last executing test programs: 13.704485132s ago: executing program 3 (id=408): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 12.750761559s ago: executing program 3 (id=427): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 12.625369709s ago: executing program 3 (id=432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 12.596103242s ago: executing program 3 (id=435): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 12.385170159s ago: executing program 3 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 12.173015117s ago: executing program 3 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 12.172911737s ago: executing program 32 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.579573604s ago: executing program 5 (id=695): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) 5.353026673s ago: executing program 5 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 4.463984206s ago: executing program 5 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) 4.400608941s ago: executing program 5 (id=712): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 4.114902554s ago: executing program 5 (id=717): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) epoll_create1(0x0) inotify_init1(0x0) 3.841345237s ago: executing program 5 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000580), &(0x7f0000000780)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0xf, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x47cdc) 3.841070986s ago: executing program 33 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000580), &(0x7f0000000780)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0xf, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x47cdc) 1.858617878s ago: executing program 2 (id=739): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r4, 0x4004, 0xffff37a4}) 1.765751316s ago: executing program 4 (id=741): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.765514136s ago: executing program 4 (id=742): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 1.742776037s ago: executing program 4 (id=743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.706210671s ago: executing program 4 (id=744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="05", 0x1}], 0x1}, 0x4040845) 1.658509335s ago: executing program 4 (id=746): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 995.525158ms ago: executing program 2 (id=761): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) 792.873575ms ago: executing program 2 (id=764): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', 0x0) 790.715945ms ago: executing program 0 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x9, @local, @rand_addr=' \x01\x00', 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 755.064948ms ago: executing program 2 (id=767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x4, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x7, 0x88, 0x5}, 0x10, 0x113f4, r3, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 707.045442ms ago: executing program 6 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 695.049243ms ago: executing program 2 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 657.917806ms ago: executing program 4 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pread64(r0, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) 657.243296ms ago: executing program 0 (id=781): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) 613.01564ms ago: executing program 0 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 606.9792ms ago: executing program 2 (id=773): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6913026bb", 0x8) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 503.459929ms ago: executing program 6 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 502.930599ms ago: executing program 0 (id=786): r0 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) timer_create(0x9, 0x0, &(0x7f0000000700)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 483.51148ms ago: executing program 6 (id=776): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x14}, &(0x7f0000000540)=0x9c) 447.796793ms ago: executing program 6 (id=778): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) 203.377313ms ago: executing program 6 (id=780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x3827, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x0, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) fsopen(0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_uring_enter(r1, 0x2241, 0x1b86, 0x1, 0x0, 0x0) 162.364326ms ago: executing program 1 (id=782): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 161.772696ms ago: executing program 6 (id=783): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 103.963661ms ago: executing program 1 (id=784): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) 103.475921ms ago: executing program 0 (id=795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x3827, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x0, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) fsopen(0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_uring_enter(r1, 0x2241, 0x1b86, 0x1, 0x0, 0x0) 70.392714ms ago: executing program 1 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 68.123404ms ago: executing program 0 (id=787): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r1) 43.245546ms ago: executing program 1 (id=788): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 27.570027ms ago: executing program 1 (id=789): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x14}, &(0x7f0000000540)=0x9c) 0s ago: executing program 1 (id=790): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 33.799561][ T29] audit: type=1400 audit(1754097728.809:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.800741][ T3291] cgroup: Unknown subsys name 'net' [ 33.822320][ T29] audit: type=1400 audit(1754097728.809:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.849660][ T29] audit: type=1400 audit(1754097728.849:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.101251][ T3291] cgroup: Unknown subsys name 'cpuset' [ 34.107734][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.219361][ T29] audit: type=1400 audit(1754097729.229:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.243904][ T29] audit: type=1400 audit(1754097729.229:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.264478][ T29] audit: type=1400 audit(1754097729.229:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.272738][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.285013][ T29] audit: type=1400 audit(1754097729.239:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.313907][ T29] audit: type=1400 audit(1754097729.239:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.334106][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.338891][ T29] audit: type=1400 audit(1754097729.239:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.370882][ T29] audit: type=1400 audit(1754097729.319:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.450011][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.480336][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.532726][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.574543][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.588358][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.595543][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.602758][ T3302] bridge_slave_0: entered allmulticast mode [ 35.609196][ T3302] bridge_slave_0: entered promiscuous mode [ 35.630652][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.637825][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.645049][ T3302] bridge_slave_1: entered allmulticast mode [ 35.651624][ T3302] bridge_slave_1: entered promiscuous mode [ 35.663377][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.687894][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.695014][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.702306][ T3301] bridge_slave_0: entered allmulticast mode [ 35.708791][ T3301] bridge_slave_0: entered promiscuous mode [ 35.715185][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.722244][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.729387][ T3301] bridge_slave_1: entered allmulticast mode [ 35.736028][ T3301] bridge_slave_1: entered promiscuous mode [ 35.774222][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.781429][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.788610][ T3304] bridge_slave_0: entered allmulticast mode [ 35.795095][ T3304] bridge_slave_0: entered promiscuous mode [ 35.801564][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.808698][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.815891][ T3304] bridge_slave_1: entered allmulticast mode [ 35.822307][ T3304] bridge_slave_1: entered promiscuous mode [ 35.829684][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.853619][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.865864][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.882589][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.903644][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.920738][ T3302] team0: Port device team_slave_0 added [ 35.941572][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.950824][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.957865][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.965110][ T3316] bridge_slave_0: entered allmulticast mode [ 35.971446][ T3316] bridge_slave_0: entered promiscuous mode [ 35.984247][ T3302] team0: Port device team_slave_1 added [ 35.990658][ T3301] team0: Port device team_slave_0 added [ 36.001776][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.008882][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.016058][ T3316] bridge_slave_1: entered allmulticast mode [ 36.022629][ T3316] bridge_slave_1: entered promiscuous mode [ 36.038298][ T3301] team0: Port device team_slave_1 added [ 36.054151][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.061214][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.068381][ T3309] bridge_slave_0: entered allmulticast mode [ 36.074931][ T3309] bridge_slave_0: entered promiscuous mode [ 36.090896][ T3304] team0: Port device team_slave_0 added [ 36.101332][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.108399][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.115709][ T3309] bridge_slave_1: entered allmulticast mode [ 36.122119][ T3309] bridge_slave_1: entered promiscuous mode [ 36.128335][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.135347][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.161706][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.178447][ T3304] team0: Port device team_slave_1 added [ 36.185211][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.198781][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.205743][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.231730][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.242995][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.249930][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.276016][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.292820][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.315900][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.325207][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.332182][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.358270][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.373993][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.380955][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.406898][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.417955][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.424933][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.450961][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.463796][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.492452][ T3316] team0: Port device team_slave_0 added [ 36.510465][ T3309] team0: Port device team_slave_0 added [ 36.516879][ T3316] team0: Port device team_slave_1 added [ 36.537659][ T3309] team0: Port device team_slave_1 added [ 36.555561][ T3302] hsr_slave_0: entered promiscuous mode [ 36.562610][ T3302] hsr_slave_1: entered promiscuous mode [ 36.583429][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.590407][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.616298][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.629098][ T3304] hsr_slave_0: entered promiscuous mode [ 36.635051][ T3304] hsr_slave_1: entered promiscuous mode [ 36.640853][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.646572][ T3304] Cannot create hsr debugfs directory [ 36.659685][ T3301] hsr_slave_0: entered promiscuous mode [ 36.665739][ T3301] hsr_slave_1: entered promiscuous mode [ 36.671546][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 36.677267][ T3301] Cannot create hsr debugfs directory [ 36.687765][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.694830][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.720873][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.743549][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.750506][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.776426][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.789510][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.796554][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.822468][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.876353][ T3316] hsr_slave_0: entered promiscuous mode [ 36.882405][ T3316] hsr_slave_1: entered promiscuous mode [ 36.888341][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.894099][ T3316] Cannot create hsr debugfs directory [ 36.924589][ T3309] hsr_slave_0: entered promiscuous mode [ 36.930523][ T3309] hsr_slave_1: entered promiscuous mode [ 36.936600][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.942360][ T3309] Cannot create hsr debugfs directory [ 37.096688][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.105375][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.116995][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.127800][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.145207][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.154723][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.168906][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.186150][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.196425][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.211773][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.226580][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.235349][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.268580][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.278302][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.290518][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.305094][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.336371][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.360531][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.368695][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.377503][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.386536][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.412724][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.426020][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.444037][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.451202][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.459892][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.466953][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.488657][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.521940][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.529796][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.540861][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.552583][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.563845][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.570927][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.579565][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.586669][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.603400][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.610545][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.620173][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.627238][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.639355][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.646436][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.668906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.675992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.690245][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.731438][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.740992][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.761448][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.782569][ T788] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.789720][ T788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.809877][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.825194][ T788] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.832319][ T788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.848606][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.865185][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.895134][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.923414][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.973329][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.989422][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.017500][ T3316] veth0_vlan: entered promiscuous mode [ 38.051824][ T3316] veth1_vlan: entered promiscuous mode [ 38.104558][ T3301] veth0_vlan: entered promiscuous mode [ 38.121691][ T3316] veth0_macvtap: entered promiscuous mode [ 38.146488][ T3316] veth1_macvtap: entered promiscuous mode [ 38.167111][ T3301] veth1_vlan: entered promiscuous mode [ 38.188672][ T3302] veth0_vlan: entered promiscuous mode [ 38.197339][ T3304] veth0_vlan: entered promiscuous mode [ 38.208057][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.218058][ T3302] veth1_vlan: entered promiscuous mode [ 38.229767][ T3309] veth0_vlan: entered promiscuous mode [ 38.238544][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.249181][ T3309] veth1_vlan: entered promiscuous mode [ 38.258499][ T3301] veth0_macvtap: entered promiscuous mode [ 38.267803][ T1383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.277770][ T3304] veth1_vlan: entered promiscuous mode [ 38.284201][ T3301] veth1_macvtap: entered promiscuous mode [ 38.291403][ T1383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.300119][ T1383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.323396][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.338258][ T3309] veth0_macvtap: entered promiscuous mode [ 38.346032][ T3309] veth1_macvtap: entered promiscuous mode [ 38.353713][ T3304] veth0_macvtap: entered promiscuous mode [ 38.376709][ T3302] veth0_macvtap: entered promiscuous mode [ 38.384481][ T3302] veth1_macvtap: entered promiscuous mode [ 38.391232][ T3304] veth1_macvtap: entered promiscuous mode [ 38.401592][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.410066][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.431680][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.442605][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.453361][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.470586][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.481648][ T269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.497106][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.510209][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.527246][ T269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.546867][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.555103][ T269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.585575][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.611585][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.648528][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.683349][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.696290][ T3474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.723854][ T3474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742874][ T3474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.753938][ T3474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.766215][ T3474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.799617][ T3474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.809089][ T3474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.838955][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 38.838978][ T29] audit: type=1400 audit(1754097733.849:124): avc: denied { create } for pid=3494 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.840666][ T3474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.864412][ T29] audit: type=1400 audit(1754097733.869:125): avc: denied { create } for pid=3493 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.892443][ T29] audit: type=1400 audit(1754097733.869:126): avc: denied { setopt } for pid=3494 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.931456][ T3498] loop3: detected capacity change from 0 to 1024 [ 38.949552][ T3498] ======================================================= [ 38.949552][ T3498] WARNING: The mand mount option has been deprecated and [ 38.949552][ T3498] and is ignored by this kernel. Remove the mand [ 38.949552][ T3498] option from the mount to silence this warning. [ 38.949552][ T3498] ======================================================= [ 39.002770][ T29] audit: type=1400 audit(1754097733.899:127): avc: denied { setopt } for pid=3493 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.022367][ T29] audit: type=1400 audit(1754097733.949:128): avc: denied { write } for pid=3493 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.028118][ T3474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083151][ T3509] process 'syz.1.17' launched './file1' with NULL argv: empty string added [ 39.101148][ T3498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.109729][ T29] audit: type=1400 audit(1754097734.099:129): avc: denied { execute } for pid=3508 comm="syz.1.17" name="file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.125717][ T3498] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.135336][ T29] audit: type=1400 audit(1754097734.119:130): avc: denied { execute_no_trans } for pid=3508 comm="syz.1.17" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.162685][ T3498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.185692][ T29] audit: type=1400 audit(1754097734.139:131): avc: denied { create } for pid=3501 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.205512][ T29] audit: type=1400 audit(1754097734.139:132): avc: denied { mount } for pid=3497 comm="syz.3.12" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.227113][ T29] audit: type=1400 audit(1754097734.169:133): avc: denied { add_name } for pid=3497 comm="syz.3.12" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.248247][ T3519] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19'. [ 39.256943][ T3498] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 39.259096][ T3514] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19'. [ 39.269731][ T3498] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.269731][ T3498] [ 39.288470][ T3498] EXT4-fs (loop3): Total free blocks count 0 [ 39.294579][ T3498] EXT4-fs (loop3): Free/Dirty block details [ 39.300475][ T3498] EXT4-fs (loop3): free_blocks=4293918720 [ 39.306269][ T3498] EXT4-fs (loop3): dirty_blocks=16 [ 39.311457][ T3498] EXT4-fs (loop3): Block reservation details [ 39.317437][ T3498] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 40.440040][ T3498] syz.3.12 (3498) used greatest stack depth: 9896 bytes left [ 42.290402][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.315940][ T3528] loop2: detected capacity change from 0 to 7 [ 42.515388][ T3555] loop4: detected capacity change from 0 to 1024 [ 42.547533][ T3560] loop2: detected capacity change from 0 to 7 [ 42.555483][ T3561] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.35'. [ 42.565606][ T3552] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.35'. [ 42.591190][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.617636][ T3555] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.628808][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 42.638390][ T3555] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 42.655011][ T3555] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 42.667642][ T3555] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.667642][ T3555] [ 42.677776][ T3555] EXT4-fs (loop4): Total free blocks count 0 [ 42.683830][ T3555] EXT4-fs (loop4): Free/Dirty block details [ 42.689788][ T3555] EXT4-fs (loop4): free_blocks=4293918720 [ 42.690567][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 42.695573][ T3555] EXT4-fs (loop4): dirty_blocks=16 [ 42.709402][ T3555] EXT4-fs (loop4): Block reservation details [ 42.715444][ T3555] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 42.747667][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.883752][ T3603] loop2: detected capacity change from 0 to 7 [ 42.974882][ T3618] loop0: detected capacity change from 0 to 1024 [ 42.982584][ T3617] loop2: detected capacity change from 0 to 1024 [ 42.991514][ T3621] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.53'. [ 43.012392][ T3617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.026436][ T3617] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.036906][ T3612] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.53'. [ 43.070702][ T3618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.092962][ T3617] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.121364][ T3617] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 43.133792][ T3617] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.133792][ T3617] [ 43.143554][ T3617] EXT4-fs (loop2): Total free blocks count 0 [ 43.149569][ T3617] EXT4-fs (loop2): Free/Dirty block details [ 43.155760][ T3617] EXT4-fs (loop2): free_blocks=4293918720 [ 43.161589][ T3617] EXT4-fs (loop2): dirty_blocks=16 [ 43.166714][ T3617] EXT4-fs (loop2): Block reservation details [ 43.172981][ T3617] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 43.189324][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.202797][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.338540][ T3667] loop2: detected capacity change from 0 to 7 [ 43.406950][ T3673] loop4: detected capacity change from 0 to 1024 [ 43.441803][ T3677] loop0: detected capacity change from 0 to 1024 [ 43.468254][ T3680] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.71'. [ 43.484042][ T3675] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.71'. [ 43.510509][ T3673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.525512][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.540059][ T3677] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.555589][ T3677] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.572147][ T3677] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 43.584623][ T3677] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.584623][ T3677] [ 43.594355][ T3677] EXT4-fs (loop0): Total free blocks count 0 [ 43.600423][ T3677] EXT4-fs (loop0): Free/Dirty block details [ 43.606353][ T3677] EXT4-fs (loop0): free_blocks=4293918720 [ 43.612349][ T3677] EXT4-fs (loop0): dirty_blocks=16 [ 43.617562][ T3677] EXT4-fs (loop0): Block reservation details [ 43.623593][ T3677] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 43.634604][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.671837][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.850265][ T3715] loop3: detected capacity change from 0 to 1024 [ 43.865000][ T3715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.890997][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 43.891070][ T29] audit: type=1400 audit(1754097738.909:281): avc: denied { write } for pid=3711 comm="syz.0.86" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.935095][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.514139][ T3733] TCP: TCP_TX_DELAY enabled [ 44.525783][ T3734] loop1: detected capacity change from 0 to 1024 [ 44.532643][ T3735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.94'. [ 44.576305][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.590240][ T3734] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.609096][ T29] audit: type=1400 audit(1754097739.619:282): avc: denied { create } for pid=3743 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.634895][ T3734] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.649945][ T3734] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 44.662387][ T3734] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.662387][ T3734] [ 44.672182][ T3734] EXT4-fs (loop1): Total free blocks count 0 [ 44.678170][ T3734] EXT4-fs (loop1): Free/Dirty block details [ 44.684176][ T3734] EXT4-fs (loop1): free_blocks=4293918720 [ 44.689913][ T3734] EXT4-fs (loop1): dirty_blocks=16 [ 44.695109][ T3734] EXT4-fs (loop1): Block reservation details [ 44.701140][ T3734] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 44.773750][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.870700][ T29] audit: type=1400 audit(1754097739.879:283): avc: denied { cpu } for pid=3761 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.941376][ T29] audit: type=1400 audit(1754097739.909:284): avc: denied { read } for pid=3761 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.960536][ T29] audit: type=1400 audit(1754097739.919:285): avc: denied { sqpoll } for pid=3761 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.979819][ T29] audit: type=1400 audit(1754097739.929:286): avc: denied { create } for pid=3764 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 45.015445][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 45.038042][ T3771] netlink: 'syz.1.109': attribute type 5 has an invalid length. [ 45.088956][ T29] audit: type=1400 audit(1754097740.099:287): avc: denied { unmount } for pid=3780 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.186465][ T29] audit: type=1400 audit(1754097740.199:288): avc: denied { create } for pid=3784 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.205793][ T29] audit: type=1400 audit(1754097740.199:289): avc: denied { bind } for pid=3784 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.224852][ T29] audit: type=1400 audit(1754097740.199:290): avc: denied { write } for pid=3784 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.244315][ T3790] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 45.264481][ T3790] SELinux: failed to load policy [ 45.270275][ T3787] loop1: detected capacity change from 0 to 1024 [ 45.399734][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.440586][ T3787] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.455684][ T3806] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.508584][ T3787] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 45.521080][ T3787] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.521080][ T3787] [ 45.530766][ T3787] EXT4-fs (loop1): Total free blocks count 0 [ 45.536833][ T3787] EXT4-fs (loop1): Free/Dirty block details [ 45.542807][ T3787] EXT4-fs (loop1): free_blocks=4293918720 [ 45.548530][ T3787] EXT4-fs (loop1): dirty_blocks=16 [ 45.553677][ T3787] EXT4-fs (loop1): Block reservation details [ 45.559685][ T3787] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 45.642298][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.672778][ T3821] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.695152][ T3824] loop4: detected capacity change from 0 to 1024 [ 45.744617][ T3824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.798462][ T3824] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.866427][ T3824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.892913][ T3824] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 45.905508][ T3824] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.905508][ T3824] [ 45.905656][ T3836] loop0: detected capacity change from 0 to 1024 [ 45.915279][ T3824] EXT4-fs (loop4): Total free blocks count 0 [ 45.927726][ T3824] EXT4-fs (loop4): Free/Dirty block details [ 45.933688][ T3824] EXT4-fs (loop4): free_blocks=4293918720 [ 45.939421][ T3824] EXT4-fs (loop4): dirty_blocks=16 [ 45.942132][ T3836] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.127: Failed to acquire dquot type 0 [ 45.944714][ T3824] EXT4-fs (loop4): Block reservation details [ 45.956742][ T3836] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: [ 45.961822][ T3824] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 45.976254][ T3836] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 45.984947][ T3836] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.127: corrupted inode contents [ 46.000935][ T3836] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.127: mark_inode_dirty error [ 46.013915][ T3836] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.127: corrupted inode contents [ 46.014334][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.042944][ T3836] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.127: mark_inode_dirty error [ 46.068448][ T3836] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.127: corrupted inode contents [ 46.095534][ T3836] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 46.105149][ T3836] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.127: corrupted inode contents [ 46.127409][ T3840] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 16) [ 46.147633][ T3840] SELinux: failed to load policy [ 46.152717][ T3836] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.127: mark_inode_dirty error [ 46.179175][ T3836] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 46.192138][ T3836] EXT4-fs (loop0): 1 truncate cleaned up [ 46.209773][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.267812][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.275402][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.282888][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.345016][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.346594][ T3865] loop4: detected capacity change from 0 to 1024 [ 46.362423][ T3865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.377475][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.385033][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.392575][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.400034][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.407474][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.414950][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.417655][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.422361][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.457565][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.466722][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.524956][ T3883] mmap: syz.2.150 (3883) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.579122][ T3890] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.585789][ T3891] loop4: detected capacity change from 0 to 1024 [ 46.625171][ T3891] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.152: Failed to acquire dquot type 0 [ 46.651528][ T3891] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 46.671242][ T3891] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.152: corrupted inode contents [ 46.690629][ T3891] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.152: mark_inode_dirty error [ 46.711911][ T3891] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.152: corrupted inode contents [ 46.727381][ T3891] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.152: mark_inode_dirty error [ 46.746142][ T3891] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.152: corrupted inode contents [ 46.759651][ T3891] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 46.768321][ T3891] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.152: corrupted inode contents [ 46.781838][ T3891] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.152: mark_inode_dirty error [ 46.793168][ T3891] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 46.803429][ T3891] EXT4-fs (loop4): 1 truncate cleaned up [ 46.809594][ T3891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.902214][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.925525][ T3910] loop0: detected capacity change from 0 to 1024 [ 46.944228][ T3910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.957763][ T3913] loop4: detected capacity change from 0 to 1024 [ 46.964733][ T3913] EXT4-fs: inline encryption not supported [ 46.983407][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.983707][ T3913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.022499][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.033498][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.225947][ T3951] loop1: detected capacity change from 0 to 1024 [ 47.227479][ T3950] loop4: detected capacity change from 0 to 512 [ 47.240285][ T3951] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.170: Failed to acquire dquot type 0 [ 47.253139][ T3951] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.266054][ T3950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.286272][ T3950] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.289267][ T3951] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.170: corrupted inode contents [ 47.315229][ T3951] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.170: mark_inode_dirty error [ 47.336779][ T3951] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.170: corrupted inode contents [ 47.349632][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.359111][ T3951] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.170: mark_inode_dirty error [ 47.374710][ T3951] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.170: corrupted inode contents [ 47.387213][ T3957] loop3: detected capacity change from 0 to 1024 [ 47.394189][ T3957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.401811][ T3951] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 47.410482][ T3951] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.170: corrupted inode contents [ 47.429567][ T3951] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.170: mark_inode_dirty error [ 47.440946][ T3951] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 47.450800][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.464443][ T3951] EXT4-fs (loop1): 1 truncate cleaned up [ 47.470581][ T3951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.499453][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.522754][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.571912][ T3972] loop4: detected capacity change from 0 to 764 [ 47.579956][ T3976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.180'. [ 47.589279][ T3972] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.653863][ T3984] loop0: detected capacity change from 0 to 512 [ 47.665236][ T3986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.665326][ T3988] loop1: detected capacity change from 0 to 164 [ 47.673881][ T3986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.690089][ T3984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.697184][ T3988] +}[@: attempt to access beyond end of device [ 47.697184][ T3988] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 47.703210][ T3984] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.734792][ T3988] +}[@: attempt to access beyond end of device [ 47.734792][ T3988] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 47.759296][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.802283][ T3997] loop2: detected capacity change from 0 to 1024 [ 47.818351][ T3997] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.191: Failed to acquire dquot type 0 [ 47.844081][ T3997] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.881499][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.191: corrupted inode contents [ 47.922013][ T3997] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.191: mark_inode_dirty error [ 47.942098][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.191: corrupted inode contents [ 47.964343][ T3997] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.191: mark_inode_dirty error [ 47.993891][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.191: corrupted inode contents [ 48.010793][ T3997] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 48.019541][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.191: corrupted inode contents [ 48.034785][ T3997] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.191: mark_inode_dirty error [ 48.046001][ T3997] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 48.056339][ T3997] EXT4-fs (loop2): 1 truncate cleaned up [ 48.062384][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.092784][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.133487][ T4003] loop0: detected capacity change from 0 to 764 [ 48.140548][ T4003] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.232271][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 48.244319][ T4014] IPVS: Error joining to the multicast group [ 48.251370][ T4017] loop3: detected capacity change from 0 to 512 [ 48.274301][ T4017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.288061][ T4017] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.308089][ T4026] loop2: detected capacity change from 0 to 164 [ 48.316895][ T4026] +}[@: attempt to access beyond end of device [ 48.316895][ T4026] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.330990][ T4026] +}[@: attempt to access beyond end of device [ 48.330990][ T4026] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.332561][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.373638][ T4031] loop3: detected capacity change from 0 to 1024 [ 48.382827][ T4031] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.204: Failed to acquire dquot type 0 [ 48.394903][ T4031] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.409742][ T4031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.204: corrupted inode contents [ 48.421813][ T4031] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.204: mark_inode_dirty error [ 48.436848][ T4031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.204: corrupted inode contents [ 48.450741][ T4031] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.204: mark_inode_dirty error [ 48.471722][ T4031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.204: corrupted inode contents [ 48.486773][ T4039] loop2: detected capacity change from 0 to 764 [ 48.511728][ T4031] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 48.512074][ T4041] loop4: detected capacity change from 0 to 512 [ 48.526827][ T4031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.204: corrupted inode contents [ 48.528877][ T4041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.551868][ T4041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.551877][ T4039] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.566494][ T4031] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.204: mark_inode_dirty error [ 48.588055][ T4031] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 48.589410][ T4041] EXT4-fs (loop4): 1 truncate cleaned up [ 48.597510][ T4031] EXT4-fs (loop3): 1 truncate cleaned up [ 48.608950][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.611642][ T4041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.644971][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.683898][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.714681][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.729022][ T4050] IPVS: Error joining to the multicast group [ 48.764599][ T4057] syzkaller0: entered promiscuous mode [ 48.765403][ T4058] loop3: detected capacity change from 0 to 164 [ 48.770131][ T4057] syzkaller0: entered allmulticast mode [ 48.787906][ T4057] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 48.798255][ T4058] +}[@: attempt to access beyond end of device [ 48.798255][ T4058] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.814844][ T4058] +}[@: attempt to access beyond end of device [ 48.814844][ T4058] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.888630][ T4071] loop3: detected capacity change from 0 to 512 [ 48.891352][ T4070] loop4: detected capacity change from 0 to 1024 [ 48.903544][ T4070] __quota_error: 81 callbacks suppressed [ 48.903557][ T4070] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 48.918330][ T4070] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 48.921991][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.927758][ T4070] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.221: Failed to acquire dquot type 0 [ 48.950881][ T4071] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.032133][ T4070] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.065993][ T4070] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.221: corrupted inode contents [ 49.077939][ T4070] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.221: mark_inode_dirty error [ 49.111865][ T4070] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.221: corrupted inode contents [ 49.126866][ T4070] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.221: mark_inode_dirty error [ 49.150875][ T4082] loop0: detected capacity change from 0 to 512 [ 49.157257][ T4071] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.171772][ T4070] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.221: corrupted inode contents [ 49.184509][ T4082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.200753][ T4070] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 49.221217][ T4070] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.221: corrupted inode contents [ 49.236911][ T4082] EXT4-fs (loop0): 1 truncate cleaned up [ 49.243112][ T4082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.260697][ T4070] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.221: mark_inode_dirty error [ 49.314465][ T4070] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 49.323957][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.334762][ T4070] EXT4-fs (loop4): 1 truncate cleaned up [ 49.348412][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.348356][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.393094][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 49.402973][ T29] audit: type=1326 audit(1754097744.429:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5b03eb69 code=0x7ffc0000 [ 49.420921][ T4087] IPVS: Error joining to the multicast group [ 49.446711][ T4089] loop2: detected capacity change from 0 to 512 [ 49.456689][ T29] audit: type=1326 audit(1754097744.439:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3f5b03d3d7 code=0x7ffc0000 [ 49.479979][ T29] audit: type=1326 audit(1754097744.439:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5b03eb69 code=0x7ffc0000 [ 49.503268][ T29] audit: type=1326 audit(1754097744.439:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3f5b03eb69 code=0x7ffc0000 [ 49.526549][ T29] audit: type=1326 audit(1754097744.439:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5b03eb69 code=0x7ffc0000 [ 49.549785][ T29] audit: type=1326 audit(1754097744.439:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f5b03d61f code=0x7ffc0000 [ 49.557175][ T4089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.572865][ T29] audit: type=1326 audit(1754097744.439:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5b03eb69 code=0x7ffc0000 [ 49.572899][ T29] audit: type=1326 audit(1754097744.439:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3f5b03eb69 code=0x7ffc0000 [ 49.657159][ T4095] syz.3.230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.666817][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.677383][ T4089] EXT4-fs (loop2): 1 truncate cleaned up [ 49.692363][ T4089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.747339][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.761049][ T4103] syzkaller0: entered promiscuous mode [ 49.766612][ T4103] syzkaller0: entered allmulticast mode [ 49.789018][ T4107] netlink: 288 bytes leftover after parsing attributes in process `syz.2.233'. [ 49.917513][ T4122] syz.1.241 (4122) used greatest stack depth: 9248 bytes left [ 49.970003][ T4132] loop1: detected capacity change from 0 to 512 [ 49.978152][ T4132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.989921][ T4132] EXT4-fs (loop1): 1 truncate cleaned up [ 49.996077][ T4132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.020601][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.057003][ T4140] syzkaller0: entered promiscuous mode [ 50.062669][ T4140] syzkaller0: entered allmulticast mode [ 50.086018][ T4147] veth1_to_bond: entered allmulticast mode [ 50.094225][ T4147] veth1_to_bond: left allmulticast mode [ 50.114252][ T4145] hub 6-0:1.0: USB hub found [ 50.118918][ T4145] hub 6-0:1.0: 8 ports detected [ 50.198500][ T4160] ipip0: entered promiscuous mode [ 50.254847][ T4169] loop3: detected capacity change from 0 to 512 [ 50.278719][ T4169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.293273][ T4169] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.351275][ T4185] team_slave_0: entered promiscuous mode [ 50.356972][ T4185] team_slave_1: entered promiscuous mode [ 50.364105][ T4185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.397178][ T4185] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 50.408168][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.446825][ T4194] sch_fq: defrate 0 ignored. [ 50.552751][ T4217] loop2: detected capacity change from 0 to 512 [ 50.582787][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.596789][ T4217] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.722707][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.859885][ T4268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.886723][ T4268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.303'. [ 50.899529][ T4271] loop1: detected capacity change from 0 to 512 [ 50.907634][ T4268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'. [ 50.925253][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.947137][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.984088][ T4271] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.075039][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.101786][ T4292] 9pnet: Could not find request transport: 0xffffffffffffffff [ 51.137410][ T4298] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 51.137410][ T4298] program syz.3.317 not setting count and/or reply_len properly [ 51.299803][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 51.324815][ T4327] loop3: detected capacity change from 0 to 512 [ 51.331566][ T4326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.327'. [ 51.350482][ T4327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.375843][ T4327] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 51.383892][ T4327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 51.394022][ T4327] System zones: 0-1, 15-15, 18-18, 34-34 [ 51.399964][ T4327] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.406572][ T4327] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.421142][ T4327] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 51.429337][ T4327] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.319: bg 0: block 40: padding at end of block bitmap is not set [ 51.445785][ T4327] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 51.460667][ T4327] EXT4-fs (loop3): 1 truncate cleaned up [ 51.469064][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.503940][ T4342] capability: warning: `syz.1.335' uses 32-bit capabilities (legacy support in use) [ 51.697478][ T4362] rdma_op ffff888119f63d80 conn xmit_rdma 0000000000000000 [ 51.851734][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.928500][ T4392] loop9: detected capacity change from 0 to 7 [ 51.935214][ T4392] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.943656][ T4392] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.951575][ T4392] loop9: unable to read partition table [ 51.957431][ T4392] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 51.957431][ T4392] ) failed (rc=-5) [ 51.966016][ T4395] syz.3.352 uses obsolete (PF_INET,SOCK_PACKET) [ 52.076915][ T4410] loop4: detected capacity change from 0 to 1024 [ 52.084088][ T4410] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 52.112350][ T4416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.368'. [ 52.943029][ T4426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'. [ 52.973212][ T4433] netlink: 96 bytes leftover after parsing attributes in process `syz.1.373'. [ 52.996775][ T4437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4437 comm=syz.1.375 [ 53.012278][ T4437] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 53.043685][ T4437] bond1: (slave bridge1): making interface the new active one [ 53.051652][ T4437] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 53.068677][ T4443] Zero length message leads to an empty skb [ 53.139181][ T4457] loop3: detected capacity change from 0 to 512 [ 53.149057][ T4457] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.157276][ T4459] Driver unsupported XDP return value 0 on prog (id 249) dev N/A, expect packet loss! [ 53.168619][ T4457] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.385: corrupted in-inode xattr: overlapping e_value [ 53.198028][ T4457] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.385: couldn't read orphan inode 15 (err -117) [ 53.225640][ T4457] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.385: path /75/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 53.295774][ C1] hrtimer: interrupt took 60369 ns [ 53.724270][ T4507] netlink: 100 bytes leftover after parsing attributes in process `syz.3.407'. [ 53.748981][ T4509] loop3: detected capacity change from 0 to 128 [ 53.755751][ T4509] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.982688][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 53.982700][ T29] audit: type=1400 audit(1754097748.999:539): avc: denied { setopt } for pid=4519 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.009735][ T29] audit: type=1400 audit(1754097749.029:540): avc: denied { write } for pid=4519 comm="syz.4.410" path="socket:[7585]" dev="sockfs" ino=7585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.143517][ T4528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'. [ 54.260239][ T4531] loop2: detected capacity change from 0 to 8192 [ 54.287966][ T29] audit: type=1400 audit(1754097749.299:541): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.355854][ T29] audit: type=1326 audit(1754097749.369:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7441eb69 code=0x7ffc0000 [ 54.380423][ T4545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.404179][ T29] audit: type=1326 audit(1754097749.389:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda7441eb69 code=0x7ffc0000 [ 54.427662][ T29] audit: type=1326 audit(1754097749.389:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7441eb69 code=0x7ffc0000 [ 54.450976][ T29] audit: type=1326 audit(1754097749.389:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda7441d4d0 code=0x7ffc0000 [ 54.474331][ T29] audit: type=1400 audit(1754097749.389:546): avc: denied { read } for pid=4546 comm="syz.1.423" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.497875][ T29] audit: type=1326 audit(1754097749.389:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7441eb69 code=0x7ffc0000 [ 54.521227][ T29] audit: type=1326 audit(1754097749.389:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda7441eb69 code=0x7ffc0000 [ 54.587340][ T4553] bridge0: entered promiscuous mode [ 54.594710][ T4553] bridge0: port 3(macvlan2) entered blocking state [ 54.601328][ T4553] bridge0: port 3(macvlan2) entered disabled state [ 54.605305][ T4551] loop4: detected capacity change from 0 to 2048 [ 54.609322][ T4553] macvlan2: entered allmulticast mode [ 54.619732][ T4553] bridge0: entered allmulticast mode [ 54.625727][ T4553] macvlan2: left allmulticast mode [ 54.630908][ T4553] bridge0: left allmulticast mode [ 54.637152][ T4553] bridge0: left promiscuous mode [ 54.651867][ T4545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.684927][ T4551] loop4: p1 < > p4 [ 54.689984][ T4551] loop4: p4 size 8388608 extends beyond EOD, truncated [ 54.743097][ T4545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.834901][ T4569] __nla_validate_parse: 1 callbacks suppressed [ 54.834913][ T4569] netlink: 132 bytes leftover after parsing attributes in process `syz.4.434'. [ 54.860378][ T4571] loop3: detected capacity change from 0 to 512 [ 54.891487][ T4545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.909404][ T4571] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 54.919510][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 54.930213][ T4576] bridge_slave_1: left promiscuous mode [ 54.936011][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.940985][ T4571] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.435: iget: bad i_size value: 12154757448730 [ 54.958273][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 54.961117][ T4576] bridge_slave_0: left allmulticast mode [ 54.972932][ T4576] bridge_slave_0: left promiscuous mode [ 54.978764][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.988515][ T4571] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.435: couldn't read orphan inode 13 (err -117) [ 55.065708][ T269] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.073963][ T269] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.086274][ T269] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.094519][ T269] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.279961][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.338323][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.414540][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.429574][ T4625] serio: Serial port ptm0 [ 55.514545][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.562405][ T4617] chnl_net:caif_netlink_parms(): no params data found [ 55.630092][ T51] bridge_slave_1: left allmulticast mode [ 55.635926][ T51] bridge_slave_1: left promiscuous mode [ 55.641719][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.654020][ T51] bridge_slave_0: left allmulticast mode [ 55.659688][ T51] bridge_slave_0: left promiscuous mode [ 55.665690][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.696674][ T4657] loop4: detected capacity change from 0 to 764 [ 55.753253][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.764263][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.775393][ T51] bond0 (unregistering): Released all slaves [ 55.796638][ T4661] geneve2: entered promiscuous mode [ 55.815181][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.822514][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.835002][ T4617] bridge_slave_0: entered allmulticast mode [ 55.842795][ T4617] bridge_slave_0: entered promiscuous mode [ 55.850090][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.857292][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.864694][ T4617] bridge_slave_1: entered allmulticast mode [ 55.871433][ T4617] bridge_slave_1: entered promiscuous mode [ 55.885930][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 55.895081][ T4674] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 55.901648][ T4674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.909151][ T4674] vhci_hcd vhci_hcd.0: Device attached [ 55.938675][ T4675] vhci_hcd: connection closed [ 55.938912][ T3930] vhci_hcd: stop threads [ 55.948625][ T3930] vhci_hcd: release socket [ 55.953192][ T3930] vhci_hcd: disconnect device [ 55.958509][ T51] hsr_slave_0: left promiscuous mode [ 55.964146][ T4682] loop1: detected capacity change from 0 to 256 [ 55.970498][ T51] hsr_slave_1: left promiscuous mode [ 55.971076][ T4682] vfat: Unknown parameter 'kmem_cache_free' [ 55.977194][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.989152][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.997070][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.004556][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.015216][ T51] veth1_macvtap: left promiscuous mode [ 56.021403][ T51] veth0_macvtap: left promiscuous mode [ 56.026914][ T51] veth1_vlan: left promiscuous mode [ 56.032238][ T51] veth0_vlan: left promiscuous mode [ 56.105481][ T4684] loop0: detected capacity change from 0 to 512 [ 56.116798][ T4684] EXT4-fs: Ignoring removed orlov option [ 56.126426][ T51] team0 (unregistering): Port device team_slave_1 removed [ 56.141984][ T51] team0 (unregistering): Port device team_slave_0 removed [ 56.147010][ T4684] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.193313][ T4617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.202459][ T4682] : renamed from vlan0 (while UP) [ 56.231971][ T4617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.271323][ T4617] team0: Port device team_slave_0 added [ 56.286640][ T4617] team0: Port device team_slave_1 added [ 56.311864][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.318883][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.344838][ T4617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.363573][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.370667][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.397054][ T4617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.438372][ T4617] hsr_slave_0: entered promiscuous mode [ 56.447784][ T4617] hsr_slave_1: entered promiscuous mode [ 56.454014][ T4617] debugfs: 'hsr0' already exists in 'hsr' [ 56.459878][ T4617] Cannot create hsr debugfs directory [ 56.661564][ T4617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.681566][ T4617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.699822][ T4617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.725340][ T4617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.807702][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.839748][ T4617] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.860800][ T3927] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.867931][ T3927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.906131][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.913235][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.960406][ T4806] netlink: 56 bytes leftover after parsing attributes in process `syz.2.506'. [ 57.048410][ T4617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.078277][ T4820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 57.087314][ T4820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.510'. [ 57.096187][ T4820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 57.108684][ T4817] loop4: detected capacity change from 0 to 2048 [ 57.116005][ T4820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.510'. [ 57.128769][ T4817] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.151215][ T4817] Invalid ELF header magic: != ELF [ 57.164305][ T4826] loop2: detected capacity change from 0 to 512 [ 57.174969][ T4826] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.198843][ T4826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 57.228297][ T4826] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.511: corrupted in-inode xattr: e_value size too large [ 57.244284][ T4826] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.511: couldn't read orphan inode 15 (err -117) [ 57.272776][ T4836] loop4: detected capacity change from 0 to 128 [ 57.283479][ T4836] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.398200][ T4617] veth0_vlan: entered promiscuous mode [ 57.406634][ T4617] veth1_vlan: entered promiscuous mode [ 57.419017][ T4617] veth0_macvtap: entered promiscuous mode [ 57.451434][ T4617] veth1_macvtap: entered promiscuous mode [ 57.465288][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.490381][ T4864] netlink: 96 bytes leftover after parsing attributes in process `syz.0.523'. [ 57.504883][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.545662][ T4745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.572067][ T4745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.586539][ T4745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.608868][ T4745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.645898][ T4875] loop4: detected capacity change from 0 to 512 [ 57.672768][ T4881] loop1: detected capacity change from 0 to 164 [ 57.689043][ T4875] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.693956][ T4881] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.007100][ T4937] loop4: detected capacity change from 0 to 512 [ 58.015967][ T4933] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 58.023775][ T4933] netlink: 'syz.2.554': attribute type 4 has an invalid length. [ 58.036786][ T4937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.079858][ T4937] EXT4-fs (loop4): 1 orphan inode deleted [ 58.085763][ T4937] EXT4-fs (loop4): 1 truncate cleaned up [ 58.093857][ T4937] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 58.114326][ T4937] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 58.162721][ T4937] EXT4-fs (loop4): Remounting filesystem read-only [ 58.162779][ T4937] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 58.279840][ T4964] netdevsim netdevsim5: Direct firmware load for @ failed with error -2 [ 58.576480][ T4976] SELinux: failed to load policy [ 58.605587][ T4983] atomic_op ffff88811ce0b528 conn xmit_atomic 0000000000000000 [ 58.700221][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.710203][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.748171][ T4745] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.761651][ T4745] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.772970][ T4745] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.781980][ T4745] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.116424][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.178287][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 59.178304][ T29] audit: type=1400 audit(1754097754.189:642): avc: denied { append } for pid=5015 comm="syz.2.589" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.178354][ T5016] random: crng reseeded on system resumption [ 59.207608][ T29] audit: type=1400 audit(1754097754.189:643): avc: denied { open } for pid=5015 comm="syz.2.589" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.291845][ T29] audit: type=1400 audit(1754097754.279:644): avc: denied { write } for pid=5021 comm="syz.2.590" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.315208][ T29] audit: type=1400 audit(1754097754.279:645): avc: denied { ioctl } for pid=5021 comm="syz.2.590" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.390831][ T1035] hid_parser_main: 18 callbacks suppressed [ 59.390876][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.404181][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.412722][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.420260][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.427756][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.435218][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.442796][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.450205][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.457753][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.465308][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.475564][ T1035] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.517844][ T5034] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.517844][ T5034] program syz.5.597 not setting count and/or reply_len properly [ 59.549339][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.616818][ T29] audit: type=1326 audit(1754097754.629:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 59.624587][ T5052] loop2: detected capacity change from 0 to 1024 [ 59.641095][ T29] audit: type=1326 audit(1754097754.629:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 59.669866][ T29] audit: type=1326 audit(1754097754.629:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 59.693162][ T29] audit: type=1326 audit(1754097754.629:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68d3eaeba3 code=0x7ffc0000 [ 59.716460][ T29] audit: type=1326 audit(1754097754.629:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f68d3ead61f code=0x7ffc0000 [ 59.739680][ T29] audit: type=1326 audit(1754097754.639:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f68d3eaebf7 code=0x7ffc0000 [ 59.922168][ T5078] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.922168][ T5078] program syz.2.615 not setting count and/or reply_len properly [ 60.112592][ T5102] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 60.124329][ T5106] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.124329][ T5106] program syz.0.628 not setting count and/or reply_len properly [ 60.125308][ T5108] smc: net device bond0 applied user defined pnetid SYZ2 [ 60.153546][ T5108] smc: net device bond0 erased user defined pnetid SYZ2 [ 60.206769][ T5119] bridge0: port 3(batadv1) entered blocking state [ 60.213305][ T5119] bridge0: port 3(batadv1) entered disabled state [ 60.221496][ T5119] batadv1: entered allmulticast mode [ 60.227428][ T5119] batadv1: entered promiscuous mode [ 60.461181][ T5148] netlink: 'syz.5.649': attribute type 8 has an invalid length. [ 60.556111][ T5162] loop1: detected capacity change from 0 to 128 [ 60.676560][ T5173] loop5: detected capacity change from 0 to 512 [ 60.683538][ T5173] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.704004][ T5178] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.711364][ T5178] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 60.720723][ T4765] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 60.730161][ T4765] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 60.744761][ T5173] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 60.752721][ T5173] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 60.766131][ T5173] System zones: 0-1, 15-15, 18-18, 34-34 [ 60.772015][ T5173] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.778449][ T5173] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.793108][ T5173] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 60.802787][ T5173] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.650: bg 0: block 40: padding at end of block bitmap is not set [ 60.900065][ T5199] loop4: detected capacity change from 0 to 1764 [ 60.948696][ T5173] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 60.986622][ T5173] EXT4-fs (loop5): 1 truncate cleaned up [ 61.303287][ T5216] __nla_validate_parse: 7 callbacks suppressed [ 61.303330][ T5216] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 61.329874][ T5216] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 61.422939][ T5226] loop1: detected capacity change from 0 to 128 [ 61.457202][ T5226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.465157][ T5226] FAT-fs (loop1): Filesystem has been set read-only [ 61.471995][ T5226] syz.1.684: attempt to access beyond end of device [ 61.471995][ T5226] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 61.476480][ T5230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.686'. [ 61.487419][ T5226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.502541][ T5226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.512144][ T5226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.519989][ T5226] syz.1.684: attempt to access beyond end of device [ 61.519989][ T5226] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 61.534220][ T5232] syz.1.684: attempt to access beyond end of device [ 61.534220][ T5232] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 61.547423][ T5232] Buffer I/O error on dev loop1, logical block 2065, async page read [ 61.548015][ T5226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.557984][ T5232] syz.1.684: attempt to access beyond end of device [ 61.557984][ T5232] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 61.563459][ T5226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.584602][ T5232] Buffer I/O error on dev loop1, logical block 2066, async page read [ 61.593099][ T5232] syz.1.684: attempt to access beyond end of device [ 61.593099][ T5232] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 61.606346][ T5232] Buffer I/O error on dev loop1, logical block 2067, async page read [ 61.615881][ T5232] syz.1.684: attempt to access beyond end of device [ 61.615881][ T5232] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 61.629099][ T5232] Buffer I/O error on dev loop1, logical block 2068, async page read [ 61.637479][ T5232] syz.1.684: attempt to access beyond end of device [ 61.637479][ T5232] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 61.650718][ T5232] Buffer I/O error on dev loop1, logical block 2069, async page read [ 61.664721][ T5232] syz.1.684: attempt to access beyond end of device [ 61.664721][ T5232] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 61.678043][ T5232] Buffer I/O error on dev loop1, logical block 2070, async page read [ 61.687449][ T5232] syz.1.684: attempt to access beyond end of device [ 61.687449][ T5232] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 61.700747][ T5232] Buffer I/O error on dev loop1, logical block 2071, async page read [ 61.710310][ T5232] syz.1.684: attempt to access beyond end of device [ 61.710310][ T5232] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 61.723509][ T5232] Buffer I/O error on dev loop1, logical block 2072, async page read [ 61.731868][ T5232] Buffer I/O error on dev loop1, logical block 2065, async page read [ 61.741509][ T5232] Buffer I/O error on dev loop1, logical block 2066, async page read [ 62.464283][ T5269] loop1: detected capacity change from 0 to 8192 [ 62.492779][ T5271] loop4: detected capacity change from 0 to 512 [ 62.502703][ T5271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.522314][ T5271] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.530284][ T5271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 62.566829][ T5271] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.608526][ T5271] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.622805][ T5279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5279 comm=syz.2.705 [ 62.628609][ T5271] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.635282][ T5279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5279 comm=syz.2.705 [ 62.649914][ T5271] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 62.670276][ T5271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.698: bg 0: block 40: padding at end of block bitmap is not set [ 62.725533][ T5271] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 62.733981][ T5285] syzkaller1: entered promiscuous mode [ 62.739689][ T5285] syzkaller1: entered allmulticast mode [ 62.750638][ T5271] EXT4-fs (loop4): 1 truncate cleaned up [ 62.877544][ T5292] bridge0: entered promiscuous mode [ 62.952692][ T5292] bridge0: port 3(macsec1) entered blocking state [ 62.959270][ T5292] bridge0: port 3(macsec1) entered disabled state [ 62.987813][ T5292] macsec1: entered allmulticast mode [ 62.993441][ T5292] bridge0: entered allmulticast mode [ 63.012122][ T5292] macsec1: left allmulticast mode [ 63.017195][ T5292] bridge0: left allmulticast mode [ 63.033574][ T5292] bridge0: left promiscuous mode [ 63.058063][ T5303] loop5: detected capacity change from 0 to 512 [ 63.101254][ T5303] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.162111][ T5303] loop5: detected capacity change from 512 to 0 [ 63.168789][ T5303] EXT4-fs error (device loop5): ext4_write_dquot:6913: comm syz.5.712: Failed to commit dquot type 1 [ 63.183797][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.192456][ T5303] EXT4-fs error (device loop5): ext4_get_inode_loc:4999: inode #18: block 35: comm syz.5.712: unable to read itable block [ 63.205274][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.212109][ T5303] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: IO failure [ 63.221909][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.228723][ T5303] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #18: comm syz.5.712: mark_inode_dirty error [ 63.240250][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.247214][ T5303] EXT4-fs error (device loop5): ext4_get_inode_loc:4999: inode #18: block 35: comm syz.5.712: unable to read itable block [ 63.260167][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.266979][ T5303] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: IO failure [ 63.275904][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.282743][ T5303] EXT4-fs error (device loop5): ext4_truncate:4666: inode #18: comm syz.5.712: mark_inode_dirty error [ 63.293834][ T5303] EXT4-fs (loop5): I/O error while writing superblock [ 63.318145][ T4617] EXT4-fs error (device loop5): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block [ 63.333054][ T4617] EXT4-fs (loop5): I/O error while writing superblock [ 63.339967][ T4617] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: IO failure [ 63.349140][ T4617] EXT4-fs (loop5): I/O error while writing superblock [ 63.356088][ T4617] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 63.369075][ T4617] EXT4-fs (loop5): I/O error while writing superblock [ 63.414327][ T5320] loop2: detected capacity change from 0 to 512 [ 63.421229][ T5320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.431705][ T5320] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.439657][ T5320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 63.447704][ T5320] System zones: 0-1, 15-15, 18-18, 34-34 [ 63.453598][ T5320] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.459966][ T5320] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.474469][ T5320] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 63.481372][ T5320] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.725: bg 0: block 40: padding at end of block bitmap is not set [ 63.495550][ T5320] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.504607][ T5320] EXT4-fs (loop2): 1 truncate cleaned up [ 63.568720][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.635111][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.695786][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.737996][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.842737][ T12] bridge_slave_1: left promiscuous mode [ 63.848457][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.856124][ T12] bridge_slave_0: left allmulticast mode [ 63.861893][ T12] bridge_slave_0: left promiscuous mode [ 63.867590][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.003142][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.014930][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.024819][ T12] bond0 (unregistering): Released all slaves [ 64.038049][ T5347] loop1: detected capacity change from 0 to 128 [ 64.047461][ T5347] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.081648][ T5324] chnl_net:caif_netlink_parms(): no params data found [ 64.098829][ T12] hsr_slave_0: left promiscuous mode [ 64.135257][ T12] hsr_slave_1: left promiscuous mode [ 64.150161][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.157767][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.165905][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.173325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.189762][ T12] veth1_macvtap: left promiscuous mode [ 64.195610][ T12] veth0_macvtap: left promiscuous mode [ 64.201315][ T12] veth1_vlan: left promiscuous mode [ 64.206607][ T12] veth0_vlan: left promiscuous mode [ 64.323735][ T12] team0 (unregistering): Port device team_slave_1 removed [ 64.333746][ T12] team0 (unregistering): Port device team_slave_0 removed [ 64.404837][ T5324] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.412035][ T5324] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.424556][ T5324] bridge_slave_0: entered allmulticast mode [ 64.431083][ T5324] bridge_slave_0: entered promiscuous mode [ 64.438399][ T5324] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445486][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.452607][ T5324] bridge_slave_1: entered allmulticast mode [ 64.459001][ T5324] bridge_slave_1: entered promiscuous mode [ 64.489632][ T5324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.501465][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 64.501481][ T29] audit: type=1400 audit(1754097759.519:791): avc: denied { ioctl } for pid=5360 comm="syz.2.730" path="socket:[11470]" dev="sockfs" ino=11470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.535161][ T5324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.600666][ T5324] team0: Port device team_slave_0 added [ 64.606636][ T29] audit: type=1326 audit(1754097759.609:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.630039][ T29] audit: type=1326 audit(1754097759.609:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.653514][ T29] audit: type=1326 audit(1754097759.609:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.676949][ T29] audit: type=1326 audit(1754097759.619:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.700295][ T29] audit: type=1326 audit(1754097759.619:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.702097][ T5324] team0: Port device team_slave_1 added [ 64.734978][ T29] audit: type=1326 audit(1754097759.699:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.758359][ T29] audit: type=1326 audit(1754097759.699:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.840664][ T29] audit: type=1326 audit(1754097759.779:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.863725][ T29] audit: type=1326 audit(1754097759.779:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d3eaeb69 code=0x7ffc0000 [ 64.951785][ T5324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.958777][ T5324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.984749][ T5324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.011282][ T5324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.018451][ T5324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.044600][ T5324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.080404][ T5324] hsr_slave_0: entered promiscuous mode [ 65.086523][ T5324] hsr_slave_1: entered promiscuous mode [ 65.097177][ T5324] debugfs: 'hsr0' already exists in 'hsr' [ 65.103057][ T5324] Cannot create hsr debugfs directory [ 65.183614][ T5372] loop0: detected capacity change from 0 to 512 [ 65.186714][ T5324] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.196811][ T5372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.207511][ T5324] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.211315][ T5372] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.222236][ T5372] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 65.230359][ T5372] System zones: 0-1, 15-15, 18-18, 34-34 [ 65.232404][ T5324] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.236358][ T5372] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.249277][ T5372] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 65.251512][ T5324] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.263924][ T5372] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 65.277696][ T5372] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.732: bg 0: block 40: padding at end of block bitmap is not set [ 65.294041][ T5372] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 65.308190][ T5324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.310936][ T5372] EXT4-fs (loop0): 1 truncate cleaned up [ 65.319809][ T5324] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.331537][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.338688][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.351997][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.359227][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.429371][ T5324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.552270][ T5324] veth0_vlan: entered promiscuous mode [ 65.560054][ T5324] veth1_vlan: entered promiscuous mode [ 65.589560][ T5324] veth0_macvtap: entered promiscuous mode [ 65.600621][ T5324] veth1_macvtap: entered promiscuous mode [ 65.614334][ T5324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.625558][ T5324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.638766][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.655965][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.672812][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.682974][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.745688][ T5420] SELinux: ebitmap: truncated map [ 65.751375][ T5420] SELinux: failed to load policy [ 65.769374][ T5431] loop4: detected capacity change from 0 to 128 [ 65.776508][ T5431] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.284799][ T5457] serio: Serial port ptm0 [ 66.484648][ T5469] serio: Serial port ptm0 [ 66.864993][ T5507] loop2: detected capacity change from 0 to 1024 [ 66.879575][ T5507] EXT4-fs: Ignoring removed oldalloc option [ 66.885577][ T5507] EXT4-fs: Ignoring removed bh option [ 67.297438][ T5539] loop6: detected capacity change from 0 to 128 [ 67.306537][ T5539] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.323413][ T5540] loop1: detected capacity change from 0 to 764 [ 67.591333][ T4765] ================================================================== [ 67.599464][ T4765] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 67.608953][ T4765] [ 67.611282][ T4765] write to 0xffff88811ebd2205 of 2 bytes by task 5539 on cpu 0: [ 67.618924][ T4765] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 67.624843][ T4765] generic_perform_write+0x2c2/0x490 [ 67.630140][ T4765] __generic_file_write_iter+0x9e/0x120 [ 67.635704][ T4765] generic_file_write_iter+0x8d/0x2f0 [ 67.641101][ T4765] iter_file_splice_write+0x5ef/0x970 [ 67.646486][ T4765] direct_splice_actor+0x153/0x2a0 [ 67.651602][ T4765] splice_direct_to_actor+0x30f/0x680 [ 67.656985][ T4765] do_splice_direct+0xda/0x150 [ 67.661761][ T4765] do_sendfile+0x380/0x650 [ 67.666211][ T4765] __x64_sys_sendfile64+0x105/0x150 [ 67.671433][ T4765] x64_sys_call+0x2bb0/0x2ff0 [ 67.676121][ T4765] do_syscall_64+0xd2/0x200 [ 67.680636][ T4765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.686534][ T4765] [ 67.688853][ T4765] read to 0xffff88811ebd2200 of 512 bytes by task 4765 on cpu 1: [ 67.696574][ T4765] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 67.702480][ T4765] generic_perform_write+0x2c2/0x490 [ 67.707766][ T4765] shmem_file_write_iter+0xc5/0xf0 [ 67.712877][ T4765] lo_rw_aio+0x6a0/0x760 [ 67.717131][ T4765] loop_process_work+0x52d/0xa60 [ 67.722083][ T4765] loop_workfn+0x31/0x40 [ 67.726340][ T4765] process_scheduled_works+0x4ce/0x9d0 [ 67.731810][ T4765] worker_thread+0x582/0x770 [ 67.736409][ T4765] kthread+0x489/0x510 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 67.740483][ T4765] ret_from_fork+0xdd/0x150 [ 67.744990][ T4765] ret_from_fork_asm+0x1a/0x30 [ 67.749754][ T4765] [ 67.752079][ T4765] Reported by Kernel Concurrency Sanitizer on: [ 67.758247][ T4765] CPU: 1 UID: 0 PID: 4765 Comm: kworker/u8:55 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 67.770575][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.780632][ T4765] Workqueue: loop6 loop_workfn [ 67.785412][ T4765] ================================================================== [ 68.216953][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.226142][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.235959][ T4765] bond0 (unregistering): Released all slaves [ 68.314094][ T4765] hsr_slave_0: left promiscuous mode [ 68.319839][ T4765] hsr_slave_1: left promiscuous mode [ 68.325531][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.332939][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.362613][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 68.372158][ T4765] team0 (unregistering): Port device team_slave_0 removed [ 68.693319][ T4765] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.742248][ T4765] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.812032][ T4765] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.904338][ T4765] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.025577][ T4765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.063113][ T4765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.113498][ T4765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.163184][ T4765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.215404][ T4765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.243326][ T4765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.293913][ T4765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.333209][ T4765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.404398][ T4765] bridge_slave_1: left allmulticast mode [ 69.410045][ T4765] bridge_slave_1: left promiscuous mode [ 69.415802][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.423500][ T4765] bridge_slave_0: left allmulticast mode [ 69.429140][ T4765] bridge_slave_0: left promiscuous mode [ 69.434920][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.442944][ T4765] batadv1: left allmulticast mode [ 69.448057][ T4765] batadv1: left promiscuous mode [ 69.453120][ T4765] bridge0: port 3(batadv1) entered disabled state [ 69.460000][ T4765] bridge_slave_1: left promiscuous mode [ 69.465850][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.473656][ T4765] bridge_slave_0: left allmulticast mode [ 69.479298][ T4765] bridge_slave_0: left promiscuous mode [ 69.484973][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.492923][ T4765] bridge_slave_1: left allmulticast mode [ 69.498553][ T4765] bridge_slave_1: left promiscuous mode [ 69.504236][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.511865][ T4765] bridge_slave_0: left allmulticast mode [ 69.517495][ T4765] bridge_slave_0: left promiscuous mode [ 69.523141][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.662261][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.672027][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.681454][ T4765] bond0 (unregistering): Released all slaves [ 69.782649][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.792290][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.801591][ T4765] bond0 (unregistering): Released all slaves [ 69.862642][ T4765] bond1 (unregistering): (slave bridge1): Releasing active interface [ 69.932570][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.942983][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.952409][ T4765] bond0 (unregistering): Released all slaves [ 69.960721][ T4765] bond1 (unregistering): Released all slaves [ 70.029620][ T4765] hsr_slave_0: left promiscuous mode [ 70.035330][ T4765] hsr_slave_1: left promiscuous mode [ 70.040954][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.048323][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.055758][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.063203][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.073418][ T4765] hsr_slave_0: left promiscuous mode [ 70.079012][ T4765] hsr_slave_1: left promiscuous mode [ 70.084574][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.091965][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.099385][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.106790][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.115749][ T4765] hsr_slave_0: left promiscuous mode [ 70.121653][ T4765] hsr_slave_1: left promiscuous mode [ 70.127221][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.134611][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.142157][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.149657][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.164965][ T4765] team_slave_0: left promiscuous mode [ 70.170344][ T4765] team_slave_1: left promiscuous mode [ 70.175777][ T4765] veth1_macvtap: left promiscuous mode [ 70.181502][ T4765] veth0_macvtap: left promiscuous mode [ 70.186978][ T4765] veth1_vlan: left promiscuous mode [ 70.192463][ T4765] veth0_vlan: left promiscuous mode [ 70.198192][ T4765] veth1_macvtap: left promiscuous mode [ 70.203692][ T4765] veth0_macvtap: left promiscuous mode [ 70.209240][ T4765] veth1_vlan: left promiscuous mode [ 70.214775][ T4765] veth0_vlan: left promiscuous mode [ 70.220434][ T4765] veth1_macvtap: left promiscuous mode [ 70.226069][ T4765] veth0_macvtap: left promiscuous mode [ 70.231824][ T4765] veth1_vlan: left promiscuous mode [ 70.237045][ T4765] veth0_vlan: left promiscuous mode [ 70.362809][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 70.372635][ T4765] team0 (unregistering): Port device team_slave_0 removed [ 70.425444][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 70.435027][ T4765] team0 (unregistering): Port device team_slave_0 removed [ 70.484508][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 70.493770][ T4765] team0 (unregistering): Port device team_slave_0 removed [ 71.213528][ T4765] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.263346][ T4765] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.323421][ T4765] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.363152][ T4765] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.423601][ T4765] bridge_slave_1: left allmulticast mode [ 71.429334][ T4765] bridge_slave_1: left promiscuous mode [ 71.435075][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.442757][ T4765] bridge_slave_0: left allmulticast mode [ 71.448474][ T4765] bridge_slave_0: left promiscuous mode [ 71.454179][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.552809][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.562416][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.571786][ T4765] bond0 (unregistering): Released all slaves [ 71.604138][ T4765] hsr_slave_0: left promiscuous mode [ 71.609734][ T4765] hsr_slave_1: left promiscuous mode [ 71.615358][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.622747][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.630324][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.637788][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.647574][ T4765] veth1_macvtap: left promiscuous mode [ 71.653071][ T4765] veth0_macvtap: left promiscuous mode [ 71.658600][ T4765] veth1_vlan: left promiscuous mode [ 71.663917][ T4765] veth0_vlan: left promiscuous mode [ 71.721626][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 71.731293][ T4765] team0 (unregistering): Port device team_slave_0 removed