 comm="syz.3.1458" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.441853][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.553386][ T29] audit: type=1326 audit(1762263735.700:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.576943][ T29] audit: type=1326 audit(1762263735.700:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.602490][ T29] audit: type=1326 audit(1762263735.760:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.625844][ T29] audit: type=1326 audit(1762263735.760:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.649420][ T29] audit: type=1326 audit(1762263735.760:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.672888][ T29] audit: type=1326 audit(1762263735.760:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.696252][ T29] audit: type=1326 audit(1762263735.760:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.719725][ T29] audit: type=1326 audit(1762263735.760:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f755312f6c9 code=0x7ffc0000 [ 75.839870][ T7026] tipc: Failed to remove unknown binding: 66,1,1/0:3131161432/3131161434 [ 75.857964][ T7026] tipc: Failed to remove unknown binding: 66,1,1/0:3131161432/3131161434 [ 75.866482][ T7026] tipc: Failed to remove unknown binding: 66,1,1/0:3131161432/3131161434 [ 76.027694][ T7051] SELinux: failed to load policy [ 76.035937][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1484'. [ 76.057504][ T7056] capability: warning: `syz.1.1485' uses deprecated v2 capabilities in a way that may be insecure [ 76.070409][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 76.682073][ T7106] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1504'. [ 76.741633][ T7110] loop4: detected capacity change from 0 to 2048 [ 76.771062][ T7110] Alternate GPT is invalid, using primary GPT. [ 76.777526][ T7110] loop4: p2 p3 p7 [ 76.974328][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1517'. [ 77.088688][ T7141] loop3: detected capacity change from 0 to 8192 [ 77.228096][ T7157] loop4: detected capacity change from 0 to 2048 [ 77.280723][ T7157] Alternate GPT is invalid, using primary GPT. [ 77.287182][ T7157] loop4: p2 p3 p7 [ 77.333810][ T7147] Set syz1 is full, maxelem 65536 reached [ 77.377705][ T7162] loop3: detected capacity change from 0 to 512 [ 77.392433][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.405149][ T7162] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.460232][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.586157][ T7181] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1532'. [ 78.147975][ T7194] loop4: detected capacity change from 0 to 2048 [ 78.201353][ T7194] Alternate GPT is invalid, using primary GPT. [ 78.207663][ T7194] loop4: p2 p3 p7 [ 79.158520][ T3838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.188842][ T7210] loop1: detected capacity change from 0 to 1024 [ 79.195651][ T7210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.214721][ T7210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 79.228541][ T7210] System zones: 0-1, 3-36 [ 79.249696][ T7210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.406888][ T7210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 79.427073][ T7232] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1556'. [ 79.436905][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'. [ 79.440804][ T7226] loop0: detected capacity change from 0 to 2048 [ 79.497402][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.521268][ T7226] Alternate GPT is invalid, using primary GPT. [ 79.527782][ T7226] loop0: p2 p3 p7 [ 79.553353][ T7242] loop1: detected capacity change from 0 to 512 [ 79.562801][ T7242] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1560: error while reading EA inode 32 err=-116 [ 79.575360][ T7242] EXT4-fs (loop1): Remounting filesystem read-only [ 79.582633][ T7242] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.592910][ T7242] EXT4-fs (loop1): 1 orphan inode deleted [ 79.599244][ T7242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.624510][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.686795][ T7258] loop0: detected capacity change from 0 to 512 [ 79.703431][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.733954][ T7258] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.793925][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.846189][ T7267] ================================================================== [ 79.854301][ T7267] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 79.863248][ T7267] [ 79.865568][ T7267] read to 0xffff888116f42420 of 4 bytes by task 7266 on cpu 0: [ 79.873115][ T7267] selinux_inode_permission+0x334/0x740 [ 79.878677][ T7267] security_inode_permission+0x6d/0xb0 [ 79.884150][ T7267] inode_permission+0x106/0x310 [ 79.889020][ T7267] link_path_walk+0x162/0x900 [ 79.893719][ T7267] path_openat+0x1de/0x2170 [ 79.898229][ T7267] do_filp_open+0x109/0x230 [ 79.902740][ T7267] io_openat2+0x272/0x390 [ 79.907078][ T7267] io_openat+0x1b/0x30 [ 79.911154][ T7267] __io_issue_sqe+0xfe/0x2e0 [ 79.915745][ T7267] io_issue_sqe+0x56/0xa80 [ 79.920156][ T7267] io_submit_sqes+0x675/0x1060 [ 79.924920][ T7267] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 79.930466][ T7267] __x64_sys_io_uring_enter+0x78/0x90 [ 79.935838][ T7267] x64_sys_call+0x2df0/0x3000 [ 79.940503][ T7267] do_syscall_64+0xd2/0x200 [ 79.944994][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.950961][ T7267] [ 79.953269][ T7267] write to 0xffff888116f42420 of 4 bytes by task 7267 on cpu 1: [ 79.960882][ T7267] selinux_inode_permission+0x3ac/0x740 [ 79.966426][ T7267] security_inode_permission+0x6d/0xb0 [ 79.971876][ T7267] inode_permission+0x106/0x310 [ 79.976728][ T7267] link_path_walk+0x162/0x900 [ 79.981397][ T7267] path_openat+0x1de/0x2170 [ 79.985885][ T7267] do_filp_open+0x109/0x230 [ 79.990379][ T7267] io_openat2+0x272/0x390 [ 79.994698][ T7267] io_openat+0x1b/0x30 [ 79.998757][ T7267] __io_issue_sqe+0xfe/0x2e0 [ 80.003352][ T7267] io_issue_sqe+0x56/0xa80 [ 80.007766][ T7267] io_wq_submit_work+0x3f7/0x5f0 [ 80.012697][ T7267] io_worker_handle_work+0x44e/0x9b0 [ 80.017987][ T7267] io_wq_worker+0x22e/0x860 [ 80.022487][ T7267] ret_from_fork+0x122/0x1b0 [ 80.027066][ T7267] ret_from_fork_asm+0x1a/0x30 [ 80.031824][ T7267] [ 80.034129][ T7267] value changed: 0x00000000 -> 0x00000001 [ 80.039826][ T7267] [ 80.042132][ T7267] Reported by Kernel Concurrency Sanitizer on: [ 80.048270][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: iou-wrk-7266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.059712][ T7267] Tainted: [W]=WARN [ 80.063499][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.073542][ T7267] ==================================================================