last executing test programs: 1.500219339s ago: executing program 3 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x3c}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.42355522s ago: executing program 3 (id=846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 1.248107362s ago: executing program 2 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 1.203998073s ago: executing program 2 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.144869314s ago: executing program 2 (id=854): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x4c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r1) 1.144158724s ago: executing program 2 (id=855): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 939.555157ms ago: executing program 2 (id=858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x3c}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 871.930338ms ago: executing program 2 (id=861): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001bc0)={0x0, 0x100000000}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 677.02679ms ago: executing program 1 (id=866): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r2, 0x1, 0xffffffff, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 676.66625ms ago: executing program 1 (id=867): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x200000a, 0x1, 0x4, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 602.215212ms ago: executing program 4 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x50, 0x13, 0x0, 0x9}]}) 553.986612ms ago: executing program 1 (id=871): setuid(0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 477.240194ms ago: executing program 1 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x192}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) 474.804374ms ago: executing program 1 (id=874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 474.389243ms ago: executing program 3 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1, 0x0, 0x400000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 450.869884ms ago: executing program 0 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 410.753284ms ago: executing program 3 (id=877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 409.261684ms ago: executing program 4 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x85000261) 377.851995ms ago: executing program 3 (id=878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 375.392735ms ago: executing program 4 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x10020, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x44000, 0x0, 0x0) 341.892935ms ago: executing program 3 (id=880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x2, 0x1}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 291.384136ms ago: executing program 4 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 290.672916ms ago: executing program 0 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x25000001) 267.489616ms ago: executing program 0 (id=883): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 211.982787ms ago: executing program 4 (id=884): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x2) 211.345687ms ago: executing program 1 (id=885): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 108.863159ms ago: executing program 0 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x7, 0x0, 0xdfffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 87.763919ms ago: executing program 0 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) 68.372499ms ago: executing program 0 (id=889): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 4 (id=890): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4e1, &(0x7f0000000740)="$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") r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 26.803002][ T29] audit: type=1400 audit(1748960038.464:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.804207][ T3302] cgroup: Unknown subsys name 'net' [ 26.825882][ T29] audit: type=1400 audit(1748960038.464:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.853415][ T29] audit: type=1400 audit(1748960038.494:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.094503][ T3302] cgroup: Unknown subsys name 'cpuset' [ 27.100770][ T3302] cgroup: Unknown subsys name 'rlimit' [ 27.272626][ T29] audit: type=1400 audit(1748960038.934:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.299804][ T29] audit: type=1400 audit(1748960038.934:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.320342][ T29] audit: type=1400 audit(1748960038.934:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.340695][ T29] audit: type=1400 audit(1748960038.934:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.361091][ T29] audit: type=1400 audit(1748960038.934:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.368096][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.385881][ T29] audit: type=1400 audit(1748960038.934:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.418263][ T29] audit: type=1400 audit(1748960039.064:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.428797][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.256958][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.278725][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.291553][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.329500][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.365564][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.372779][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.380144][ T3317] bridge_slave_0: entered allmulticast mode [ 29.386672][ T3317] bridge_slave_0: entered promiscuous mode [ 29.405825][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.412987][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.420163][ T3317] bridge_slave_1: entered allmulticast mode [ 29.426739][ T3317] bridge_slave_1: entered promiscuous mode [ 29.481036][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.497549][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.504725][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.511833][ T3314] bridge_slave_0: entered allmulticast mode [ 29.518354][ T3314] bridge_slave_0: entered promiscuous mode [ 29.529346][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.536454][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.543609][ T3314] bridge_slave_1: entered allmulticast mode [ 29.550166][ T3314] bridge_slave_1: entered promiscuous mode [ 29.557376][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.571683][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.578856][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.586077][ T3313] bridge_slave_0: entered allmulticast mode [ 29.592503][ T3313] bridge_slave_0: entered promiscuous mode [ 29.599188][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.606398][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.613527][ T3313] bridge_slave_1: entered allmulticast mode [ 29.620162][ T3313] bridge_slave_1: entered promiscuous mode [ 29.665132][ T3317] team0: Port device team_slave_0 added [ 29.670919][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.678112][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.685392][ T3319] bridge_slave_0: entered allmulticast mode [ 29.691723][ T3319] bridge_slave_0: entered promiscuous mode [ 29.699505][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.709826][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.720258][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.737330][ T3317] team0: Port device team_slave_1 added [ 29.748914][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.756100][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.763306][ T3319] bridge_slave_1: entered allmulticast mode [ 29.769928][ T3319] bridge_slave_1: entered promiscuous mode [ 29.776261][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.786667][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.821272][ T3314] team0: Port device team_slave_0 added [ 29.827242][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.834284][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.860303][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.886319][ T3314] team0: Port device team_slave_1 added [ 29.892894][ T3313] team0: Port device team_slave_0 added [ 29.899167][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.906303][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.932416][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.944420][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.961466][ T3313] team0: Port device team_slave_1 added [ 29.976268][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.993470][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.000493][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.026471][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.050544][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.057551][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.083539][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.094605][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.101603][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.127713][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.160636][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.167704][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.193776][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.205687][ T3319] team0: Port device team_slave_0 added [ 30.217388][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.224893][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.232167][ T3315] bridge_slave_0: entered allmulticast mode [ 30.238811][ T3315] bridge_slave_0: entered promiscuous mode [ 30.247660][ T3317] hsr_slave_0: entered promiscuous mode [ 30.253677][ T3317] hsr_slave_1: entered promiscuous mode [ 30.268940][ T3319] team0: Port device team_slave_1 added [ 30.280346][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.287581][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.294816][ T3315] bridge_slave_1: entered allmulticast mode [ 30.301330][ T3315] bridge_slave_1: entered promiscuous mode [ 30.355101][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.362139][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.388154][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.399394][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.406403][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.432471][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.445586][ T3314] hsr_slave_0: entered promiscuous mode [ 30.451660][ T3314] hsr_slave_1: entered promiscuous mode [ 30.457538][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.465139][ T3314] Cannot create hsr debugfs directory [ 30.476983][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.488569][ T3313] hsr_slave_0: entered promiscuous mode [ 30.494594][ T3313] hsr_slave_1: entered promiscuous mode [ 30.500340][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.507957][ T3313] Cannot create hsr debugfs directory [ 30.525505][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.577962][ T3319] hsr_slave_0: entered promiscuous mode [ 30.584189][ T3319] hsr_slave_1: entered promiscuous mode [ 30.589990][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.597619][ T3319] Cannot create hsr debugfs directory [ 30.610953][ T3315] team0: Port device team_slave_0 added [ 30.617729][ T3315] team0: Port device team_slave_1 added [ 30.644716][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.651692][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.677650][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.704792][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.711844][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.737987][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.816940][ T3315] hsr_slave_0: entered promiscuous mode [ 30.823280][ T3315] hsr_slave_1: entered promiscuous mode [ 30.829262][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.836885][ T3315] Cannot create hsr debugfs directory [ 30.909382][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.925534][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.934396][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.954774][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.978033][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.987019][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.998709][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.009610][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.041405][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.052512][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.061774][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.078943][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.093459][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.100937][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.110002][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.119361][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.128227][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.165468][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.194425][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.206556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.213646][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.224074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.231255][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.239185][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.249064][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.258235][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.282581][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.332000][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.345986][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.353152][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.378911][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.386070][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.401270][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.422442][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.437367][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.457493][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.464636][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.475469][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.484525][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.496654][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.503733][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.519841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.526930][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.543710][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.552747][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.561619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.568716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.593573][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.600721][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.633930][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.644561][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.666689][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.679913][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.687043][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.730136][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.761163][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.816358][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.868990][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.887786][ T3317] veth0_vlan: entered promiscuous mode [ 31.899880][ T3314] veth0_vlan: entered promiscuous mode [ 31.920774][ T3317] veth1_vlan: entered promiscuous mode [ 31.942644][ T3317] veth0_macvtap: entered promiscuous mode [ 31.950430][ T3314] veth1_vlan: entered promiscuous mode [ 31.965479][ T3317] veth1_macvtap: entered promiscuous mode [ 31.994213][ T3314] veth0_macvtap: entered promiscuous mode [ 32.001582][ T3314] veth1_macvtap: entered promiscuous mode [ 32.011248][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.036210][ T3315] veth0_vlan: entered promiscuous mode [ 32.044947][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.058123][ T3315] veth1_vlan: entered promiscuous mode [ 32.073224][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.088616][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097662][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.106485][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.115265][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.134902][ T3319] veth0_vlan: entered promiscuous mode [ 32.143345][ T3315] veth0_macvtap: entered promiscuous mode [ 32.151825][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.164982][ T3319] veth1_vlan: entered promiscuous mode [ 32.171778][ T3315] veth1_macvtap: entered promiscuous mode [ 32.183442][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.192341][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.201103][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.209896][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238597][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.246211][ T3313] veth0_vlan: entered promiscuous mode [ 32.260467][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.260484][ T29] audit: type=1400 audit(1748960043.924:81): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.LkMr4R/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.263093][ T3319] veth0_macvtap: entered promiscuous mode [ 32.278470][ T29] audit: type=1400 audit(1748960043.934:82): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.299167][ T3313] veth1_vlan: entered promiscuous mode [ 32.318597][ T29] audit: type=1400 audit(1748960043.934:83): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.LkMr4R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.335177][ T3313] veth0_macvtap: entered promiscuous mode [ 32.349406][ T29] audit: type=1400 audit(1748960043.934:84): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.377064][ T29] audit: type=1400 audit(1748960043.934:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.LkMr4R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.403735][ T29] audit: type=1400 audit(1748960043.934:86): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.LkMr4R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.431184][ T29] audit: type=1400 audit(1748960043.934:87): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.451573][ T29] audit: type=1400 audit(1748960044.074:88): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.465355][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.474361][ T29] audit: type=1400 audit(1748960044.074:89): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.490582][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.513130][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.521876][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.530764][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542052][ T3319] veth1_macvtap: entered promiscuous mode [ 32.551560][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.558217][ T3313] veth1_macvtap: entered promiscuous mode [ 32.589336][ T29] audit: type=1400 audit(1748960044.254:90): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.603467][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.622179][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.636718][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.665603][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.675864][ T3319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.684752][ T3319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.693671][ T3319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.702459][ T3319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721544][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.730419][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.739324][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.748243][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.905806][ T3474] openvswitch: netlink: Message has 6 unknown bytes. [ 32.927187][ T3476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.211356][ T3498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'. [ 33.659258][ T3539] loop2: detected capacity change from 0 to 512 [ 33.678819][ T3539] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.738901][ T3539] EXT4-fs (loop2): mount failed [ 33.839222][ T3547] loop3: detected capacity change from 0 to 512 [ 33.852555][ T3547] ======================================================= [ 33.852555][ T3547] WARNING: The mand mount option has been deprecated and [ 33.852555][ T3547] and is ignored by this kernel. Remove the mand [ 33.852555][ T3547] option from the mount to silence this warning. [ 33.852555][ T3547] ======================================================= [ 33.921336][ T3547] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.971202][ T3547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 33.988812][ T3547] System zones: 0-2, 18-18, 34-34 [ 34.017338][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.044323][ T3547] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.063363][ T3563] loop1: detected capacity change from 0 to 1024 [ 34.071483][ T3563] EXT4-fs: Ignoring removed i_version option [ 34.078460][ T3563] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.085580][ T3563] EXT4-fs: Ignoring removed nobh option [ 34.091259][ T3563] EXT4-fs: Ignoring removed bh option [ 34.124622][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.130666][ T3567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.149680][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.173888][ T3567] loop2: detected capacity change from 0 to 256 [ 34.184000][ T3567] FAT-fs (loop2): bogus number of FAT sectors [ 34.190131][ T3567] FAT-fs (loop2): Can't find a valid FAT filesystem [ 34.239756][ T3576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.263479][ T3563] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.46: Allocating blocks 257-513 which overlap fs metadata [ 34.312363][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.433027][ T3595] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 34.467428][ T3599] random: crng reseeded on system resumption [ 34.596178][ T3609] Zero length message leads to an empty skb [ 34.908163][ T3626] loop3: detected capacity change from 0 to 512 [ 34.917358][ T3626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.930541][ T3626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.949533][ T3626] EXT4-fs (loop3): 1 truncate cleaned up [ 34.960316][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.972597][ T3630] loop4: detected capacity change from 0 to 512 [ 34.976049][ T3626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.989313][ T3630] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.997233][ T3630] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.004637][ T3630] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.014754][ T3630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 35.022965][ T3630] System zones: 1-12 [ 35.027319][ T3630] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.71: corrupted in-inode xattr: e_value size too large [ 35.041988][ T3630] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.71: couldn't read orphan inode 15 (err -117) [ 35.069503][ T3630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.110671][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.378937][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 35.530077][ T3673] loop1: detected capacity change from 0 to 512 [ 35.567182][ T3576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.688015][ T3576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.770333][ T3576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.880782][ T3576] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.927250][ T3576] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.976499][ T3576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.992027][ T3576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.011366][ T3576] syz.0.50 (3576) used greatest stack depth: 10872 bytes left [ 36.233015][ T3712] loop0: detected capacity change from 0 to 8192 [ 36.250881][ T3712] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.323639][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 36.419826][ T3728] loop9: detected capacity change from 0 to 7 [ 36.447337][ T3728] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.475096][ T3728] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.483014][ T3728] loop9: unable to read partition table [ 36.494419][ T3732] Falling back ldisc for ttyS3. [ 36.499104][ T3728] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 36.499104][ T3728] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 36.515753][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.524556][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.535328][ T3734] rdma_op ffff8881199df580 conn xmit_rdma 0000000000000000 [ 36.562594][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.595635][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.608859][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.625409][ T3745] loop1: detected capacity change from 0 to 256 [ 36.635396][ T3743] ref_ctr_offset mismatch. inode: 0xcd offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 36.642615][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.683984][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.736459][ T3522] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.769105][ T3753] bridge0: entered promiscuous mode [ 36.787670][ T3753] bridge0: port 3(macvlan2) entered blocking state [ 36.794362][ T3753] bridge0: port 3(macvlan2) entered disabled state [ 36.820288][ T3753] macvlan2: entered allmulticast mode [ 36.826182][ T3753] bridge0: entered allmulticast mode [ 36.842638][ T3753] macvlan2: left allmulticast mode [ 36.847847][ T3753] bridge0: left allmulticast mode [ 36.854395][ T3753] bridge0: left promiscuous mode [ 36.895874][ T3763] macvlan1: entered promiscuous mode [ 36.914689][ T3766] loop0: detected capacity change from 0 to 1024 [ 36.922181][ T3763] ipvlan0: entered promiscuous mode [ 36.941819][ T3763] ipvlan0: left promiscuous mode [ 36.975391][ T3763] macvlan1: left promiscuous mode [ 36.987443][ T3771] loop1: detected capacity change from 0 to 512 [ 37.001179][ T3766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.038927][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.071216][ T3771] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.083941][ T3771] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.135: corrupted inode contents [ 37.156148][ T3771] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.135: mark_inode_dirty error [ 37.174370][ T3771] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.135: corrupted inode contents [ 37.190120][ T3771] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.135: corrupted inode contents [ 37.212317][ T3771] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.135: mark_inode_dirty error [ 37.226755][ T3771] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.135: corrupted inode contents [ 37.284193][ T3771] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.135: mark_inode_dirty error [ 37.324150][ T3771] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.135: corrupted inode contents [ 37.411343][ T3793] mmap: syz.4.143 (3793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.505308][ T3771] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.135: mark_inode_dirty error [ 37.549700][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.591729][ T3797] loop3: detected capacity change from 0 to 512 [ 37.619278][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 37.619296][ T29] audit: type=1400 audit(1748960049.284:311): avc: denied { read write } for pid=3790 comm="syz.2.142" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.648146][ T3797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.649559][ T29] audit: type=1400 audit(1748960049.284:312): avc: denied { open } for pid=3790 comm="syz.2.142" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.656843][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.692469][ T29] audit: type=1400 audit(1748960049.324:313): avc: denied { ioctl } for pid=3790 comm="syz.2.142" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.697473][ T3802] policy can only be matched on NF_INET_PRE_ROUTING [ 37.717675][ T3802] unable to load match [ 37.834043][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.858518][ T3804] loop4: detected capacity change from 0 to 1024 [ 37.897894][ T3804] EXT4-fs: Ignoring removed oldalloc option [ 37.905682][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.916097][ T3804] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 37.952577][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.971801][ T3797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.003495][ T29] audit: type=1400 audit(1748960049.664:314): avc: denied { setopt } for pid=3808 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.079380][ T29] audit: type=1400 audit(1748960049.744:315): avc: denied { append } for pid=3803 comm="syz.4.147" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.113809][ T29] audit: type=1400 audit(1748960049.744:316): avc: denied { ioctl } for pid=3803 comm="syz.4.147" path="/26/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.154559][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.172361][ T3797] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.266955][ T29] audit: type=1400 audit(1748960049.934:317): avc: denied { setopt } for pid=3796 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.326351][ T29] audit: type=1400 audit(1748960049.934:318): avc: denied { write } for pid=3796 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.345912][ T29] audit: type=1400 audit(1748960049.934:319): avc: denied { read } for pid=3796 comm="syz.3.146" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.366050][ T29] audit: type=1400 audit(1748960049.984:320): avc: denied { connect } for pid=3821 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.436081][ T3824] loop4: detected capacity change from 0 to 512 [ 38.449488][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.496574][ T3824] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.155: Failed to acquire dquot type 1 [ 38.523254][ T3824] EXT4-fs (loop4): 1 truncate cleaned up [ 38.545611][ T3824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.558573][ T3824] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.570041][ T3824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.664867][ T3838] loop0: detected capacity change from 0 to 1024 [ 38.695159][ T3838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.710864][ T3838] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.786345][ T3832] 9p: Unknown access argument ree: -22 [ 38.804340][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.971394][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 39.045874][ T3874] loop2: detected capacity change from 0 to 512 [ 39.053918][ T3874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.141301][ T3874] EXT4-fs (loop2): 1 truncate cleaned up [ 39.147934][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.199514][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.215652][ T3884] loop0: detected capacity change from 0 to 128 [ 39.249354][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 39.292602][ T3889] loop3: detected capacity change from 0 to 128 [ 39.469204][ T3907] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 39.482444][ T3909] lo: entered promiscuous mode [ 39.501886][ T3909] tunl0: entered promiscuous mode [ 39.529657][ T3909] gre0: entered promiscuous mode [ 39.540024][ T3918] loop4: detected capacity change from 0 to 164 [ 39.553016][ T3909] gretap0: entered promiscuous mode [ 39.570671][ T3909] erspan0: entered promiscuous mode [ 39.585158][ T3909] ip_vti0: entered promiscuous mode [ 39.591214][ T3918] process 'syz.4.194' launched '/dev/fd/4' with NULL argv: empty string added [ 39.601077][ T3909] ip6_vti0: entered promiscuous mode [ 39.619022][ T3918] syz.4.194: attempt to access beyond end of device [ 39.619022][ T3918] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.626862][ T3909] sit0: entered promiscuous mode [ 39.646776][ T3909] ip6tnl0: entered promiscuous mode [ 39.669512][ T3918] syz.4.194: attempt to access beyond end of device [ 39.669512][ T3918] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.680482][ T3909] ip6gre0: entered promiscuous mode [ 39.691166][ T3909] syz_tun: entered promiscuous mode [ 39.699507][ T3909] ip6gretap0: entered promiscuous mode [ 39.720666][ T3909] bridge0: entered promiscuous mode [ 39.751696][ T3934] loop0: detected capacity change from 0 to 128 [ 39.756346][ T3909] vcan0: entered promiscuous mode [ 39.777478][ C1] hrtimer: interrupt took 38302 ns [ 39.792245][ T3909] bond0: entered promiscuous mode [ 39.797455][ T3909] bond_slave_0: entered promiscuous mode [ 39.803209][ T3909] bond_slave_1: entered promiscuous mode [ 39.825184][ T3934] syz.0.199: attempt to access beyond end of device [ 39.825184][ T3934] loop0: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 39.843940][ T3934] syz.0.199: attempt to access beyond end of device [ 39.843940][ T3934] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 39.865825][ T3909] team0: entered promiscuous mode [ 39.870662][ T3934] syz.0.199: attempt to access beyond end of device [ 39.870662][ T3934] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 39.902379][ T3909] team_slave_0: entered promiscuous mode [ 39.902569][ T3934] syz.0.199: attempt to access beyond end of device [ 39.902569][ T3934] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 39.908192][ T3909] team_slave_1: entered promiscuous mode [ 39.941964][ T3934] syz.0.199: attempt to access beyond end of device [ 39.941964][ T3934] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 39.962946][ T3934] syz.0.199: attempt to access beyond end of device [ 39.962946][ T3934] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 40.000235][ T3909] dummy0: entered promiscuous mode [ 40.010989][ T3909] nlmon0: entered promiscuous mode [ 40.019485][ T3934] syz.0.199: attempt to access beyond end of device [ 40.019485][ T3934] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 40.034804][ T3934] syz.0.199: attempt to access beyond end of device [ 40.034804][ T3934] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 40.048796][ T3909] caif0: entered promiscuous mode [ 40.053977][ T3909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.110749][ T3945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 40.169836][ T3949] netlink: 'syz.1.206': attribute type 12 has an invalid length. [ 40.177752][ T3949] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 40.185558][ T3949] netlink: 148 bytes leftover after parsing attributes in process `syz.1.206'. [ 40.194577][ T3949] netlink: 'syz.1.206': attribute type 2 has an invalid length. [ 40.202256][ T3949] netlink: 43 bytes leftover after parsing attributes in process `syz.1.206'. [ 40.331954][ T3964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.369275][ T3971] netlink: 'syz.0.216': attribute type 298 has an invalid length. [ 40.378691][ T3969] wg2: entered promiscuous mode [ 40.383632][ T3969] wg2: entered allmulticast mode [ 40.402200][ T3964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.473130][ T3964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.517888][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.527508][ T3964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.539310][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.601496][ T3964] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.613493][ T3964] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.630707][ T3964] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.640363][ T3989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 40.649331][ T3989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 40.663394][ T3964] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.711265][ T3964] syz.4.212 (3964) used greatest stack depth: 10760 bytes left [ 40.721206][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 40.736809][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 40.746433][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 40.821666][ T4005] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.849561][ T4007] loop0: detected capacity change from 0 to 512 [ 40.865522][ T4007] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.873740][ T4007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.886801][ T4005] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.900517][ T4007] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.915711][ T4007] EXT4-fs (loop0): 1 truncate cleaned up [ 40.923351][ T4007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.940412][ T4007] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.965434][ T4005] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.966803][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.026397][ T4005] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.138564][ T4025] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.149978][ T4024] ref_ctr_offset mismatch. inode: 0xf6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 41.216138][ T4025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.333401][ T4025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.386857][ T4025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.403140][ T4038] loop1: detected capacity change from 0 to 128 [ 41.410411][ T4038] EXT4-fs: Ignoring removed bh option [ 41.420245][ T4038] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.432608][ T4038] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.460586][ T4025] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.477003][ T4025] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.492499][ T4025] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.520302][ T4025] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.538941][ T4048] futex_wake_op: syz.2.249 tries to shift op by -1; fix this program [ 41.555910][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.574562][ T4046] loop3: detected capacity change from 0 to 128 [ 41.743053][ T4113] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 41.897097][ T4134] ref_ctr increment failed for inode: 0x122 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810c8778c0 [ 41.916882][ T4133] uprobe: syz.1.261:4133 failed to unregister, leaking uprobe [ 42.228343][ T4136] netlink: 'syz.0.262': attribute type 4 has an invalid length. [ 42.478614][ T4158] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 42.499112][ T4158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.525569][ T4158] bond1: (slave gretap1): making interface the new active one [ 42.545825][ T4158] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 42.593919][ T4158] syz.0.270 (4158) used greatest stack depth: 9624 bytes left [ 42.629853][ T4175] loop1: detected capacity change from 0 to 164 [ 42.642702][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 42.642718][ T29] audit: type=1400 audit(1748960054.304:482): avc: denied { mount } for pid=4174 comm="syz.1.276" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.745233][ T29] audit: type=1400 audit(1748960054.334:483): avc: denied { write } for pid=4163 comm="syz.2.272" path="socket:[7212]" dev="sockfs" ino=7212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.768691][ T29] audit: type=1400 audit(1748960054.354:484): avc: denied { create } for pid=4174 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.788840][ T29] audit: type=1400 audit(1748960054.354:485): avc: denied { write } for pid=4174 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.808927][ T29] audit: type=1400 audit(1748960054.374:486): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.832500][ T29] audit: type=1400 audit(1748960054.494:487): avc: denied { read write } for pid=4181 comm="syz.3.279" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.856155][ T29] audit: type=1400 audit(1748960054.494:488): avc: denied { open } for pid=4181 comm="syz.3.279" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.880268][ T29] audit: type=1400 audit(1748960054.494:489): avc: denied { ioctl } for pid=4181 comm="syz.3.279" path="/dev/input/event3" dev="devtmpfs" ino=256 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.969987][ T4185] loop0: detected capacity change from 0 to 512 [ 42.996778][ T4185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.009732][ T4185] EXT4-fs (loop0): 1 truncate cleaned up [ 43.017255][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.031097][ T29] audit: type=1400 audit(1748960054.694:490): avc: denied { mount } for pid=4184 comm="syz.0.280" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.065361][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.076101][ T29] audit: type=1400 audit(1748960054.724:491): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.129048][ T4193] loop0: detected capacity change from 0 to 2048 [ 43.153992][ T4179] syz.1.278 (4179) used greatest stack depth: 9416 bytes left [ 43.174434][ T3306] loop0: p1 < > p4 [ 43.179797][ T3306] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.189581][ T4193] loop0: p1 < > p4 [ 43.195649][ T4193] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.209361][ T3005] loop0: p1 < > p4 [ 43.214146][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.279404][ T4197] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 43.319840][ T4199] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.330252][ T4199] smc: net device bond0 erased user defined pnetid SYZ0 [ 43.428988][ T4212] netlink: 'syz.0.292': attribute type 21 has an invalid length. [ 43.441534][ T4212] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 43.564401][ T4218] loop1: detected capacity change from 0 to 164 [ 43.634973][ T4224] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 43.925623][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.933482][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.941309][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.949154][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.956947][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.964914][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.972757][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.980527][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.988332][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.996121][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 43.999259][ T4252] loop1: detected capacity change from 0 to 8192 [ 44.003870][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.018039][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.025911][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.033669][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.041453][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.049322][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.057176][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.064955][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.072722][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.080526][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.088305][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.096086][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.103919][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.111682][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.119529][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.127407][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.128408][ T4252] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 44.135180][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.135209][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.135275][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.143387][ T4252] FAT-fs (loop1): Filesystem has been set read-only [ 44.151107][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.181036][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.188842][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.196699][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.204497][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.212272][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.220129][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.227904][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.235674][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.243555][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.251333][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.259157][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.266943][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.274786][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.283529][ T3380] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.326616][ T4257] fido_id[4257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.614855][ T4278] loop1: detected capacity change from 0 to 128 [ 44.705545][ T4284] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.764316][ T4290] __nla_validate_parse: 12 callbacks suppressed [ 44.764331][ T4290] netlink: 76 bytes leftover after parsing attributes in process `syz.3.326'. [ 44.798796][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 44.800086][ T4295] loop1: detected capacity change from 0 to 512 [ 44.808104][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.821456][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.829623][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.837242][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.849372][ T4295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.862225][ T4295] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.889846][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.981443][ T4310] loop1: detected capacity change from 0 to 512 [ 44.981844][ T4310] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.997255][ T4310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.999077][ T4310] EXT4-fs (loop1): 1 truncate cleaned up [ 45.014810][ T4310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.016067][ T4310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.111437][ T4005] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.124951][ T4005] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.132900][ T4005] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.167394][ T4005] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.277240][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 45.394165][ T4341] loop2: detected capacity change from 0 to 256 [ 45.480908][ T4347] loop4: detected capacity change from 0 to 512 [ 45.488954][ T4347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.495243][ T4347] EXT4-fs (loop4): 1 truncate cleaned up [ 45.495609][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.605369][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.653420][ T4354] netlink: 'syz.4.349': attribute type 10 has an invalid length. [ 45.656873][ T4354] team0: Device hsr_slave_0 failed to register rx_handler [ 45.674918][ T4356] loop2: detected capacity change from 0 to 512 [ 45.675603][ T4356] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.768593][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.931561][ T4365] loop3: detected capacity change from 0 to 256 [ 45.963497][ T4365] FAT-fs (loop3): bogus number of FAT sectors [ 45.969691][ T4365] FAT-fs (loop3): Can't find a valid FAT filesystem [ 46.040105][ T4372] SELinux: syz.0.356 (4372) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.138831][ T4376] loop0: detected capacity change from 0 to 8192 [ 46.147516][ T4376] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.230574][ T4385] loop3: detected capacity change from 0 to 128 [ 46.248856][ T4385] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.270832][ T4387] loop1: detected capacity change from 0 to 1024 [ 46.283196][ T4387] EXT4-fs: Ignoring removed nobh option [ 46.288905][ T4387] EXT4-fs: Ignoring removed bh option [ 46.294682][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.317469][ T4389] loop3: detected capacity change from 0 to 1024 [ 46.328156][ T4389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.331623][ T4387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.362855][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.474526][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.547592][ T4404] loop1: detected capacity change from 0 to 256 [ 46.554714][ T4404] FAT-fs (loop1): bogus number of FAT sectors [ 46.560825][ T4404] FAT-fs (loop1): Can't find a valid FAT filesystem [ 46.703064][ T4409] loop0: detected capacity change from 0 to 164 [ 46.722942][ T4409] bio_check_eod: 6 callbacks suppressed [ 46.722956][ T4409] syz.0.370: attempt to access beyond end of device [ 46.722956][ T4409] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.743032][ T4409] syz.0.370: attempt to access beyond end of device [ 46.743032][ T4409] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 47.468372][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.515165][ T4423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.523987][ T4423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.642668][ T4430] loop2: detected capacity change from 0 to 256 [ 47.724846][ T4432] loop3: detected capacity change from 0 to 1024 [ 47.742617][ T4432] EXT4-fs: Ignoring removed nobh option [ 47.748273][ T4432] EXT4-fs: Ignoring removed bh option [ 47.776610][ T4432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.867980][ T4436] netlink: 271 bytes leftover after parsing attributes in process `syz.2.380'. [ 47.890243][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.970477][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 47.970495][ T29] audit: type=1400 audit(1748960059.634:697): avc: denied { getopt } for pid=4445 comm="syz.2.385" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.009944][ T4444] loop3: detected capacity change from 0 to 512 [ 48.023269][ T29] audit: type=1326 audit(1748960059.634:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db119e969 code=0x7ffc0000 [ 48.025756][ T4415] syz.0.372 (4415) used greatest stack depth: 7160 bytes left [ 48.046749][ T29] audit: type=1326 audit(1748960059.634:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db119e969 code=0x7ffc0000 [ 48.077747][ T29] audit: type=1326 audit(1748960059.674:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0db119e969 code=0x7ffc0000 [ 48.101073][ T29] audit: type=1326 audit(1748960059.674:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0db119e9a3 code=0x7ffc0000 [ 48.124228][ T29] audit: type=1326 audit(1748960059.674:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0db119d41f code=0x7ffc0000 [ 48.147442][ T29] audit: type=1326 audit(1748960059.674:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0db119e9f7 code=0x7ffc0000 [ 48.170621][ T29] audit: type=1326 audit(1748960059.674:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0db119d2d0 code=0x7ffc0000 [ 48.194170][ T29] audit: type=1326 audit(1748960059.674:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0db119e56b code=0x7ffc0000 [ 48.217895][ T29] audit: type=1326 audit(1748960059.724:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0db119d5ca code=0x7ffc0000 [ 48.246677][ T4444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.260938][ T4444] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.348801][ T4460] loop4: detected capacity change from 0 to 1024 [ 48.360676][ T4460] EXT4-fs: Ignoring removed nobh option [ 48.366396][ T4460] EXT4-fs: Ignoring removed bh option [ 48.393579][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.393872][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.705746][ T4499] loop1: detected capacity change from 0 to 164 [ 48.727145][ T4499] syz.1.408: attempt to access beyond end of device [ 48.727145][ T4499] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.745699][ T4499] syz.1.408: attempt to access beyond end of device [ 48.745699][ T4499] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.959227][ T4519] loop3: detected capacity change from 0 to 512 [ 48.966618][ T4519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.981802][ T4519] EXT4-fs (loop3): 1 truncate cleaned up [ 48.988900][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.036601][ T4527] loop0: detected capacity change from 0 to 512 [ 49.046643][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.066784][ T4527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.097671][ T4527] EXT4-fs (loop0): 1 truncate cleaned up [ 49.106139][ T4527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.200209][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.306158][ T4541] loop0: detected capacity change from 0 to 512 [ 49.318514][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.336997][ T4541] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 49.345414][ T4541] System zones: 0-2, 18-18, 34-34 [ 49.355330][ T4541] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.435: bg 0: block 248: padding at end of block bitmap is not set [ 49.376677][ T4541] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.435: Failed to acquire dquot type 1 [ 49.426181][ T4541] EXT4-fs (loop0): 1 truncate cleaned up [ 49.445236][ T4541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.482663][ T4550] loop4: detected capacity change from 0 to 256 [ 49.505912][ T4541] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.625151][ T4554] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 49.636548][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.664020][ T4068] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 49.699758][ T4556] syz.3.432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.765754][ T4562] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 49.773369][ T4562] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 49.829782][ T4569] loop2: detected capacity change from 0 to 1024 [ 49.849968][ T4569] EXT4-fs: Ignoring removed nobh option [ 49.855649][ T4569] EXT4-fs: Ignoring removed bh option [ 49.882710][ T4569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.979245][ T4575] loop1: detected capacity change from 0 to 8192 [ 50.003117][ T4575] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.029702][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.050838][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 50.069900][ T4589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.077457][ T4589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.085639][ T4589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.093141][ T4589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.342695][ T4627] netlink: 'syz.3.464': attribute type 298 has an invalid length. [ 50.354766][ T4620] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.362464][ T4620] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 50.389717][ T4633] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.454081][ T4635] loop3: detected capacity change from 0 to 8192 [ 50.461576][ T4635] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.526316][ T4646] loop4: detected capacity change from 0 to 512 [ 50.544437][ T4646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.562737][ T4646] EXT4-fs (loop4): 1 truncate cleaned up [ 50.571917][ T4646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.632656][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.821851][ T4670] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 50.884768][ T4674] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.892389][ T4674] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 50.943128][ T4687] vlan2: entered allmulticast mode [ 51.034713][ T4694] loop1: detected capacity change from 0 to 512 [ 51.047472][ T4694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.065788][ T4694] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.096154][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.147420][ T4705] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.182548][ T4707] bond_slave_1: entered promiscuous mode [ 51.190422][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 51.209101][ T4707] bond0: (slave bond_slave_1): Releasing backup interface [ 51.248781][ T4707] bond_slave_1 (unregistering): left promiscuous mode [ 51.261032][ T4711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'. [ 51.374598][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 51.389815][ T4733] xt_hashlimit: max too large, truncated to 1048576 [ 51.422494][ T4735] SELinux: ebitmap: map size 98 does not match my size 64 (high bit was 4278589440) [ 51.429487][ T4737] serio: Serial port ptm0 [ 51.433205][ T4735] SELinux: failed to load policy [ 51.630977][ T4757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 51.640190][ T4757] netlink: 204 bytes leftover after parsing attributes in process `syz.3.522'. [ 51.680001][ T4759] SELinux: failed to load policy [ 51.702429][ T4761] capability: warning: `syz.1.524' uses deprecated v2 capabilities in a way that may be insecure [ 51.885731][ T4792] loop3: detected capacity change from 0 to 1024 [ 51.895575][ T4792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.908059][ T4792] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.922193][ T4792] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.539: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.937334][ T4792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 51.949758][ T4792] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.949758][ T4792] [ 51.961587][ T4792] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.539: Freeing blocks not in datazone - block = 3, count = 1 [ 51.963298][ T4799] IPv4: Oversized IP packet from 127.202.26.0 [ 51.977587][ T4792] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.539: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.994926][ T4792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 52.007356][ T4792] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.007356][ T4792] [ 52.031195][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.120684][ T4807] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 52.145770][ T4809] loop1: detected capacity change from 0 to 1024 [ 52.152637][ T4809] EXT4-fs: Ignoring removed nobh option [ 52.158266][ T4809] EXT4-fs: Ignoring removed bh option [ 52.176746][ T4809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.201523][ T4809] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 52.233880][ T4817] ALSA: seq fatal error: cannot create timer (-19) [ 52.269597][ T4820] SELinux: failed to load policy [ 52.281226][ T3393] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 52.288810][ T3393] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 52.296289][ T3393] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 52.305374][ T3393] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 52.306975][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.324548][ T4826] loop2: detected capacity change from 0 to 256 [ 52.331464][ T4826] FAT-fs (loop2): bogus number of FAT sectors [ 52.337608][ T4826] FAT-fs (loop2): Can't find a valid FAT filesystem [ 52.455425][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 52.541744][ T4856] loop4: detected capacity change from 0 to 512 [ 52.550383][ T4856] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.558489][ T4856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.580750][ T4856] EXT4-fs (loop4): 1 truncate cleaned up [ 52.597614][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.660774][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.019621][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 53.019725][ T29] audit: type=1326 audit(1748960064.684:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c9ce969 code=0x7ffc0000 [ 53.074301][ T29] audit: type=1326 audit(1748960064.684:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f046c9cd2d0 code=0x7ffc0000 [ 53.097639][ T29] audit: type=1326 audit(1748960064.684:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f046c9cd2d0 code=0x7ffc0000 [ 53.120933][ T29] audit: type=1326 audit(1748960064.684:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c9ce969 code=0x7ffc0000 [ 53.144171][ T29] audit: type=1326 audit(1748960064.684:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c9ce969 code=0x7ffc0000 [ 53.167433][ T29] audit: type=1326 audit(1748960064.684:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f046c9ce969 code=0x7ffc0000 [ 53.190688][ T29] audit: type=1326 audit(1748960064.684:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c9ce969 code=0x7ffc0000 [ 53.214131][ T29] audit: type=1326 audit(1748960064.684:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c9ce969 code=0x7ffc0000 [ 53.291675][ T4926] loop1: detected capacity change from 0 to 1024 [ 53.301557][ T4924] loop0: detected capacity change from 0 to 8192 [ 53.309886][ T4930] bond_slave_1: entered promiscuous mode [ 53.316385][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 53.317397][ T4926] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.340014][ T4930] bond0: (slave bond_slave_1): Releasing backup interface [ 53.360640][ T29] audit: type=1326 audit(1748960065.004:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7412f5927 code=0x7fc00000 [ 53.389971][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 53.400188][ T4930] bond_slave_1 (unregistering): left promiscuous mode [ 53.457242][ T4944] loop1: detected capacity change from 0 to 1024 [ 53.472886][ T4946] can0: slcan on ttyS3. [ 53.478927][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.491104][ T4944] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.520606][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 53.563954][ T4946] can0 (unregistered): slcan off ttyS3. [ 53.575485][ T4951] can0: slcan on ttyS3. [ 53.579725][ T29] audit: type=1400 audit(1748960065.244:918): avc: denied { name_connect } for pid=4954 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 53.643914][ T4945] can0 (unregistered): slcan off ttyS3. [ 53.670124][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.701417][ T4963] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.827191][ T4982] loop3: detected capacity change from 0 to 1024 [ 53.841552][ T4982] EXT4-fs: test_dummy_encryption option not supported [ 53.856186][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.863649][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.871158][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.903486][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.910984][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.918511][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.926116][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.927498][ T4991] loop4: detected capacity change from 0 to 512 [ 53.933565][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.947294][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.954805][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.962215][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.969705][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.973327][ T4991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.977246][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.977270][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.979343][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.990883][ T4991] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.997202][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 53.997311][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.037396][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.044972][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.052390][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.059841][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.067350][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.074776][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.082233][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.089751][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.097255][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.104729][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.112290][ T3392] hid-generic 0000:0C15:0000.0003: unknown main item tag 0x0 [ 54.120845][ T3392] hid-generic 0000:0C15:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 54.144201][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.187503][ T5001] loop4: detected capacity change from 0 to 512 [ 54.197902][ T4998] loop3: detected capacity change from 0 to 512 [ 54.210605][ T5001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.230174][ T5001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.231986][ T4998] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.255277][ T5001] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.271280][ T4998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.285859][ T5001] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.622: corrupted inode contents [ 54.286023][ T5001] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.622: mark_inode_dirty error [ 54.286428][ T5001] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.622: corrupted inode contents [ 54.324002][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.333159][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.340641][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.350805][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.358408][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.360426][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.365866][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.382259][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.389727][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.391058][ T4998] EXT4-fs (loop3): 1 truncate cleaned up [ 54.397333][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.397366][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.397453][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.397482][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.397581][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.397610][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.448040][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.455492][ T3380] hid-generic 0006:0000:0000.0004: unknown main item tag 0x0 [ 54.466303][ T3380] hid-generic 0006:0000:0000.0004: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 54.480771][ T5014] loop2: detected capacity change from 0 to 1024 [ 54.500623][ T5014] EXT4-fs: Ignoring removed nobh option [ 54.506434][ T5014] EXT4-fs: Ignoring removed bh option [ 54.520540][ T5018] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.557348][ T5014] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.628: Allocating blocks 385-513 which overlap fs metadata [ 54.592083][ T5013] EXT4-fs (loop2): pa ffff888106b03070: logic 16, phys. 129, len 24 [ 54.600219][ T5013] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 54.659886][ T5029] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 54.718948][ T5029] bond1: (slave gretap1): making interface the new active one [ 54.729922][ T5029] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.733011][ T5037] loop3: detected capacity change from 0 to 1024 [ 54.771076][ T5037] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.794949][ T5044] capability: warning: `syz.4.648' uses 32-bit capabilities (legacy support in use) [ 54.961225][ T5064] IPVS: Error connecting to the multicast addr [ 54.969104][ T5065] loop2: detected capacity change from 0 to 256 [ 54.990477][ T5065] FAT-fs (loop2): Directory bread(block 64) failed [ 55.004248][ T5065] FAT-fs (loop2): Directory bread(block 65) failed [ 55.023842][ T5065] FAT-fs (loop2): Directory bread(block 66) failed [ 55.031529][ T5065] FAT-fs (loop2): Directory bread(block 67) failed [ 55.059463][ T5065] FAT-fs (loop2): Directory bread(block 68) failed [ 55.075277][ T5065] FAT-fs (loop2): Directory bread(block 69) failed [ 55.088609][ T5065] FAT-fs (loop2): Directory bread(block 70) failed [ 55.095470][ T5065] FAT-fs (loop2): Directory bread(block 71) failed [ 55.118344][ T5065] FAT-fs (loop2): Directory bread(block 72) failed [ 55.125727][ T5065] FAT-fs (loop2): Directory bread(block 73) failed [ 55.152519][ T5079] hub 4-0:1.0: USB hub found [ 55.158280][ T5079] hub 4-0:1.0: 8 ports detected [ 55.176057][ T5085] loop1: detected capacity change from 0 to 1024 [ 55.195578][ T5085] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.285414][ T5098] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 55.317043][ T5108] __nla_validate_parse: 2 callbacks suppressed [ 55.317062][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 55.332356][ T5108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.339875][ T5108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.347898][ T5108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.355612][ T5108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.371024][ T5113] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 55.377243][ T5115] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 55.377243][ T5115] The task syz.2.665 (5115) triggered the difference, watch for misbehavior. [ 55.608079][ T5123] loop3: detected capacity change from 0 to 8192 [ 56.031701][ T5156] loop3: detected capacity change from 0 to 1024 [ 56.038506][ T5156] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 56.086874][ T5158] loop0: detected capacity change from 0 to 1024 [ 56.130385][ T5162] hub 2-0:1.0: USB hub found [ 56.137244][ T5162] hub 2-0:1.0: 8 ports detected [ 56.166710][ T5172] loop4: detected capacity change from 0 to 512 [ 56.174226][ T5172] EXT4-fs: Ignoring removed nobh option [ 56.185290][ T5172] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 56.196356][ T5172] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.693: attempt to clear invalid blocks 2 len 1 [ 56.232781][ T5177] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 56.237110][ T5172] EXT4-fs (loop4): Remounting filesystem read-only [ 56.247486][ T5172] EXT4-fs (loop4): 1 truncate cleaned up [ 56.253861][ T5181] netlink: 300 bytes leftover after parsing attributes in process `syz.1.698'. [ 56.264691][ T5179] SELinux: Context Ü is not valid (left unmapped). [ 56.444675][ T5205] netlink: 'syz.0.708': attribute type 4 has an invalid length. [ 56.453049][ T5195] loop1: detected capacity change from 0 to 8192 [ 56.567992][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.576992][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.591978][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.662131][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.671548][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.691013][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.776539][ T5229] loop2: detected capacity change from 0 to 1024 [ 56.811157][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.820282][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 56.835066][ T5229] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.907456][ T5241] syzkaller1: entered promiscuous mode [ 56.912994][ T5241] syzkaller1: entered allmulticast mode [ 57.022637][ T5260] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.049418][ T5259] hub 4-0:1.0: USB hub found [ 57.059403][ T5259] hub 4-0:1.0: 8 ports detected [ 57.151746][ T5276] loop1: detected capacity change from 0 to 2048 [ 57.166618][ T5272] loop2: detected capacity change from 0 to 8192 [ 57.205855][ T5276] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 57.214126][ T5276] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 57.257898][ T5289] loop0: detected capacity change from 0 to 1024 [ 57.277900][ T5289] EXT4-fs: Ignoring removed nobh option [ 57.283630][ T5289] EXT4-fs: Ignoring removed bh option [ 57.306659][ T5289] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.741: Allocating blocks 385-513 which overlap fs metadata [ 57.340787][ T5288] EXT4-fs (loop0): pa ffff888106b03070: logic 16, phys. 129, len 24 [ 57.348933][ T5288] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 57.392522][ T5307] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.427752][ T5309] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.435333][ T5309] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.941342][ T5328] hub 4-0:1.0: USB hub found [ 57.957835][ T5328] hub 4-0:1.0: 8 ports detected [ 57.995339][ T5332] loop4: detected capacity change from 0 to 8192 [ 58.213070][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 58.213087][ T29] audit: type=1326 audit(1748960069.874:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7412fe969 code=0x7ffc0000 [ 58.294684][ T29] audit: type=1326 audit(1748960069.904:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe7412fe969 code=0x7ffc0000 [ 58.318090][ T29] audit: type=1326 audit(1748960069.914:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7412fe969 code=0x7ffc0000 [ 58.335520][ T5353] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.341531][ T29] audit: type=1326 audit(1748960069.944:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7412fe969 code=0x7ffc0000 [ 58.434537][ T5362] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 58.451982][ T5362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.466285][ T5366] loop4: detected capacity change from 0 to 512 [ 58.487259][ T5362] bond1: (slave dummy0): making interface the new active one [ 58.497597][ T5362] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 58.536831][ T5366] EXT4-fs (loop4): 1 orphan inode deleted [ 58.554398][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.564294][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 58.582371][ T5366] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.708016][ T5380] loop2: detected capacity change from 0 to 8192 [ 58.813480][ T5392] loop3: detected capacity change from 0 to 512 [ 58.822083][ T5392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.835720][ T5392] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.859225][ T29] audit: type=1400 audit(1748960070.524:1049): avc: denied { read } for pid=5390 comm="iou-wrk-5392" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.881972][ T29] audit: type=1400 audit(1748960070.524:1050): avc: denied { open } for pid=5390 comm="iou-wrk-5392" path="/180/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.941594][ T29] audit: type=1400 audit(1748960070.574:1051): avc: denied { watch } for pid=5397 comm="syz.4.787" path="/146/file0/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 58.964302][ T29] audit: type=1400 audit(1748960070.594:1052): avc: denied { read } for pid=5390 comm="syz.3.785" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.987037][ T29] audit: type=1400 audit(1748960070.594:1053): avc: denied { open } for pid=5390 comm="syz.3.785" path="/180/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.119286][ T5412] loop3: detected capacity change from 0 to 2048 [ 59.376792][ T5445] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 59.837003][ T5509] loop3: detected capacity change from 0 to 512 [ 59.845057][ T5509] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 59.902729][ T5509] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 60.294425][ T5547] Falling back ldisc for ttyS3. [ 60.321799][ T5555] loop1: detected capacity change from 0 to 256 [ 60.333379][ T5555] netlink: 'syz.1.856': attribute type 39 has an invalid length. [ 60.599179][ T5565] loop2: detected capacity change from 0 to 1024 [ 60.914058][ T5588] xt_hashlimit: max too large, truncated to 1048576 [ 60.956126][ T5592] netlink: 'syz.0.873': attribute type 4 has an invalid length. [ 60.973656][ T5592] netlink: 'syz.0.873': attribute type 4 has an invalid length. [ 61.478894][ T5631] loop4: detected capacity change from 0 to 512 [ 61.510929][ T5565] ================================================================== [ 61.519085][ T5565] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 61.526265][ T5565] [ 61.528605][ T5565] write to 0xffff888106ab29a4 of 4 bytes by task 5574 on cpu 0: [ 61.536269][ T5565] xas_set_mark+0x12b/0x140 [ 61.540804][ T5565] __folio_start_writeback+0x1dd/0x440 [ 61.546299][ T5565] ext4_bio_write_folio+0x5ad/0x9f0 [ 61.551606][ T5565] mpage_submit_folio+0xe4/0x170 [ 61.556572][ T5565] mpage_process_page_bufs+0x39b/0x4a0 [ 61.562064][ T5565] mpage_prepare_extent_to_map+0x741/0xaa0 [ 61.567930][ T5565] ext4_do_writepages+0xa1a/0x21c0 [ 61.573062][ T5565] ext4_writepages+0x176/0x300 [ 61.577861][ T5565] do_writepages+0x1c3/0x310 [ 61.582481][ T5565] file_write_and_wait_range+0x156/0x2c0 [ 61.588139][ T5565] generic_buffers_fsync_noflush+0x45/0x120 [ 61.594052][ T5565] ext4_sync_file+0x1ab/0x690 [ 61.598756][ T5565] vfs_fsync_range+0x10d/0x130 [ 61.603550][ T5565] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.609134][ T5565] ext4_file_write_iter+0xdbf/0xf00 [ 61.614366][ T5565] iter_file_splice_write+0x5f2/0x970 [ 61.619753][ T5565] direct_splice_actor+0x153/0x2a0 [ 61.624874][ T5565] splice_direct_to_actor+0x30f/0x680 [ 61.630255][ T5565] do_splice_direct+0xda/0x150 [ 61.635033][ T5565] do_sendfile+0x380/0x650 [ 61.639468][ T5565] __x64_sys_sendfile64+0x105/0x150 [ 61.644691][ T5565] x64_sys_call+0xb39/0x2fb0 [ 61.649380][ T5565] do_syscall_64+0xd2/0x200 [ 61.653904][ T5565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.659811][ T5565] [ 61.662146][ T5565] read to 0xffff888106ab29a4 of 4 bytes by task 5565 on cpu 1: [ 61.669691][ T5565] xas_find_marked+0x5dc/0x620 [ 61.674478][ T5565] find_get_entry+0x5d/0x380 [ 61.679075][ T5565] filemap_get_folios_tag+0x92/0x210 [ 61.684377][ T5565] mpage_prepare_extent_to_map+0x320/0xaa0 [ 61.690210][ T5565] ext4_do_writepages+0x6ea/0x21c0 [ 61.695337][ T5565] ext4_writepages+0x176/0x300 [ 61.700132][ T5565] do_writepages+0x1c3/0x310 [ 61.704740][ T5565] filemap_write_and_wait_range+0x144/0x340 [ 61.710658][ T5565] filemap_invalidate_pages+0xa4/0x1a0 [ 61.716131][ T5565] kiocb_invalidate_pages+0x6e/0x80 [ 61.721336][ T5565] __iomap_dio_rw+0x5d4/0x1250 [ 61.726117][ T5565] iomap_dio_rw+0x40/0x90 [ 61.730455][ T5565] ext4_file_write_iter+0xad9/0xf00 [ 61.735669][ T5565] iter_file_splice_write+0x5f2/0x970 [ 61.741075][ T5565] direct_splice_actor+0x153/0x2a0 [ 61.746198][ T5565] splice_direct_to_actor+0x30f/0x680 [ 61.751577][ T5565] do_splice_direct+0xda/0x150 [ 61.756347][ T5565] do_sendfile+0x380/0x650 [ 61.760786][ T5565] __x64_sys_sendfile64+0x105/0x150 [ 61.766007][ T5565] x64_sys_call+0xb39/0x2fb0 [ 61.770612][ T5565] do_syscall_64+0xd2/0x200 [ 61.775138][ T5565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.781139][ T5565] [ 61.783474][ T5565] value changed: 0x0a000021 -> 0x04000021 [ 61.789224][ T5565] [ 61.791578][ T5565] Reported by Kernel Concurrency Sanitizer on: [ 61.797771][ T5565] CPU: 1 UID: 0 PID: 5565 Comm: syz.2.861 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 61.809788][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.819855][ T5565] ================================================================== [ 61.837142][ T5631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.856357][ T5631] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)