last executing test programs: 2.686306899s ago: executing program 4 (id=341): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@bsdgroups}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x0, 0x783, &(0x7f0000000a80)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES8=r0], 0x0) 1.260154739s ago: executing program 2 (id=380): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x0, &(0x7f0000000000)) 1.20232679s ago: executing program 0 (id=381): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000001780)={@local, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0xc, 0x6, "1d8a20", 0x14, 0x6, 0x0, @loopback, @private2, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x178, 0x0, 0x1000}}}}}}}, 0x0) 1.20206293s ago: executing program 0 (id=382): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.20188353s ago: executing program 0 (id=383): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xaa}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1.008789035s ago: executing program 1 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.008564255s ago: executing program 1 (id=388): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e20, 0x4e23, 0x447, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="898c7979", 0x4, 0x10800, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 910.815733ms ago: executing program 2 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x6}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 885.891618ms ago: executing program 4 (id=390): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="2a000e0068"], 0x48}}, 0x0) 837.235137ms ago: executing program 2 (id=391): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a000000000c110000000000200000000000ffff7f00000100000000000000000000ffff7f0000014e1d4e20"], 0x0) 836.769317ms ago: executing program 2 (id=393): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x62, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000633c77fbac141416ac14141694089f034d2f87e5860c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff20000000000000007f141416ac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 820.85522ms ago: executing program 4 (id=394): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000600)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 620.666906ms ago: executing program 4 (id=398): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@discard}, {@namecase}, {@errors_remount}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x11) 620.536496ms ago: executing program 2 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1e7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)) 616.450627ms ago: executing program 3 (id=400): creat(&(0x7f0000000000)='./file0\x00', 0x70) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000440)='./file0\x00', 0x20009a2) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') 596.043871ms ago: executing program 2 (id=401): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@usrquota}, {@init_itable}, {@norecovery}]}, 0x43, 0x470, &(0x7f0000000dc0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x106db, 0xffffffffffffffff, 0x3ffffc, 0xfffffffffffffffe, 0xfffffffe, 0x0, 0x2401}) 493.70805ms ago: executing program 3 (id=402): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 493.47189ms ago: executing program 3 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454ce, 0x337) 437.61968ms ago: executing program 1 (id=404): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), 0x4) 425.002232ms ago: executing program 3 (id=405): ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x3, 0xfc, "0000e5ff0100"}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 313.313763ms ago: executing program 0 (id=406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 299.741395ms ago: executing program 1 (id=407): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) 298.533735ms ago: executing program 3 (id=408): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000410, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 169.585299ms ago: executing program 4 (id=409): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x6, 0x80000000, {{0x6, 0x4, 0x2, 0x15, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) 121.346628ms ago: executing program 1 (id=410): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) unshare(0x24020600) getpeername$packet(r0, 0x0, &(0x7f0000000540)) 80.577275ms ago: executing program 0 (id=411): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 80.396326ms ago: executing program 1 (id=412): io_setup(0x2, &(0x7f00000001c0)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, 0x0, 0xfffffc92, 0xff, 0x0, 0x2}, 0x0) 68.930107ms ago: executing program 3 (id=413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) 301.28µs ago: executing program 4 (id=414): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0xa, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x80000, 0x5, 0x3c5b, 0x1, 0x26, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x100, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0x7fff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0x40c8, 0xf9, 0xe, 0x82c0, 0xffffffff, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x1c, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x3, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x78, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x9, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0xd, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x401, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8000, 0x402, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x1c2, 0x1000, 0xa2, 0x7, 0xe9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x40, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x1, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0x2, 0x5, 0x2, 0x5, 0x3, 0xfffffffc, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x0, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x0, 0xffffbd73, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x1ff, 0xffff3441, 0x4]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 22.480628][ T30] audit: type=1400 audit(1790756746.886:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.484185][ T277] cgroup: Unknown subsys name 'net' [ 22.503312][ T30] audit: type=1400 audit(1790756746.886:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.530624][ T30] audit: type=1400 audit(1790756746.916:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.531017][ T277] cgroup: Unknown subsys name 'devices' [ 22.675798][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.681440][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.791587][ T30] audit: type=1400 audit(1790756747.196:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.814881][ T30] audit: type=1400 audit(1790756747.196:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.839622][ T30] audit: type=1400 audit(1790756747.196:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.852659][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.871577][ T30] audit: type=1400 audit(1790756747.276:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.887940][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.897260][ T30] audit: type=1400 audit(1790756747.276:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.931306][ T30] audit: type=1400 audit(1790756747.296:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.956847][ T30] audit: type=1400 audit(1790756747.296:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.692901][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.700121][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.707812][ T287] device bridge_slave_0 entered promiscuous mode [ 23.714579][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.721625][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.729223][ T285] device bridge_slave_0 entered promiscuous mode [ 23.744383][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.751470][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.758924][ T289] device bridge_slave_0 entered promiscuous mode [ 23.765618][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.772670][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.780130][ T287] device bridge_slave_1 entered promiscuous mode [ 23.786677][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.793816][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.801160][ T285] device bridge_slave_1 entered promiscuous mode [ 23.814700][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.821757][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.829264][ T286] device bridge_slave_0 entered promiscuous mode [ 23.835963][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.843012][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.850515][ T289] device bridge_slave_1 entered promiscuous mode [ 23.868813][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.876099][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.883479][ T286] device bridge_slave_1 entered promiscuous mode [ 23.930266][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.937478][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.944950][ T288] device bridge_slave_0 entered promiscuous mode [ 23.955295][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.962352][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.969767][ T288] device bridge_slave_1 entered promiscuous mode [ 24.103841][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.110915][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.118279][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.125358][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.175332][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.182429][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.189752][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.196831][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.207861][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.215081][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.222387][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229463][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.239979][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.247072][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.254411][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.261464][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.277601][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.284691][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.291979][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.299049][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.346196][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.353520][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.360853][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.368236][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.375574][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.382743][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.390058][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.397285][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.404569][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.411734][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.419792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.427288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.436216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.444481][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.451513][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.460010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.478810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.486856][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.495314][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.502364][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.510007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.518332][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.525421][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.532837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.541360][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.548399][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.555888][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.563322][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.580525][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.588523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.597160][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.604244][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.612324][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.620415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.628028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.649357][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.657548][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.664602][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.672655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.681001][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.688098][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.696316][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.704576][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.711605][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.719218][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.727169][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.744386][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.752617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.760690][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.768882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.777078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.785213][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.793106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.801560][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.823982][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.832445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.840942][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.848043][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.857140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.865501][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.873611][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.880670][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.888118][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.896837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.905236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.913502][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.924169][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.932166][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.944778][ T289] device veth0_vlan entered promiscuous mode [ 24.957181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.965032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.972457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.980599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.988838][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.997327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.005744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.013237][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.022486][ T287] device veth0_vlan entered promiscuous mode [ 25.031433][ T288] device veth0_vlan entered promiscuous mode [ 25.038312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.046761][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.054809][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.062710][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.071060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.078604][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.097646][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.105881][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.114062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.122378][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.130797][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.139301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.149292][ T289] device veth1_macvtap entered promiscuous mode [ 25.159505][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.167327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.175680][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.184101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.191578][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.199951][ T286] device veth0_vlan entered promiscuous mode [ 25.210399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.218654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.227149][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.239930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.248314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.258443][ T287] device veth1_macvtap entered promiscuous mode [ 25.271707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.280422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.288992][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.297456][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.306240][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.314680][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.324210][ T286] device veth1_macvtap entered promiscuous mode [ 25.334469][ T288] device veth1_macvtap entered promiscuous mode [ 25.353622][ T285] device veth0_vlan entered promiscuous mode [ 25.361168][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.369171][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.377789][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.386358][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.394501][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.402607][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.411202][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.419815][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.427409][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.444084][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.452444][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.461387][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.470173][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.479466][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.479587][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 25.490379][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.503580][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.512069][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.539702][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.552109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.560627][ T310] loop4: detected capacity change from 0 to 16 [ 25.580710][ T285] device veth1_macvtap entered promiscuous mode [ 25.598186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.610355][ T310] erofs: (device loop4): mounted with root inode @ nid 36. [ 25.615318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.644460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.673541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.690609][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.708010][ T310] attempt to access beyond end of device [ 25.708010][ T310] loop4: rw=0, want=34359738368, limit=16 [ 25.818040][ T336] loop4: detected capacity change from 0 to 256 [ 25.826035][ T334] loop1: detected capacity change from 0 to 256 [ 25.847518][ T341] loop3: detected capacity change from 0 to 256 [ 25.855544][ T340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14'. [ 25.864973][ T334] ======================================================= [ 25.864973][ T334] WARNING: The mand mount option has been deprecated and [ 25.864973][ T334] and is ignored by this kernel. Remove the mand [ 25.864973][ T334] option from the mount to silence this warning. [ 25.864973][ T334] ======================================================= [ 25.900922][ T341] exfat: Deprecated parameter 'utf8' [ 25.913905][ T341] exfat: Deprecated parameter 'utf8' [ 25.935957][ T334] FAT-fs (loop1): Directory bread(block 64) failed [ 25.939922][ T341] exfat: Deprecated parameter 'namecase' [ 25.942710][ T334] FAT-fs (loop1): Directory bread(block 65) failed [ 25.961773][ T334] FAT-fs (loop1): Directory bread(block 66) failed [ 25.970404][ T334] FAT-fs (loop1): Directory bread(block 67) failed [ 25.978137][ T346] device hsr0 entered promiscuous mode [ 25.994613][ T341] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 26.013492][ T334] FAT-fs (loop1): Directory bread(block 68) failed [ 26.024324][ T350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.033130][ T334] FAT-fs (loop1): Directory bread(block 69) failed [ 26.049500][ T349] Zero length message leads to an empty skb [ 26.063253][ T334] FAT-fs (loop1): Directory bread(block 70) failed [ 26.072161][ T334] FAT-fs (loop1): Directory bread(block 71) failed [ 26.079694][ T334] FAT-fs (loop1): Directory bread(block 72) failed [ 26.086680][ T334] FAT-fs (loop1): Directory bread(block 73) failed [ 26.296060][ T383] loop4: detected capacity change from 0 to 512 [ 26.436442][ T383] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 26.465654][ T383] EXT4-fs (loop4): orphan cleanup on readonly fs [ 26.482299][ T383] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 26.503853][ T383] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 26.510628][ T383] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.33: bad orphan inode 768 [ 26.554382][ T383] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback. [ 26.961711][ T375] loop0: detected capacity change from 0 to 131072 [ 26.961852][ T408] loop3: detected capacity change from 0 to 256 [ 26.986336][ T375] F2FS-fs (loop0): invalid crc value [ 27.015042][ T375] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.072947][ T375] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 27.097648][ T388] mmap: syz.2.34 (388) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 27.102146][ T375] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 27.347483][ T381] loop1: detected capacity change from 0 to 131072 [ 27.359181][ T381] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 27.368072][ T381] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.384884][ T381] F2FS-fs (loop1): invalid crc value [ 27.414321][ T381] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.473378][ T381] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.484099][ T381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 27.549315][ T436] netlink: 84 bytes leftover after parsing attributes in process `syz.3.51'. [ 27.569743][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 27.569760][ T30] audit: type=1400 audit(1790756751.976:141): avc: denied { read append open } for pid=380 comm="syz.1.32" path="/4/file2/memory.events" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.645269][ T30] audit: type=1400 audit(1790756752.056:142): avc: denied { create } for pid=438 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.710701][ T30] audit: type=1400 audit(1790756752.076:143): avc: denied { connect } for pid=438 comm="syz.3.53" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.756532][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 27.762456][ T446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 27.763851][ T30] audit: type=1400 audit(1790756752.076:144): avc: denied { write } for pid=438 comm="syz.3.53" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.851096][ T30] audit: type=1400 audit(1790756752.076:145): avc: denied { mount } for pid=440 comm="syz.0.47" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.883978][ T30] audit: type=1400 audit(1790756752.096:146): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.922519][ T30] audit: type=1400 audit(1790756752.106:147): avc: denied { setopt } for pid=442 comm="syz.0.55" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.962161][ T30] audit: type=1400 audit(1790756752.136:148): avc: denied { bind } for pid=438 comm="syz.3.53" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.988029][ T453] loop3: detected capacity change from 0 to 512 [ 28.005665][ T453] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 28.021185][ T30] audit: type=1400 audit(1790756752.136:149): avc: denied { name_bind } for pid=438 comm="syz.3.53" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 28.061106][ T453] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 28.079794][ T453] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 28.092422][ T30] audit: type=1400 audit(1790756752.136:150): avc: denied { node_bind } for pid=438 comm="syz.3.53" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 28.116458][ T453] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 28.133022][ T454] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 28.193985][ T457] loop4: detected capacity change from 0 to 256 [ 28.243952][ T457] exfat: Deprecated parameter 'utf8' [ 28.252635][ T457] exfat: Deprecated parameter 'namecase' [ 28.263029][ T457] exfat: Deprecated parameter 'namecase' [ 28.285818][ T457] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 28.330963][ T470] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 28.342298][ T470] EXT4-fs (loop3): unable to read superblock [ 28.582312][ T499] FAT-fs (loop3): Directory bread(block 64) failed [ 28.598302][ T496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.602986][ T499] FAT-fs (loop3): Directory bread(block 65) failed [ 28.620485][ T496] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.638433][ T496] EXT4-fs (loop1): shut down requested (0) [ 28.655715][ T499] FAT-fs (loop3): Directory bread(block 66) failed [ 28.659187][ T508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.77'. [ 28.662418][ T499] FAT-fs (loop3): Directory bread(block 67) failed [ 28.677737][ T499] FAT-fs (loop3): Directory bread(block 68) failed [ 28.684744][ T499] FAT-fs (loop3): Directory bread(block 69) failed [ 28.691450][ T499] FAT-fs (loop3): Directory bread(block 70) failed [ 28.698060][ T499] FAT-fs (loop3): Directory bread(block 71) failed [ 28.704709][ T499] FAT-fs (loop3): Directory bread(block 72) failed [ 28.711267][ T499] FAT-fs (loop3): Directory bread(block 73) failed [ 28.836327][ T512] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.859012][ T512] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 28.874887][ T512] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 28.895697][ T503] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 28.911729][ T514] syz.4.82 (514) used greatest stack depth: 21888 bytes left [ 28.917972][ T503] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.960907][ T503] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.974366][ T512] exFAT-fs (loop1): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 29.013161][ T512] exFAT-fs (loop1): Filesystem has been set read-only [ 29.056854][ T503] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 29.063972][ T503] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.186099][ T555] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.203587][ T555] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.218633][ T552] SELinux: failed to load policy [ 29.228223][ T555] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: block 3: comm syz.0.99: lblock 3 mapped to illegal pblock 3 (length 3) [ 29.243108][ T555] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 29.265691][ T555] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.265691][ T555] [ 29.285449][ T8] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 5) [ 29.324093][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 29.354526][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.354526][ T8] [ 29.410949][ T10] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 29.440616][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 29.453840][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.453840][ T10] [ 29.463584][ T10] EXT4-fs (loop0): Total free blocks count 0 [ 29.470101][ T10] EXT4-fs (loop0): Free/Dirty block details [ 29.476240][ T573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'. [ 29.485826][ T10] EXT4-fs (loop0): free_blocks=0 [ 29.490822][ T10] EXT4-fs (loop0): dirty_blocks=64 [ 29.583731][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.648173][ T570] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.680317][ T570] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.701116][ T570] F2FS-fs (loop3): invalid crc value [ 29.712689][ T570] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.737694][ T593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'. [ 29.796771][ T570] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.807136][ T570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.953823][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.964537][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.974567][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 29.984638][ T20] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.183939][ T20] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 30.201049][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.215905][ T617] netlink: 25 bytes leftover after parsing attributes in process `syz.2.125'. [ 30.219384][ T20] usb 5-1: Product: syz [ 30.239323][ T20] usb 5-1: Manufacturer: syz [ 30.244166][ T617] device ifb1 entered promiscuous mode [ 30.245262][ T20] usb 5-1: SerialNumber: syz [ 30.269067][ T619] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.125'. [ 30.290661][ T621] input: syz1 as /devices/virtual/input/input4 [ 30.303787][ T619] 0ªX¹¦Dö»: renamed from ifb1 [ 30.305205][ T20] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 30.324291][ T619] device 00ªX¹¦Dö» left promiscuous mode [ 30.346549][ T20] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 30.383318][ T20] usbserial_generic 5-1:1.0: generic converter detected [ 30.407536][ T20] usb 5-1: generic converter now attached to ttyUSB0 [ 30.413856][ T628] tipc: Enabling of bearer rejected, media not registered [ 30.547469][ T20] usb 5-1: USB disconnect, device number 2 [ 30.565046][ T20] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 30.580537][ T20] usbserial_generic 5-1:1.0: device disconnected [ 30.617881][ T649] set_capacity_and_notify: 8 callbacks suppressed [ 30.617906][ T649] loop0: detected capacity change from 0 to 512 [ 30.715143][ T649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.749214][ T649] ext4 filesystem being mounted at (unknown) supports timestamps until 2038-01-19 (0x7fffffff) [ 30.840100][ T599] loop1: detected capacity change from 0 to 131072 [ 30.928235][ T599] F2FS-fs (loop1): invalid crc value [ 30.969183][ T599] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.076162][ T599] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 31.106977][ T701] loop4: detected capacity change from 0 to 512 [ 31.149266][ T599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 31.176188][ T701] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.202878][ T701] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.240110][ T701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.295689][ T701] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.332570][ T701] EXT4-fs (loop4): 1 truncate cleaned up [ 31.373835][ T701] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,nogrpid,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 31.414492][ T701] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 31.533365][ T724] loop4: detected capacity change from 0 to 512 [ 31.639301][ T734] loop2: detected capacity change from 0 to 512 [ 31.830928][ T754] loop4: detected capacity change from 0 to 256 [ 31.931845][ T769] loop1: detected capacity change from 0 to 128 [ 32.095390][ T786] loop4: detected capacity change from 0 to 512 [ 32.165045][ T786] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.166: iget: bad i_size value: 38620345925642 [ 32.226764][ T793] netlink: 'syz.3.168': attribute type 12 has an invalid length. [ 32.244299][ T786] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.166: couldn't read orphan inode 15 (err -117) [ 32.262320][ T793] netlink: 'syz.3.168': attribute type 29 has an invalid length. [ 32.294223][ T770] loop2: detected capacity change from 0 to 40427 [ 32.301049][ T793] netlink: 148 bytes leftover after parsing attributes in process `syz.3.168'. [ 32.326454][ T770] F2FS-fs (loop2): invalid crc value [ 32.359315][ T770] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.372464][ T786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.445765][ T770] F2FS-fs (loop2): Start checkpoint disabled! [ 32.473619][ T770] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 32.613603][ T824] loop4: detected capacity change from 0 to 8192 [ 32.657397][ T347] loop4: p1 < > p2 < > p3 p4 < > [ 32.662636][ T347] loop4: partition table partially beyond EOD, truncated [ 32.684230][ T347] loop4: p1 start 67108864 is beyond EOD, truncated [ 32.686714][ T834] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.702281][ T347] loop4: p3 start 100859904 is beyond EOD, truncated [ 32.712957][ T834] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.744085][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 32.744099][ T30] audit: type=1400 audit(1790757013.152:293): avc: denied { setattr } for pid=831 comm="syz.3.178" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.745279][ T824] loop4: p1 < > p2 < > p3 p4 < > [ 32.803740][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.811300][ T30] audit: type=1400 audit(1790757013.212:294): avc: denied { remove_name } for pid=831 comm="syz.3.178" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.844050][ T30] audit: type=1400 audit(1790757013.212:295): avc: denied { unlink } for pid=831 comm="syz.3.178" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.867259][ T824] loop4: partition table partially beyond EOD, truncated [ 32.895596][ T824] loop4: p1 start 67108864 is beyond EOD, truncated [ 32.913165][ T824] loop4: p3 start 100859904 is beyond EOD, truncated [ 32.922850][ T10] attempt to access beyond end of device [ 32.922850][ T10] loop2: rw=1, want=80144, limit=40427 [ 32.955264][ T10] attempt to access beyond end of device [ 32.955264][ T10] loop2: rw=1, want=81920, limit=40427 [ 33.012061][ T10] attempt to access beyond end of device [ 33.012061][ T10] loop2: rw=1, want=53248, limit=40427 [ 33.062593][ T10] attempt to access beyond end of device [ 33.062593][ T10] loop2: rw=1, want=60824, limit=40427 [ 33.083744][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 33.124826][ T10] attempt to access beyond end of device [ 33.124826][ T10] loop2: rw=1, want=63376, limit=40427 [ 33.165310][ T10] attempt to access beyond end of device [ 33.165310][ T10] loop2: rw=1, want=65528, limit=40427 [ 33.183755][ T307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.203455][ T10] attempt to access beyond end of device [ 33.203455][ T10] loop2: rw=1, want=69632, limit=40427 [ 33.214709][ T26] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.233737][ T26] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.253740][ T26] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.268568][ T10] attempt to access beyond end of device [ 33.268568][ T10] loop2: rw=1, want=69640, limit=40427 [ 33.293360][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.300379][ T10] attempt to access beyond end of device [ 33.300379][ T10] loop2: rw=1, want=69648, limit=40427 [ 33.311560][ T26] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 33.320851][ T10] attempt to access beyond end of device [ 33.320851][ T10] loop2: rw=1, want=69656, limit=40427 [ 33.332009][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.351718][ T26] usb 1-1: config 0 descriptor?? [ 33.594147][ T307] usb 5-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 33.618207][ T307] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.637082][ T307] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 33.655484][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.834059][ T26] hid (null): invalid report_size 58537 [ 33.841904][ T26] waltop 0003:172F:0032.0001: unknown main item tag 0x6 [ 33.853018][ T26] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 33.864498][ T26] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 33.871504][ T26] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 33.871795][ T930] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 33.879523][ T26] waltop 0003:172F:0032.0001: invalid report_size 58537 [ 33.898092][ T26] waltop 0003:172F:0032.0001: item 0 2 1 7 parsing failed [ 33.916910][ T26] waltop: probe of 0003:172F:0032.0001 failed with error -22 [ 33.934006][ T307] usb 5-1: cannot find UAC_HEADER [ 33.939215][ T307] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 33.980171][ T939] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.992052][ T939] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 34.007372][ T939] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 34.041478][ T30] audit: type=1400 audit(1790757014.442:296): avc: denied { read write } for pid=938 comm="syz.2.191" name="file1" dev="loop2" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.067443][ T307] usb 1-1: USB disconnect, device number 2 [ 34.079221][ T30] audit: type=1400 audit(1790757014.472:297): avc: denied { open } for pid=938 comm="syz.2.191" path="/40/file2/file1" dev="loop2" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.120340][ T953] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure [ 34.142101][ T60] usb 5-1: USB disconnect, device number 3 [ 34.271723][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.279835][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.311571][ T976] syz.2.197 (976) used greatest stack depth: 21792 bytes left [ 34.340253][ T30] audit: type=1400 audit(1790757014.742:298): avc: denied { read write } for pid=982 comm="syz.2.199" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 34.366495][ T30] audit: type=1400 audit(1790757014.772:299): avc: denied { read write open } for pid=982 comm="syz.2.199" path="/46/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 34.405866][ T989] FAT-fs (loop2): Unrecognized mount option "shortnamewinnt" or missing value [ 34.467648][ T999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.201'. [ 34.504366][ T30] audit: type=1400 audit(1790757014.912:300): avc: denied { ioctl } for pid=1004 comm="syz.2.203" path="socket:[17376]" dev="sockfs" ino=17376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.825287][ T1040] loop4: p2 p4[EZD] [ 34.829639][ T1040] loop4: p2 size 83886080 extends beyond EOD, truncated [ 34.852039][ T1040] loop4: p4 start 201326592 is beyond EOD, truncated [ 34.884969][ T101] loop4: p2 p4[EZD] [ 34.889032][ T101] loop4: p2 size 83886080 extends beyond EOD, truncated [ 34.903143][ T101] loop4: p4 start 201326592 is beyond EOD, truncated [ 35.094263][ T1068] FAT-fs (loop4): Unrecognized mount option "shortnamewinnt" or missing value [ 35.110464][ T347] udevd[347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 35.247216][ T1080] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.265648][ T1089] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.302549][ T1089] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 35.316605][ T1080] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 35.326444][ T1089] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 35.334255][ T1080] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 35.349092][ T1080] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 35.368941][ T1089] exFAT-fs (loop2): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 35.372819][ T1080] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 35.399960][ T1089] exFAT-fs (loop2): Filesystem has been set read-only [ 35.553422][ T1105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.226'. [ 35.687688][ T1126] set_capacity_and_notify: 10 callbacks suppressed [ 35.687706][ T1126] loop1: detected capacity change from 0 to 512 [ 35.763475][ T1126] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.789024][ T1126] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.162555][ T1141] loop1: detected capacity change from 0 to 40427 [ 36.184350][ T1141] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 36.202100][ T1141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.213067][ T1141] F2FS-fs (loop1): invalid crc value [ 36.251651][ T1141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.295151][ T1101] loop4: detected capacity change from 0 to 131072 [ 36.317100][ T1101] F2FS-fs (loop4): invalid crc value [ 36.337173][ T1141] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.344571][ T1141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.363649][ T1101] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.421994][ T1101] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 36.475370][ T1101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 36.491685][ T1184] loop3: detected capacity change from 0 to 1024 [ 36.654192][ T1184] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.666080][ T1184] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.698157][ T1184] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 3: comm syz.3.234: lblock 3 mapped to illegal pblock 3 (length 3) [ 36.749696][ T1184] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 36.813584][ T1184] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.813584][ T1184] [ 36.884591][ T10] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 5) [ 36.900213][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 36.925678][ T10] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.925678][ T10] [ 36.954193][ T10] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 36.988239][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 37.012858][ T10] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.012858][ T10] [ 37.043651][ T10] EXT4-fs (loop3): Total free blocks count 0 [ 37.049848][ T10] EXT4-fs (loop3): Free/Dirty block details [ 37.058831][ T10] EXT4-fs (loop3): free_blocks=0 [ 37.076185][ T10] EXT4-fs (loop3): dirty_blocks=64 [ 37.176197][ T1146] loop2: detected capacity change from 0 to 131072 [ 37.194870][ T30] audit: type=1400 audit(1790757273.607:301): avc: denied { ioctl } for pid=1227 comm="syz.3.239" path="socket:[18532]" dev="sockfs" ino=18532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.229449][ T1146] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 37.263635][ T1146] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 37.293535][ T1242] loop1: detected capacity change from 0 to 128 [ 37.300616][ T1146] F2FS-fs (loop2): invalid crc value [ 37.324744][ T30] audit: type=1400 audit(1790757273.737:302): avc: denied { write } for pid=1247 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.349368][ T1146] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.444277][ T1242] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.449880][ T1146] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.463224][ T1146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 37.475223][ T1242] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.487168][ T1242] capability: warning: `syz.1.243' uses 32-bit capabilities (legacy support in use) [ 37.540654][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.547945][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.565743][ T1272] loop1: detected capacity change from 0 to 512 [ 37.654205][ T1272] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.687300][ T1272] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 37.697086][ T1272] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 37.708462][ T1272] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 37.719002][ T1272] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 37.767092][ T1274] device veth0_vlan left promiscuous mode [ 37.773192][ T1274] device veth0_vlan entered promiscuous mode [ 37.780502][ T1274] device veth1_macvtap left promiscuous mode [ 37.798690][ T1274] device veth1_macvtap entered promiscuous mode [ 37.807439][ T1274] device hsr0 left promiscuous mode [ 37.815832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.829460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.841175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.844189][ T1268] syz.4.249 (1268) used greatest stack depth: 21576 bytes left [ 37.850276][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.863845][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.886919][ T1274] syz.4.249 (1274) used greatest stack depth: 20736 bytes left [ 37.898861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.912781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.930511][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.937683][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.954123][ T1291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 37.959118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.974291][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 37.981974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.001082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.009917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.018163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.026528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.034912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.043378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.058144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.076087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.093207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.109460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.126674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.135656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.143828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.152105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.160849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.169331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.177920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.186673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.194974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.203048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.210792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.218654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.227192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.235618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.269243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.299129][ T1284] geneve1: tun_chr_ioctl cmd 1074812117 [ 38.407046][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 38.407073][ T30] audit: type=1400 audit(1790757274.817:305): avc: denied { load_policy } for pid=1321 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.436872][ T1322] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 38.461275][ T1322] SELinux: failed to load policy [ 38.491623][ T30] audit: type=1400 audit(1790757274.857:306): avc: denied { create } for pid=1325 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.519888][ T1337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 38.543397][ T30] audit: type=1400 audit(1790757274.857:307): avc: denied { bind } for pid=1325 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.559334][ T1337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 38.584043][ T30] audit: type=1400 audit(1790757274.947:308): avc: denied { search } for pid=1339 comm="syz.1.274" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.607031][ T30] audit: type=1400 audit(1790757274.947:309): avc: denied { append } for pid=1339 comm="syz.1.274" name="context-info" dev="tracefs" ino=13094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.609337][ T1337] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.636314][ T30] audit: type=1400 audit(1790757274.947:310): avc: denied { open } for pid=1339 comm="syz.1.274" path="/48/debug/tracing/options/context-info" dev="tracefs" ino=13094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.642655][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.719365][ T1357] xt_hashlimit: size too large, truncated to 1048576 [ 38.848098][ T30] audit: type=1400 audit(1790757275.257:311): avc: denied { ioctl } for pid=1372 comm="syz.0.284" path="/55/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.959441][ T8] blk_update_request: I/O error, dev sda, sector 1229110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 38.970835][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 153639) [ 38.982486][ T8] Buffer I/O error on device sda1, logical block 153600 [ 38.989518][ T8] blk_update_request: I/O error, dev sda, sector 1237294 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 39.000926][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 154662) [ 39.012793][ T8] blk_update_request: I/O error, dev sda, sector 1241230 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 0 [ 39.024042][ T45] Buffer I/O error on device sda1, logical block 154623 [ 39.024960][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 155174) [ 39.042631][ T8] Buffer I/O error on device sda1, logical block 155115 [ 39.049633][ T8] Buffer I/O error on device sda1, logical block 155116 [ 39.056626][ T8] Buffer I/O error on device sda1, logical block 155117 [ 39.064032][ T8] Buffer I/O error on device sda1, logical block 155118 [ 39.070993][ T8] Buffer I/O error on device sda1, logical block 155119 [ 39.078023][ T8] Buffer I/O error on device sda1, logical block 155120 [ 39.085826][ T8] Buffer I/O error on device sda1, logical block 155121 [ 39.092808][ T8] Buffer I/O error on device sda1, logical block 155122 [ 39.100374][ T8] blk_update_request: I/O error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 16 prio class 0 [ 39.111806][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2037 starting block 151592) [ 39.123448][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2037 starting block 151607) [ 39.135072][ T8] blk_update_request: I/O error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 39.146453][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 143399) [ 39.158094][ T8] blk_update_request: I/O error, dev sda, sector 1155366 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 39.169511][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 144422) [ 39.181132][ T8] blk_update_request: I/O error, dev sda, sector 1159374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 39.192483][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 144934) [ 39.204158][ T8] blk_update_request: I/O error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 39.215516][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 145447) [ 39.227154][ T8] blk_update_request: I/O error, dev sda, sector 1171758 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 39.238519][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146470) [ 39.250213][ T8] blk_update_request: I/O error, dev sda, sector 1175646 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 0 [ 39.266514][ T64] Aborting journal on device sda1-8. [ 39.271903][ T43] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 39.280621][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 39.303394][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 39.334617][ T1366] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4483: inode #2001: block 270: comm dhcpcd-run-hook: unable to read itable block [ 39.350839][ T43] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 39.359178][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.369416][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 39.382681][ T60] EXT4-fs (sda1): previous I/O error to superblock detected [ 39.390881][ T1366] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4483: inode #2001: block 270: comm dhcpcd-run-hook: unable to read itable block [ 39.393889][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.414445][ T26] usb 3-1: config 1 has no interface number 0 [ 39.420559][ T26] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.424974][ T54] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 39.431580][ T26] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 39.441681][ T60] EXT4-fs (sda1): I/O error while writing superblock [ 39.449094][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 39.475830][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 39.495900][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 39.503935][ T1366] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm dhcpcd-run-hook: reading directory lblock 0 [ 39.514191][ T1386] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 39.524963][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 39.566083][ T1366] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1863: comm dhcpcd-run-hook: reading directory lblock 0 [ 39.584216][ T1356] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.279: Detected aborted journal [ 39.585069][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 39.630120][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.633781][ T1356] EXT4-fs (sda1): Remounting filesystem read-only [ 39.643170][ T1366] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #13: comm dhcpcd-run-hook: reading directory lblock 0 [ 39.665599][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.673660][ T26] usb 3-1: Product: syz [ 39.677983][ T26] usb 3-1: Manufacturer: syz [ 39.682592][ T26] usb 3-1: SerialNumber: syz [ 39.687375][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 39.699526][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 39.707193][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 39.713735][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 39.782383][ T1404] loop4: detected capacity change from 0 to 1024 [ 39.825514][ T1422] input: syz0 as /devices/virtual/input/input6 [ 39.877844][ T1404] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 39.893730][ T1404] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.949413][ T1404] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 40.034766][ T1404] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.073763][ T1434] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 40.095620][ T30] audit: type=1400 audit(1790757276.507:312): avc: denied { append } for pid=1403 comm="syz.4.294" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.146126][ T1434] EXT4-fs (loop4): Remounting filesystem read-only [ 40.358743][ T1468] loop1: detected capacity change from 0 to 256 [ 40.438499][ T1468] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.487992][ T1468] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 40.505520][ T1468] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.537159][ T30] audit: type=1400 audit(1790757276.947:313): avc: denied { setattr } for pid=1465 comm="syz.1.302" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.600959][ T1456] loop4: detected capacity change from 0 to 40427 [ 40.613840][ T26] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 40.627105][ T1514] netlink: 44 bytes leftover after parsing attributes in process `syz.1.309'. [ 40.643206][ T1456] F2FS-fs (loop4): invalid crc value [ 40.654698][ T1456] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.663835][ T26] cdc_ncm 3-1:1.1: bind() failure [ 40.665511][ T1514] netlink: 35 bytes leftover after parsing attributes in process `syz.1.309'. [ 40.683556][ T26] usb 3-1: USB disconnect, device number 2 [ 40.700920][ T101] udevd[101]: worker [347] terminated by signal 7 (Bus error) [ 40.711934][ T101] udevd[101]: worker [347] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 40.728813][ T1514] netlink: 'syz.1.309': attribute type 5 has an invalid length. [ 40.753818][ T1514] netlink: 'syz.1.309': attribute type 6 has an invalid length. [ 40.763363][ T101] udevd[101]: worker [344] terminated by signal 7 (Bus error) [ 40.771996][ T1514] netlink: 35 bytes leftover after parsing attributes in process `syz.1.309'. [ 40.775652][ T101] udevd[101]: worker [344] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 40.815337][ T1535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 40.825780][ T1456] F2FS-fs (loop4): Start checkpoint disabled! [ 40.829574][ T1535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 40.846430][ T1426] loop3: detected capacity change from 0 to 131072 [ 40.853257][ T1456] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 40.873594][ T30] audit: type=1400 audit(1790757277.277:314): avc: denied { setattr } for pid=1455 comm="syz.4.301" path="/51/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.916112][ T8] handle_bad_sector: 1512 callbacks suppressed [ 40.916131][ T8] attempt to access beyond end of device [ 40.916131][ T8] loop4: rw=2049, want=40976, limit=40427 [ 40.952076][ T1426] F2FS-fs (loop3): Test dummy encryption mode enabled [ 40.988193][ T1426] F2FS-fs (loop3): invalid crc value [ 41.009788][ T1426] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.113549][ T1426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.366801][ T1578] loop1: detected capacity change from 0 to 40427 [ 41.417601][ T1578] F2FS-fs (loop1): fault_injection options not supported [ 41.433884][ T1578] F2FS-fs (loop1): fault_type options not supported [ 41.457960][ T1578] F2FS-fs (loop1): invalid crc value [ 41.465384][ T1578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.585000][ T1578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.670714][ T285] attempt to access beyond end of device [ 41.670714][ T285] loop1: rw=2049, want=45104, limit=40427 [ 41.726894][ T1652] loop2: detected capacity change from 0 to 512 [ 41.773850][ T1652] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.808072][ T1652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 41.840861][ T1652] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 41.865874][ T1652] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.331: invalid indirect mapped block 2683928664 (level 1) [ 41.924692][ T1652] EXT4-fs (loop2): Remounting filesystem read-only [ 41.931484][ T1652] EXT4-fs (loop2): 1 truncate cleaned up [ 41.937355][ T1652] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,debug,nodiscard,minixdf,usrjquota=.sb=0x00000000000000ba,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,,. Quota mode: writeback. [ 41.973798][ T1652] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.331: Invalid block bitmap block 3 in block_group 0 [ 42.006912][ T1652] EXT4-fs (loop2): Remounting filesystem read-only [ 42.030914][ T1652] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 42.049654][ T1697] loop4: detected capacity change from 0 to 2048 [ 42.064158][ T1652] EXT4-fs (loop2): Remounting filesystem read-only [ 42.070718][ T1652] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.331: invalid indirect mapped block 480848489 (level 1) [ 42.133341][ T1697] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,barrier,quota,delalloc,,errors=continue. Quota mode: writeback. [ 42.153642][ T1652] EXT4-fs (loop2): Remounting filesystem read-only [ 42.186942][ T1697] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.237124][ T1723] netlink: 636 bytes leftover after parsing attributes in process `syz.2.346'. [ 42.524443][ T307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.568981][ T1786] xt_hashlimit: size too large, truncated to 1048576 [ 42.857610][ T1840] loop3: detected capacity change from 0 to 256 [ 42.893805][ T307] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.920415][ T307] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.003846][ T307] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.025043][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.045167][ T307] usb 5-1: SerialNumber: syz [ 43.292985][ T1916] loop2: detected capacity change from 0 to 256 [ 43.334497][ T307] usb 5-1: 0:2 : does not exist [ 43.345296][ T307] usb 5-1: USB disconnect, device number 4 [ 43.362699][ T1916] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 43.383113][ T1916] FAT-fs (loop2): Filesystem has been set read-only [ 43.398713][ T1916] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 43.413392][ T101] udevd[101]: worker [1539] terminated by signal 7 (Bus error) [ 43.421580][ T101] udevd[101]: worker [1539] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 43.502715][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 43.502731][ T30] audit: type=1400 audit(1790757279.907:342): avc: denied { read } for pid=1954 comm="syz.0.383" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.574323][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.623108][ T101] udevd[101]: worker [311] terminated by signal 7 (Bus error) [ 43.631175][ T101] udevd[101]: worker [311] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 43.697068][ T1985] xt_hashlimit: size too large, truncated to 1048576 [ 43.901651][ T2018] loop4: detected capacity change from 0 to 256 [ 43.917316][ T30] audit: type=1400 audit(1790757280.327:343): avc: denied { bind } for pid=2020 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.087125][ T2034] zero sized request [ 44.112981][ T30] audit: type=1400 audit(1790757280.517:344): avc: denied { watch } for pid=2036 comm="syz.3.400" path="/90/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.118901][ T2040] loop2: detected capacity change from 0 to 512 [ 44.146258][ T2041] loop4: detected capacity change from 0 to 256 [ 44.193235][ T2050] tap0: tun_chr_ioctl cmd 1074025678 [ 44.199287][ T2050] tap0: group set to 823 [ 44.204546][ T2041] exfat: Deprecated parameter 'utf8' [ 44.212329][ T2040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.219772][ T2041] exfat: Deprecated parameter 'namecase' [ 44.234301][ T2041] exfat: Deprecated parameter 'namecase' [ 44.240159][ T2041] exfat: Deprecated parameter 'namecase' [ 44.241546][ T2040] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.401: bad orphan inode 131083 [ 44.269872][ T2040] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,init_itable,norecovery,,errors=continue. Quota mode: writeback. [ 44.290059][ T30] audit: type=1400 audit(1790757280.697:345): avc: denied { setopt } for pid=2055 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.310263][ T2059] EXT4-fs error: 771 callbacks suppressed [ 44.310278][ T2059] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 44.320978][ T2041] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 44.351550][ T2060] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.406: Detected aborted journal [ 44.355009][ T2038] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.398: Detected aborted journal [ 44.373728][ T2038] EXT4-fs: 219 callbacks suppressed [ 44.373741][ T2038] EXT4-fs (sda1): Remounting filesystem read-only [ 44.388938][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 44.406935][ T2061] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.408: Detected aborted journal [ 44.418001][ T2061] EXT4-fs (sda1): Remounting filesystem read-only [ 44.420670][ T2060] EXT4-fs (sda1): Remounting filesystem read-only [ 44.427032][ T2062] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.407: Detected aborted journal [ 44.449540][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 44.455559][ T2063] loop3: detected capacity change from 0 to 2048 [ 44.462007][ T2064] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 44.482574][ T2062] EXT4-fs (sda1): Remounting filesystem read-only [ 44.483797][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 44.493101][ T2062] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.407: Detected aborted journal [ 44.507218][ T2062] EXT4-fs (sda1): Remounting filesystem read-only [ 44.508117][ T2060] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.406: Detected aborted journal [ 44.524486][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 44.540626][ T2070] EXT4-fs (sda1): Remounting filesystem read-only [ 44.549052][ T2063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.559711][ T2060] EXT4-fs (sda1): Remounting filesystem read-only [ 44.571127][ T2072] EXT4-fs (sda1): Remounting filesystem read-only [ 44.595038][ T30] audit: type=1400 audit(1790757281.007:346): avc: denied { ioctl } for pid=2072 comm="syz.4.409" path="socket:[19991]" dev="sockfs" ino=19991 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.632832][ T30] audit: type=1400 audit(1790757281.037:347): avc: denied { setattr } for pid=2061 comm="syz.3.408" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.673969][ C0] ================================================================== [ 44.682091][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 44.689517][ C0] Read of size 8 at addr ffff888126371590 by task ksoftirqd/0/13 [ 44.697320][ C0] [ 44.699677][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 44.706997][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.717105][ C0] Call Trace: [ 44.720406][ C0] [ 44.723366][ C0] __dump_stack+0x21/0x30 [ 44.727812][ C0] dump_stack_lvl+0x110/0x170 [ 44.732521][ C0] ? show_regs_print_info+0x20/0x20 [ 44.737750][ C0] ? load_image+0x3f0/0x3f0 [ 44.742280][ C0] ? __raise_softirq_irqoff+0x17/0xd0 [ 44.747677][ C0] ? raise_softirq+0x7d/0xf0 [ 44.752297][ C0] print_address_description+0x7f/0x2c0 [ 44.757870][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 44.762937][ C0] kasan_report+0x10f/0x150 [ 44.767499][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 SYZFAIL: failed to send rpc fd=3 want=264 sent=0 n=-1 (errno 32: Broken pipe) [ 44.770532][ T30] audit: type=1400 audit(1790757281.147:348): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14606]" dev="pipefs" ino=14606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.772578][ C0] __asan_report_load8_noabort+0x14/0x20 [ 44.801297][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 44.806198][ C0] rcu_do_batch+0x412/0xbf0 [ 44.810733][ C0] ? local_bh_enable+0x20/0x20 [ 44.815525][ C0] ? __kasan_check_write+0x14/0x20 [ 44.820666][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 44.825378][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 44.831220][ C0] ? rcu_report_qs_rnp+0x2bc/0x390 [ 44.836368][ C0] rcu_core+0x4a3/0xef0 [ 44.840562][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 44.845784][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 44.851384][ C0] ? rcu_softirq_qs+0xd7/0x2f0 [ 44.856182][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 44.861755][ C0] ? irqtime_account_irq+0x76/0x390 [ 44.866980][ C0] rcu_core_si+0x9/0x10 [ 44.871190][ C0] handle_softirqs+0x250/0x560 [ 44.875985][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 44.881219][ C0] run_ksoftirqd+0x28/0x40 [ 44.885668][ C0] smpboot_thread_fn+0x446/0x880 [ 44.890643][ C0] kthread+0x3f5/0x4f0 [ 44.894762][ C0] ? cpu_report_death+0x1b0/0x1b0 [ 44.899813][ C0] ? kthread_blkcg+0xd0/0xd0 [ 44.904578][ C0] ret_from_fork+0x1f/0x30 [ 44.909045][ C0] [ 44.912104][ C0] [ 44.914448][ C0] Allocated by task 2080: [ 44.918800][ C0] __kasan_kmalloc+0xd4/0x100 [ 44.923518][ C0] __kmalloc+0x13d/0x2c0 [ 44.927823][ C0] l2tp_session_create+0x39/0xb60 [ 44.932882][ C0] pppol2tp_connect+0xbf5/0x1640 [ 44.937848][ C0] __sys_connect+0x3cb/0x450 [ 44.942471][ C0] __x64_sys_connect+0x7a/0x90 [ 44.947256][ C0] x64_sys_call+0x7c/0x9a0 [ 44.951704][ C0] do_syscall_64+0x4c/0xa0 [ 44.956145][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.962096][ C0] [ 44.964456][ C0] Freed by task 318: [ 44.968375][ C0] kasan_set_track+0x4a/0x70 [ 44.972996][ C0] kasan_set_free_info+0x23/0x40 [ 44.977964][ C0] ____kasan_slab_free+0x125/0x160 [ 44.983103][ C0] __kasan_slab_free+0x11/0x20 [ 44.987908][ C0] slab_free_freelist_hook+0xc2/0x190 [ 44.993304][ C0] kfree+0xc4/0x270 [ 44.997138][ C0] l2tp_session_put+0xaf/0x1a0 [ 45.001926][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 45.007068][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 45.012329][ C0] process_one_work+0x6c8/0xbb0 [ 45.017205][ C0] worker_thread+0xaa0/0x1250 [ 45.021922][ C0] kthread+0x3f5/0x4f0 [ 45.026025][ C0] ret_from_fork+0x1f/0x30 [ 45.030489][ C0] [ 45.032839][ C0] Last potentially related work creation: [ 45.038564][ C0] kasan_save_stack+0x3a/0x60 [ 45.043268][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 45.048755][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 45.054619][ C0] call_rcu+0x10b/0xf60 [ 45.058803][ C0] pppol2tp_release+0x1e3/0x2b0 [ 45.063667][ C0] sock_close+0xb8/0x200 [ 45.067948][ C0] __fput+0x22b/0x900 [ 45.071953][ C0] ____fput+0x15/0x20 [ 45.075956][ C0] task_work_run+0x127/0x190 [ 45.080572][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 45.085786][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 45.091290][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 45.096774][ C0] do_syscall_64+0x58/0xa0 [ 45.101220][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.107145][ C0] [ 45.109481][ C0] Second to last potentially related work creation: [ 45.116095][ C0] kasan_save_stack+0x3a/0x60 [ 45.120815][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 45.126295][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 45.132133][ C0] call_rcu+0x10b/0xf60 [ 45.136325][ C0] pwq_unbound_release_workfn+0x283/0x2c0 [ 45.142075][ C0] process_one_work+0x6c8/0xbb0 [ 45.147128][ C0] worker_thread+0xaa0/0x1250 [ 45.151828][ C0] kthread+0x3f5/0x4f0 [ 45.155924][ C0] ret_from_fork+0x1f/0x30 [ 45.160388][ C0] [ 45.162732][ C0] The buggy address belongs to the object at ffff888126371400 [ 45.162732][ C0] which belongs to the cache kmalloc-512 of size 512 [ 45.176814][ C0] The buggy address is located 400 bytes inside of [ 45.176814][ C0] 512-byte region [ffff888126371400, ffff888126371600) [ 45.190123][ C0] The buggy address belongs to the page: [ 45.195796][ C0] page:ffffea000498dc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126370 [ 45.206180][ C0] head:ffffea000498dc00 order:2 compound_mapcount:0 compound_pincount:0 [ 45.214530][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 45.220684][ C0] raw: 4000000000010200 ffffea00049ff500 0000000300000003 ffff888100042f00 [ 45.229307][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 45.237910][ C0] page dumped because: kasan: bad access detected [ 45.244384][ C0] page_owner tracks the page as allocated [ 45.250128][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 23547172022, free_ts 23546226352 [ 45.269182][ C0] post_alloc_hook+0x192/0x1b0 [ 45.273984][ C0] prep_new_page+0x1c/0x110 [ 45.278523][ C0] get_page_from_freelist+0x2c3a/0x2cd0 [ 45.284105][ C0] __alloc_pages+0x1a2/0x460 [ 45.288746][ C0] new_slab+0xa0/0x4d0 [ 45.292840][ C0] ___slab_alloc+0x3ac/0x840 [ 45.297466][ C0] __slab_alloc+0x49/0x90 [ 45.301825][ C0] __kmalloc_track_caller+0x169/0x2c0 [ 45.307227][ C0] __alloc_skb+0x210/0x730 [ 45.311679][ C0] alloc_uevent_skb+0x85/0x240 [ 45.316472][ C0] kobject_uevent_net_broadcast+0x1a6/0x5a0 [ 45.322416][ C0] kobject_uevent_env+0x52b/0x700 [ 45.327475][ C0] kobject_uevent+0x1d/0x30 [ 45.332006][ C0] netdev_queue_update_kobjects+0x1c9/0x3e0 [ 45.337933][ C0] netdev_register_kobject+0x281/0x330 [ 45.343439][ C0] register_netdevice+0xeaa/0x1490 [ 45.348577][ C0] page last free stack trace: [ 45.353290][ C0] free_unref_page_prepare+0x5fa/0x600 [ 45.358801][ C0] free_unref_page+0xae/0x540 [ 45.363506][ C0] __free_pages+0x6c/0x100 [ 45.367952][ C0] free_pages+0x82/0x90 [ 45.372151][ C0] __stack_depot_save+0x453/0x480 [ 45.377210][ C0] __kasan_kmalloc+0xe6/0x100 [ 45.381918][ C0] __kmalloc+0x13d/0x2c0 [ 45.386189][ C0] __register_sysctl_table+0xa35/0x1240 [ 45.391761][ C0] register_net_sysctl+0x21d/0x230 [ 45.396931][ C0] __devinet_sysctl_register+0x2bd/0x390 [ 45.402606][ C0] devinet_sysctl_register+0x169/0x1e0 [ 45.408101][ C0] inetdev_init+0x2b2/0x500 [ 45.412630][ C0] inetdev_event+0x1f4/0x1060 [ 45.417345][ C0] raw_notifier_call_chain+0x90/0x100 [ 45.422754][ C0] call_netdevice_notifiers+0x119/0x190 [ 45.428326][ C0] register_netdevice+0x110a/0x1490 [ 45.433567][ C0] [ 45.435912][ C0] Memory state around the buggy address: [ 45.441566][ C0] ffff888126371480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.449679][ C0] ffff888126371500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.457770][ C0] >ffff888126371580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.465848][ C0] ^ [ 45.470461][ C0] ffff888126371600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.478551][ C0] ffff888126371680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.486668][ C0] ================================================================== [ 45.494751][ C0] Disabling lock debugging due to kernel taint Sep 30 08:34:41 syzkaller kern.alert kernel: [ 45.244384][ C0] page_owner tracks the page as allocated Sep 30 08:34:41 syzkaller kern.alert kernel: [ 45.250128][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 23547172022, free_ts 23546226352 Sep 30 08:34:41 syzkaller kern.alert kernel: [ 45.348577][ C0] page last free stack trace: [ 45.954544][ T45] device bridge_slave_1 left promiscuous mode [ 45.960682][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.968736][ T45] device bridge_slave_0 left promiscuous mode [ 45.975112][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.982990][ T45] device veth1_macvtap left promiscuous mode [ 45.989063][ T45] device veth0_vlan left promiscuous mode [ 46.735162][ T45] device bridge_slave_1 left promiscuous mode [ 46.741338][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.748973][ T45] device bridge_slave_0 left promiscuous mode [ 46.755160][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.764202][ T45] device bridge_slave_1 left promiscuous mode [ 46.770308][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.777841][ T45] device bridge_slave_0 left promiscuous mode [ 46.784054][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.792013][ T45] device bridge_slave_1 left promiscuous mode [ 46.798341][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.805708][ T45] device bridge_slave_0 left promiscuous mode [ 46.811824][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.820362][ T45] device veth1_macvtap left promiscuous mode [ 46.826424][ T45] device veth0_vlan left promiscuous mode [ 46.832272][ T45] device veth1_macvtap left promiscuous mode [ 46.838318][ T45] device veth0_vlan left promiscuous mode [ 46.844219][ T45] device veth1_macvtap left promiscuous mode [ 46.850213][ T45] device veth0_vlan left promiscuous mode [ 49.316461][ T140] EXT4-fs error: 1728 callbacks suppressed [ 49.316475][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 49.335776][ T3305] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 49.348047][ T3306] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 49.362102][ T3307] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 49.376259][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 49.389633][ T3308] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 49.401923][ T3309] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 49.416133][ T3310] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 49.430017][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 49.443206][ T3311] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.325398][ T5217] EXT4-fs error: 2539 callbacks suppressed [ 54.325411][ T5217] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.345171][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 54.358418][ T5218] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.370706][ T5219] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.384899][ T5220] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.398838][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 54.412063][ T5221] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.424537][ T5222] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.438532][ T5223] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 54.452404][ T140] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0