last executing test programs: 1.126886737s ago: executing program 1 (id=1212): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fstat(r0, 0x0) 1.043772064s ago: executing program 0 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 694.234947ms ago: executing program 3 (id=1225): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2000480, &(0x7f0000001180), 0x1, 0x76f, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x430082, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000240)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file2'}]}}, 0x49) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9) 479.702866ms ago: executing program 0 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x17) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 474.630527ms ago: executing program 3 (id=1229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 440.54712ms ago: executing program 2 (id=1231): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 423.488461ms ago: executing program 2 (id=1232): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 407.418683ms ago: executing program 3 (id=1233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) 364.881717ms ago: executing program 0 (id=1234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 326.91012ms ago: executing program 3 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r1, 0x1}, 0x14}}, 0x0) 326.08531ms ago: executing program 0 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) unshare(0x62040200) 313.747481ms ago: executing program 4 (id=1237): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 307.143422ms ago: executing program 2 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 291.672314ms ago: executing program 3 (id=1239): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 261.198346ms ago: executing program 1 (id=1240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1693, &(0x7f0000000400)={0x0, 0x631c, 0x8, 0x3, 0x2dc}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 248.347707ms ago: executing program 3 (id=1241): r0 = getpgrp(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xfffffffffffffffb, 0x2, 0xffffffffffff4024, 0x0, 0x8, 0xfffffffffffffffd, 0xc000000000, 0x80}, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x0) 234.776869ms ago: executing program 4 (id=1242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 225.50454ms ago: executing program 2 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x1, 0x237, &(0x7f0000000300)="$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") 217.243291ms ago: executing program 0 (id=1244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000004c000980080002"], 0x60}}, 0x0) 170.370805ms ago: executing program 0 (id=1245): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 161.012416ms ago: executing program 4 (id=1246): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/5, 0x5}}], 0x1, 0x40000161, 0x0) 151.900396ms ago: executing program 2 (id=1247): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x20000000000004}}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 129.039019ms ago: executing program 4 (id=1248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x2b) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) 100.071471ms ago: executing program 2 (id=1249): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xad2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 96.957392ms ago: executing program 1 (id=1250): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0xfffd, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, 0x118) 54.883435ms ago: executing program 1 (id=1251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0xffff, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 44.595056ms ago: executing program 4 (id=1252): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x55cb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffff001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9e}]}]}]}}]}, 0xb8}}, 0x0) 29.088478ms ago: executing program 1 (id=1253): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, r1, 0x303, 0x0, 0x0, {0xa, 0x6}}, 0x14}}, 0x0) 4.53591ms ago: executing program 4 (id=1254): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 0s ago: executing program 1 (id=1255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2040400) unshare(0x2000400) kernel console output (not intermixed with test programs): [ 20.846017][ T29] audit: type=1400 audit(1727923711.308:81): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 25.161891][ T29] audit: type=1400 audit(1727923715.608:82): avc: denied { mounton } for pid=3253 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.163161][ T3253] cgroup: Unknown subsys name 'net' [ 25.184624][ T29] audit: type=1400 audit(1727923715.608:83): avc: denied { mount } for pid=3253 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.212038][ T29] audit: type=1400 audit(1727923715.648:84): avc: denied { unmount } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.366279][ T3253] cgroup: Unknown subsys name 'cpuset' [ 25.372474][ T3253] cgroup: Unknown subsys name 'rlimit' [ 25.482664][ T29] audit: type=1400 audit(1727923715.928:85): avc: denied { setattr } for pid=3253 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.505988][ T29] audit: type=1400 audit(1727923715.928:86): avc: denied { create } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.526461][ T29] audit: type=1400 audit(1727923715.928:87): avc: denied { write } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.547022][ T29] audit: type=1400 audit(1727923715.928:88): avc: denied { read } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.567358][ T29] audit: type=1400 audit(1727923715.928:89): avc: denied { mounton } for pid=3253 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.576585][ T3260] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.592157][ T29] audit: type=1400 audit(1727923715.928:90): avc: denied { mount } for pid=3253 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.624318][ T29] audit: type=1400 audit(1727923716.058:91): avc: denied { relabelto } for pid=3260 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.653897][ T3253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.853598][ T3270] chnl_net:caif_netlink_parms(): no params data found [ 26.864334][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 26.894634][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 26.965235][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.972325][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.979608][ T3270] bridge_slave_0: entered allmulticast mode [ 26.986083][ T3270] bridge_slave_0: entered promiscuous mode [ 27.000362][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.007446][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.014553][ T3266] bridge_slave_0: entered allmulticast mode [ 27.020977][ T3266] bridge_slave_0: entered promiscuous mode [ 27.029856][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.036953][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.044137][ T3266] bridge_slave_1: entered allmulticast mode [ 27.050802][ T3266] bridge_slave_1: entered promiscuous mode [ 27.057353][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.064490][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.071731][ T3270] bridge_slave_1: entered allmulticast mode [ 27.078168][ T3270] bridge_slave_1: entered promiscuous mode [ 27.090717][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 27.122991][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.153926][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.164166][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.178226][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.185338][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.192442][ T3269] bridge_slave_0: entered allmulticast mode [ 27.198910][ T3269] bridge_slave_0: entered promiscuous mode [ 27.210426][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.226917][ T3266] team0: Port device team_slave_0 added [ 27.232849][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.239919][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.247085][ T3269] bridge_slave_1: entered allmulticast mode [ 27.253601][ T3269] bridge_slave_1: entered promiscuous mode [ 27.264569][ T3275] chnl_net:caif_netlink_parms(): no params data found [ 27.276957][ T3266] team0: Port device team_slave_1 added [ 27.318732][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.328399][ T3270] team0: Port device team_slave_0 added [ 27.335106][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.351752][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.359019][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.366391][ T3267] bridge_slave_0: entered allmulticast mode [ 27.372641][ T3267] bridge_slave_0: entered promiscuous mode [ 27.379545][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.386820][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.394049][ T3267] bridge_slave_1: entered allmulticast mode [ 27.400491][ T3267] bridge_slave_1: entered promiscuous mode [ 27.406990][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.414065][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.440264][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.451723][ T3270] team0: Port device team_slave_1 added [ 27.476893][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.483909][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.509936][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.528155][ T3269] team0: Port device team_slave_0 added [ 27.534993][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.544758][ T3269] team0: Port device team_slave_1 added [ 27.567677][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.586721][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.593714][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.619693][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.650088][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.657107][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.683016][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.694122][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.701253][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.727323][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.738094][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.745274][ T3275] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.752518][ T3275] bridge_slave_0: entered allmulticast mode [ 27.758965][ T3275] bridge_slave_0: entered promiscuous mode [ 27.770348][ T3267] team0: Port device team_slave_0 added [ 27.776781][ T3267] team0: Port device team_slave_1 added [ 27.782752][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.789804][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.815907][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.829023][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.836362][ T3275] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.843490][ T3275] bridge_slave_1: entered allmulticast mode [ 27.850003][ T3275] bridge_slave_1: entered promiscuous mode [ 27.858263][ T3266] hsr_slave_0: entered promiscuous mode [ 27.864170][ T3266] hsr_slave_1: entered promiscuous mode [ 27.898088][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.905041][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.931239][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.942927][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.949907][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.975924][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.997439][ T3275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.030635][ T3275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.047879][ T3270] hsr_slave_0: entered promiscuous mode [ 28.053909][ T3270] hsr_slave_1: entered promiscuous mode [ 28.059922][ T3270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.067504][ T3270] Cannot create hsr debugfs directory [ 28.079663][ T3269] hsr_slave_0: entered promiscuous mode [ 28.085938][ T3269] hsr_slave_1: entered promiscuous mode [ 28.091837][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.099447][ T3269] Cannot create hsr debugfs directory [ 28.123609][ T3267] hsr_slave_0: entered promiscuous mode [ 28.129689][ T3267] hsr_slave_1: entered promiscuous mode [ 28.135719][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.143272][ T3267] Cannot create hsr debugfs directory [ 28.155633][ T3275] team0: Port device team_slave_0 added [ 28.175186][ T3275] team0: Port device team_slave_1 added [ 28.218926][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.226116][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.252113][ T3275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.279434][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.286503][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.312454][ T3275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.398312][ T3275] hsr_slave_0: entered promiscuous mode [ 28.404435][ T3275] hsr_slave_1: entered promiscuous mode [ 28.410371][ T3275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.417951][ T3275] Cannot create hsr debugfs directory [ 28.445813][ T3266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.454800][ T3266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.471357][ T3266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.480182][ T3266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.508158][ T3270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.520750][ T3270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.541191][ T3270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.549778][ T3270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.581394][ T3269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.590697][ T3269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.599335][ T3269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.611115][ T3269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.657671][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.686277][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.695567][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.709998][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.721130][ T3275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.737815][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.745096][ T3275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.754805][ T3275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.765046][ T3275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.789163][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.805999][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.814235][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.821367][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.838219][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.845323][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.864515][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.886001][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.904083][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.923609][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.930766][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.939439][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.946519][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.955111][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.962187][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.987684][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.994810][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.050214][ T3270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.060762][ T3270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.080358][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.108164][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.117759][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.126855][ T3275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.138822][ T3275] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.156935][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.163998][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.172797][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.179880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.197968][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.205041][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.214316][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.221578][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.240857][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.270230][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.279527][ T3275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.354287][ T3266] veth0_vlan: entered promiscuous mode [ 29.374465][ T3266] veth1_vlan: entered promiscuous mode [ 29.414543][ T3275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.455130][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.463842][ T3270] veth0_vlan: entered promiscuous mode [ 29.473410][ T3266] veth0_macvtap: entered promiscuous mode [ 29.486156][ T3266] veth1_macvtap: entered promiscuous mode [ 29.495935][ T3270] veth1_vlan: entered promiscuous mode [ 29.507953][ T3269] veth0_vlan: entered promiscuous mode [ 29.516841][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.526489][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.541172][ T3269] veth1_vlan: entered promiscuous mode [ 29.559128][ T3266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.567982][ T3266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.576793][ T3266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.585688][ T3266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.603730][ T3270] veth0_macvtap: entered promiscuous mode [ 29.626719][ T3269] veth0_macvtap: entered promiscuous mode [ 29.634191][ T3270] veth1_macvtap: entered promiscuous mode [ 29.646939][ T3269] veth1_macvtap: entered promiscuous mode [ 29.660128][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.670672][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.684905][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.709595][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.720104][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.733376][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.747706][ T3267] veth0_vlan: entered promiscuous mode [ 29.755880][ T3267] veth1_vlan: entered promiscuous mode [ 29.761734][ T3266] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.763845][ T3270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.785055][ T3270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.794045][ T3270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.802896][ T3270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.812997][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.823460][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.833338][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.843820][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.854490][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.871259][ T3275] veth0_vlan: entered promiscuous mode [ 29.892934][ T3267] veth0_macvtap: entered promiscuous mode [ 29.905302][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.915820][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.925659][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.936281][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.947030][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.963843][ T3267] veth1_macvtap: entered promiscuous mode [ 29.987421][ T3269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.996267][ T3269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.005119][ T3269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.013923][ T3269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.040165][ T3275] veth1_vlan: entered promiscuous mode [ 30.056479][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.067051][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.077034][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.087493][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.097413][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.107909][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.120964][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.153458][ T3275] veth0_macvtap: entered promiscuous mode [ 30.163805][ T3275] veth1_macvtap: entered promiscuous mode [ 30.174239][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.184725][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.194649][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.205307][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.215287][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.225848][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.235733][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.246196][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.258615][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.270827][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 30.270842][ T29] audit: type=1400 audit(1727923720.718:131): avc: denied { open } for pid=3416 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.296696][ T29] audit: type=1400 audit(1727923720.718:132): avc: denied { kernel } for pid=3416 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.305981][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.326350][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.336174][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.346718][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.356554][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.367017][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.381641][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.389899][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.400488][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.410396][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.420829][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.430704][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.441416][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.451317][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.461772][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.474583][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.498206][ T29] audit: type=1326 audit(1727923720.948:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.12" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f362b19dff9 code=0x0 [ 30.499004][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529845][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.538640][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547514][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.560645][ T3275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.569451][ T3275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.578247][ T3275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.587048][ T3275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.682664][ T29] audit: type=1400 audit(1727923721.128:134): avc: denied { execute } for pid=3435 comm="syz.3.14" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 30.762600][ T3441] loop0: detected capacity change from 0 to 256 [ 30.792676][ T29] audit: type=1400 audit(1727923721.228:135): avc: denied { mount } for pid=3440 comm="syz.0.1" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.803976][ T3443] loop3: detected capacity change from 0 to 2048 [ 30.827403][ T29] audit: type=1400 audit(1727923721.278:136): avc: denied { unmount } for pid=3267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.866883][ T29] audit: type=1326 audit(1727923721.278:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 30.871236][ T3447] loop0: detected capacity change from 0 to 512 [ 30.890007][ T29] audit: type=1326 audit(1727923721.278:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 30.890041][ T29] audit: type=1326 audit(1727923721.278:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 30.890071][ T29] audit: type=1326 audit(1727923721.278:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 30.968267][ T3341] kernel write not supported for file /sg0 (pid: 3341 comm: kworker/0:3) [ 30.976349][ T3447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.981058][ T3443] Alternate GPT is invalid, using primary GPT. [ 30.989686][ T3447] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.995551][ T3443] loop3: p1 p2 p3 [ 31.038850][ T3447] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 31.061858][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.092367][ T3457] loop2: detected capacity change from 0 to 512 [ 31.129277][ T3457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.152236][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 31.159568][ T3457] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.180316][ T3475] mmap: syz.3.26 (3475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.209953][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.222039][ T3458] udevd[3458]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 31.226916][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 31.240893][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 31.333702][ T3487] loop4: detected capacity change from 0 to 2048 [ 31.365212][ T3487] ======================================================= [ 31.365212][ T3487] WARNING: The mand mount option has been deprecated and [ 31.365212][ T3487] and is ignored by this kernel. Remove the mand [ 31.365212][ T3487] option from the mount to silence this warning. [ 31.365212][ T3487] ======================================================= [ 31.373350][ T3494] loop1: detected capacity change from 0 to 1024 [ 31.423111][ T3487] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 31.441174][ T3494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.580295][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.39'. [ 31.629101][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.734204][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 31.780616][ T3530] batadv_slave_1: entered promiscuous mode [ 31.815561][ T3530] batadv_slave_1: left promiscuous mode [ 31.904555][ T3552] syz.1.62[3552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.904677][ T3552] syz.1.62[3552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.918067][ T3552] syz.1.62[3552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.030821][ T3568] netlink: 168 bytes leftover after parsing attributes in process `syz.1.69'. [ 32.088867][ T3572] loop3: detected capacity change from 0 to 1024 [ 32.096356][ T3572] EXT4-fs: Ignoring removed oldalloc option [ 32.106399][ T3572] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.144619][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.162328][ T3341] kernel write not supported for file /input/event0 (pid: 3341 comm: kworker/0:3) [ 32.222151][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.326780][ T3594] loop3: detected capacity change from 0 to 512 [ 32.335434][ T3594] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 32.353397][ T3594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 32.361598][ T3594] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.368339][ T3594] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 32.382535][ T3594] EXT4-fs (loop3): Remounting filesystem read-only [ 32.389233][ T3594] EXT4-fs (loop3): 1 truncate cleaned up [ 32.395386][ T3594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 32.407551][ T3594] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 32.414529][ T3594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 32.454561][ T3589] syz.2.78 (3589) used greatest stack depth: 10624 bytes left [ 32.474824][ T3600] dvmrp0: entered allmulticast mode [ 32.481745][ T3600] dvmrp0: left allmulticast mode [ 32.614109][ T3609] loop2: detected capacity change from 0 to 1024 [ 32.627834][ T3609] EXT4-fs: Ignoring removed nobh option [ 32.648561][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.750391][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.857138][ T3637] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.904306][ T3645] loop2: detected capacity change from 0 to 128 [ 33.001340][ T3660] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 33.019392][ T3660] veth1_macvtap: left promiscuous mode [ 33.027690][ T3664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 33.119094][ T3674] loop3: detected capacity change from 0 to 1024 [ 33.144260][ T3674] EXT4-fs: Ignoring removed orlov option [ 33.153198][ T3674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.169593][ T3674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.194913][ T3674] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 33.214183][ T3678] loop0: detected capacity change from 0 to 4096 [ 33.232873][ T3674] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.3.116: corrupted in-inode xattr: bad magic number in in-inode xattr [ 33.289023][ T3674] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.116: attempt to clear invalid blocks 1634560256 len 1 [ 33.322564][ T3688] loop2: detected capacity change from 0 to 1024 [ 33.345519][ T3692] loop1: detected capacity change from 0 to 2048 [ 33.352998][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.364853][ T3688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.388932][ T3700] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 33.399255][ T3692] Alternate GPT is invalid, using primary GPT. [ 33.405666][ T3692] loop1: p1 p2 p3 [ 33.449146][ T2968] Alternate GPT is invalid, using primary GPT. [ 33.452157][ T3706] loop0: detected capacity change from 0 to 128 [ 33.455513][ T2968] loop1: p1 p2 p3 [ 33.469980][ T3704] loop3: detected capacity change from 0 to 1024 [ 33.485382][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.496508][ T3704] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.529932][ T3704] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 33.554810][ T3704] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.580884][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 33.586866][ T3458] udevd[3458]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 33.595945][ T3704] EXT4-fs error (device loop3): ext4_map_blocks:705: inode #3: block 3: comm syz.3.130: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.601997][ T3460] udevd[3460]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.629815][ T3717] ------------[ cut here ]------------ [ 33.633977][ T3704] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.130: Failed to acquire dquot type 0 [ 33.635326][ T3717] refcount_t: underflow; use-after-free. [ 33.635632][ T3717] WARNING: CPU: 1 PID: 3717 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 33.661716][ T3717] Modules linked in: [ 33.661832][ T3704] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 3: comm syz.3.130: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.665678][ T3717] CPU: 1 UID: 0 PID: 3717 Comm: syz.2.135 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 33.690129][ T3717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.700368][ T3717] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 33.706500][ T3704] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.130: Failed to acquire dquot type 0 [ 33.706605][ T3717] Code: 72 ff ff ff e8 7b 87 71 ff 48 c7 c7 3e d7 b2 86 e8 0f 6d 8a ff c6 05 a6 2d f4 04 01 90 48 c7 c7 bd a4 1b 86 e8 4b 4c 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 4c 87 71 ff 48 c7 c7 3b d7 b2 86 e8 [ 33.737464][ T3717] RSP: 0018:ffffc9000cebfb28 EFLAGS: 00010246 [ 33.743549][ T3717] RAX: 2684ae0b0561ee00 RBX: ffff8881041adee4 RCX: 0000000000040000 [ 33.751581][ T3717] RDX: ffffc9000421c000 RSI: 000000000000090c RDI: 000000000000090d [ 33.752016][ T3704] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.130: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.759670][ T3717] RBP: 0000000000000003 R08: ffffffff8111f757 R09: 0000000000000000 [ 33.781053][ T3717] R10: 0001ffffffffffff R11: 0001c9000cebfa20 R12: ffff88811544d468 [ 33.783209][ T3704] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 3: comm syz.3.130: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.789073][ T3717] R13: 0000000000000002 R14: ffff8881041adee4 R15: 0000000000000000 [ 33.810985][ T3717] FS: 00007f9a339476c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 33.814376][ T3704] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.130: Failed to acquire dquot type 0 [ 33.820029][ T3717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.820048][ T3717] CR2: 0000001b3011eff8 CR3: 0000000115588000 CR4: 00000000003506f0 [ 33.820064][ T3717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.841569][ T3704] EXT4-fs (loop3): 1 orphan inode deleted [ 33.845827][ T3717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.845847][ T3717] Call Trace: [ 33.845854][ T3717] [ 33.845863][ T3717] ? __warn+0x141/0x350 [ 33.864300][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.867696][ T3717] ? report_bug+0x315/0x420 [ 33.895223][ T3717] ? refcount_warn_saturate+0x1c6/0x230 [ 33.900941][ T3717] ? handle_bug+0x60/0x90 [ 33.905380][ T3717] ? exc_invalid_op+0x1a/0x50 [ 33.910095][ T3717] ? asm_exc_invalid_op+0x1a/0x20 [ 33.915302][ T3717] ? __warn_printk+0x167/0x1b0 [ 33.920117][ T3717] ? refcount_warn_saturate+0x1c6/0x230 [ 33.925728][ T3717] ? refcount_warn_saturate+0x1c5/0x230 [ 33.928838][ T3704] syz.3.130 (3704) used greatest stack depth: 10416 bytes left [ 33.931283][ T3717] sk_skb_reason_drop+0xe9/0x290 [ 33.943850][ T3717] j1939_session_put+0x157/0x2a0 [ 33.948912][ T3717] j1939_sk_sendmsg+0xa71/0xc00 [ 33.953802][ T3717] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 33.959490][ T3717] __sock_sendmsg+0x140/0x180 [ 33.961449][ T3460] udevd[3460]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 33.964248][ T3717] ____sys_sendmsg+0x312/0x410 [ 33.978838][ T3717] __sys_sendmsg+0x1d9/0x270 [ 33.979060][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 33.983527][ T3717] ? futex_wait+0x18e/0x1c0 [ 33.997862][ T3717] __x64_sys_sendmsg+0x46/0x50 [ 34.002740][ T3717] x64_sys_call+0x2689/0x2d60 [ 34.007494][ T3717] do_syscall_64+0xc9/0x1c0 [ 34.009115][ T3724] loop0: detected capacity change from 0 to 736 [ 34.012033][ T3717] ? clear_bhb_loop+0x55/0xb0 [ 34.023005][ T3717] ? clear_bhb_loop+0x55/0xb0 [ 34.027874][ T3717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.033917][ T3717] RIP: 0033:0x7f9a34ccdff9 [ 34.038492][ T3717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.048191][ T3724] rock: directory entry would overflow storage [ 34.058215][ T3717] RSP: 002b:00007f9a33947038 EFLAGS: 00000246 [ 34.064368][ T3724] rock: sig=0x5850, size=36, remaining=14 [ 34.071538][ T3479] udevd[3479]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 34.076257][ T3717] ORIG_RAX: 000000000000002e [ 34.090814][ T3717] RAX: ffffffffffffffda RBX: 00007f9a34e85f80 RCX: 00007f9a34ccdff9 [ 34.098853][ T3717] RDX: 0000000004000001 RSI: 0000000020000580 RDI: 0000000000000003 [ 34.106910][ T3717] RBP: 00007f9a34d40296 R08: 0000000000000000 R09: 0000000000000000 [ 34.109630][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 34.114883][ T3717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.114902][ T3717] R13: 0000000000000000 R14: 00007f9a34e85f80 R15: 00007ffeb9e812f8 [ 34.139856][ T3717] [ 34.142889][ T3717] ---[ end trace 0000000000000000 ]--- [ 34.169972][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.184216][ T3727] syz.4.141[3727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.184299][ T3727] syz.4.141[3727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.198361][ T3727] syz.4.141[3727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.238232][ T3734] loop3: detected capacity change from 0 to 512 [ 34.287809][ T3734] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.295948][ T3731] lo speed is unknown, defaulting to 1000 [ 34.300925][ T3734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.334784][ T3731] lo speed is unknown, defaulting to 1000 [ 34.360287][ T3734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 34.363405][ T3731] lo speed is unknown, defaulting to 1000 [ 34.370846][ T3734] System zones: 1-12 [ 34.379109][ T3734] EXT4-fs (loop3): 1 truncate cleaned up [ 34.385443][ T3734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.399292][ T3731] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.408021][ T3731] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 34.417055][ T3755] loop1: detected capacity change from 0 to 256 [ 34.427705][ T3755] FAT-fs (loop1): Directory bread(block 1285) failed [ 34.434856][ T3734] capability: warning: `syz.3.140' uses deprecated v2 capabilities in a way that may be insecure [ 34.457843][ T3731] lo speed is unknown, defaulting to 1000 [ 34.464260][ T1644] tipc: Subscription rejected, illegal request [ 34.470084][ T3731] lo speed is unknown, defaulting to 1000 [ 34.478001][ T3731] lo speed is unknown, defaulting to 1000 [ 34.484813][ T3731] lo speed is unknown, defaulting to 1000 [ 34.489860][ T3755] FAT-fs (loop1): Directory bread(block 1285) failed [ 34.497578][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.517456][ T3755] FAT-fs (loop1): Directory bread(block 1285) failed [ 34.524208][ T3731] lo speed is unknown, defaulting to 1000 [ 34.532407][ T3731] lo speed is unknown, defaulting to 1000 [ 34.538097][ T3755] FAT-fs (loop1): Directory bread(block 1285) failed [ 34.558606][ T3764] loop3: detected capacity change from 0 to 128 [ 34.583553][ T3764] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 34.596774][ T3771] loop0: detected capacity change from 0 to 512 [ 34.620391][ T3774] xt_hashlimit: max too large, truncated to 1048576 [ 34.628444][ T3771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.641185][ T3779] loop1: detected capacity change from 0 to 2048 [ 34.652425][ T3771] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.669203][ T3764] FAT-fs (loop3): FAT read failed (blocknr 128) [ 34.706843][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.719071][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.736582][ T3779] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.751729][ T3779] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 34.764388][ T3779] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.764388][ T3779] [ 34.774252][ T3779] EXT4-fs (loop1): Total free blocks count 0 [ 34.780281][ T3779] EXT4-fs (loop1): Free/Dirty block details [ 34.786331][ T3779] EXT4-fs (loop1): free_blocks=2415919104 [ 34.792070][ T3779] EXT4-fs (loop1): dirty_blocks=48 [ 34.797267][ T3779] EXT4-fs (loop1): Block reservation details [ 34.803358][ T3779] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 34.813151][ T3797] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 34.815048][ T3795] loop4: detected capacity change from 0 to 512 [ 34.832173][ T3795] EXT4-fs: Ignoring removed bh option [ 34.837988][ T3795] EXT4-fs: inline encryption not supported [ 34.847966][ T3795] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.168: corrupted in-inode xattr: invalid ea_ino [ 34.864046][ T3779] syz.1.161 (3779) used greatest stack depth: 9944 bytes left [ 34.886041][ T3795] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.168: couldn't read orphan inode 15 (err -117) [ 34.916345][ T3795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.979718][ T3810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 34.993450][ T3818] syz.1.179[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.993550][ T3818] syz.1.179[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.009069][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.011658][ T3820] loop3: detected capacity change from 0 to 512 [ 35.020540][ T3818] syz.1.179[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.039932][ T3820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.093847][ T3820] EXT4-fs (loop3): 1 truncate cleaned up [ 35.097641][ T3828] loop1: detected capacity change from 0 to 1024 [ 35.100578][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.137837][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.158817][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.185376][ T3836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.187'. [ 35.191196][ T3838] loop3: detected capacity change from 0 to 512 [ 35.194364][ T3836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.187'. [ 35.202091][ T3838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.218176][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.220967][ T3838] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 35.238037][ T3838] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 35.253056][ T3838] EXT4-fs (loop3): 1 truncate cleaned up [ 35.259255][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.281241][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 35.281258][ T29] audit: type=1326 audit(1727923725.728:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 35.310869][ T29] audit: type=1326 audit(1727923725.728:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 35.334574][ T29] audit: type=1326 audit(1727923725.728:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 35.357855][ T29] audit: type=1326 audit(1727923725.728:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 35.363732][ T3847] loop4: detected capacity change from 0 to 2048 [ 35.381235][ T29] audit: type=1326 audit(1727923725.728:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 35.392641][ T3838] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 35.429597][ T3838] EXT4-fs (loop3): Remounting filesystem read-only [ 35.442754][ T3847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.456473][ T29] audit: type=1400 audit(1727923725.908:332): avc: denied { relabelfrom } for pid=3848 comm="syz.1.192" name="" dev="pipefs" ino=5376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 35.494845][ T3847] 9p: Unknown Cache mode or invalid value äZU¥åñ´q–loose [ 35.499002][ T29] audit: type=1400 audit(1727923725.938:333): avc: denied { mounton } for pid=3846 comm="syz.4.191" path="/28/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.526565][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.538022][ T29] audit: type=1400 audit(1727923725.998:334): avc: denied { create } for pid=3856 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.558143][ T29] audit: type=1400 audit(1727923725.998:335): avc: denied { ioctl } for pid=3856 comm="syz.1.196" path="socket:[4594]" dev="sockfs" ino=4594 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.578210][ T3859] loop1: detected capacity change from 0 to 2048 [ 35.583246][ T29] audit: type=1400 audit(1727923725.998:336): avc: denied { bind } for pid=3856 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.638542][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.648628][ T3859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.680559][ T3871] syz.3.201[3871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.685240][ T3859] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.197: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 35.733690][ T3859] EXT4-fs (loop1): Remounting filesystem read-only [ 35.849107][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.937788][ T3900] loop1: detected capacity change from 0 to 764 [ 35.944355][ T3904] loop4: detected capacity change from 0 to 128 [ 35.961794][ T3900] Symlink component flag not implemented [ 35.969722][ T3904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.982207][ T3904] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.990125][ T3900] Symlink component flag not implemented (129) [ 36.022068][ T3900] rock: directory entry would overflow storage [ 36.028415][ T3900] rock: sig=0x4f50, size=4, remaining=3 [ 36.034024][ T3900] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 36.046063][ T3275] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.082199][ T3914] SELinux: failed to load policy [ 36.146137][ T3931] netlink: 'syz.0.226': attribute type 21 has an invalid length. [ 36.165995][ T3937] loop1: detected capacity change from 0 to 256 [ 36.245401][ T3956] capability: warning: `syz.0.240' uses 32-bit capabilities (legacy support in use) [ 36.272016][ T3960] loop1: detected capacity change from 0 to 512 [ 36.296991][ T3960] EXT4-fs (loop1): too many log groups per flexible block group [ 36.304721][ T3960] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 36.308698][ C0] Illegal XDP return value 16128 on prog (id 110) dev veth1_to_team, expect packet loss! [ 36.311826][ T3960] EXT4-fs (loop1): mount failed [ 36.327516][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.336269][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.366175][ T3974] process 'syz.0.245' launched './file1' with NULL argv: empty string added [ 36.418587][ T3982] Invalid ELF header magic: != ELF [ 36.439312][ T3984] __nla_validate_parse: 1 callbacks suppressed [ 36.439332][ T3984] netlink: 165 bytes leftover after parsing attributes in process `syz.4.247'. [ 36.472426][ T3988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.249'. [ 36.481730][ T3988] unsupported nlmsg_type 40 [ 36.526917][ T3996] xt_hashlimit: max too large, truncated to 1048576 [ 36.549287][ T4001] netlink: 'syz.0.255': attribute type 4 has an invalid length. [ 36.557010][ T4001] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.255'. [ 36.609088][ T4011] loop4: detected capacity change from 0 to 2048 [ 36.616665][ T4011] EXT4-fs error (device loop4): __ext4_fill_super:5458: inode #2: comm syz.4.259: casefold flag without casefold feature [ 36.629622][ T4011] EXT4-fs (loop4): get root inode failed [ 36.635445][ T4011] EXT4-fs (loop4): mount failed [ 36.697757][ T4023] loop0: detected capacity change from 0 to 512 [ 36.720656][ T4023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.733349][ T4023] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.772795][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.829724][ T4050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.870149][ T4053] loop1: detected capacity change from 0 to 2048 [ 36.933848][ T4053] loop1: p1 < > p4 [ 36.938388][ T4053] loop1: p4 size 8388608 extends beyond EOD, truncated [ 36.992873][ T4077] Zero length message leads to an empty skb [ 37.024587][ T4080] loop2: detected capacity change from 0 to 1024 [ 37.067309][ T4080] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.088116][ T4080] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.290: Invalid block bitmap block 0 in block_group 0 [ 37.101796][ T4080] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.290: Failed to acquire dquot type 0 [ 37.115058][ T4080] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.290: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.129982][ T4080] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.290: Invalid inode bitmap blk 0 in block_group 0 [ 37.151714][ T4080] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 37.165217][ T4080] EXT4-fs (loop2): 1 orphan inode deleted [ 37.174960][ T4080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.209107][ T4080] syz.2.290 (4080) used greatest stack depth: 9624 bytes left [ 37.250465][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.279435][ T1644] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:7: Failed to release dquot type 0 [ 37.471854][ T4122] loop3: detected capacity change from 0 to 2048 [ 37.499230][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.506470][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.524685][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.605877][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.750266][ T4145] loop3: detected capacity change from 0 to 256 [ 37.784714][ T4145] FAT-fs (loop3): Directory bread(block 64) failed [ 37.794310][ T4145] FAT-fs (loop3): Directory bread(block 65) failed [ 37.806337][ T4145] FAT-fs (loop3): Directory bread(block 66) failed [ 37.813880][ T4145] FAT-fs (loop3): Directory bread(block 67) failed [ 37.820614][ T4145] FAT-fs (loop3): Directory bread(block 68) failed [ 37.828909][ T4145] FAT-fs (loop3): Directory bread(block 69) failed [ 37.835600][ T4145] FAT-fs (loop3): Directory bread(block 70) failed [ 37.842218][ T4145] FAT-fs (loop3): Directory bread(block 71) failed [ 37.849795][ T4145] FAT-fs (loop3): Directory bread(block 72) failed [ 37.856559][ T4145] FAT-fs (loop3): Directory bread(block 73) failed [ 37.916177][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.947232][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.126676][ T4077] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.135701][ T4077] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.144664][ T4077] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.153676][ T4077] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.297720][ T4169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 38.400554][ T4186] netlink: 140 bytes leftover after parsing attributes in process `syz.1.328'. [ 38.411470][ T4187] loop3: detected capacity change from 0 to 164 [ 38.440340][ T4187] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=164 [ 38.443296][ T4189] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 38.513967][ T4204] loop1: detected capacity change from 0 to 128 [ 38.522509][ T4200] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 38.534707][ T4206] loop2: detected capacity change from 0 to 512 [ 38.544195][ T4200] lo: entered promiscuous mode [ 38.560748][ T4200] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 38.624783][ T4206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.637534][ T4206] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.657928][ T4223] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.669004][ T4206] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz.2.337: Directory hole found for htree leaf block 0 [ 38.706572][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.857019][ T4254] loop3: detected capacity change from 0 to 512 [ 38.864693][ T4254] ext4: Unknown parameter 'nouser_xattr' [ 38.900386][ T4259] bpf_get_probe_write_proto: 14 callbacks suppressed [ 38.900404][ T4259] syz.4.363[4259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.908532][ T4259] syz.4.363[4259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.936157][ T4259] syz.4.363[4259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.994586][ T4273] netlink: 'syz.3.367': attribute type 39 has an invalid length. [ 39.011721][ T4277] raw_sendmsg: syz.0.369 forgot to set AF_INET. Fix it! [ 39.013577][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 39.058860][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.066145][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.078857][ T4283] loop1: detected capacity change from 0 to 128 [ 39.087090][ T4283] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.099933][ T4283] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.209253][ T3266] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.242132][ T4294] loop2: detected capacity change from 0 to 2048 [ 39.275063][ T4306] loop0: detected capacity change from 0 to 2048 [ 39.317183][ T4306] loop0: p3 < > p4 < > [ 39.321458][ T4306] loop0: partition table partially beyond EOD, truncated [ 39.335540][ T4306] loop0: p3 start 4284289 is beyond EOD, truncated [ 39.344487][ T4096] IPVS: starting estimator thread 0... [ 39.435387][ T4319] IPVS: using max 2208 ests per chain, 110400 per kthread [ 39.460322][ T4336] loop2: detected capacity change from 0 to 512 [ 39.492230][ T4336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.542087][ T4336] EXT4-fs (loop2): 1 truncate cleaned up [ 39.551609][ T4346] loop3: detected capacity change from 0 to 256 [ 39.558206][ T4336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.601016][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.608156][ T4352] loop0: detected capacity change from 0 to 512 [ 39.648766][ T4352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.661793][ T4352] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.684231][ T4362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.694289][ T4362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.696691][ T4366] program syz.3.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.711615][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.726067][ T4358] hub 6-0:1.0: USB hub found [ 39.730977][ T4358] hub 6-0:1.0: 8 ports detected [ 39.748201][ T4372] loop3: detected capacity change from 0 to 128 [ 39.755356][ T4372] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 39.787921][ T4376] openvswitch: netlink: Message has 8 unknown bytes. [ 40.157104][ T4456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=4456 comm=syz.4.454 [ 40.181935][ T4454] loop0: detected capacity change from 0 to 1024 [ 40.188762][ T4454] EXT4-fs: Ignoring removed orlov option [ 40.207746][ T4454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.297884][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.382093][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 40.382145][ T29] audit: type=1400 audit(1727923730.828:475): avc: denied { name_bind } for pid=4474 comm="syz.0.462" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.447287][ T4490] loop4: detected capacity change from 0 to 512 [ 40.478220][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.490838][ T4490] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.507174][ T4490] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 40.520125][ T29] audit: type=1400 audit(1727923730.958:476): avc: denied { create } for pid=4501 comm="syz.2.472" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.541103][ T29] audit: type=1400 audit(1727923730.958:477): avc: denied { setattr } for pid=4501 comm="syz.2.472" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.563503][ T29] audit: type=1400 audit(1727923730.958:478): avc: denied { read } for pid=4501 comm="syz.2.472" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.585717][ T29] audit: type=1400 audit(1727923730.958:479): avc: denied { open } for pid=4501 comm="syz.2.472" path="/81/file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.608297][ T4490] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 40.608398][ T4490] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.467: Failed to acquire dquot type 0 [ 40.619022][ T29] audit: type=1400 audit(1727923730.978:480): avc: denied { unlink } for pid=3270 comm="syz-executor" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.666236][ T29] audit: type=1400 audit(1727923731.108:481): avc: denied { create } for pid=4507 comm="syz.2.475" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.687599][ T29] audit: type=1400 audit(1727923731.108:482): avc: denied { write } for pid=4507 comm="syz.2.475" name="file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.715253][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.791282][ T4514] loop4: detected capacity change from 0 to 2048 [ 40.828162][ T4525] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 40.941289][ T4546] sg_write: process 219 (syz.1.493) changed security contexts after opening file descriptor, this is not allowed. [ 40.958831][ T4546] program syz.1.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.008396][ T4553] loop3: detected capacity change from 0 to 512 [ 41.031556][ T4553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.050190][ T4553] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.061603][ T4553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.114225][ T4578] loop3: detected capacity change from 0 to 512 [ 41.121644][ T4578] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.179172][ T4578] EXT4-fs (loop3): 1 truncate cleaned up [ 41.190160][ T4578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.288771][ T4600] loop1: detected capacity change from 0 to 2048 [ 41.299357][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.310049][ T4600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.397335][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.511887][ T4637] syz.1.533[4637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.511973][ T4637] syz.1.533[4637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.523589][ T4637] syz.1.533[4637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.553322][ T4645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 42.057963][ T4669] loop0: detected capacity change from 0 to 164 [ 42.065064][ T4669] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 42.077109][ T4669] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 42.178259][ T4683] program syz.0.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.252646][ T4691] loop0: detected capacity change from 0 to 1024 [ 42.259545][ T4691] EXT4-fs: Ignoring removed bh option [ 42.266415][ T4691] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.277783][ T4691] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 42.293947][ T4691] EXT4-fs (loop0): mount failed [ 42.300358][ T4698] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 42.312601][ T4698] geneve1: entered promiscuous mode [ 42.325739][ T4698] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 42.387304][ T4714] loop2: detected capacity change from 0 to 512 [ 42.394022][ T4714] EXT4-fs: Ignoring removed orlov option [ 42.400346][ T4714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.417723][ T4714] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.424698][ T4714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.566: bg 0: block 248: padding at end of block bitmap is not set [ 42.436486][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 42.441691][ T4714] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.566: Failed to acquire dquot type 1 [ 42.461179][ T4714] EXT4-fs (loop2): 1 truncate cleaned up [ 42.474835][ T4714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.491333][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 42.528707][ T4714] sg_write: data in/out 2031580/56 bytes for SCSI command 0x30-- guessing data in; [ 42.528707][ T4714] program syz.2.566 not setting count and/or reply_len properly [ 42.549815][ T4721] sctp: [Deprecated]: syz.3.569 (pid 4721) Use of int in maxseg socket option. [ 42.549815][ T4721] Use struct sctp_assoc_value instead [ 42.564845][ T4714] syz.2.566 (4714) used greatest stack depth: 9384 bytes left [ 42.583134][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.695768][ T4755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.717270][ T4755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.802237][ T4776] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 42.811632][ T4776] syz_tun: entered promiscuous mode [ 42.836957][ T4776] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 43.197731][ T4850] netlink: 364 bytes leftover after parsing attributes in process `syz.4.631'. [ 43.253097][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 43.281912][ T4867] loop3: detected capacity change from 0 to 512 [ 43.289700][ T4867] EXT4-fs: inline encryption not supported [ 43.299815][ T4867] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.316211][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 43.334188][ T4871] loop0: detected capacity change from 0 to 512 [ 43.340948][ T4871] EXT4-fs: Ignoring removed orlov option [ 43.345941][ T4873] tipc: Started in network mode [ 43.351526][ T4873] tipc: Node identity alid-nam, cluster identity 4711 [ 43.351723][ T4871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.358405][ T4873] tipc: Enabling of bearer rejected, failed to enable media [ 43.384517][ T4871] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.399942][ T4871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.641: bg 0: block 248: padding at end of block bitmap is not set [ 43.419291][ T4882] loop3: detected capacity change from 0 to 512 [ 43.424693][ T4871] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.641: Failed to acquire dquot type 1 [ 43.427124][ T4882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.437285][ T4871] EXT4-fs (loop0): 1 truncate cleaned up [ 43.449762][ T4871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.462959][ T4882] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.646: inode #0: comm syz.3.646: iget: illegal inode # [ 43.477861][ T4882] EXT4-fs (loop3): Remounting filesystem read-only [ 43.484435][ T4882] EXT4-fs (loop3): get orphan inode failed [ 43.490532][ T4882] EXT4-fs (loop3): mount failed [ 43.491375][ T4871] sg_write: data in/out 2031580/56 bytes for SCSI command 0x30-- guessing data in; [ 43.491375][ T4871] program syz.0.641 not setting count and/or reply_len properly [ 43.499073][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.547458][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.553477][ T4871] syz.0.641 (4871) used greatest stack depth: 9376 bytes left [ 43.568697][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.133209][ T4954] syz.0.690[4954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.133256][ T4954] syz.0.690[4954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.144788][ T4954] syz.0.690[4954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.217165][ T4964] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 44.220255][ T4962] loop0: detected capacity change from 0 to 512 [ 44.280157][ T4971] syz.4.688[4971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.280252][ T4971] syz.4.688[4971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.294210][ T4962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.301794][ T4971] syz.4.688[4971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.307116][ T4962] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.332915][ T4971] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 44.341836][ T4962] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.476869][ T4995] loop4: detected capacity change from 0 to 764 [ 44.534826][ T5004] Cannot find set identified by id 0 to match [ 44.656910][ T5012] netlink: 76 bytes leftover after parsing attributes in process `syz.3.706'. [ 44.776961][ T5024] loop0: detected capacity change from 0 to 512 [ 44.783631][ T5024] EXT4-fs: inline encryption not supported [ 44.790158][ T5024] EXT4-fs: Mount option(s) incompatible with ext2 [ 44.883786][ T5029] loop0: detected capacity change from 0 to 2048 [ 44.923684][ T5031] loop0: detected capacity change from 0 to 512 [ 44.936998][ T5031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.949747][ T5031] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.972367][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.150260][ T5037] loop2: detected capacity change from 0 to 1024 [ 45.188397][ T5037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.337181][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.412901][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 45.421910][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 45.450423][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 45.450441][ T29] audit: type=1400 audit(1727923735.898:628): avc: denied { mounton } for pid=5054 comm="syz.1.726" path="/proc/292/cgroup" dev="proc" ino=9300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 45.482896][ T5055] loop4: detected capacity change from 0 to 512 [ 45.495554][ T5055] EXT4-fs: inline encryption not supported [ 45.503342][ T5055] EXT4-fs: Mount option(s) incompatible with ext2 [ 45.612226][ T5068] x_tables: unsorted underflow at hook 3 [ 45.706156][ T5077] can0: slcan on ttyS3. [ 45.746830][ T29] audit: type=1326 audit(1727923736.198:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 45.785280][ T5077] can0 (unregistered): slcan off ttyS3. [ 45.790948][ T5077] Falling back ldisc for ttyS3. [ 45.794605][ T29] audit: type=1326 audit(1727923736.218:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 45.819153][ T29] audit: type=1326 audit(1727923736.218:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 45.842581][ T29] audit: type=1326 audit(1727923736.218:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9bd9dff9 code=0x7ffc0000 [ 45.890579][ T5086] loop2: detected capacity change from 0 to 128 [ 45.899316][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 45.962836][ T29] audit: type=1326 audit(1727923736.408:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34ccdff9 code=0x7ffc0000 [ 45.986176][ T29] audit: type=1326 audit(1727923736.408:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34ccdff9 code=0x7ffc0000 [ 46.011972][ T29] audit: type=1326 audit(1727923736.468:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9a34ccdff9 code=0x7ffc0000 [ 46.035476][ T29] audit: type=1326 audit(1727923736.468:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34ccdff9 code=0x7ffc0000 [ 46.058722][ T29] audit: type=1326 audit(1727923736.468:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34ccdff9 code=0x7ffc0000 [ 46.085741][ T5102] loop3: detected capacity change from 0 to 256 [ 46.161126][ T5121] loop3: detected capacity change from 0 to 1024 [ 46.181431][ T5125] loop2: detected capacity change from 0 to 1024 [ 46.190615][ T5125] EXT4-fs: Ignoring removed i_version option [ 46.197054][ T5125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.212157][ T5121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.226579][ T5125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.248849][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /145/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.252738][ T5139] loop1: detected capacity change from 0 to 512 [ 46.278956][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.298791][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.299284][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.319981][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /145/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.341787][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.357674][ T5139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.373456][ T5139] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.375511][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.398011][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /145/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.431457][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.451619][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.463342][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /145/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.464951][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.485872][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.513124][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.526153][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /145/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.548970][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.569301][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.581302][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.596366][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.609546][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.622029][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.634211][ T3269] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 46.671694][ T5158] loop1: detected capacity change from 0 to 256 [ 46.695855][ T5158] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.703363][ T5164] __nla_validate_parse: 2 callbacks suppressed [ 46.703381][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 46.724036][ T5158] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.882473][ T5181] loop2: detected capacity change from 0 to 512 [ 46.889689][ T5181] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 46.900578][ T5181] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 46.907131][ T5181] EXT4-fs (loop2): mount failed [ 46.909458][ T5186] loop1: detected capacity change from 0 to 1024 [ 46.913104][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.934086][ T1399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.958673][ T5186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.991181][ T5190] loop2: detected capacity change from 0 to 512 [ 46.993818][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.026620][ T1399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.037744][ T5194] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 47.045521][ T5194] netlink: 'syz.2.789': attribute type 2 has an invalid length. [ 47.069694][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 47.109293][ T1399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.149039][ T5209] loop4: detected capacity change from 0 to 1024 [ 47.163521][ T1399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.174349][ T5209] EXT4-fs: Ignoring removed bh option [ 47.194288][ T5224] syz.2.799[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.194451][ T5224] syz.2.799[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.205863][ T5224] syz.2.799[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.255670][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.271776][ T5195] chnl_net:caif_netlink_parms(): no params data found [ 47.315130][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.387595][ T1399] bridge_slave_1: left allmulticast mode [ 47.393295][ T1399] bridge_slave_1: left promiscuous mode [ 47.398970][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.431572][ T1399] bridge_slave_0: left allmulticast mode [ 47.437281][ T1399] bridge_slave_0: left promiscuous mode [ 47.442996][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.460312][ T5239] loop2: detected capacity change from 0 to 8192 [ 47.515696][ T5239] loop2: p2 p3 p4 [ 47.525176][ T5239] loop2: p2 start 452985600 is beyond EOD, truncated [ 47.531929][ T5239] loop2: p3 size 33554432 extends beyond EOD, truncated [ 47.547190][ T5239] loop2: p4 start 8388607 is beyond EOD, truncated [ 47.648077][ T1399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.660495][ T1399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.670895][ T1399] bond0 (unregistering): Released all slaves [ 47.679011][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.686230][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.693424][ T5195] bridge_slave_0: entered allmulticast mode [ 47.700648][ T5195] bridge_slave_0: entered promiscuous mode [ 47.709617][ T5251] bond0: option use_carrier: invalid value (255) [ 47.723749][ T5261] can0: slcan on ttyS3. [ 47.730007][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.737136][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.744301][ T5195] bridge_slave_1: entered allmulticast mode [ 47.752771][ T5195] bridge_slave_1: entered promiscuous mode [ 47.757477][ T5265] loop4: detected capacity change from 0 to 128 [ 47.767804][ T5263] netlink: 'syz.1.813': attribute type 7 has an invalid length. [ 47.784979][ T1399] hsr_slave_0: left promiscuous mode [ 47.790847][ T1399] hsr_slave_1: left promiscuous mode [ 47.798150][ T1399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.805619][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.815354][ T1399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.822809][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.831776][ T1399] veth0_macvtap: left promiscuous mode [ 47.837355][ T1399] veth1_vlan: left promiscuous mode [ 47.842578][ T1399] veth0_vlan: left promiscuous mode [ 47.928675][ T1399] team0 (unregistering): Port device team_slave_1 removed [ 47.939294][ T1399] team0 (unregistering): Port device team_slave_0 removed [ 47.993344][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.009682][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.039320][ T5195] team0: Port device team_slave_0 added [ 48.045634][ T5261] can0 (unregistered): slcan off ttyS3. [ 48.052141][ T5195] team0: Port device team_slave_1 added [ 48.057989][ T5261] Falling back ldisc for ttyS3. [ 48.068259][ T5279] program syz.2.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.090375][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.097473][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.123598][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.137942][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.145094][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.171202][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.176738][ T5289] syz.2.826[5289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.210197][ T5195] hsr_slave_0: entered promiscuous mode [ 48.237166][ T5195] hsr_slave_1: entered promiscuous mode [ 48.243427][ T5195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.251054][ T5195] Cannot create hsr debugfs directory [ 48.289444][ T5297] loop0: detected capacity change from 0 to 1024 [ 48.304787][ T5297] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.315813][ T5297] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.335600][ T5297] JBD2: no valid journal superblock found [ 48.341369][ T5297] EXT4-fs (loop0): Could not load journal inode [ 48.393365][ T5306] can0: slcan on ttyS3. [ 48.482711][ T5320] netlink: 'syz.4.841': attribute type 33 has an invalid length. [ 48.495995][ T5306] can0 (unregistered): slcan off ttyS3. [ 48.509036][ T5306] Falling back ldisc for ttyS3. [ 48.560925][ T5334] netlink: 'syz.0.847': attribute type 5 has an invalid length. [ 48.653527][ T5344] loop0: detected capacity change from 0 to 164 [ 48.699325][ T5195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.711892][ T5195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.721263][ T5195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.730889][ T5195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.767895][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.785007][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.795178][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.802330][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.812987][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.820058][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.874398][ T5359] loop4: detected capacity change from 0 to 512 [ 48.907293][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.920628][ T5359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.927028][ T5367] loop0: detected capacity change from 0 to 1764 [ 48.940162][ T5359] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.979025][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.007110][ T5376] loop0: detected capacity change from 0 to 1024 [ 49.032160][ T5384] netlink: 'syz.1.864': attribute type 10 has an invalid length. [ 49.037923][ T5376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.040104][ T5384] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 49.062174][ T5384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 49.090187][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.091575][ T5195] veth0_vlan: entered promiscuous mode [ 49.112733][ T5195] veth1_vlan: entered promiscuous mode [ 49.122960][ T5392] loop0: detected capacity change from 0 to 512 [ 49.131397][ T5195] veth0_macvtap: entered promiscuous mode [ 49.138244][ T5392] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.867: corrupted in-inode xattr: invalid ea_ino [ 49.139410][ T5195] veth1_macvtap: entered promiscuous mode [ 49.161928][ T5392] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.867: couldn't read orphan inode 15 (err -117) [ 49.174941][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.178568][ T5392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.185444][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.207449][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.218032][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.227935][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.238497][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.250192][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.263701][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.274211][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.284262][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.294705][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.304562][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.315095][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.326024][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.336273][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.344830][ T5195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.353684][ T5195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.362406][ T5195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.371158][ T5195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.447670][ T5410] netlink: 168 bytes leftover after parsing attributes in process `syz.4.884'. [ 49.466780][ T5414] loop3: detected capacity change from 0 to 512 [ 49.480178][ T5417] loop4: detected capacity change from 0 to 128 [ 49.491670][ T5417] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 49.496866][ T5414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.498820][ T5417] FAT-fs (loop4): Filesystem has been set read-only [ 49.518392][ T5414] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.531646][ T5417] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 49.541265][ T5417] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 49.550939][ T5421] loop2: detected capacity change from 0 to 1024 [ 49.560235][ T5195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.590298][ T5421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.656300][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.727002][ T5447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'. [ 49.848879][ T5462] SELinux: Context system_u: is not valid (left unmapped). [ 49.859796][ T5466] loop3: detected capacity change from 0 to 512 [ 49.877692][ T5466] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.900: Failed to acquire dquot type 1 [ 49.889556][ T5466] EXT4-fs (loop3): 1 truncate cleaned up [ 49.895751][ T5466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.908390][ T5466] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.939212][ T5195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.950878][ T5475] loop4: detected capacity change from 0 to 512 [ 49.978215][ T5475] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 49.987267][ T5475] System zones: 0-2, 18-18, 34-34 [ 49.998848][ T5475] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.904: bg 0: block 248: padding at end of block bitmap is not set [ 50.029322][ T5491] loop1: detected capacity change from 0 to 256 [ 50.045698][ T5475] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.904: Failed to acquire dquot type 1 [ 50.064146][ T5475] EXT4-fs (loop4): 1 truncate cleaned up [ 50.076656][ T5475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.089508][ T5475] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.105172][ T5475] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.904: path /194/file0: bad entry in directory: rec_len is smaller than minimal - offset=323, inode=0, rec_len=0, size=4096 fake=0 [ 50.127119][ T5493] loop0: detected capacity change from 0 to 8192 [ 50.187835][ T5501] netlink: 88 bytes leftover after parsing attributes in process `syz.0.914'. [ 50.197413][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 50.198479][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.245825][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'. [ 50.431615][ T5549] loop0: detected capacity change from 0 to 512 [ 50.466902][ T5549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.479652][ T5549] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.121335][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 51.121351][ T29] audit: type=1400 audit(1727923741.568:724): avc: denied { ioctl } for pid=5557 comm="syz.4.939" path="socket:[10686]" dev="sockfs" ino=10686 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.165107][ T29] audit: type=1400 audit(1727923741.598:725): avc: denied { bind } for pid=5557 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.185009][ T29] audit: type=1400 audit(1727923741.618:726): avc: denied { write } for pid=5559 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.220329][ T5565] program syz.2.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.271207][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.281793][ T29] audit: type=1400 audit(1727923741.738:727): avc: denied { bind } for pid=5575 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.305248][ T29] audit: type=1326 audit(1727923741.758:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 51.328704][ T29] audit: type=1326 audit(1727923741.758:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 51.360687][ T29] audit: type=1326 audit(1727923741.808:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 51.384114][ T29] audit: type=1326 audit(1727923741.808:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 51.407404][ T29] audit: type=1326 audit(1727923741.808:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fb77dff9 code=0x7ffc0000 [ 51.506710][ T29] audit: type=1400 audit(1727923741.958:733): avc: denied { ioctl } for pid=5596 comm="syz.0.955" path="socket:[10774]" dev="sockfs" ino=10774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.602151][ T5610] program syz.0.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.684429][ T5625] loop0: detected capacity change from 0 to 128 [ 51.719296][ T5629] netlink: 104 bytes leftover after parsing attributes in process `syz.0.971'. [ 51.765899][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 51.817448][ T4107] kernel write not supported for file [eventfd] (pid: 4107 comm: kworker/0:7) [ 51.847941][ T5655] Â: renamed from vlan0 (while UP) [ 51.887681][ T5664] loop2: detected capacity change from 0 to 164 [ 52.042857][ T5693] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 52.089591][ T5702] loop1: detected capacity change from 0 to 1024 [ 52.097109][ T5702] EXT4-fs: Ignoring removed bh option [ 52.124815][ T5702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.246875][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.251267][ T5739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1025'. [ 52.266615][ T5740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'. [ 52.296976][ T5746] bpf_get_probe_write_proto: 2 callbacks suppressed [ 52.296990][ T5746] syz.3.1028[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.307082][ T5748] macsec1: entered allmulticast mode [ 52.308753][ T5742] loop4: detected capacity change from 0 to 512 [ 52.318498][ T5748] veth1_macvtap: entered allmulticast mode [ 52.333652][ T5746] syz.3.1028[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.340907][ T5746] syz.3.1028[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.381658][ T5742] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1027: Failed to acquire dquot type 1 [ 52.400071][ T5761] loop1: detected capacity change from 0 to 2048 [ 52.412581][ T5742] EXT4-fs (loop4): 1 truncate cleaned up [ 52.419651][ T5742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.432541][ T5742] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.443268][ T5761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.547625][ T5772] loop1: detected capacity change from 0 to 8192 [ 52.674375][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1044'. [ 52.685732][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1044'. [ 52.761046][ T5793] loop3: detected capacity change from 0 to 164 [ 52.768403][ T5793] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 52.878893][ T5813] loop4: detected capacity change from 0 to 256 [ 52.924107][ T5816] loop4: detected capacity change from 0 to 512 [ 52.941003][ T5816] EXT4-fs: Ignoring removed bh option [ 52.947951][ T5812] loop1: detected capacity change from 0 to 4096 [ 52.955844][ T5816] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.1058: invalid block [ 52.974969][ T5816] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1058: couldn't read orphan inode 15 (err -117) [ 53.087390][ T5831] 9pnet_fd: Insufficient options for proto=fd [ 53.111783][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 53.402140][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 53.482096][ T5893] loop0: detected capacity change from 0 to 8192 [ 53.522385][ T5898] loop1: detected capacity change from 0 to 256 [ 53.545511][ T5893] loop0: p2 p3 p4 [ 53.549561][ T5893] loop0: p2 start 452985600 is beyond EOD, truncated [ 53.556342][ T5893] loop0: p3 size 33554432 extends beyond EOD, truncated [ 53.576928][ T5898] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 53.584879][ T5898] FAT-fs (loop1): Filesystem has been set read-only [ 53.597526][ T5900] bond0: option use_carrier: invalid value (255) [ 53.648984][ T5904] 9pnet_fd: Insufficient options for proto=fd [ 53.675641][ T5893] loop0: p4 start 8388607 is beyond EOD, truncated [ 53.861470][ T5926] syz.2.1108[5926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.861566][ T5926] syz.2.1108[5926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.874946][ T5926] syz.2.1108[5926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.890391][ T5926] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1108'. [ 53.912165][ T5926] 0ªX¹¦À: renamed from caif0 [ 53.934818][ T5926] 0ªX¹¦À: entered allmulticast mode [ 53.940114][ T5926] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.044230][ T5942] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 54.054712][ T5942] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 54.198107][ T5958] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 54.207495][ T5958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 54.256897][ T5962] loop2: detected capacity change from 0 to 512 [ 54.275008][ T5962] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 54.283358][ T5962] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1124: invalid indirect mapped block 2683928664 (level 1) [ 54.297705][ T5962] EXT4-fs (loop2): 1 truncate cleaned up [ 54.361855][ T5976] loop3: detected capacity change from 0 to 512 [ 54.387092][ T5976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 54.395662][ T5976] System zones: 0-2, 18-18, 34-34 [ 54.401963][ T5976] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1130: bg 0: block 248: padding at end of block bitmap is not set [ 54.417486][ T5976] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1130: Failed to acquire dquot type 1 [ 54.429453][ T5976] EXT4-fs (loop3): 1 truncate cleaned up [ 54.436165][ T5976] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.450943][ T5976] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1130: path /59/file0: bad entry in directory: rec_len is smaller than minimal - offset=323, inode=0, rec_len=0, size=4096 fake=0 [ 54.552458][ T5995] sg_write: data in/out 813332815/22 bytes for SCSI command 0x0-- guessing data in; [ 54.552458][ T5995] program syz.3.1138 not setting count and/or reply_len properly [ 54.570967][ T5997] netlink: 'syz.2.1139': attribute type 10 has an invalid length. [ 54.586558][ T5999] loop3: detected capacity change from 0 to 256 [ 54.599594][ T6001] tipc: Started in network mode [ 54.604675][ T6001] tipc: Node identity ac1414aa, cluster identity 4711 [ 54.611929][ T6001] tipc: Enabled bearer , priority 10 [ 54.655753][ T6011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1146'. [ 54.809642][ T6041] loop3: detected capacity change from 0 to 164 [ 54.842126][ T6045] syz.1.1163[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.842223][ T6045] syz.1.1163[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.891944][ T6045] syz.1.1163[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.073795][ T6075] loop4: detected capacity change from 0 to 4096 [ 55.105372][ T6079] loop3: detected capacity change from 0 to 2048 [ 55.181724][ T6079] Alternate GPT is invalid, using primary GPT. [ 55.188261][ T6079] loop3: p2 p3 p7 [ 55.376822][ T6095] loop4: detected capacity change from 0 to 8192 [ 55.725224][ T3344] tipc: Node number set to 2886997162 [ 55.758489][ T6136] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 55.785543][ T6136] geneve1: entered promiscuous mode [ 55.813025][ T6136] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 55.884586][ T6077] 9pnet_fd: p9_fd_create_tcp (6077): problem connecting socket to 127.0.0.1 [ 56.171017][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 56.171030][ T29] audit: type=1326 audit(1727923746.624:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ead8dff9 code=0x7ffc0000 [ 56.261536][ T29] audit: type=1326 audit(1727923746.654:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f02ead8dff9 code=0x7ffc0000 [ 56.285062][ T29] audit: type=1326 audit(1727923746.654:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ead8dff9 code=0x7ffc0000 [ 56.308618][ T29] audit: type=1326 audit(1727923746.654:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ead8dff9 code=0x7ffc0000 [ 56.482846][ T6178] loop3: detected capacity change from 0 to 2048 [ 56.525870][ T6178] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1225: bg 0: block 136: padding at end of block bitmap is not set [ 56.580743][ T6186] tap0: tun_chr_ioctl cmd 21731 [ 56.608693][ T6188] loop4: detected capacity change from 0 to 512 [ 56.615785][ T6188] EXT4-fs: Ignoring removed oldalloc option [ 56.635021][ T6188] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1230: Parent and EA inode have the same ino 15 [ 56.640231][ T6194] loop2: detected capacity change from 0 to 2048 [ 56.656661][ T6188] EXT4-fs (loop4): Remounting filesystem read-only [ 56.663240][ T6188] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 56.673703][ T6188] EXT4-fs (loop4): 1 orphan inode deleted [ 56.681703][ T6188] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 56.701941][ T6194] Alternate GPT is invalid, using primary GPT. [ 56.708366][ T6194] loop2: p2 p3 p7 [ 56.760495][ T29] audit: type=1400 audit(1727923747.204:915): avc: denied { execute_no_trans } for pid=6208 comm="syz.3.1239" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.833903][ T6219] loop2: detected capacity change from 0 to 128 [ 56.841452][ T6217] __nla_validate_parse: 3 callbacks suppressed [ 56.841544][ T6217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1244'. [ 56.841553][ T6219] msdos: Unknown parameter '0x0000000000000003' [ 56.888749][ T29] audit: type=1400 audit(1727923747.344:916): avc: denied { setopt } for pid=6222 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.917561][ T29] audit: type=1400 audit(1727923747.344:917): avc: denied { read } for pid=6222 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.099639][ T6224] ================================================================== [ 57.107785][ T6224] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 57.114233][ T6224] [ 57.116571][ T6224] write to 0xffffc9000ea43bd0 of 4 bytes by interrupt on cpu 1: [ 57.124218][ T6224] pollwake+0xbe/0x110 [ 57.128305][ T6224] __wake_up+0x65/0xb0 [ 57.132392][ T6224] bpf_ringbuf_notify+0x22/0x30 [ 57.137269][ T6224] irq_work_run+0xdf/0x2c0 [ 57.141702][ T6224] __sysvec_irq_work+0x23/0x1a0 [ 57.146571][ T6224] sysvec_irq_work+0x66/0x80 [ 57.151189][ T6224] asm_sysvec_irq_work+0x1a/0x20 [ 57.156145][ T6224] default_send_IPI_self+0x38/0x80 [ 57.161277][ T6224] arch_irq_work_raise+0x48/0x50 [ 57.166235][ T6224] __irq_work_queue_local+0x82/0x1d0 [ 57.171549][ T6224] irq_work_queue+0x85/0x120 [ 57.176171][ T6224] bpf_ringbuf_discard+0xcd/0xf0 [ 57.181135][ T6224] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 57.186611][ T6224] bpf_trace_run3+0x10c/0x1d0 [ 57.191331][ T6224] kmem_cache_free+0x237/0x2d0 [ 57.196119][ T6224] __fput+0x520/0x6d0 [ 57.200117][ T6224] ____fput+0x1c/0x30 [ 57.204120][ T6224] task_work_run+0x13a/0x1a0 [ 57.208722][ T6224] syscall_exit_to_user_mode+0xbe/0x130 [ 57.214295][ T6224] do_syscall_64+0xd6/0x1c0 [ 57.218823][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.224754][ T6224] [ 57.227082][ T6224] read to 0xffffc9000ea43bd0 of 4 bytes by task 6224 on cpu 0: [ 57.234645][ T6224] do_sys_poll+0x986/0xc10 [ 57.239090][ T6224] __se_sys_ppoll+0x1af/0x1f0 [ 57.243785][ T6224] __x64_sys_ppoll+0x67/0x80 [ 57.248388][ T6224] x64_sys_call+0xe71/0x2d60 [ 57.253002][ T6224] do_syscall_64+0xc9/0x1c0 [ 57.257525][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.263459][ T6224] [ 57.265788][ T6224] value changed: 0x00000000 -> 0x00000001 [ 57.271511][ T6224] [ 57.273842][ T6224] Reported by Kernel Concurrency Sanitizer on: [ 57.280005][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.0.1245 Tainted: G W 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 57.292268][ T6224] Tainted: [W]=WARN [ 57.296077][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.306138][ T6224] ================================================================== [ 57.315554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 57.346671][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'.