last executing test programs: 5.183946372s ago: executing program 3 (id=852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x8c}}, './file0\x00'}) 5.164682374s ago: executing program 3 (id=853): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0), 0x4) listen(r0, 0x0) 5.145527426s ago: executing program 3 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a029b30095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x92c, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1a, 0x20000002, 0x0) 5.108080759s ago: executing program 3 (id=855): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b117e00000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5.107636359s ago: executing program 3 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) kexec_load(0x6, 0x0, 0x0, 0x2a0000) 5.087147811s ago: executing program 3 (id=857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) ptrace(0x10, 0x1) 967.590001ms ago: executing program 2 (id=1040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xe}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000580)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 922.383885ms ago: executing program 2 (id=1042): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r1 = syz_io_uring_setup(0x4072, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="5f894e", 0x3}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 885.226759ms ago: executing program 2 (id=1044): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700)={[{@grpquota}, {@noload}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)={0x5, 0x5, 0x3, 0x0, 0x66, 0x7811bdba, 0x0, 0x0, 0xfffffff9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) 760.2726ms ago: executing program 2 (id=1048): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48}, {0x6}]}, 0x10) r2 = dup(r0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newqdisc={0x24}, 0x24}}, 0x0) 702.492025ms ago: executing program 2 (id=1051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 671.892598ms ago: executing program 2 (id=1053): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 585.924636ms ago: executing program 0 (id=1059): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 433.13364ms ago: executing program 4 (id=1066): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES64=r2], 0x40}}, 0x4004040) 319.477501ms ago: executing program 0 (id=1068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) setpriority(0x2, 0x0, 0xfffffffffffff23c) 311.099052ms ago: executing program 1 (id=1069): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 296.179003ms ago: executing program 0 (id=1070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 295.518553ms ago: executing program 4 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 177.117594ms ago: executing program 4 (id=1072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xe}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000580)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 133.286858ms ago: executing program 4 (id=1073): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700)={[{@grpquota}, {@noload}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)={0x5, 0x5, 0x3, 0x0, 0x66, 0x7811bdba, 0x0, 0x0, 0xfffffff9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) 132.203628ms ago: executing program 0 (id=1083): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 131.759398ms ago: executing program 1 (id=1074): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x33) 109.59116ms ago: executing program 0 (id=1075): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000000007f000001000000050004000200"], 0x24}}, 0x0) 94.889901ms ago: executing program 1 (id=1076): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r1 = syz_io_uring_setup(0x4072, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="5f894e", 0x3}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 58.360275ms ago: executing program 1 (id=1077): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) 58.091145ms ago: executing program 4 (id=1078): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48}, {0x6}]}, 0x10) r2 = dup(r0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newqdisc={0x24}, 0x24}}, 0x0) 41.794686ms ago: executing program 1 (id=1079): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 39.169207ms ago: executing program 4 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 27.294198ms ago: executing program 0 (id=1081): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x4d, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 0s ago: executing program 1 (id=1082): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0xf0ff1f, 0x0, 0xd6071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 34.359327][ T29] audit: type=1400 audit(1728464036.838:81): avc: denied { mounton } for pid=3257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.360571][ T3257] cgroup: Unknown subsys name 'net' [ 34.382089][ T29] audit: type=1400 audit(1728464036.838:82): avc: denied { mount } for pid=3257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.409559][ T29] audit: type=1400 audit(1728464036.858:83): avc: denied { unmount } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.429419][ T29] audit: type=1400 audit(1728464036.868:84): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.549856][ T3257] cgroup: Unknown subsys name 'cpuset' [ 34.555999][ T3257] cgroup: Unknown subsys name 'rlimit' [ 34.684121][ T29] audit: type=1400 audit(1728464037.158:85): avc: denied { setattr } for pid=3257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.709745][ T29] audit: type=1400 audit(1728464037.158:86): avc: denied { create } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.730296][ T29] audit: type=1400 audit(1728464037.158:87): avc: denied { write } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.739305][ T3260] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.750641][ T29] audit: type=1400 audit(1728464037.158:88): avc: denied { read } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.779471][ T29] audit: type=1400 audit(1728464037.168:89): avc: denied { mounton } for pid=3257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.804348][ T29] audit: type=1400 audit(1728464037.168:90): avc: denied { mount } for pid=3257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.836603][ T3257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.546216][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 36.562252][ T3278] chnl_net:caif_netlink_parms(): no params data found [ 36.576950][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 36.585885][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 36.596680][ T3272] chnl_net:caif_netlink_parms(): no params data found [ 36.665199][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.672376][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.679650][ T3267] bridge_slave_0: entered allmulticast mode [ 36.685919][ T3267] bridge_slave_0: entered promiscuous mode [ 36.713085][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.720182][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.727484][ T3267] bridge_slave_1: entered allmulticast mode [ 36.733879][ T3267] bridge_slave_1: entered promiscuous mode [ 36.768025][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.775374][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.782743][ T3271] bridge_slave_0: entered allmulticast mode [ 36.789393][ T3271] bridge_slave_0: entered promiscuous mode [ 36.813595][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.820696][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.827927][ T3271] bridge_slave_1: entered allmulticast mode [ 36.834483][ T3271] bridge_slave_1: entered promiscuous mode [ 36.846073][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.868853][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.875970][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.883285][ T3272] bridge_slave_0: entered allmulticast mode [ 36.889748][ T3272] bridge_slave_0: entered promiscuous mode [ 36.896468][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.903679][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.911442][ T3272] bridge_slave_1: entered allmulticast mode [ 36.917732][ T3272] bridge_slave_1: entered promiscuous mode [ 36.924593][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.934851][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.948820][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.955979][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.963270][ T3268] bridge_slave_0: entered allmulticast mode [ 36.969616][ T3268] bridge_slave_0: entered promiscuous mode [ 36.976063][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.983253][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.990739][ T3268] bridge_slave_1: entered allmulticast mode [ 36.997211][ T3268] bridge_slave_1: entered promiscuous mode [ 37.003557][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.010698][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.017897][ T3278] bridge_slave_0: entered allmulticast mode [ 37.024359][ T3278] bridge_slave_0: entered promiscuous mode [ 37.036350][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.055065][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.062182][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.069532][ T3278] bridge_slave_1: entered allmulticast mode [ 37.075935][ T3278] bridge_slave_1: entered promiscuous mode [ 37.092283][ T3267] team0: Port device team_slave_0 added [ 37.117311][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.127074][ T3271] team0: Port device team_slave_0 added [ 37.133329][ T3267] team0: Port device team_slave_1 added [ 37.144981][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.155213][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.165580][ T3278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.175536][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.185265][ T3271] team0: Port device team_slave_1 added [ 37.201818][ T3278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.221032][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.227983][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.254182][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.270257][ T3268] team0: Port device team_slave_0 added [ 37.290220][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.297206][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.323283][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.336890][ T3268] team0: Port device team_slave_1 added [ 37.352384][ T3272] team0: Port device team_slave_0 added [ 37.359099][ T3278] team0: Port device team_slave_0 added [ 37.365233][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.372190][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.398392][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.410366][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.417396][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.443518][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.459313][ T3272] team0: Port device team_slave_1 added [ 37.465524][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.472509][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.498486][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.510307][ T3278] team0: Port device team_slave_1 added [ 37.539207][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.546171][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.572117][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.593711][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.600796][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.626952][ T3278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.642319][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.649406][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.675399][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.692024][ T3267] hsr_slave_0: entered promiscuous mode [ 37.698040][ T3267] hsr_slave_1: entered promiscuous mode [ 37.710011][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.716977][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.743065][ T3278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.757363][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.764369][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.790715][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.832229][ T3271] hsr_slave_0: entered promiscuous mode [ 37.838471][ T3271] hsr_slave_1: entered promiscuous mode [ 37.844497][ T3271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.852307][ T3271] Cannot create hsr debugfs directory [ 37.873570][ T3268] hsr_slave_0: entered promiscuous mode [ 37.879875][ T3268] hsr_slave_1: entered promiscuous mode [ 37.885741][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.893457][ T3268] Cannot create hsr debugfs directory [ 37.910501][ T3278] hsr_slave_0: entered promiscuous mode [ 37.916686][ T3278] hsr_slave_1: entered promiscuous mode [ 37.922759][ T3278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.930332][ T3278] Cannot create hsr debugfs directory [ 37.937529][ T3272] hsr_slave_0: entered promiscuous mode [ 37.943890][ T3272] hsr_slave_1: entered promiscuous mode [ 37.949745][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.957315][ T3272] Cannot create hsr debugfs directory [ 38.151396][ T3267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.160167][ T3267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.169466][ T3267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.180659][ T3267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.203935][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.212785][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.222645][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.234042][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.265221][ T3271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.274155][ T3271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.293399][ T3271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.302499][ T3271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.317538][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.331173][ T3272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.348481][ T3272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.362505][ T3272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.372054][ T3272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.391722][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.409360][ T3278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.418706][ T3278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.428028][ T3278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.438890][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445973][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.454890][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.462062][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.477948][ T3278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.508156][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.544515][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.578440][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.585635][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.595026][ T258] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.602145][ T258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.623209][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.645629][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.661566][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.669533][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.688666][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.705797][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.723071][ T3278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.732961][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.740109][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.749225][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.756536][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.765243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.772335][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.782362][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.789576][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.852173][ T3278] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.865746][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.872867][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.901820][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.908944][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.928559][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.943209][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.993973][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.007116][ T3267] veth0_vlan: entered promiscuous mode [ 39.038248][ T3267] veth1_vlan: entered promiscuous mode [ 39.075707][ T3278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.090293][ T3267] veth0_macvtap: entered promiscuous mode [ 39.104374][ T3267] veth1_macvtap: entered promiscuous mode [ 39.140907][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.170454][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.192834][ T3268] veth0_vlan: entered promiscuous mode [ 39.199728][ T3267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.208493][ T3267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.217244][ T3267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.226156][ T3267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.241141][ T3271] veth0_vlan: entered promiscuous mode [ 39.255426][ T3268] veth1_vlan: entered promiscuous mode [ 39.267089][ T3271] veth1_vlan: entered promiscuous mode [ 39.298217][ T3278] veth0_vlan: entered promiscuous mode [ 39.318561][ T3278] veth1_vlan: entered promiscuous mode [ 39.333688][ T3268] veth0_macvtap: entered promiscuous mode [ 39.334748][ T3267] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.346042][ T3271] veth0_macvtap: entered promiscuous mode [ 39.370974][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 39.370991][ T29] audit: type=1400 audit(1728464041.848:115): avc: denied { read write } for pid=3267 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.402442][ T3268] veth1_macvtap: entered promiscuous mode [ 39.413996][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.424599][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.434512][ T29] audit: type=1400 audit(1728464041.848:116): avc: denied { open } for pid=3267 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.435893][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.458585][ T29] audit: type=1400 audit(1728464041.848:117): avc: denied { ioctl } for pid=3267 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.491391][ T29] audit: type=1400 audit(1728464041.878:118): avc: denied { map_create } for pid=3405 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.492707][ T3271] veth1_macvtap: entered promiscuous mode [ 39.510196][ T29] audit: type=1400 audit(1728464041.878:119): avc: denied { bpf } for pid=3405 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.518411][ T3278] veth0_macvtap: entered promiscuous mode [ 39.536180][ T29] audit: type=1400 audit(1728464041.878:120): avc: denied { map_read map_write } for pid=3405 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.561475][ T29] audit: type=1400 audit(1728464041.878:121): avc: denied { prog_load } for pid=3405 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.566324][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.580364][ T29] audit: type=1400 audit(1728464041.888:122): avc: denied { perfmon } for pid=3405 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.590733][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.612361][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.635059][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.639063][ T29] audit: type=1400 audit(1728464041.948:123): avc: denied { prog_run } for pid=3405 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.645645][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.674147][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.684604][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.695462][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.705101][ T3278] veth1_macvtap: entered promiscuous mode [ 39.725154][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.734011][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.742935][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.751741][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.765355][ T3272] veth0_vlan: entered promiscuous mode [ 39.772555][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.783101][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.792961][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.803476][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.815158][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.827749][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.838239][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.848094][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.858540][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.868365][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.878961][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.891187][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.907209][ T3271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.916100][ T3271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.924983][ T3271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933813][ T3271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.947710][ T29] audit: type=1400 audit(1728464042.418:124): avc: denied { create } for pid=3409 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.959796][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.967163][ T3410] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.977391][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.977407][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.977423][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.977433][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.977449][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.997949][ T3410] Cannot find set identified by id 0 to match [ 40.002625][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.069806][ T3278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.078611][ T3278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.087555][ T3278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.096354][ T3278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.117670][ T3272] veth1_vlan: entered promiscuous mode [ 40.202646][ T3272] veth0_macvtap: entered promiscuous mode [ 40.233660][ T3272] veth1_macvtap: entered promiscuous mode [ 40.276695][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.287246][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.297198][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.304455][ T3431] serio: Serial port ptm0 [ 40.307860][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.321909][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.332594][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.342649][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.353179][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.356583][ T3437] random: crng reseeded on system resumption [ 40.368018][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.392169][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.402771][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.412780][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.423423][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.433356][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.443802][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.453622][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.464233][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.479609][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.492047][ T3272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.501056][ T3272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.510098][ T3272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.518874][ T3272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.530143][ T3444] syz.2.17 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.681029][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 40.777408][ T3481] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 40.901565][ T3499] loop2: detected capacity change from 0 to 2048 [ 41.100781][ T3499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.158179][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.439700][ T3513] vhci_hcd: invalid port number 61 [ 41.501605][ T3527] syz.4.50[3527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.501673][ T3527] syz.4.50[3527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.513795][ T3527] syz.4.50[3527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.532393][ T3527] SELinux: failed to load policy [ 41.534850][ T3529] loop2: detected capacity change from 0 to 128 [ 41.564359][ T3529] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 41.577167][ T3529] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 41.593508][ T3529] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.53: Directory block failed checksum [ 41.622476][ T3268] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.639127][ T3532] 9pnet_fd: Insufficient options for proto=fd [ 41.774131][ T3556] netlink: 268 bytes leftover after parsing attributes in process `syz.3.65'. [ 41.774273][ T3556] unsupported nla_type 65024 [ 41.789388][ T3558] syz.1.67[3558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.789453][ T3558] syz.1.67[3558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.789564][ T3558] syz.1.67[3558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.789678][ T3555] tun0: tun_chr_ioctl cmd 2147767520 [ 41.866366][ T3560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 42.112970][ T3594] syz.2.80[3594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.113102][ T3594] syz.2.80[3594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.128682][ T3594] syz.2.80[3594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.297345][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 42.317605][ T3614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 42.351916][ T3622] loop3: detected capacity change from 0 to 512 [ 42.352050][ T3614] vlan2: entered allmulticast mode [ 42.363437][ T3614] macvlan0: entered allmulticast mode [ 42.363507][ T3622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.368945][ T3614] veth1_vlan: entered allmulticast mode [ 42.382007][ T3622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.398313][ T3622] EXT4-fs (loop3): 1 truncate cleaned up [ 42.454566][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.458382][ T3629] loop1: detected capacity change from 0 to 512 [ 42.496582][ T3629] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.532116][ T3629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.546124][ T3629] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.578267][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.621847][ T3642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.102'. [ 42.665297][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.679769][ T3650] sctp: [Deprecated]: syz.0.105 (pid 3650) Use of int in maxseg socket option. [ 42.679769][ T3650] Use struct sctp_assoc_value instead [ 42.713907][ T3656] SELinux: policydb version 1664755333 does not match my version range 15-33 [ 42.732782][ T3656] SELinux: failed to load policy [ 42.739841][ T3658] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 42.797285][ T3668] loop3: detected capacity change from 0 to 128 [ 42.931964][ T3674] loop1: detected capacity change from 0 to 8192 [ 43.001640][ T258] kworker/u8:5: attempt to access beyond end of device [ 43.001640][ T258] loop3: rw=1, sector=145, nr_sectors = 33 limit=128 [ 43.051620][ T3699] netlink: 14 bytes leftover after parsing attributes in process `syz.3.128'. [ 43.082981][ T3702] netlink: 3 bytes leftover after parsing attributes in process `syz.4.129'. [ 43.093392][ T3702] 0ªX¹¦À: renamed from caif0 [ 43.111676][ T3707] loop2: detected capacity change from 0 to 512 [ 43.117980][ T3702] 0ªX¹¦À: entered allmulticast mode [ 43.118789][ T3707] ======================================================= [ 43.118789][ T3707] WARNING: The mand mount option has been deprecated and [ 43.118789][ T3707] and is ignored by this kernel. Remove the mand [ 43.118789][ T3707] option from the mount to silence this warning. [ 43.118789][ T3707] ======================================================= [ 43.123251][ T3702] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 43.169070][ T3707] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 43.177580][ T3703] tun0: tun_chr_ioctl cmd 1074025677 [ 43.196375][ T3703] tun0: linktype set to 776 [ 43.498161][ T3754] loop3: detected capacity change from 0 to 512 [ 43.541692][ T3754] EXT4-fs error (device loop3): ext4_quota_enable:7049: comm syz.3.154: Bad quota inum: 1, type: 0 [ 43.561786][ T3754] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 43.590946][ T3766] netlink: 312 bytes leftover after parsing attributes in process `syz.1.159'. [ 43.610851][ T3754] EXT4-fs (loop3): mount failed [ 43.646743][ T3768] capability: warning: `syz.2.160' uses deprecated v2 capabilities in a way that may be insecure [ 43.667028][ T3768] tipc: Started in network mode [ 43.672078][ T3768] tipc: Node identity ac1414aa, cluster identity 4711 [ 43.681167][ T3768] tipc: Enabling of bearer rejected, failed to enable media [ 43.689603][ T3771] syz_tun: entered promiscuous mode [ 43.696086][ T3769] syz_tun: left promiscuous mode [ 43.811145][ T3785] loop1: detected capacity change from 0 to 1024 [ 43.829588][ T3785] EXT4-fs: Ignoring removed orlov option [ 43.835675][ T3789] loop0: detected capacity change from 0 to 128 [ 43.850904][ T3785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.890480][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.157810][ T3832] netlink: 88 bytes leftover after parsing attributes in process `syz.0.189'. [ 44.185081][ T3839] loop3: detected capacity change from 0 to 256 [ 44.201090][ T3839] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.211295][ T3839] FAT-fs (loop3): Filesystem has been set read-only [ 44.221989][ T3839] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.294876][ T3849] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.399394][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 44.399413][ T29] audit: type=1400 audit(1728464046.878:292): avc: denied { connect } for pid=3860 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.449000][ T29] audit: type=1400 audit(1728464046.918:293): avc: denied { bind } for pid=3864 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.494216][ T3870] loop1: detected capacity change from 0 to 512 [ 44.515427][ T29] audit: type=1400 audit(1728464046.988:294): avc: denied { ioctl } for pid=3873 comm="syz.0.206" path="socket:[4877]" dev="sockfs" ino=4877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 44.544060][ T3870] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.569930][ T3870] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.207: iget: bad i_size value: -6917529027641081756 [ 44.587822][ T29] audit: type=1400 audit(1728464047.058:295): avc: denied { create } for pid=3881 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.594030][ T3886] syz.3.212[3886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.608458][ T3870] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.207: couldn't read orphan inode 17 (err -117) [ 44.627303][ T29] audit: type=1400 audit(1728464047.088:296): avc: denied { ioctl } for pid=3881 comm="syz.0.211" path="socket:[5184]" dev="sockfs" ino=5184 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.667920][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.685793][ T3889] loop4: detected capacity change from 0 to 512 [ 44.700567][ T3889] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 44.749247][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.788681][ T3900] loop2: detected capacity change from 0 to 256 [ 44.799895][ T3901] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 44.823410][ T3898] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 44.929373][ T29] audit: type=1400 audit(1728464047.398:297): avc: denied { relabelto } for pid=3896 comm="syz.4.219" name="bus" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 44.956436][ T29] audit: type=1400 audit(1728464047.398:298): avc: denied { associate } for pid=3896 comm="syz.4.219" name="bus" dev="tmpfs" ino=206 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0" [ 44.999187][ T29] audit: type=1400 audit(1728464047.468:299): avc: denied { unlink } for pid=3272 comm="syz-executor" name="bus" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 45.039884][ T29] audit: type=1326 audit(1728464047.508:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206168dff9 code=0x7ffc0000 [ 45.063871][ T29] audit: type=1326 audit(1728464047.508:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206168dff9 code=0x7ffc0000 [ 45.199698][ T3934] loop2: detected capacity change from 0 to 164 [ 45.261476][ T3944] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 45.271634][ T3944] veth0_macvtap: left promiscuous mode [ 45.279897][ T3944] veth0_macvtap: entered promiscuous mode [ 45.286914][ T3944] team0: Device macvtap0 failed to register rx_handler [ 45.333252][ T3944] veth0_macvtap: left promiscuous mode [ 45.387343][ T3958] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 45.490423][ T3976] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.644829][ T3998] loop4: detected capacity change from 0 to 512 [ 45.716719][ T4010] program syz.4.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.719849][ T4009] loop3: detected capacity change from 0 to 1024 [ 45.745717][ T4009] EXT4-fs: Ignoring removed nobh option [ 45.782918][ T4009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.833045][ T4030] __nla_validate_parse: 2 callbacks suppressed [ 45.833059][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 45.856810][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.916781][ T4036] loop4: detected capacity change from 0 to 512 [ 45.933483][ T4036] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 45.945285][ T4036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.953938][ T4036] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.981179][ T4036] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 45.990094][ T4036] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.283: bg 0: block 40: padding at end of block bitmap is not set [ 46.008109][ T4036] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.019688][ T4036] EXT4-fs (loop4): 1 truncate cleaned up [ 46.046014][ T4036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.126518][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 46.140086][ T4036] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.283: corrupted xattr block 31: invalid header [ 46.177898][ T4036] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.205590][ T4036] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.283: corrupted xattr block 31: invalid header [ 46.228194][ T4036] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.244262][ T4036] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.283: bad symlink. [ 46.259711][ T4074] loop1: detected capacity change from 0 to 128 [ 46.310134][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.541008][ T4103] loop4: detected capacity change from 0 to 256 [ 46.655819][ T4108] SELinux: Context target default is not valid (left unmapped). [ 46.770763][ T4120] loop2: detected capacity change from 0 to 512 [ 46.786832][ T4120] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.323: bg 0: block 393: padding at end of block bitmap is not set [ 46.812701][ T4120] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.837373][ T4120] EXT4-fs (loop2): 2 truncates cleaned up [ 46.866692][ T4120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.895155][ T4129] syz.1.327 (4129) used greatest stack depth: 10672 bytes left [ 46.933353][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.994793][ T4136] loop2: detected capacity change from 0 to 512 [ 47.015360][ T4136] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.330: corrupted in-inode xattr: invalid ea_ino [ 47.059098][ T4136] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.330: couldn't read orphan inode 15 (err -117) [ 47.110516][ T4136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.191508][ T4136] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.330: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 47.282499][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.297210][ T4159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=4159 comm=syz.1.340 [ 47.367400][ T4169] capability: warning: `syz.0.345' uses 32-bit capabilities (legacy support in use) [ 47.401380][ T4172] loop1: detected capacity change from 0 to 1764 [ 47.574480][ T4191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.356'. [ 47.583548][ T4191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 47.593241][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.609506][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.616619][ T4191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.636347][ T986] kernel write not supported for file /uhid (pid: 986 comm: kworker/0:2) [ 47.774255][ T4212] mmap: syz.1.366 (4212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.778956][ T4203] loop3: detected capacity change from 0 to 8192 [ 48.066299][ T4245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 48.137935][ T4253] loop3: detected capacity change from 0 to 764 [ 48.469528][ T4296] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 48.475318][ T4296] pim6reg0: linktype set to 778 [ 48.485492][ T4298] loop3: detected capacity change from 0 to 512 [ 48.495695][ T4298] EXT4-fs (loop3): filesystem is read-only [ 48.502063][ T4298] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.517071][ T4298] EXT4-fs (loop3): filesystem is read-only [ 48.523689][ T4298] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.530358][ T4298] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.406: bg 0: block 64: padding at end of block bitmap is not set [ 48.544825][ T4298] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 48.559596][ T4298] EXT4-fs (loop3): 1 orphan inode deleted [ 48.570346][ T4298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.613127][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.628344][ T4314] loop0: detected capacity change from 0 to 1024 [ 48.635048][ T4314] EXT4-fs: Ignoring removed nobh option [ 48.640770][ T4314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.652610][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 48.672749][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.712394][ T4326] loop2: detected capacity change from 0 to 128 [ 48.734022][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.743300][ T4326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 48.773249][ T4329] bpf_get_probe_write_proto: 14 callbacks suppressed [ 48.773264][ T4329] syz.2.420[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.787852][ T4329] syz.2.420[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.794122][ T4332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 48.821231][ T4329] syz.2.420[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.106473][ T4362] loop1: detected capacity change from 0 to 256 [ 49.196491][ T4345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.222958][ T4345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.442800][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 49.442819][ T29] audit: type=1400 audit(1862681779.914:442): avc: denied { checkpoint_restore } for pid=4377 comm="syz.2.439" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.470931][ T4382] loop0: detected capacity change from 0 to 1024 [ 49.492528][ T4382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.505825][ T29] audit: type=1400 audit(1862681779.974:443): avc: denied { mount } for pid=4381 comm="syz.0.440" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.528391][ T29] audit: type=1400 audit(1862681779.974:444): avc: denied { setattr } for pid=4381 comm="syz.0.440" path="/78/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.552696][ T29] audit: type=1400 audit(1862681780.004:445): avc: denied { unmount } for pid=3278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.559979][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.572271][ T29] audit: type=1400 audit(1862681780.004:446): avc: denied { create } for pid=4385 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.601267][ T29] audit: type=1400 audit(1862681780.004:447): avc: denied { write } for pid=4385 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.621264][ T29] audit: type=1400 audit(1862681780.004:448): avc: denied { connect } for pid=4385 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.640848][ T29] audit: type=1400 audit(1862681780.004:449): avc: denied { name_connect } for pid=4385 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 49.683572][ T29] audit: type=1400 audit(1862681780.074:450): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.705756][ T29] audit: type=1400 audit(1862681780.074:451): avc: denied { search } for pid=2950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.924804][ T4419] syz.2.457[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.924866][ T4419] syz.2.457[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.936416][ T4419] syz.2.457[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.945340][ T4421] loop0: detected capacity change from 0 to 128 [ 49.992091][ T4423] SELinux: policydb version 1664755333 does not match my version range 15-33 [ 50.001211][ T4423] SELinux: failed to load policy [ 50.010634][ T36] kworker/u8:2: attempt to access beyond end of device [ 50.010634][ T36] loop0: rw=1, sector=145, nr_sectors = 33 limit=128 [ 50.039425][ T4425] sctp: [Deprecated]: syz.2.460 (pid 4425) Use of int in maxseg socket option. [ 50.039425][ T4425] Use struct sctp_assoc_value instead [ 50.100131][ T4431] loop2: detected capacity change from 0 to 512 [ 50.116714][ T4431] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.136006][ T4431] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.462: iget: bad i_size value: -6917529027641081756 [ 50.152682][ T4431] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.462: couldn't read orphan inode 17 (err -117) [ 50.165264][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.220286][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.330864][ T4453] loop2: detected capacity change from 0 to 512 [ 50.338414][ T4453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.355393][ T4453] EXT4-fs (loop2): 1 truncate cleaned up [ 50.361924][ T4453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.463536][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.488693][ T4476] loop2: detected capacity change from 0 to 256 [ 50.519280][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 50.525690][ T4476] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.538376][ T4476] FAT-fs (loop2): Filesystem has been set read-only [ 50.553739][ T4482] xt_hashlimit: max too large, truncated to 1048576 [ 50.571768][ T4476] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.697161][ T4506] loop4: detected capacity change from 0 to 128 [ 50.777083][ T28] kworker/u8:1: attempt to access beyond end of device [ 50.777083][ T28] loop4: rw=1, sector=145, nr_sectors = 33 limit=128 [ 51.167253][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 51.194995][ T4570] 9pnet_fd: Insufficient options for proto=fd [ 51.214862][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.245223][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.352480][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 51.375806][ T4590] 9pnet: p9_errstr2errno: server reported unknown error [ 51.419338][ T4600] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 51.552747][ T4616] Cannot find set identified by id 0 to match [ 51.664650][ T4636] pimreg: entered allmulticast mode [ 51.673949][ T4640] netlink: 268 bytes leftover after parsing attributes in process `syz.0.560'. [ 51.689126][ T4636] dvmrp5: entered allmulticast mode [ 51.712916][ T4636] pimreg: left allmulticast mode [ 51.722468][ T4636] dvmrp5: left allmulticast mode [ 51.737324][ T4647] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.836536][ T4660] loop1: detected capacity change from 0 to 512 [ 51.862596][ T4660] ext4: Unknown parameter 'nouser_xattr' [ 51.981134][ T4682] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.578'. [ 52.164506][ T4706] syz.2.583[4706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.164635][ T4706] syz.2.583[4706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.188217][ T4706] syz.2.583[4706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.312943][ T4719] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 52.428729][ T4730] syz.0.594 uses obsolete (PF_INET,SOCK_PACKET) [ 52.432745][ T4732] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 52.571275][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.606'. [ 52.573707][ T4752] loop4: detected capacity change from 0 to 512 [ 52.614074][ T4761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 52.625204][ T4752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.640272][ T4752] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.661875][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.678035][ T4767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4767 comm=syz.0.611 [ 52.837445][ T4791] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 52.949723][ T4811] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.027347][ T4823] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 53.040396][ T4823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 53.160770][ T4844] loop3: detected capacity change from 0 to 256 [ 53.169659][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 53.187075][ T4843] loop0: detected capacity change from 0 to 2048 [ 53.240459][ T4852] loop3: detected capacity change from 0 to 128 [ 53.254485][ T4852] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 53.260262][ T4843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.268581][ T4852] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 53.296223][ T4852] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.648: Directory block failed checksum [ 53.330915][ T4857] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 53.341818][ T4857] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 53.368559][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.377246][ T3271] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.449970][ T4869] vhci_hcd: invalid port number 61 [ 53.610779][ T4900] loop1: detected capacity change from 0 to 1024 [ 53.630145][ T4900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.643417][ T4900] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.717826][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.774749][ T4925] syz.2.675[4925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.840271][ T4929] xt_hashlimit: max too large, truncated to 1048576 [ 53.877256][ T4931] loop1: detected capacity change from 0 to 764 [ 53.901941][ T4931] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 54.095880][ T4957] loop2: detected capacity change from 0 to 512 [ 54.108339][ T4961] loop1: detected capacity change from 0 to 164 [ 54.124055][ T4957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.257834][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 54.269289][ T4970] SELinux: Context Ü is not valid (left unmapped). [ 54.351532][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.371029][ T4986] loop0: detected capacity change from 0 to 164 [ 54.460737][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 54.460751][ T29] audit: type=1326 audit(1862681784.934:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.0.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x0 [ 54.498190][ T4997] random: crng reseeded on system resumption [ 54.501391][ T29] audit: type=1400 audit(1862681784.964:675): avc: denied { read write } for pid=4995 comm="syz.1.711" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.527577][ T29] audit: type=1400 audit(1862681784.964:676): avc: denied { ioctl open } for pid=4995 comm="syz.1.711" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.571904][ T5002] loop3: detected capacity change from 0 to 512 [ 54.628042][ T5002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.683206][ T29] audit: type=1326 audit(1862681785.154:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.706797][ T29] audit: type=1326 audit(1862681785.154:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.733580][ T29] audit: type=1326 audit(1862681785.184:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.757046][ T29] audit: type=1326 audit(1862681785.184:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.780514][ T29] audit: type=1326 audit(1862681785.184:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.829892][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.865778][ T29] audit: type=1326 audit(1862681785.284:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.886147][ T5028] loop1: detected capacity change from 0 to 136 [ 54.890577][ T29] audit: type=1326 audit(1862681785.294:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2ea0b9dff9 code=0x7ffc0000 [ 54.966260][ T5038] bpf_get_probe_write_proto: 2 callbacks suppressed [ 54.966307][ T5038] syz.3.728[5038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.973649][ T5038] syz.3.728[5038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.986585][ T5038] syz.3.728[5038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.265197][ T5068] syz.1.742[5068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.269426][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.278123][ T5068] syz.1.742[5068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.296825][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.319373][ T5068] syz.1.742[5068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.333302][ T5073] netlink: 165 bytes leftover after parsing attributes in process `syz.3.744'. [ 55.365617][ T5075] loop0: detected capacity change from 0 to 512 [ 55.387617][ T5075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.425038][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.496837][ T5093] loop3: detected capacity change from 0 to 512 [ 55.512228][ T5093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.535320][ T5093] EXT4-fs (loop3): 1 orphan inode deleted [ 55.541163][ T5093] EXT4-fs (loop3): 1 truncate cleaned up [ 55.547520][ T5093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.576152][ T5103] bpf: Bad value for 'gid' [ 55.584487][ T5101] netlink: 165 bytes leftover after parsing attributes in process `syz.0.759'. [ 55.606149][ T5106] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 55.618372][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.672240][ T5111] erspan0: entered promiscuous mode [ 55.707473][ T5111] erspan0: left promiscuous mode [ 55.795120][ T5135] loop2: detected capacity change from 0 to 512 [ 55.802326][ T5133] loop0: detected capacity change from 0 to 1024 [ 55.811143][ T5135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.816465][ T5133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.823439][ T5135] EXT4-fs (loop2): 1 orphan inode deleted [ 55.840778][ T5135] EXT4-fs (loop2): 1 truncate cleaned up [ 55.847996][ T5135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.865403][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.901445][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.915983][ T5141] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 55.933037][ T5145] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 56.165289][ T5168] loop0: detected capacity change from 0 to 2048 [ 56.538921][ T5224] __nla_validate_parse: 1 callbacks suppressed [ 56.538937][ T5224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 56.545337][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 56.564205][ T5224] netlink: 'syz.1.817': attribute type 2 has an invalid length. [ 56.633833][ T5227] netlink: 'syz.4.818': attribute type 21 has an invalid length. [ 56.911065][ T5280] ------------[ cut here ]------------ [ 56.916626][ T5280] refcount_t: underflow; use-after-free. [ 56.922673][ T5280] WARNING: CPU: 1 PID: 5280 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 56.932196][ T5280] Modules linked in: [ 56.936146][ T5280] CPU: 1 UID: 0 PID: 5280 Comm: syz.0.842 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 56.940699][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.946992][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.965424][ T5280] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 56.971763][ T5280] Code: 72 ff ff ff e8 ab 89 71 ff 48 c7 c7 3e d7 b2 86 e8 5f 6f 8a ff c6 05 36 33 f4 04 01 90 48 c7 c7 f5 a7 1b 86 e8 cb 4f 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 89 71 ff 48 c7 c7 3b d7 b2 86 e8 [ 56.975401][ T5284] loop4: detected capacity change from 0 to 512 [ 56.991467][ T5280] RSP: 0018:ffffc9000ede7b28 EFLAGS: 00010246 [ 56.991497][ T5280] RAX: 62823d1547e0ee00 RBX: ffff888117fc22e4 RCX: 0000000000040000 [ 56.991516][ T5280] RDX: ffffc90001c39000 RSI: 00000000000011d2 RDI: 00000000000011d3 [ 56.991533][ T5280] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 56.991550][ T5280] R10: 0001ffffffffffff R11: ffff888115254200 R12: ffff888115068268 [ 56.991627][ T5280] R13: 0000000000000002 R14: ffff888117fc22e4 R15: 0000000000000000 [ 56.991645][ T5280] FS: 00007f58e2cb76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 56.991747][ T5280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.991764][ T5280] CR2: 00000000200009c0 CR3: 0000000118b9e000 CR4: 00000000003506f0 [ 56.991784][ T5280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.991801][ T5280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.991819][ T5280] Call Trace: [ 56.991828][ T5280] [ 56.991838][ T5280] ? __warn+0x141/0x350 [ 56.991879][ T5280] ? report_bug+0x315/0x420 [ 56.991956][ T5280] ? refcount_warn_saturate+0x1c6/0x230 [ 56.992095][ T5280] ? handle_bug+0x60/0x90 [ 56.992122][ T5280] ? exc_invalid_op+0x1a/0x50 [ 56.992150][ T5280] ? asm_exc_invalid_op+0x1a/0x20 [ 56.992193][ T5280] ? __warn_printk+0x167/0x1b0 [ 56.992238][ T5280] ? refcount_warn_saturate+0x1c6/0x230 [ 56.992349][ T5280] ? refcount_warn_saturate+0x1c5/0x230 [ 56.992377][ T5280] sk_skb_reason_drop+0xe9/0x290 [ 56.992432][ T5280] j1939_session_put+0x157/0x2a0 [ 56.992475][ T5280] j1939_sk_sendmsg+0xa71/0xc00 [ 56.992514][ T5280] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 56.992550][ T5280] __sock_sendmsg+0x140/0x180 [ 56.992619][ T5280] ____sys_sendmsg+0x312/0x410 [ 56.992665][ T5280] __sys_sendmsg+0x1d9/0x270 [ 56.992700][ T5280] ? futex_wait+0x18e/0x1c0 [ 56.992744][ T5280] __x64_sys_sendmsg+0x46/0x50 [ 57.004782][ T5284] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.005077][ T5280] x64_sys_call+0x2689/0x2d60 [ 57.020356][ T5284] EXT4-fs (loop4): invalid journal inode [ 57.021111][ T5280] do_syscall_64+0xc9/0x1c0 [ 57.202846][ T5280] ? clear_bhb_loop+0x55/0xb0 [ 57.207722][ T5280] ? clear_bhb_loop+0x55/0xb0 [ 57.212464][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.218397][ T5280] RIP: 0033:0x7f58e403dff9 [ 57.222880][ T5280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.242591][ T5280] RSP: 002b:00007f58e2cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.251052][ T5280] RAX: ffffffffffffffda RBX: 00007f58e41f5f80 RCX: 00007f58e403dff9 [ 57.259140][ T5280] RDX: 0000000004000001 RSI: 0000000020000580 RDI: 0000000000000003 [ 57.267133][ T5280] RBP: 00007f58e40b0296 R08: 0000000000000000 R09: 0000000000000000 [ 57.275154][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.283185][ T5280] R13: 0000000000000000 R14: 00007f58e41f5f80 R15: 00007ffd405b1cb8 [ 57.291214][ T5280] [ 57.294250][ T5280] ---[ end trace 0000000000000000 ]--- [ 57.301127][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.357196][ T5292] xt_hashlimit: max too large, truncated to 1048576 [ 57.980351][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.987826][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.995307][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.002959][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.010459][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.017861][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.025302][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.032753][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.040176][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.047683][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.055376][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.062855][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.070374][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.077771][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.085237][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.092688][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.100237][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.107787][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.115232][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.122699][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.130119][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.137522][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.145038][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.152497][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.159910][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.167326][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.174882][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.182317][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.189751][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.197165][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.204806][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.212240][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.219727][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.227182][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.234730][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.242192][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.249629][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.265956][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 58.304148][ T5324] loop4: detected capacity change from 0 to 512 [ 58.350391][ T5336] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.350432][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.376181][ T5324] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.410531][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.441459][ T5345] loop0: detected capacity change from 0 to 512 [ 58.449211][ T5345] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.482851][ T5345] EXT4-fs (loop0): 1 truncate cleaned up [ 58.489356][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.607583][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.757442][ T5393] loop4: detected capacity change from 0 to 512 [ 58.772304][ T5393] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.786622][ T5393] EXT4-fs (loop4): 1 truncate cleaned up [ 58.796140][ T5393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.900616][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.953226][ T5410] xt_hashlimit: max too large, truncated to 1048576 [ 58.989234][ T5422] loop1: detected capacity change from 0 to 512 [ 58.999268][ T5422] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 59.007964][ T5422] EXT4-fs (loop1): invalid journal inode [ 59.455678][ T5466] Invalid ELF header magic: != ELF [ 59.544556][ T5482] loop1: detected capacity change from 0 to 512 [ 59.556685][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 59.556699][ T29] audit: type=1326 audit(1862681790.024:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.570814][ T5482] EXT4-fs: Ignoring removed i_version option [ 59.602733][ T29] audit: type=1326 audit(1862681790.064:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.626057][ T29] audit: type=1326 audit(1862681790.064:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.639864][ T5482] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.649396][ T29] audit: type=1326 audit(1862681790.064:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.649436][ T29] audit: type=1326 audit(1862681790.064:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.649469][ T29] audit: type=1326 audit(1862681790.064:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.649500][ T29] audit: type=1326 audit(1862681790.064:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.649548][ T29] audit: type=1326 audit(1862681790.064:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 59.817493][ T5482] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.844040][ T5482] EXT4-fs (loop1): 1 truncate cleaned up [ 59.852059][ T5482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.907951][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.931613][ T5506] tipc: Failed to obtain node identity [ 59.937196][ T5506] tipc: Enabling of bearer rejected, failed to enable media [ 59.945315][ T5508] loop2: detected capacity change from 0 to 2048 [ 59.973688][ T5508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.991259][ T5508] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.946: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.019533][ T29] audit: type=1326 audit(1862681790.484:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 60.042839][ T29] audit: type=1326 audit(1862681790.484:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e403dff9 code=0x7ffc0000 [ 60.073901][ T5508] EXT4-fs (loop2): Remounting filesystem read-only [ 60.102636][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.160824][ T5531] Invalid ELF header magic: != ELF [ 60.275971][ T5549] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 60.286429][ T5549] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 60.351778][ T5559] loop4: detected capacity change from 0 to 1024 [ 60.375138][ T5559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.443113][ T333] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.459587][ T333] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 60.473173][ T333] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.473173][ T333] [ 60.482974][ T333] EXT4-fs (loop4): Total free blocks count 0 [ 60.489054][ T333] EXT4-fs (loop4): Free/Dirty block details [ 60.495042][ T333] EXT4-fs (loop4): free_blocks=68451041280 [ 60.502158][ T333] EXT4-fs (loop4): dirty_blocks=16 [ 60.507294][ T333] EXT4-fs (loop4): Block reservation details [ 60.513349][ T333] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 60.521584][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.874423][ T5618] netlink: 576 bytes leftover after parsing attributes in process `syz.2.996'. [ 60.900938][ T5621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 61.031016][ T5644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1009'. [ 61.123797][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.133287][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.183654][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.194222][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.247452][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 61.326263][ T5675] loop1: detected capacity change from 0 to 2048 [ 61.354607][ T5675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.370133][ T5675] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.1023: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.387154][ T5675] EXT4-fs (loop1): Remounting filesystem read-only [ 61.404156][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.561243][ T5702] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 61.571688][ T5702] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 61.645306][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 61.657007][ T5710] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1040'. [ 61.740797][ T5720] loop2: detected capacity change from 0 to 1024 [ 61.762972][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 61.773090][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.802506][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.821828][ T5727] erspan0: entered promiscuous mode [ 61.845190][ T5727] erspan0: left promiscuous mode [ 61.980556][ T5747] loop4: detected capacity change from 0 to 512 [ 61.996870][ T5747] EXT4-fs: Ignoring removed i_version option [ 62.006093][ T5747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.007346][ T5750] loop1: detected capacity change from 0 to 1024 [ 62.020486][ T5747] EXT4-fs (loop4): 1 truncate cleaned up [ 62.126217][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 62.140869][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.180212][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.192681][ T5765] erspan0: entered promiscuous mode [ 62.207007][ T5766] loop1: detected capacity change from 0 to 1024 [ 62.229079][ T5765] erspan0: left promiscuous mode [ 62.234478][ T5766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.327543][ T5777] loop1: detected capacity change from 0 to 256 [ 62.344380][ T5777] FAT-fs (loop1): bogus number of FAT sectors [ 62.350539][ T5777] FAT-fs (loop1): Can't find a valid FAT filesystem [ 62.451075][ T5781] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1072'. [ 62.483470][ T5786] loop4: detected capacity change from 0 to 1024 [ 62.517157][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 62.593572][ T5802] loop0: detected capacity change from 0 to 512 [ 62.608822][ T5798] bridge_slave_0: left allmulticast mode [ 62.614541][ T5798] bridge_slave_0: left promiscuous mode [ 62.620376][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.635058][ T5798] bridge_slave_1: left allmulticast mode [ 62.640773][ T5798] bridge_slave_1: left promiscuous mode [ 62.646548][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.654342][ T2041] ================================================================== [ 62.662446][ T2041] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 62.669747][ T2041] [ 62.672111][ T2041] read to 0xffff8881152e9260 of 4 bytes by task 28 on cpu 1: [ 62.679479][ T2041] atime_needs_update+0x261/0x3e0 [ 62.684510][ T2041] touch_atime+0x4a/0x350 [ 62.688861][ T2041] shmem_file_read_iter+0x4aa/0x550 [ 62.694105][ T2041] do_iter_readv_writev+0x394/0x450 [ 62.699339][ T2041] vfs_iter_read+0x171/0x3b0 [ 62.703965][ T2041] loop_process_work+0x79a/0x1220 [ 62.709008][ T2041] loop_workfn+0x31/0x40 [ 62.713275][ T2041] process_scheduled_works+0x483/0x9a0 [ 62.718750][ T2041] worker_thread+0x51d/0x6f0 [ 62.723362][ T2041] kthread+0x1d1/0x210 [ 62.727442][ T2041] ret_from_fork+0x4b/0x60 [ 62.731911][ T2041] ret_from_fork_asm+0x1a/0x30 [ 62.736694][ T2041] [ 62.739038][ T2041] write to 0xffff8881152e9260 of 4 bytes by task 2041 on cpu 0: [ 62.746689][ T2041] touch_atime+0x1f3/0x350 [ 62.751139][ T2041] shmem_file_read_iter+0x4aa/0x550 [ 62.756358][ T2041] do_iter_readv_writev+0x394/0x450 [ 62.761598][ T2041] vfs_iter_read+0x171/0x3b0 [ 62.766233][ T2041] loop_process_work+0x79a/0x1220 [ 62.771304][ T2041] loop_rootcg_workfn+0x22/0x30 [ 62.776190][ T2041] process_scheduled_works+0x483/0x9a0 [ 62.781670][ T2041] worker_thread+0x51d/0x6f0 [ 62.786263][ T2041] kthread+0x1d1/0x210 [ 62.790333][ T2041] ret_from_fork+0x4b/0x60 [ 62.794753][ T2041] ret_from_fork_asm+0x1a/0x30 [ 62.799529][ T2041] [ 62.801860][ T2041] value changed: 0x063ef339 -> 0x0770203a [ 62.807579][ T2041] [ 62.809904][ T2041] Reported by Kernel Concurrency Sanitizer on: [ 62.816062][ T2041] CPU: 0 UID: 0 PID: 2041 Comm: kworker/u8:7 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 62.828404][ T2041] Tainted: [W]=WARN [ 62.832220][ T2041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 62.842304][ T2041] Workqueue: loop0 loop_rootcg_workfn [ 62.847695][ T2041] ================================================================== [ 62.859502][ T5802] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.885878][ T5798] bond0: (slave bond_slave_0): Releasing backup interface [ 62.898636][ T5798] bond0: (slave bond_slave_1): Releasing backup interface [ 62.920644][ T5802] EXT4-fs: Cannot change journaled quota options when quota turned on [ 62.951520][ T5798] team0: Port device team_slave_0 removed [ 62.961334][ T5798] team0: Port device team_slave_1 removed [ 62.968158][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.975675][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.995861][ T5810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1084'. [ 63.216552][ T258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.282824][ T258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.342467][ T258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.423660][ T258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.496558][ T258] bridge_slave_1: left allmulticast mode [ 63.502308][ T258] bridge_slave_1: left promiscuous mode [ 63.507982][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.515781][ T258] bridge_slave_0: left allmulticast mode [ 63.521598][ T258] bridge_slave_0: left promiscuous mode [ 63.527269][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.651078][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.664144][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.675037][ T258] bond0 (unregistering): Released all slaves [ 63.709925][ T258] tipc: Left network mode [ 63.717006][ T258] hsr_slave_0: left promiscuous mode [ 63.724181][ T258] hsr_slave_1: left promiscuous mode [ 63.730001][ T258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.737445][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.746626][ T258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.754119][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.765675][ T258] veth1_macvtap: left promiscuous mode [ 63.771276][ T258] veth0_macvtap: left promiscuous mode [ 63.776827][ T258] veth1_vlan: left promiscuous mode [ 63.782145][ T258] veth0_vlan: left promiscuous mode [ 63.868320][ T258] team0 (unregistering): Port device team_slave_1 removed [ 63.878586][ T258] team0 (unregistering): Port device team_slave_0 removed [ 64.224823][ T258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.272347][ T258] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.323705][ T258] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.372951][ T258] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.422916][ T258] bridge_slave_1: left allmulticast mode [ 64.428605][ T258] bridge_slave_1: left promiscuous mode [ 64.434385][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.444136][ T258] bridge_slave_0: left allmulticast mode [ 64.449892][ T258] bridge_slave_0: left promiscuous mode [ 64.455645][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.551277][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.563718][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.573790][ T258] bond0 (unregistering): Released all slaves [ 64.612998][ T258] hsr_slave_0: left promiscuous mode [ 64.618698][ T258] hsr_slave_1: left promiscuous mode [ 64.624759][ T258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.632244][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.641120][ T258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.648550][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.658905][ T258] veth1_macvtap: left promiscuous mode [ 64.664437][ T258] veth0_macvtap: left promiscuous mode [ 64.670008][ T258] veth1_vlan: left promiscuous mode [ 64.675290][ T258] veth0_vlan: left promiscuous mode [ 64.765149][ T258] team0 (unregistering): Port device team_slave_1 removed [ 64.775831][ T258] team0 (unregistering): Port device team_slave_0 removed [ 65.146364][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 65.146382][ T29] audit: type=1400 audit(1862681795.614:924): avc: denied { sys_chroot } for pid=5954 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 65.181703][ T29] audit: type=1400 audit(1862681795.654:925): avc: denied { setgid } for pid=5954 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 65.203796][ T29] audit: type=1400 audit(1862681795.654:926): avc: denied { setuid } for pid=5954 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 65.224550][ T29] audit: type=1400 audit(1862681795.654:927): avc: denied { setrlimit } for pid=5954 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1