last executing test programs: 6.425128095s ago: executing program 4 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 6.305745777s ago: executing program 4 (id=721): r0 = syz_io_uring_setup(0x88b, &(0x7f0000000280)={0x0, 0xaedf, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) io_uring_enter(r0, 0x52de, 0xf62e, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 6.05413475s ago: executing program 4 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf62, 0x200040ffffffff}, 0x1182, 0x5, 0x3a65, 0x5, 0x1, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 5.842604592s ago: executing program 4 (id=735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000070000006a0000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 5.650914625s ago: executing program 4 (id=742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2004000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 5.26431074s ago: executing program 4 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}}], 0x1, 0x40408c1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.343188212s ago: executing program 2 (id=859): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @loopback, @private0, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.142512444s ago: executing program 2 (id=862): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 903.521918ms ago: executing program 2 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 869.834158ms ago: executing program 2 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0) close(r2) 799.114629ms ago: executing program 2 (id=879): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 759.23286ms ago: executing program 2 (id=869): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 526.844712ms ago: executing program 0 (id=873): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000180)=[{r2, 0x81}], 0x1f, 0x0, 0x0, 0x0) 526.561762ms ago: executing program 3 (id=875): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 490.485883ms ago: executing program 0 (id=877): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$security_selinux(r1, &(0x7f0000000080), 0x0, 0x0, 0x2) 488.509873ms ago: executing program 3 (id=878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 459.964313ms ago: executing program 0 (id=880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 446.734893ms ago: executing program 3 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x60000015}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x502) 380.078344ms ago: executing program 3 (id=883): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x44000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0x2f, 0x0, 0x0) 322.587575ms ago: executing program 1 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 277.696396ms ago: executing program 1 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000250900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 224.891786ms ago: executing program 1 (id=886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x4, 0x30}, &(0x7f0000000080)=0xc) 168.614997ms ago: executing program 3 (id=887): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 129.368637ms ago: executing program 1 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x10}, 0x14}}, 0x0) 101.709248ms ago: executing program 0 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 80.859028ms ago: executing program 1 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0) 46.636619ms ago: executing program 0 (id=891): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000540)='./control\x00', 0x60) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 45.504709ms ago: executing program 3 (id=892): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050f190001141004031d8a6c066b03549ab7a021d6dc31f1156e13"]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x40000000, 0x7, 0x8000000, 0x0, "ff0f0000000b000000000013000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 16.943669ms ago: executing program 1 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x60000015}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x502) 0s ago: executing program 0 (id=894): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 28.723117][ T29] audit: type=1400 audit(1747964667.908:65): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.724834][ T3301] cgroup: Unknown subsys name 'net' [ 28.747327][ T29] audit: type=1400 audit(1747964667.908:66): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.776314][ T29] audit: type=1400 audit(1747964667.938:67): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.917837][ T3301] cgroup: Unknown subsys name 'cpuset' [ 28.924924][ T3301] cgroup: Unknown subsys name 'rlimit' [ 29.046239][ T29] audit: type=1400 audit(1747964668.228:68): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.070070][ T29] audit: type=1400 audit(1747964668.238:69): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.091187][ T29] audit: type=1400 audit(1747964668.238:70): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.112248][ T29] audit: type=1400 audit(1747964668.238:71): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.132563][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.134450][ T29] audit: type=1400 audit(1747964668.248:72): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.174558][ T29] audit: type=1400 audit(1747964668.248:73): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.191347][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.201191][ T29] audit: type=1400 audit(1747964668.338:74): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.344522][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.426687][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.471492][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.479674][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.488108][ T3313] bridge_slave_0: entered allmulticast mode [ 30.495433][ T3313] bridge_slave_0: entered promiscuous mode [ 30.507489][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.522887][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.530442][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.538085][ T3313] bridge_slave_1: entered allmulticast mode [ 30.544569][ T3313] bridge_slave_1: entered promiscuous mode [ 30.562271][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.586514][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 30.596804][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.622759][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.630452][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.640056][ T3312] bridge_slave_0: entered allmulticast mode [ 30.647268][ T3312] bridge_slave_0: entered promiscuous mode [ 30.654748][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.690720][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.698172][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.705804][ T3312] bridge_slave_1: entered allmulticast mode [ 30.712811][ T3312] bridge_slave_1: entered promiscuous mode [ 30.731068][ T3313] team0: Port device team_slave_0 added [ 30.738582][ T3313] team0: Port device team_slave_1 added [ 30.770655][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.811827][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.831554][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.838917][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.866304][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.878238][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.886136][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.913455][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.940273][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.947508][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.954761][ T3320] bridge_slave_0: entered allmulticast mode [ 30.961822][ T3320] bridge_slave_0: entered promiscuous mode [ 30.976318][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.983901][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.991677][ T3319] bridge_slave_0: entered allmulticast mode [ 30.998321][ T3319] bridge_slave_0: entered promiscuous mode [ 31.005693][ T3312] team0: Port device team_slave_0 added [ 31.011838][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.020267][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.027658][ T3320] bridge_slave_1: entered allmulticast mode [ 31.034499][ T3320] bridge_slave_1: entered promiscuous mode [ 31.041014][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.048761][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.057116][ T3316] bridge_slave_0: entered allmulticast mode [ 31.063866][ T3316] bridge_slave_0: entered promiscuous mode [ 31.071835][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.079013][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.086719][ T3316] bridge_slave_1: entered allmulticast mode [ 31.094473][ T3316] bridge_slave_1: entered promiscuous mode [ 31.101608][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.109114][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.116474][ T3319] bridge_slave_1: entered allmulticast mode [ 31.123501][ T3319] bridge_slave_1: entered promiscuous mode [ 31.131067][ T3312] team0: Port device team_slave_1 added [ 31.177471][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.197351][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.204638][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.232242][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.244474][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.252826][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.283871][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.300807][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.313229][ T3313] hsr_slave_0: entered promiscuous mode [ 31.320197][ T3313] hsr_slave_1: entered promiscuous mode [ 31.328470][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.340385][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.357387][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.385807][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.419694][ T3320] team0: Port device team_slave_0 added [ 31.443304][ T3319] team0: Port device team_slave_0 added [ 31.451303][ T3320] team0: Port device team_slave_1 added [ 31.469393][ T3316] team0: Port device team_slave_0 added [ 31.485285][ T3319] team0: Port device team_slave_1 added [ 31.503971][ T3316] team0: Port device team_slave_1 added [ 31.512052][ T3312] hsr_slave_0: entered promiscuous mode [ 31.518690][ T3312] hsr_slave_1: entered promiscuous mode [ 31.525227][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.533409][ T3312] Cannot create hsr debugfs directory [ 31.547368][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.554491][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.581561][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.605412][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.612427][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.639238][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.650409][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.657684][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.684628][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.703946][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.711262][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.740175][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.754725][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.761736][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.788372][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.799942][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.808225][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.836261][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.904957][ T3320] hsr_slave_0: entered promiscuous mode [ 31.912273][ T3320] hsr_slave_1: entered promiscuous mode [ 31.918555][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.926446][ T3320] Cannot create hsr debugfs directory [ 31.963960][ T3316] hsr_slave_0: entered promiscuous mode [ 31.970452][ T3316] hsr_slave_1: entered promiscuous mode [ 31.977404][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.985859][ T3316] Cannot create hsr debugfs directory [ 32.003184][ T3319] hsr_slave_0: entered promiscuous mode [ 32.009977][ T3319] hsr_slave_1: entered promiscuous mode [ 32.018243][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.026208][ T3319] Cannot create hsr debugfs directory [ 32.167700][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.194134][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.205924][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.221344][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.245581][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.254559][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.268891][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.279626][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.314357][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.341964][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.352443][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.363578][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.394339][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.406172][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.418011][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.428525][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.439355][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.465514][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.490570][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.498085][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.524835][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.532352][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.544648][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.554784][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.564690][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.575829][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.587175][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.604141][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.633321][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.644574][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.670567][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.687332][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.701526][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.709203][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.728263][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.735652][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.746305][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.753701][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.767806][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.784816][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.796042][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.803255][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.827812][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.844871][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.852374][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.862371][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.869788][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.893156][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.904375][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.936722][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.993618][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.026943][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.043077][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.060201][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.067518][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.080361][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.087829][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.136086][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.190663][ T3313] veth0_vlan: entered promiscuous mode [ 33.240209][ T3313] veth1_vlan: entered promiscuous mode [ 33.257214][ T3312] veth0_vlan: entered promiscuous mode [ 33.270283][ T3312] veth1_vlan: entered promiscuous mode [ 33.289355][ T3316] veth0_vlan: entered promiscuous mode [ 33.303212][ T3316] veth1_vlan: entered promiscuous mode [ 33.318860][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.339352][ T3313] veth0_macvtap: entered promiscuous mode [ 33.351521][ T3312] veth0_macvtap: entered promiscuous mode [ 33.363707][ T3313] veth1_macvtap: entered promiscuous mode [ 33.388448][ T3316] veth0_macvtap: entered promiscuous mode [ 33.395554][ T3312] veth1_macvtap: entered promiscuous mode [ 33.406084][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.415524][ T3316] veth1_macvtap: entered promiscuous mode [ 33.432316][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.442667][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.459386][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.479300][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.488847][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.498018][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506746][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.516118][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.529128][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.540983][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.550373][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559230][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.569171][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.583076][ T3319] veth0_vlan: entered promiscuous mode [ 33.599092][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.608869][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.617959][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626767][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.648143][ T3319] veth1_vlan: entered promiscuous mode [ 33.664569][ T3320] veth0_vlan: entered promiscuous mode [ 33.701467][ T3320] veth1_vlan: entered promiscuous mode [ 33.715905][ T3319] veth0_macvtap: entered promiscuous mode [ 33.736715][ T3320] veth0_macvtap: entered promiscuous mode [ 33.745311][ T3319] veth1_macvtap: entered promiscuous mode [ 33.753325][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.761621][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.786175][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.796265][ T3320] veth1_macvtap: entered promiscuous mode [ 33.804525][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.804539][ T29] audit: type=1400 audit(1747964672.988:93): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.820440][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.876763][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.885616][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.895046][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904207][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.922321][ T29] audit: type=1400 audit(1747964672.988:94): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.949898][ T29] audit: type=1400 audit(1747964672.988:95): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.978419][ T29] audit: type=1400 audit(1747964673.028:96): avc: denied { map_create } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.000542][ T29] audit: type=1400 audit(1747964673.028:97): avc: denied { perfmon } for pid=3455 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.023900][ T29] audit: type=1400 audit(1747964673.028:98): avc: denied { map_read map_write } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.048600][ T29] audit: type=1400 audit(1747964673.028:99): avc: denied { prog_load } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.070832][ T29] audit: type=1400 audit(1747964673.028:100): avc: denied { bpf } for pid=3455 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.095607][ T29] audit: type=1400 audit(1747964673.038:101): avc: denied { prog_run } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.123341][ T3463] ref_ctr_offset mismatch. inode: 0x17 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 34.139147][ T29] audit: type=1400 audit(1747964673.168:102): avc: denied { create } for pid=3459 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.163618][ T3458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.175030][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.189258][ T3458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.208203][ T3320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.218016][ T3320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.227473][ T3320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.236516][ T3320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.293228][ T3467] loop1: detected capacity change from 0 to 512 [ 34.315207][ T3467] ======================================================= [ 34.315207][ T3467] WARNING: The mand mount option has been deprecated and [ 34.315207][ T3467] and is ignored by this kernel. Remove the mand [ 34.315207][ T3467] option from the mount to silence this warning. [ 34.315207][ T3467] ======================================================= [ 34.378936][ T3467] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.386225][ T3467] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.8: bad orphan inode 13 [ 34.406076][ T3467] ext4_test_bit(bit=12, block=18) = 1 [ 34.414331][ T3467] is_bad_inode(inode)=0 [ 34.419006][ T3467] NEXT_ORPHAN(inode)=2130706432 [ 34.424326][ T3467] max_ino=32 [ 34.427802][ T3467] i_nlink=1 [ 34.433638][ T3467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.491303][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.514217][ T3484] loop4: detected capacity change from 0 to 512 [ 34.542943][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 34.628358][ T3486] loop1: detected capacity change from 0 to 512 [ 34.637724][ T3484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.674520][ T3486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.685402][ T3501] loop3: detected capacity change from 0 to 1024 [ 34.697541][ T3484] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.717208][ T3486] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.737128][ T3484] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.12: corrupted inode contents [ 34.751398][ T3501] EXT4-fs: Ignoring removed orlov option [ 34.759052][ T3486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.781245][ T3484] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.12: mark_inode_dirty error [ 34.806801][ T3501] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 34.824001][ T3484] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.12: corrupted inode contents [ 34.858506][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.884220][ T3505] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.12: corrupted inode contents [ 34.918132][ T3505] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.12: mark_inode_dirty error [ 34.936830][ T3505] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.12: corrupted inode contents [ 34.958847][ T3501] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.973982][ T3505] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.12: mark_inode_dirty error [ 34.987405][ T3505] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.12: corrupted inode contents [ 35.001346][ T3505] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.12: mark_inode_dirty error [ 35.033092][ T3505] syz.4.12 (3505) used greatest stack depth: 10976 bytes left [ 35.052228][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.078340][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.115342][ T3512] tmpfs: Bad value for 'mpol' [ 35.314211][ T3527] netlink: 'syz.3.28': attribute type 3 has an invalid length. [ 35.415443][ T3533] loop3: detected capacity change from 0 to 1024 [ 35.424419][ T3532] loop2: detected capacity change from 0 to 512 [ 35.454382][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.459133][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.487407][ T3532] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.533972][ T3533] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.31: Allocating blocks 497-513 which overlap fs metadata [ 35.554153][ T3533] EXT4-fs (loop3): pa ffff888106e32000: logic 256, phys. 369, len 9 [ 35.563140][ T3533] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 35.587528][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 35.608506][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.635171][ T3528] syz.1.29 (3528) used greatest stack depth: 10960 bytes left [ 35.650293][ T3546] x_tables: duplicate entry at hook 2 [ 35.660396][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.774110][ T3557] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 35.879690][ T3571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'. [ 35.888863][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 35.915686][ T3578] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 35.925407][ T3578] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 35.933214][ T3578] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.51'. [ 35.986545][ T3587] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 36.020749][ T3593] Cannot find del_set index 0 as target [ 36.077995][ T3602] loop0: detected capacity change from 0 to 164 [ 36.092346][ T3602] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.104752][ T3602] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.113736][ T3602] Symlink component flag not implemented [ 36.119562][ T3602] Symlink component flag not implemented [ 36.126601][ T3602] Symlink component flag not implemented (7) [ 36.132948][ T3602] Symlink component flag not implemented (116) [ 36.401929][ T3641] loop0: detected capacity change from 0 to 1024 [ 36.409862][ T3641] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.423436][ T3641] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.437334][ T3641] JBD2: no valid journal superblock found [ 36.443228][ T3641] EXT4-fs (loop0): Could not load journal inode [ 36.475750][ T3651] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 36.488320][ T3649] IPVS: stopping master sync thread 3651 ... [ 36.516332][ T3653] Zero length message leads to an empty skb [ 36.569343][ T3663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=8192 sclass=netlink_audit_socket pid=3663 comm=syz.0.91 [ 36.922784][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 36.931975][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 37.407534][ T3733] loop4: detected capacity change from 0 to 2048 [ 37.441340][ T3733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.460934][ T3740] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 37.460934][ T3740] C<+P5"kxU [ 37.525860][ T3733] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 37.589076][ T3733] EXT4-fs (loop4): Remounting filesystem read-only [ 37.653353][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.671311][ T3762] netlink: 'syz.1.134': attribute type 10 has an invalid length. [ 37.715040][ T3762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.724264][ T3769] netlink: 'syz.1.134': attribute type 10 has an invalid length. [ 37.732500][ T3769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.134'. [ 37.758505][ T3762] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.768606][ T3769] batadv0: entered promiscuous mode [ 37.774213][ T3769] batadv0: entered allmulticast mode [ 37.788776][ T3773] SELinux: policydb version 0 does not match my version range 15-34 [ 37.797700][ T3769] bond0: (slave batadv0): Releasing backup interface [ 37.808324][ T3773] SELinux: failed to load policy [ 37.815466][ T3769] bridge0: port 3(batadv0) entered blocking state [ 37.822741][ T3769] bridge0: port 3(batadv0) entered disabled state [ 37.922446][ T3781] loop1: detected capacity change from 0 to 512 [ 37.937172][ T3781] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.950638][ T3781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.991908][ T3781] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.143: bad orphan inode 131083 [ 38.012354][ T3781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.062715][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.195453][ T3806] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 38.209204][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 38.211045][ T3808] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.154'. [ 38.218846][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 38.388300][ T3818] xt_hashlimit: size too large, truncated to 1048576 [ 38.742126][ T3843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.170'. [ 38.751404][ T3843] netem: unknown loss type 13 [ 38.756447][ T3843] netem: change failed [ 38.826165][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 38.826180][ T29] audit: type=1326 audit(1747964677.978:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 38.856779][ T29] audit: type=1326 audit(1747964677.978:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 38.880840][ T29] audit: type=1400 audit(1747964678.008:559): avc: denied { name_bind } for pid=3851 comm="syz.4.174" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.881187][ T3854] mmap: syz.4.175 (3854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.918298][ T29] audit: type=1326 audit(1747964678.108:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 38.958861][ T29] audit: type=1326 audit(1747964678.108:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 38.982601][ T29] audit: type=1326 audit(1747964678.108:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 39.007344][ T29] audit: type=1326 audit(1747964678.128:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 39.031482][ T29] audit: type=1326 audit(1747964678.128:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 39.055390][ T29] audit: type=1326 audit(1747964678.128:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 39.079004][ T29] audit: type=1326 audit(1747964678.128:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 39.171076][ T3871] process 'syz.3.182' launched './file1' with NULL argv: empty string added [ 39.261615][ T3882] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.187'. [ 39.412497][ T3901] syz.2.196 (3901) used greatest stack depth: 10768 bytes left [ 39.623287][ T3922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.514600][ T3894] syz.0.193 (3894) used greatest stack depth: 6208 bytes left [ 40.611791][ T3974] __nla_validate_parse: 4 callbacks suppressed [ 40.611812][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 40.631797][ T3976] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 40.669215][ T3974] vlan2: entered allmulticast mode [ 40.674662][ T3974] dummy0: entered allmulticast mode [ 41.010884][ T3995] loop3: detected capacity change from 0 to 256 [ 41.659783][ T4028] loop1: detected capacity change from 0 to 1024 [ 41.702421][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.846707][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.862779][ T4039] syz.3.257 uses obsolete (PF_INET,SOCK_PACKET) [ 41.884762][ T4041] Illegal XDP return value 4041 on prog (id 178) dev N/A, expect packet loss! [ 41.959094][ T4052] syz.0.262 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.975823][ T4037] loop4: detected capacity change from 0 to 512 [ 42.008636][ T4056] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 42.058894][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 42.078072][ T4037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.129940][ T4037] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.213963][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 42.237741][ T4037] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 42.261236][ T4037] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.255: mark_inode_dirty error [ 42.261361][ T4076] IPVS: Error joining to the multicast group [ 42.304575][ T4037] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 42.335694][ T4081] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 42.353717][ T4081] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.255: mark_inode_dirty error [ 42.374428][ T4086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 42.408961][ T4081] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 42.428410][ T4081] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.255: mark_inode_dirty error [ 42.441853][ T4081] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 42.457438][ T4081] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.255: mark_inode_dirty error [ 42.575242][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.849399][ T4153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 42.859133][ T4153] netlink: 'syz.3.298': attribute type 7 has an invalid length. [ 42.867672][ T4153] netlink: 'syz.3.298': attribute type 8 has an invalid length. [ 42.876384][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 42.905897][ T4163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.222583][ T4203] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 43.262575][ T4203] bond1: entered promiscuous mode [ 43.272797][ T4203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.357198][ T4210] bond1: (slave veth3): making interface the new active one [ 43.365549][ T4210] veth3: entered promiscuous mode [ 43.373427][ T4210] bond1: (slave veth3): Enslaving as an active interface with an up link [ 43.423336][ T4222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.327'. [ 43.466807][ T4226] netlink: 'syz.0.329': attribute type 298 has an invalid length. [ 43.503643][ T4232] loop2: detected capacity change from 0 to 256 [ 43.528574][ T4231] bridge0: entered promiscuous mode [ 43.535973][ T4235] loop1: detected capacity change from 0 to 128 [ 43.552072][ T4231] macsec1: entered allmulticast mode [ 43.559165][ T4231] bridge0: entered allmulticast mode [ 43.562423][ T4235] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.580205][ T4231] bridge0: port 3(macsec1) entered blocking state [ 43.580323][ T4235] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.587460][ T4231] bridge0: port 3(macsec1) entered disabled state [ 43.634511][ T4231] bridge0: left allmulticast mode [ 43.640279][ T4231] bridge0: left promiscuous mode [ 43.700249][ T4248] loop2: detected capacity change from 0 to 512 [ 43.709990][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.740493][ T4248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.766508][ T4248] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.792877][ T4248] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.338: corrupted inode contents [ 43.807060][ T4248] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.338: mark_inode_dirty error [ 43.851754][ T4248] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.338: corrupted inode contents [ 43.876068][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 43.876085][ T29] audit: type=1326 audit(1747964683.058:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 43.923996][ T4260] loop4: detected capacity change from 0 to 4096 [ 43.930884][ T29] audit: type=1326 audit(1747964683.058:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 43.963449][ T29] audit: type=1326 audit(1747964683.058:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 43.992735][ T29] audit: type=1326 audit(1747964683.068:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710c0ee969 code=0x7ffc0000 [ 44.005756][ C0] hrtimer: interrupt took 39746 ns [ 44.042758][ T4264] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.338: corrupted inode contents [ 44.058004][ T4260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.069002][ T4264] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.338: mark_inode_dirty error [ 44.087507][ T29] audit: type=1400 audit(1747964683.258:745): avc: denied { remount } for pid=4259 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.139722][ T4260] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.153253][ T4264] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.338: corrupted inode contents [ 44.192848][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.204422][ T4264] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.338: mark_inode_dirty error [ 44.243340][ T4264] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.338: corrupted inode contents [ 44.270145][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.288729][ T4287] loop3: detected capacity change from 0 to 4096 [ 44.297551][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.306482][ T4264] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.338: mark_inode_dirty error [ 44.318972][ T29] audit: type=1400 audit(1747964683.488:746): avc: denied { name_connect } for pid=4290 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 44.348310][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.373590][ T4287] EXT4-fs (loop3): shut down requested (1) [ 44.394139][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.406392][ T29] audit: type=1400 audit(1747964683.588:747): avc: denied { read } for pid=4290 comm="syz.0.356" lport=46974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.520649][ T29] audit: type=1400 audit(1747964683.698:748): avc: denied { connect } for pid=4313 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.546023][ T29] audit: type=1400 audit(1747964683.708:749): avc: denied { write } for pid=4313 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.608278][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.675272][ T29] audit: type=1326 audit(1747964683.858:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ede9c5927 code=0x7ffc0000 [ 44.789707][ T4360] netlink: 76 bytes leftover after parsing attributes in process `syz.2.368'. [ 45.433173][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 45.530284][ T4422] loop1: detected capacity change from 0 to 1024 [ 45.538667][ T4422] EXT4-fs: Ignoring removed bh option [ 45.544804][ T4422] EXT4-fs: inline encryption not supported [ 45.552544][ T4425] loop3: detected capacity change from 0 to 512 [ 45.561965][ T4422] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.574987][ T4422] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 45.588326][ T4422] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.388: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.606824][ T4425] EXT4-fs (loop3): 1 orphan inode deleted [ 45.616748][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.633441][ T4386] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 1 [ 45.646303][ T4422] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.388: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.672130][ T4425] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.697903][ T4422] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.388: Failed to acquire dquot type 0 [ 45.714691][ T4432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.391'. [ 45.726746][ T4422] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.739352][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.751336][ T4422] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.388: mark_inode_dirty error [ 45.768570][ T4422] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 45.782353][ T4422] EXT4-fs (loop1): 1 orphan inode deleted [ 45.797495][ T4422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.819438][ T4406] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.853328][ T4406] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:65: Failed to release dquot type 0 [ 45.869388][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.890181][ T3313] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.908552][ T3313] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.919996][ T3313] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 46.050989][ T4454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 46.305748][ T4463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.403'. [ 46.960889][ T4490] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.415'. [ 47.057624][ T4503] SELinux: policydb version 788329589 does not match my version range 15-34 [ 47.068842][ T4503] SELinux: failed to load policy [ 47.100247][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.113451][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.244787][ T4523] loop3: detected capacity change from 0 to 512 [ 47.259458][ T4523] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 47.294394][ T4523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 47.306582][ T4523] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.430: corrupted in-inode xattr: e_value size too large [ 47.325800][ T4523] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.430: couldn't read orphan inode 15 (err -117) [ 47.344945][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.388005][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.569348][ T4552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.580408][ T4552] bridge0: port 3(bond1) entered blocking state [ 47.588496][ T4552] bridge0: port 3(bond1) entered disabled state [ 47.596338][ T4552] bond1: entered allmulticast mode [ 47.604748][ T4552] bond1: entered promiscuous mode [ 47.613087][ T4552] bridge0: port 3(bond1) entered blocking state [ 47.622217][ T4552] bridge0: port 3(bond1) entered forwarding state [ 47.633197][ T4318] bridge0: port 3(bond1) entered disabled state [ 47.657547][ T4558] SELinux: security policydb version 18 (MLS) not backwards compatible [ 47.669474][ T4558] SELinux: failed to load policy [ 47.790062][ T4572] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.449'. [ 47.803807][ T4572] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.449'. [ 47.816072][ T4572] netlink: 3 bytes leftover after parsing attributes in process `syz.1.449'. [ 47.930402][ T4590] loop2: detected capacity change from 0 to 128 [ 47.941200][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'. [ 47.952712][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'. [ 47.967249][ T4590] EXT4-fs: Ignoring removed nobh option [ 47.996082][ T4590] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.053945][ T4590] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.310218][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.413900][ T4631] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 48.452958][ T4631] bond1: entered promiscuous mode [ 48.459740][ T4631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.494340][ T4631] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 48.509545][ T4631] bond1: (slave batadv1): making interface the new active one [ 48.521763][ T4631] batadv1: entered promiscuous mode [ 48.529777][ T4631] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 48.734908][ T4663] loop2: detected capacity change from 0 to 2048 [ 48.772183][ T4663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.828272][ T4671] SELinux: syz.3.492 (4671) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.893645][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.913149][ T4675] loop3: detected capacity change from 0 to 2048 [ 48.931706][ T4675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.975012][ T4674] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.994132][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 48.994146][ T29] audit: type=1326 audit(1747964688.158:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.002592][ T4674] EXT4-fs (loop3): Remounting filesystem read-only [ 49.032178][ T29] audit: type=1326 audit(1747964688.158:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.069334][ T29] audit: type=1326 audit(1747964688.158:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.069588][ T4674] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 49.101528][ T29] audit: type=1326 audit(1747964688.158:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.144984][ T29] audit: type=1326 audit(1747964688.158:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.181779][ T29] audit: type=1326 audit(1747964688.158:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.209813][ T29] audit: type=1326 audit(1747964688.158:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.237890][ T29] audit: type=1326 audit(1747964688.158:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.270902][ T29] audit: type=1326 audit(1747964688.158:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20f114e969 code=0x7ffc0000 [ 49.305960][ T29] audit: type=1326 audit(1747964688.178:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.1.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ede9ce969 code=0x0 [ 49.348001][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.691063][ T4725] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 49.725650][ T4725] bond1: entered promiscuous mode [ 49.733563][ T4725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.758278][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 49.768604][ T4725] bond1: (slave batadv1): making interface the new active one [ 49.779822][ T4725] batadv1: entered promiscuous mode [ 49.790219][ T4730] loop2: detected capacity change from 0 to 1024 [ 49.790220][ T4725] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 49.829970][ T4730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.870711][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.159448][ T4769] 9pnet_fd: Insufficient options for proto=fd [ 50.281432][ T4777] tmpfs: Bad value for 'mpol' [ 50.496462][ T4791] loop4: detected capacity change from 0 to 2048 [ 50.559847][ T4791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.575695][ T4791] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.806913][ T4318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 50.846217][ T4318] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 214 with error 117 [ 50.862095][ T4318] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.862095][ T4318] [ 51.121516][ T4835] loop3: detected capacity change from 0 to 2048 [ 51.167729][ T4835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.186093][ T4835] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.561: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 51.233681][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.381306][ T4847] netlink: 160 bytes leftover after parsing attributes in process `syz.2.567'. [ 51.421162][ T4847] netlink: 160 bytes leftover after parsing attributes in process `syz.2.567'. [ 51.674178][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.908900][ T4874] loop2: detected capacity change from 0 to 2048 [ 51.939749][ T4874] Alternate GPT is invalid, using primary GPT. [ 51.948291][ T4874] loop2: p1 p2 p3 [ 51.983519][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 51.994261][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 52.012809][ T4879] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.016360][ T4882] loop2: detected capacity change from 0 to 2048 [ 52.022863][ T4879] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.043004][ T4879] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.054825][ T4879] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.072693][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.091731][ T4882] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.303577][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881275cc600: rx timeout, send abort [ 52.314283][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881275cc600: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.333409][ T4886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 52.439338][ T4474] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1430 with error 117 [ 52.454082][ T4474] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.454082][ T4474] [ 52.696467][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 53.347279][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.516018][ T4965] capability: warning: `syz.3.620' uses deprecated v2 capabilities in a way that may be insecure [ 53.709306][ T4989] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 53.746269][ T4989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.774718][ T4999] netlink: 596 bytes leftover after parsing attributes in process `syz.4.635'. [ 53.818611][ T4989] bond2: (slave geneve2): making interface the new active one [ 53.838606][ T4989] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 54.170318][ T5044] loop4: detected capacity change from 0 to 1024 [ 54.188278][ T5046] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 54.195353][ T5044] journal_path: Lookup failure for './file0' [ 54.206087][ T5044] EXT4-fs: error: could not find journal device path [ 54.247171][ T5046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.255805][ T5053] ALSA: seq fatal error: cannot create timer (-19) [ 54.294919][ T5046] bond1: (slave geneve2): making interface the new active one [ 54.309873][ T5046] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.439778][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 54.439796][ T29] audit: type=1326 audit(1747964693.628:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 54.512622][ T29] audit: type=1326 audit(1747964693.628:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 54.544758][ T29] audit: type=1326 audit(1747964693.628:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 54.574940][ T29] audit: type=1326 audit(1747964693.638:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 54.621698][ T29] audit: type=1401 audit(1747964693.808:976): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 54.650183][ T5087] loop3: detected capacity change from 0 to 1024 [ 54.668272][ T5087] journal_path: Lookup failure for './file0' [ 54.675698][ T5087] EXT4-fs: error: could not find journal device path [ 54.720322][ T5096] pim6reg: entered allmulticast mode [ 54.735231][ T5096] pim6reg: left allmulticast mode [ 54.750243][ T5101] program syz.0.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.824703][ T5106] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 54.869797][ T5106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.916534][ T5106] bond2: (slave geneve2): making interface the new active one [ 54.933197][ T5106] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 54.967029][ T5116] sctp: [Deprecated]: syz.2.684 (pid 5116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.967029][ T5116] Use struct sctp_sack_info instead [ 55.142144][ T5128] netlink: 76 bytes leftover after parsing attributes in process `syz.3.690'. [ 55.178500][ T5130] loop2: detected capacity change from 0 to 1024 [ 55.198752][ T5130] journal_path: Lookup failure for './file0' [ 55.207414][ T5130] EXT4-fs: error: could not find journal device path [ 55.314584][ T5135] bond2: entered promiscuous mode [ 55.321082][ T5135] bond2: entered allmulticast mode [ 55.328430][ T5135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.358494][ T5135] bond2 (unregistering): Released all slaves [ 55.456922][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 55.589136][ T5156] xt_hashlimit: max too large, truncated to 1048576 [ 55.622055][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.636317][ T5163] loop3: detected capacity change from 0 to 2048 [ 55.647456][ T5159] ALSA: seq fatal error: cannot create timer (-16) [ 55.656400][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.685146][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.720214][ T29] audit: type=1326 audit(1747964694.908:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe369bae969 code=0x0 [ 55.749515][ T5163] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.966675][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.966901][ T29] audit: type=1400 audit(1747964695.148:978): avc: denied { read write } for pid=5187 comm="syz.0.715" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.976335][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.005569][ T29] audit: type=1400 audit(1747964695.148:979): avc: denied { open } for pid=5187 comm="syz.0.715" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.048844][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.058187][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.156961][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.165323][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.174427][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.185494][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.196469][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.205645][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.208475][ T4337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:34: bg 0: block 345: padding at end of block bitmap is not set [ 56.217131][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217219][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217312][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217341][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217373][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217562][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217595][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.217687][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.272099][ T4337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 639 with error 117 [ 56.272745][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.281034][ T4337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.281034][ T4337] [ 56.291383][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.358580][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.367768][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.376482][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.385784][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.399923][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.409312][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.418380][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.426606][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.435607][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.463003][ T5190] pim6reg: entered allmulticast mode [ 56.469991][ T1041] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 56.485505][ T5190] pim6reg: left allmulticast mode [ 56.662453][ T5198] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 56.773152][ T29] audit: type=1400 audit(1747964695.948:980): avc: denied { ioctl } for pid=5208 comm="syz.0.725" path="socket:[8885]" dev="sockfs" ino=8885 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.876942][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 57.069696][ T29] audit: type=1326 audit(1747964696.258:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 57.221989][ T5241] xt_hashlimit: max too large, truncated to 1048576 [ 57.278827][ T5251] loop4: detected capacity change from 0 to 512 [ 57.334406][ T5251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.357174][ T5251] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.515523][ T5262] loop2: detected capacity change from 0 to 512 [ 57.547249][ T5262] EXT4-fs: Ignoring removed i_version option [ 57.577577][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.610535][ T3319] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /80/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 57.634182][ T5262] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 57.634223][ T5262] System zones: 0-2, 18-18, 34-35 [ 57.673433][ T5262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.699225][ T5262] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.750326][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.809579][ T5292] loop1: detected capacity change from 0 to 2048 [ 57.868601][ T5292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.902014][ T5292] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.062927][ T4335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:32: bg 0: block 345: padding at end of block bitmap is not set [ 58.137669][ T4335] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 117 with error 117 [ 58.153421][ T4335] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.153421][ T4335] [ 58.199085][ T5320] geneve0: entered promiscuous mode [ 58.205629][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 58.230643][ T5320] geneve0 (unregistering): left promiscuous mode [ 58.444888][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.453247][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.543663][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.583355][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.797815][ T5327] bond1: left promiscuous mode [ 58.803195][ T5327] batadv1: left promiscuous mode [ 58.848467][ T5327] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.860178][ T5327] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.871159][ T5327] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.880948][ T5327] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.106471][ T5348] loop2: detected capacity change from 0 to 1024 [ 59.130622][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.134698][ T5348] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 59.177647][ T5348] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.209959][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 59.216648][ T5348] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.788: iget: special inode unallocated [ 59.229831][ T5353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.244873][ T5353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.244990][ T5348] EXT4-fs (loop2): Remounting filesystem read-only [ 59.255074][ T5353] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.255126][ T5353] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.282734][ T5348] EXT4-fs (loop2): no journal found [ 59.288354][ T5348] EXT4-fs (loop2): can't get journal size [ 59.295064][ T5353] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.305141][ T5353] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.314839][ T5353] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.325245][ T5353] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.369233][ T5348] EXT4-fs (loop2): filesystem is read-only [ 59.376722][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.400995][ T5356] pimreg: entered allmulticast mode [ 59.485158][ T5365] pimreg: left allmulticast mode [ 59.561310][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.750102][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 59.750137][ T29] audit: type=1400 audit(1747964698.938:1034): avc: denied { watch } for pid=5389 comm="syz.1.805" path="/173/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.875157][ T29] audit: type=1400 audit(1747964699.058:1035): avc: denied { bind } for pid=5400 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.919885][ T5405] Cannot find del_set index 0 as target [ 59.991589][ T29] audit: type=1326 audit(1747964699.178:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 60.021804][ T29] audit: type=1326 audit(1747964699.178:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 60.048538][ T29] audit: type=1326 audit(1747964699.178:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 60.075488][ T29] audit: type=1326 audit(1747964699.178:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 60.102983][ T29] audit: type=1326 audit(1747964699.178:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 60.130716][ T29] audit: type=1326 audit(1747964699.208:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088925e969 code=0x7ffc0000 [ 60.323083][ T5427] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.331816][ T5427] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.344216][ T5431] loop1: detected capacity change from 0 to 164 [ 60.368497][ T29] audit: type=1400 audit(1747964699.548:1042): avc: denied { mount } for pid=5430 comm="syz.1.825" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.374457][ T5431] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.404394][ T5433] loop2: detected capacity change from 0 to 1024 [ 60.445818][ T29] audit: type=1400 audit(1747964699.628:1043): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.471145][ T5433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.510327][ T5433] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.592300][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.625530][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.648267][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.706295][ T5427] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.716788][ T5427] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.726827][ T5427] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.736750][ T5427] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.748839][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 60.895010][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 60.918189][ T5457] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.933765][ T5457] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.945045][ T5457] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.954232][ T5457] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.968652][ T5457] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.978549][ T5457] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.990341][ T5457] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.999482][ T5457] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.160338][ T5468] loop2: detected capacity change from 0 to 1024 [ 61.170730][ T5468] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.179603][ T5472] netlink: 96 bytes leftover after parsing attributes in process `syz.0.842'. [ 61.210836][ T5468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.256556][ T5468] EXT4-fs (loop2): can't enable nombcache during remount [ 61.305917][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.653725][ T5509] xt_CT: No such helper "pptp" [ 61.669339][ T5512] binfmt_misc: register: failed to install interpreter file ./file0 [ 62.513067][ T5559] loop3: detected capacity change from 0 to 512 [ 62.575217][ T5559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.611230][ T5559] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.717609][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.896607][ T4386] ================================================================== [ 62.905969][ T4386] BUG: KCSAN: data-race in n_tty_ioctl_helper / n_tty_receive_char [ 62.914938][ T4386] [ 62.917538][ T4386] write to 0xffff8881222c59bd of 1 bytes by task 5585 on cpu 1: [ 62.925554][ T4386] n_tty_ioctl_helper+0x1da/0x210 [ 62.931149][ T4386] n_tty_ioctl+0x101/0x200 [ 62.935960][ T4386] tty_ioctl+0x845/0xb80 [ 62.940357][ T4386] __se_sys_ioctl+0xcb/0x140 [ 62.945166][ T4386] __x64_sys_ioctl+0x43/0x50 [ 62.950066][ T4386] x64_sys_call+0x19a8/0x2fb0 [ 62.955226][ T4386] do_syscall_64+0xd0/0x1a0 [ 62.960113][ T4386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.966778][ T4386] [ 62.969123][ T4386] read to 0xffff8881222c59bd of 1 bytes by task 4386 on cpu 0: [ 62.977169][ T4386] n_tty_receive_char+0x53/0x6a0 [ 62.982236][ T4386] n_tty_receive_buf_standard+0x473/0x2f10 [ 62.988632][ T4386] n_tty_receive_buf_common+0x805/0xbe0 [ 62.994229][ T4386] n_tty_receive_buf2+0x33/0x40 [ 62.999430][ T4386] tty_ldisc_receive_buf+0x63/0xf0 [ 63.004860][ T4386] tty_port_default_receive_buf+0x59/0x90 [ 63.011225][ T4386] flush_to_ldisc+0x1b5/0x410 [ 63.017349][ T4386] process_scheduled_works+0x4cb/0x9d0 [ 63.023726][ T4386] worker_thread+0x582/0x770 [ 63.028924][ T4386] kthread+0x486/0x510 [ 63.033372][ T4386] ret_from_fork+0x4b/0x60 [ 63.038767][ T4386] ret_from_fork_asm+0x1a/0x30 [ 63.044550][ T4386] [ 63.046972][ T4386] value changed: 0x00 -> 0x01 [ 63.052271][ T4386] [ 63.054798][ T4386] Reported by Kernel Concurrency Sanitizer on: [ 63.062530][ T4386] CPU: 0 UID: 0 PID: 4386 Comm: kworker/u8:59 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(voluntary) [ 63.076116][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.086929][ T4386] Workqueue: events_unbound flush_to_ldisc [ 63.094580][ T4386] ================================================================== [ 63.179223][ T5588] xt_CT: No such helper "pptp"