last executing test programs: 812.073661ms ago: executing program 4 (id=422): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b603b) syz_clone3(&(0x7f00000004c0)={0x6000080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x1}, 0x58) 739.972802ms ago: executing program 4 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x20000000) 604.111786ms ago: executing program 4 (id=435): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) 496.164348ms ago: executing program 1 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) 496.043158ms ago: executing program 0 (id=442): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1f, 0x8, 0x8, 0x3, {{0x5, 0x4, 0x2, 0x35, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010102}}}}) 495.945438ms ago: executing program 4 (id=444): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040001000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="100003000100000010"], 0x34, 0x2) 494.150078ms ago: executing program 1 (id=445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000200)) 465.579419ms ago: executing program 2 (id=446): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) 464.053139ms ago: executing program 0 (id=447): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 395.944141ms ago: executing program 4 (id=449): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@noquota}, {@resgid}, {@norecovery}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noquota}, {@oldalloc}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x30802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x1224, 0xfdffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000001) 395.840531ms ago: executing program 1 (id=450): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000340)) 395.797541ms ago: executing program 0 (id=451): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 381.454311ms ago: executing program 2 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="a000000010000104fdffffff0300000000000000", @ANYBLOB="800600000000000024001280110001006272696467675f736c617665000000000c00058005002000010000005c0012800b00010067656e657665"], 0xa0}, 0x1, 0x0, 0x0, 0x24048010}, 0x80) 296.137593ms ago: executing program 1 (id=454): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[]) 295.868243ms ago: executing program 3 (id=455): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000020c0)={0x0, 0x1c, &(0x7f0000002140)=[@in6={0xa, 0x4e22, 0x3, @remote}]}, &(0x7f00000002c0)=0x10) 295.788423ms ago: executing program 0 (id=456): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000380)) 199.078636ms ago: executing program 2 (id=457): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000040000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 192.829496ms ago: executing program 0 (id=458): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='on\n\\O', 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7fd, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) ptrace$setopts(0x4206, 0x0, 0x7, 0x49) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 148.129867ms ago: executing program 1 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='-'}]}]}, 0x24}], 0x1}, 0x0) 147.804767ms ago: executing program 3 (id=460): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x20000}, 0x80, 0x0}, 0x48814) 147.690707ms ago: executing program 2 (id=461): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0) 147.654787ms ago: executing program 3 (id=462): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) 120.455967ms ago: executing program 2 (id=463): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) 116.876887ms ago: executing program 1 (id=464): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@noquota}, {@resgid}, {@norecovery}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noquota}, {@oldalloc}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x30802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x1224, 0xfdffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x4000001) 94.191758ms ago: executing program 3 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 20.016149ms ago: executing program 2 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x38, 0x13, 0x1, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x38}}, 0x0) 19.905129ms ago: executing program 3 (id=467): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xe}, 0x80}) 19.742689ms ago: executing program 4 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008008}, 0x4008098) 7.00389ms ago: executing program 3 (id=469): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@noquota}, {@resgid}, {@norecovery}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noquota}, {@oldalloc}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x30802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x1224, 0xfdffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x4000001) 0s ago: executing program 0 (id=470): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 25.674621][ T28] audit: type=1400 audit(1787311658.273:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.696724][ T28] audit: type=1400 audit(1787311658.273:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 32.501077][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 32.501094][ T28] audit: type=1400 audit(1787311665.103:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.530392][ T28] audit: type=1400 audit(1787311665.123:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.533023][ T3284] cgroup: Unknown subsys name 'net' [ 32.558342][ T28] audit: type=1400 audit(1787311665.153:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.692238][ T3284] cgroup: Unknown subsys name 'cpuset' [ 32.698619][ T3284] cgroup: Unknown subsys name 'rlimit' [ 32.829095][ T28] audit: type=1400 audit(1787311665.423:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.852818][ T28] audit: type=1400 audit(1787311665.433:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.878656][ T28] audit: type=1400 audit(1787311665.433:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.899260][ T28] audit: type=1400 audit(1787311665.433:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.919674][ T28] audit: type=1400 audit(1787311665.463:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.946120][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 32.955026][ T28] audit: type=1400 audit(1787311665.553:134): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.980751][ T28] audit: type=1400 audit(1787311665.553:135): avc: denied { write } for pid=3288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.016091][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.428070][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.435280][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.442649][ T3295] bridge_slave_0: entered allmulticast mode [ 34.449131][ T3295] bridge_slave_0: entered promiscuous mode [ 34.462020][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.469242][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.476470][ T3294] bridge_slave_0: entered allmulticast mode [ 34.482960][ T3294] bridge_slave_0: entered promiscuous mode [ 34.501431][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.508737][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.515960][ T3295] bridge_slave_1: entered allmulticast mode [ 34.522542][ T3295] bridge_slave_1: entered promiscuous mode [ 34.531597][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.538697][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.545986][ T3294] bridge_slave_1: entered allmulticast mode [ 34.552434][ T3294] bridge_slave_1: entered promiscuous mode [ 34.597082][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.609889][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.621015][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.638710][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.681127][ T3294] team0: Port device team_slave_0 added [ 34.694652][ T3295] team0: Port device team_slave_0 added [ 34.705693][ T3294] team0: Port device team_slave_1 added [ 34.716412][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.723552][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.730754][ T3299] bridge_slave_0: entered allmulticast mode [ 34.737327][ T3299] bridge_slave_0: entered promiscuous mode [ 34.747001][ T3295] team0: Port device team_slave_1 added [ 34.761645][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.768789][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.776097][ T3299] bridge_slave_1: entered allmulticast mode [ 34.782654][ T3299] bridge_slave_1: entered promiscuous mode [ 34.801805][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.808838][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.834902][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.846532][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.853622][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.879755][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.917481][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.924743][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.932049][ T3298] bridge_slave_0: entered allmulticast mode [ 34.938395][ T3298] bridge_slave_0: entered promiscuous mode [ 34.945222][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.952252][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.978268][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.989580][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.996622][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.022565][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.042894][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.053358][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.062690][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.069839][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.077128][ T3298] bridge_slave_1: entered allmulticast mode [ 35.083751][ T3298] bridge_slave_1: entered promiscuous mode [ 35.102410][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.132892][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.142163][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.149283][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.156694][ T3300] bridge_slave_0: entered allmulticast mode [ 35.163114][ T3300] bridge_slave_0: entered promiscuous mode [ 35.181341][ T3294] hsr_slave_0: entered promiscuous mode [ 35.187383][ T3294] hsr_slave_1: entered promiscuous mode [ 35.198776][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.205966][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.213208][ T3300] bridge_slave_1: entered allmulticast mode [ 35.219840][ T3300] bridge_slave_1: entered promiscuous mode [ 35.227192][ T3299] team0: Port device team_slave_0 added [ 35.240538][ T3295] hsr_slave_0: entered promiscuous mode [ 35.246662][ T3295] hsr_slave_1: entered promiscuous mode [ 35.252605][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 35.258351][ T3295] Cannot create hsr debugfs directory [ 35.273776][ T3299] team0: Port device team_slave_1 added [ 35.290443][ T3298] team0: Port device team_slave_0 added [ 35.310538][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.317979][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.344051][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.355415][ T3298] team0: Port device team_slave_1 added [ 35.367155][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.388858][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.395928][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.421940][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.440988][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.470026][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.477050][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.503028][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.526585][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.533665][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.559883][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.571624][ T3300] team0: Port device team_slave_0 added [ 35.578679][ T3300] team0: Port device team_slave_1 added [ 35.627684][ T3299] hsr_slave_0: entered promiscuous mode [ 35.633768][ T3299] hsr_slave_1: entered promiscuous mode [ 35.639759][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 35.645571][ T3299] Cannot create hsr debugfs directory [ 35.651488][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.658514][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.684558][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.709296][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.716351][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.742304][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.780851][ T3298] hsr_slave_0: entered promiscuous mode [ 35.786883][ T3298] hsr_slave_1: entered promiscuous mode [ 35.792830][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 35.798591][ T3298] Cannot create hsr debugfs directory [ 35.832475][ T3300] hsr_slave_0: entered promiscuous mode [ 35.838564][ T3300] hsr_slave_1: entered promiscuous mode [ 35.844621][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 35.850378][ T3300] Cannot create hsr debugfs directory [ 35.927319][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.936032][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.943864][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.952458][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.973274][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.982565][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.000426][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.008912][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.064515][ T3295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.073113][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.081162][ T3295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.090050][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.099122][ T3295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.107757][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.121207][ T3295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.129864][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.158928][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.168347][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.176732][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.185584][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.193556][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.202435][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.215652][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.224400][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.254575][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.263488][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.273121][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.282211][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.290066][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.298922][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.314835][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.323665][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.360431][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.369712][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.377741][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.386474][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.394497][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.403658][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.412330][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.421104][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.474559][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.492753][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.511854][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.530000][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.537190][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.546901][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.554041][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.563908][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.572970][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.586184][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.595096][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.605429][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.612726][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.630513][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.637687][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.648748][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.677152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.684263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.696286][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.710222][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.719362][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.727069][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.737133][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.744271][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.760545][ T3294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.771645][ T3294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.797824][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.804995][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.815526][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.822663][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.843733][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.850890][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.871368][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.882260][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.101447][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.127675][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.209837][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.237466][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.249302][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.367570][ T3295] veth0_vlan: entered promiscuous mode [ 37.386955][ T3294] veth0_vlan: entered promiscuous mode [ 37.397816][ T3295] veth1_vlan: entered promiscuous mode [ 37.422595][ T3294] veth1_vlan: entered promiscuous mode [ 37.443963][ T3298] veth0_vlan: entered promiscuous mode [ 37.457329][ T3298] veth1_vlan: entered promiscuous mode [ 37.464053][ T3299] veth0_vlan: entered promiscuous mode [ 37.474516][ T3295] veth0_macvtap: entered promiscuous mode [ 37.482954][ T3295] veth1_macvtap: entered promiscuous mode [ 37.497344][ T3299] veth1_vlan: entered promiscuous mode [ 37.510373][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.533578][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.550106][ T3298] veth0_macvtap: entered promiscuous mode [ 37.562493][ T3294] veth0_macvtap: entered promiscuous mode [ 37.570621][ T3298] veth1_macvtap: entered promiscuous mode [ 37.583434][ T3294] veth1_macvtap: entered promiscuous mode [ 37.594805][ T3299] veth0_macvtap: entered promiscuous mode [ 37.604274][ T3299] veth1_macvtap: entered promiscuous mode [ 37.619514][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.638423][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.652283][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.661201][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.670770][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.692959][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.700777][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.714148][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 37.714165][ T28] audit: type=1400 audit(1787311670.313:145): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.hCUuou/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.746956][ T28] audit: type=1400 audit(1787311670.313:146): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.770116][ T28] audit: type=1400 audit(1787311670.313:147): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.hCUuou/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.796036][ T28] audit: type=1400 audit(1787311670.323:148): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.821304][ T28] audit: type=1400 audit(1787311670.323:149): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.hCUuou/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.827799][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.850188][ T3456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.874384][ T28] audit: type=1400 audit(1787311670.323:150): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.hCUuou/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.902588][ T28] audit: type=1400 audit(1787311670.323:151): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.922433][ T28] audit: type=1400 audit(1787311670.373:152): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.946070][ T28] audit: type=1400 audit(1787311670.373:153): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="gadgetfs" ino=4008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.970003][ T3300] veth0_vlan: entered promiscuous mode [ 37.982862][ T3456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.992465][ T28] audit: type=1400 audit(1787311670.583:154): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.055919][ T3300] veth1_vlan: entered promiscuous mode [ 38.091281][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.105561][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.127793][ T3506] Zero length message leads to an empty skb [ 38.159071][ T3300] veth0_macvtap: entered promiscuous mode [ 38.178378][ T3300] veth1_macvtap: entered promiscuous mode [ 38.192370][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.221010][ T29] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.236016][ T29] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.254791][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.265109][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.272634][ T3510] ieee802154 phy0 wpan0: encryption failed: -22 [ 38.274358][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.331389][ T3456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.358358][ T3456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.369127][ T3519] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.370347][ T3518] netlink: 'syz.0.6': attribute type 2 has an invalid length. [ 38.421012][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.442677][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.483023][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.486439][ T3523] loop4: detected capacity change from 0 to 512 [ 38.534112][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.541601][ T3523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.567770][ T3523] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.568973][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.587447][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.615009][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.641359][ T3527] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 448: padding at end of block bitmap is not set [ 38.656151][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.674742][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 38.686003][ T3523] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.5: Failed to acquire dquot type 1 [ 38.810997][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.955876][ T3539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.372221][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.426242][ T3546] loop4: detected capacity change from 0 to 164 [ 39.445394][ T3546] iso9660: Unknown parameter '0000000000000000000000001777777777777777777777' [ 39.493353][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.500732][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.527383][ T3548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.549374][ T3514] loop0: detected capacity change from 0 to 512 [ 39.576780][ T3514] ======================================================= [ 39.576780][ T3514] WARNING: The mand mount option has been deprecated and [ 39.576780][ T3514] and is ignored by this kernel. Remove the mand [ 39.576780][ T3514] option from the mount to silence this warning. [ 39.576780][ T3514] ======================================================= [ 39.762591][ T3548] WARNING! power/level is deprecated; use power/control instead [ 39.956377][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.975011][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.065922][ T3554] process 'syz.3.14' launched '/dev/fd/4' with NULL argv: empty string added [ 40.089784][ T3557] loop4: detected capacity change from 0 to 256 [ 40.093128][ T312] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.120518][ T312] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.190758][ T3559] loop2: detected capacity change from 0 to 1024 [ 40.201161][ T3456] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.224054][ T3456] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.252415][ T3563] loop1: detected capacity change from 0 to 512 [ 40.254954][ T312] IPVS: starting estimator thread 0... [ 40.307913][ T3563] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.18: corrupted in-inode xattr: e_value out of bounds [ 40.324494][ T3563] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.325851][ T3563] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 40.335320][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.335346][ C0] EXT4-fs (loop1): initial error at time 1787311672: ext4_iget_extra_inode:5210: inode 15 [ 40.335396][ C0] EXT4-fs (loop1): last error at time 1787311672: ext4_iget_extra_inode:5210: inode 15 [ 40.351037][ T3564] IPVS: using max 2208 ests per chain, 110400 per kthread [ 40.361886][ T3563] loop1: lost filesystem error report for type 5 error -117 [ 40.382737][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.494781][ T3569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 40.653320][ T3576] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 40.687545][ T3576] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.697529][ T3576] netlink: 9 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.975246][ T3577] loop3: detected capacity change from 0 to 256 [ 41.455543][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.527036][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.592756][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.776759][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.808733][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.882274][ T3596] loop2: detected capacity change from 0 to 256 [ 41.967351][ T3599] loop0: detected capacity change from 0 to 512 [ 41.992223][ T3599] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.562848][ T3602] loop1: detected capacity change from 0 to 1024 [ 42.705365][ T3602] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 42.789244][ T3602] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.903692][ T3602] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.26: iget: special inode unallocated [ 42.924144][ T3602] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 42.924266][ T3602] EXT4-fs (loop1): Remounting filesystem read-only [ 42.933486][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 42.933520][ C0] EXT4-fs (loop1): initial error at time 1787311675: ext4_get_journal_inode:5927: inode 32 [ 42.933554][ C0] EXT4-fs (loop1): last error at time 1787311675: ext4_get_journal_inode:5927: inode 32 [ 42.971758][ T3602] EXT4-fs (loop1): no journal found [ 43.066581][ T3608] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.102641][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 43.102660][ T28] audit: type=1400 audit(1787311675.703:286): avc: denied { remount } for pid=3607 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.131371][ T3608] EXT4-fs error (device loop0): ext4_quota_enable:7256: comm syz.0.30: Bad quota inum: 2, type: 1 [ 43.160068][ T28] audit: type=1400 audit(1787311675.753:287): avc: denied { create } for pid=3611 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.190489][ T28] audit: type=1400 audit(1787311675.783:288): avc: denied { setopt } for pid=3611 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.220420][ T3608] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 43.226676][ T28] audit: type=1400 audit(1787311675.813:289): avc: denied { bpf } for pid=3614 comm="syz.1.32" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.261915][ T3608] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 43.306637][ T3608] EXT4-fs error (device loop0): ext4_quota_enable:7256: comm syz.0.30: Bad quota inum: 2, type: 1 [ 43.322944][ T28] audit: type=1400 audit(1787311675.813:290): avc: denied { perfmon } for pid=3614 comm="syz.1.32" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.342042][ T3608] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 43.469482][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 43.480213][ T28] audit: type=1400 audit(1787311676.063:291): avc: denied { create } for pid=3619 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.580017][ T3608] EXT4-fs (loop0): shut down requested (0) [ 43.590999][ T3622] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 43.603537][ T28] audit: type=1400 audit(1787311676.203:292): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.641115][ T28] audit: type=1400 audit(1787311676.203:293): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.663662][ T3625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60178 sclass=netlink_route_socket pid=3625 comm=syz.0.30 [ 43.694584][ T28] audit: type=1400 audit(1787311676.203:294): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.727865][ T28] audit: type=1400 audit(1787311676.203:295): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.869699][ T3608] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 43.941281][ T3294] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 44.374332][ T3668] set_capacity_and_notify: 1 callbacks suppressed [ 44.374417][ T3668] loop1: detected capacity change from 0 to 512 [ 44.428139][ T3668] EXT4-fs (loop1): 1 truncate cleaned up [ 44.447093][ T3668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.516791][ T3624] loop2: detected capacity change from 0 to 512 [ 44.555851][ T3624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.571466][ T3624] ext4: Unknown parameter 'noacl' [ 44.853998][ T3669] netlink: 52 bytes leftover after parsing attributes in process `syz.1.38'. [ 44.870080][ T3676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.901392][ T3676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.969726][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.995984][ T3641] syz.0.35 (3641) used greatest stack depth: 10384 bytes left [ 45.043652][ T3684] loop1: detected capacity change from 0 to 512 [ 45.058477][ T3684] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.102534][ T3684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 45.111107][ T3685] loop0: detected capacity change from 0 to 512 [ 45.121213][ T3684] System zones: 1-12 [ 45.134902][ T3685] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.148571][ T3684] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.183106][ T3684] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.41: attempt to clear invalid blocks 1024 len 1 [ 45.198175][ T3685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 45.224113][ T3685] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.243109][ T3684] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.243512][ T3684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.41: bg 0: block 361: padding at end of block bitmap is not set [ 45.252750][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 45.252779][ C1] EXT4-fs (loop1): initial error at time 1787311677: ext4_clear_blocks:876: inode 11 [ 45.252834][ C1] EXT4-fs (loop1): last error at time 1787311677: ext4_clear_blocks:876: inode 11 [ 45.293729][ T3684] loop1: lost filesystem error report for type 5 error -117 [ 45.300758][ T3684] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.313817][ T3684] loop1: lost filesystem error report for type 5 error -117 [ 45.317048][ T3684] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.41: invalid indirect mapped block 1811939328 (level 0) [ 45.338648][ T3684] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.340808][ T3684] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.41: invalid indirect mapped block 2 (level 2) [ 45.388990][ T3685] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 45.402525][ T3684] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.405638][ T3684] EXT4-fs (loop1): 1 truncate cleaned up [ 45.418775][ T3681] loop3: detected capacity change from 0 to 256 [ 45.435954][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 45.497984][ T3685] EXT4-fs (loop0): Remounting filesystem read-only [ 45.504653][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.504682][ C0] EXT4-fs (loop0): initial error at time 1787311678: mb_free_blocks:2049: inode 12: block 14 [ 45.504734][ C0] EXT4-fs (loop0): last error at time 1787311678: mb_free_blocks:2049: inode 12: block 14 [ 45.547954][ T3685] EXT4-fs (loop0): 1 truncate cleaned up [ 45.577117][ T29] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 45.593617][ T29] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 45.633441][ T3684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41'. [ 45.643778][ T29] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.672094][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.677483][ T3684] netlink: 168 bytes leftover after parsing attributes in process `syz.1.41'. [ 45.737938][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 45.858313][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.105077][ T3775] Invalid option length (1048139) for dns_resolver key [ 46.168335][ T3676] syz.2.39 (3676) used greatest stack depth: 10312 bytes left [ 46.349924][ T3786] bridge0: entered allmulticast mode [ 46.368361][ T3666] loop4: detected capacity change from 0 to 4096 [ 46.473663][ T3786] loop2: detected capacity change from 0 to 512 [ 46.903872][ T3800] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 46.903872][ T3800] The task syz.2.50 (3800) triggered the difference, watch for misbehavior. [ 47.201046][ T3816] Cannot find add_set index 0 as target [ 47.632136][ T3820] loop1: detected capacity change from 0 to 512 [ 47.732420][ T3820] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.56: inode has both inline data and extents flags [ 47.750674][ T3820] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.770862][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.788652][ C0] EXT4-fs (loop1): initial error at time 1787311680: ext4_orphan_get:1403: inode 15 [ 47.799312][ C0] EXT4-fs (loop1): last error at time 1787311680: ext4_orphan_get:1403: inode 15 [ 48.201932][ T3841] loop2: detected capacity change from 0 to 512 [ 48.312224][ T3843] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 48.512909][ T3838] syz.3.59 (3838) used greatest stack depth: 10240 bytes left [ 48.542600][ T3843] loop0: detected capacity change from 0 to 512 [ 48.566799][ T3820] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.56: couldn't read orphan inode 15 (err -117) [ 48.600577][ T3843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.636873][ T3820] loop1: lost filesystem error report for type 5 error -117 [ 48.663227][ T3843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.724192][ T3841] EXT4-fs (loop2): 1 orphan inode deleted [ 48.731872][ T3820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.745538][ T3751] __quota_error: 59 callbacks suppressed [ 48.745552][ T3751] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.765408][ T3843] EXT4-fs (loop0): 1 truncate cleaned up [ 48.771620][ T3751] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 1 [ 48.784746][ T3843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.805848][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.820918][ T3751] loop2: lost filesystem error report for type 5 error -117 [ 48.835480][ T3843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.63'. [ 48.854252][ T3841] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.870749][ T28] audit: type=1400 audit(1787311681.463:347): avc: denied { write } for pid=3846 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.894631][ T3843] xt_TCPMSS: Only works on TCP SYN packets [ 48.928926][ T3820] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 48.966571][ T3853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 49.020799][ T3757] IPVS: starting estimator thread 0... [ 49.064354][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.093006][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.120897][ T3854] IPVS: using max 2256 ests per chain, 112800 per kthread [ 49.226385][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.249376][ T3856] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 49.271372][ T28] audit: type=1400 audit(1787311681.503:348): avc: denied { accept } for pid=3846 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.293214][ T28] audit: type=1400 audit(1787311681.503:349): avc: denied { read } for pid=3846 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.343385][ T28] audit: type=1400 audit(1787311681.583:350): avc: denied { write } for pid=3840 comm="syz.2.62" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.365123][ T28] audit: type=1400 audit(1787311681.593:351): avc: denied { add_name } for pid=3840 comm="syz.2.62" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.410085][ T28] audit: type=1400 audit(1787311681.603:352): avc: denied { getopt } for pid=3840 comm="syz.2.62" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.432887][ T28] audit: type=1400 audit(1787311681.613:353): avc: denied { ioctl } for pid=3840 comm="syz.2.62" path="socket:[6166]" dev="sockfs" ino=6166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.459130][ T28] audit: type=1400 audit(1787311681.783:354): avc: denied { mount } for pid=3855 comm="syz.4.65" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.481675][ T28] audit: type=1400 audit(1787311681.913:355): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.706563][ T3861] set_capacity_and_notify: 1 callbacks suppressed [ 49.706578][ T3861] loop3: detected capacity change from 0 to 1024 [ 49.720211][ T3861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.726901][ T3861] EXT4-fs: Ignoring removed i_version option [ 49.733601][ T3861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.755286][ T3861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.803450][ T3861] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.888694][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'. [ 49.946741][ T3873] can0: slcan on ttyS3. [ 50.251026][ T3873] can0 (unregistered): slcan off ttyS3. [ 50.320153][ T3878] sctp: [Deprecated]: syz.2.67 (pid 3878) Use of int in maxseg socket option. [ 50.320153][ T3878] Use struct sctp_assoc_value instead [ 51.006671][ T3879] EXT4-fs (loop3): shut down requested (0) [ 51.152785][ T3889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 51.163837][ T3889] netlink: 'syz.0.71': attribute type 7 has an invalid length. [ 51.172488][ T3889] netlink: 'syz.0.71': attribute type 8 has an invalid length. [ 51.180169][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 51.203790][ T3891] loop1: detected capacity change from 0 to 512 [ 51.210959][ T3891] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.372251][ T3891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 52.153379][ T3899] loop2: detected capacity change from 0 to 1024 [ 52.167812][ T3899] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.181834][ T3899] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.203486][ T3899] JBD2: no valid journal superblock found [ 52.213765][ T3899] EXT4-fs (loop2): Could not load journal inode [ 52.370190][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.649059][ T3911] loop5: detected capacity change from 0 to 7 [ 52.676822][ T3285] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.697028][ T3285] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.720015][ T3285] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.746475][ T3285] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.776630][ T3285] Buffer I/O error on dev loop5, logical block 0, async page read [ 53.870589][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 53.870608][ T28] audit: type=1400 audit(1787311686.463:361): avc: denied { create } for pid=3919 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.909458][ T28] audit: type=1400 audit(1787311686.463:362): avc: denied { allowed } for pid=3919 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.097522][ T28] audit: type=1400 audit(1787311686.693:363): avc: denied { map } for pid=3927 comm="syz.0.81" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.122842][ T28] audit: type=1400 audit(1787311686.693:364): avc: denied { read write } for pid=3927 comm="syz.0.81" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.747553][ T3945] loop1: detected capacity change from 0 to 512 [ 54.760554][ T3920] Process accounting resumed [ 54.908829][ T3945] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.953899][ T3945] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 54.973392][ T3945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.982405][ T3950] loop0: detected capacity change from 0 to 512 [ 54.993529][ T3945] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 55.008873][ T3950] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.034801][ T3945] EXT4-fs (loop1): Remounting filesystem read-only [ 55.041389][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 55.041415][ C0] EXT4-fs (loop1): initial error at time 1787311687: mb_free_blocks:2049: inode 12: block 14 [ 55.041472][ C0] EXT4-fs (loop1): last error at time 1787311687: mb_free_blocks:2049: inode 12: block 14 [ 55.100893][ T3945] EXT4-fs (loop1): 1 truncate cleaned up [ 55.161771][ T3760] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 55.176148][ T3760] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 55.202422][ T3760] Quota error (device loop1): write_blk: dquota write failed [ 55.215365][ T3760] Quota error (device loop1): remove_free_dqentry: Can't write block (8) with free entries [ 55.232093][ T3760] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 55.253277][ T28] audit: type=1400 audit(1787311687.853:365): avc: denied { write } for pid=3955 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 55.276595][ T3760] Quota error (device loop1): write_blk: dquota write failed [ 55.297059][ T3760] Quota error (device loop1): free_dqentry: Can't move quota data block (8) to free list [ 55.340506][ T3950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 55.354050][ T3953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'. [ 55.365789][ T3760] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.383907][ T3953] netlink: 'syz.2.87': attribute type 7 has an invalid length. [ 55.394186][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.428390][ T3953] netlink: 'syz.2.87': attribute type 8 has an invalid length. [ 55.441614][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 55.496851][ T3953] dummy0: entered promiscuous mode [ 55.514002][ T3960] loop4: detected capacity change from 0 to 1024 [ 55.528467][ T3953] team0: entered promiscuous mode [ 55.536159][ T3960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.569223][ T3960] EXT4-fs: Ignoring removed i_version option [ 55.578417][ T3953] team_slave_0: entered promiscuous mode [ 55.589155][ T3960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.598172][ T3953] team_slave_1: entered promiscuous mode [ 55.620252][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.632104][ T3960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.646434][ T3953] erspan0: entered promiscuous mode [ 55.683345][ T3953] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 55.720381][ T3960] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.761816][ T3953] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 55.867435][ T3953] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 55.961044][ T3960] EXT4-fs (loop4): shut down requested (0) [ 56.067990][ T3985] loop3: detected capacity change from 0 to 512 [ 56.085855][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.098808][ T3985] EXT4-fs: Ignoring removed oldalloc option [ 56.105910][ T3985] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.124713][ T3985] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.98: corrupted in-inode xattr: e_value size too large [ 56.143594][ T3985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.144307][ T3985] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.98: couldn't read orphan inode 15 (err -117) [ 56.153605][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.153640][ C1] EXT4-fs (loop3): initial error at time 1787311688: ext4_iget_extra_inode:5210: inode 15 [ 56.153695][ C1] EXT4-fs (loop3): last error at time 1787311688: ext4_iget_extra_inode:5210: inode 15 [ 56.160319][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.172043][ T3985] loop3: lost filesystem error report for type 5 error -117 [ 56.214636][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.230352][ T3985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.311954][ T3986] Process accounting resumed [ 56.331134][ T3995] loop4: detected capacity change from 0 to 512 [ 56.344437][ T3995] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.481519][ T4002] loop1: detected capacity change from 0 to 4096 [ 56.501746][ T3995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 56.509727][ T3995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.518158][ T3995] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 56.544371][ T3995] EXT4-fs (loop4): Remounting filesystem read-only [ 56.550967][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.550993][ C0] EXT4-fs (loop4): initial error at time 1787311689: mb_free_blocks:2049: inode 12: block 14 [ 56.551057][ C0] EXT4-fs (loop4): last error at time 1787311689: mb_free_blocks:2049: inode 12: block 14 [ 56.579608][ T3995] EXT4-fs (loop4): 1 truncate cleaned up [ 56.620964][ T3760] EXT4-fs (loop4): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 56.657264][ T3760] EXT4-fs (loop4): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 56.724751][ T3760] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.783114][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.796652][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.859925][ T4009] capability: warning: `syz.3.104' uses 32-bit capabilities (legacy support in use) [ 56.927676][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.996318][ T4017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 57.007333][ T4017] netlink: 'syz.3.105': attribute type 7 has an invalid length. [ 57.015452][ T4017] netlink: 'syz.3.105': attribute type 8 has an invalid length. [ 57.023529][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 57.035547][ T4017] dummy0: entered promiscuous mode [ 57.041959][ T4017] team0: entered promiscuous mode [ 57.047337][ T4017] team_slave_0: entered promiscuous mode [ 57.053446][ T4017] team_slave_1: entered promiscuous mode [ 57.060905][ T4017] erspan0: entered promiscuous mode [ 57.067017][ T4017] debugfs: 'hsr1' already exists in 'hsr' [ 57.073230][ T4017] Cannot create hsr debugfs directory [ 57.288710][ T4039] loop0: detected capacity change from 0 to 1024 [ 57.302454][ T4039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.319298][ T4039] EXT4-fs: Ignoring removed i_version option [ 57.343221][ T4039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.372136][ T4048] loop2: detected capacity change from 0 to 128 [ 57.394940][ T4039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.430264][ T4039] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.505800][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.514635][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.589765][ T4065] loop2: detected capacity change from 0 to 512 [ 57.626807][ T4065] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.633785][ T4071] EXT4-fs (loop0): shut down requested (0) [ 57.652213][ T4065] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 57.685844][ T4065] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.728242][ T4065] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 57.753898][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.776172][ T4065] EXT4-fs (loop2): Remounting filesystem read-only [ 57.782791][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 57.782840][ C0] EXT4-fs (loop2): initial error at time 1787311690: mb_free_blocks:2049: inode 12: block 14 [ 57.782872][ C0] EXT4-fs (loop2): last error at time 1787311690: mb_free_blocks:2049: inode 12: block 14 [ 57.849438][ T4065] EXT4-fs (loop2): 1 truncate cleaned up [ 57.860843][ T29] EXT4-fs (loop2): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 57.889570][ T29] EXT4-fs (loop2): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 57.907657][ T29] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.937009][ T4080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 57.951292][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.967480][ T4080] netlink: 'syz.1.119': attribute type 7 has an invalid length. [ 57.975898][ T4080] netlink: 'syz.1.119': attribute type 8 has an invalid length. [ 57.983836][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 57.999887][ T4080] dummy0: entered promiscuous mode [ 58.006804][ T4080] team0: entered promiscuous mode [ 58.012216][ T4080] team_slave_0: entered promiscuous mode [ 58.018474][ T4080] team_slave_1: entered promiscuous mode [ 58.025666][ T4080] erspan0: entered promiscuous mode [ 58.032261][ T4080] debugfs: 'hsr1' already exists in 'hsr' [ 58.038250][ T4080] Cannot create hsr debugfs directory [ 58.115916][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.589562][ T4119] loop3: detected capacity change from 0 to 512 [ 58.714285][ T4119] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.734645][ T4119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 58.749714][ T4119] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.770629][ T4119] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.839561][ T4119] EXT4-fs (loop3): Remounting filesystem read-only [ 58.846254][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.846277][ C1] EXT4-fs (loop3): initial error at time 1787311691: mb_free_blocks:2049: inode 12: block 14 [ 58.846328][ C1] EXT4-fs (loop3): last error at time 1787311691: mb_free_blocks:2049: inode 12: block 14 [ 58.896808][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 58.896824][ T28] audit: type=1400 audit(1787311691.493:391): avc: denied { connect } for pid=4135 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.923039][ T4119] EXT4-fs (loop3): 1 truncate cleaned up [ 58.930245][ T3753] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 58.942742][ T3753] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 58.961681][ T3753] Quota error (device loop3): write_blk: dquota write failed [ 58.980856][ T3753] Quota error (device loop3): remove_free_dqentry: Can't write block (8) with free entries [ 58.991041][ T3753] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 59.003635][ T3753] Quota error (device loop3): write_blk: dquota write failed [ 59.022179][ T3753] Quota error (device loop3): free_dqentry: Can't move quota data block (8) to free list [ 59.032545][ T3753] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.052148][ T3753] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 59.072249][ T3753] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 59.084949][ T3753] Quota error (device loop3): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 59.101457][ T4119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.302202][ T28] audit: type=1400 audit(1787311691.903:392): avc: denied { getopt } for pid=4153 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.383685][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.514287][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.539834][ T4175] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.552731][ T4175] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:107: comm syz.2.168: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 59.582546][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.330049][ T4209] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 60.545815][ T4228] set_capacity_and_notify: 1 callbacks suppressed [ 60.545836][ T4228] loop0: detected capacity change from 0 to 512 [ 60.577139][ T4233] loop4: detected capacity change from 0 to 512 [ 60.584512][ T4228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.596216][ T4233] EXT4-fs: Ignoring removed bh option [ 60.604280][ T4228] EXT4-fs (loop0): 1 truncate cleaned up [ 60.610228][ T4233] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.620019][ T4228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.632462][ T4233] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 60.649616][ T4233] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 60.685875][ T4233] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 60.703081][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.704480][ T4230] loop3: detected capacity change from 0 to 256 [ 60.723786][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 60.723811][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 60.731713][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.742649][ T4230] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.803529][ T4230] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.884475][ T4247] loop1: detected capacity change from 0 to 512 [ 60.895545][ T4247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.908325][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.931159][ T4247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.944457][ T4247] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.094201][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.115352][ T4262] netlink: 216 bytes leftover after parsing attributes in process `syz.4.198'. [ 61.643289][ T4284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 61.882523][ T4319] random: crng reseeded on system resumption [ 61.932418][ T4324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.224'. [ 62.037686][ T4334] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.229'. [ 62.065352][ T4334] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 62.078049][ T4337] netlink: 'syz.2.230': attribute type 32 has an invalid length. [ 62.125756][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 62.137832][ T4289] Process accounting resumed [ 62.245885][ T4359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.241'. [ 62.282665][ T4365] sctp: [Deprecated]: syz.3.242 (pid 4365) Use of int in max_burst socket option. [ 62.282665][ T4365] Use struct sctp_assoc_value instead [ 62.428968][ T4386] loop4: detected capacity change from 0 to 512 [ 62.437893][ T4385] loop2: detected capacity change from 0 to 512 [ 62.451773][ T4385] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.251: inode has both inline data and extents flags [ 62.471705][ T4385] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.473952][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.474581][ T4385] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.251: couldn't read orphan inode 15 (err -117) [ 62.483297][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.483317][ C0] EXT4-fs (loop2): initial error at time 1787311695: ext4_orphan_get:1403: inode 15 [ 62.483354][ C0] EXT4-fs (loop2): last error at time 1787311695: ext4_orphan_get:1403: inode 15 [ 62.515594][ T4386] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.551585][ T4386] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.252: corrupted xattr block 33: invalid ea_ino [ 62.564965][ T4385] loop2: lost filesystem error report for type 5 error -117 [ 62.566580][ T4386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.567388][ T4385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.603313][ T4386] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.252: corrupted xattr block 33: invalid ea_ino [ 62.630756][ T4386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.636637][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.652613][ T4386] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.252: corrupted xattr block 33: invalid ea_ino [ 62.683087][ T4386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.723185][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.813583][ T4414] netlink: 112 bytes leftover after parsing attributes in process `syz.2.263'. [ 62.838315][ T4387] Process accounting resumed [ 62.850628][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 62.906245][ T4423] Process accounting resumed [ 63.272556][ T4472] loop3: detected capacity change from 0 to 4096 [ 63.295508][ T4472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.325349][ T4472] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 63.356113][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.377331][ T4480] loop4: detected capacity change from 0 to 512 [ 63.394562][ T4480] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.297: bg 0: block 7: invalid block bitmap [ 63.417646][ T4480] loop4: lost filesystem error report for type 5 error -117 [ 63.419430][ T4480] EXT4-fs (loop4): Remounting filesystem read-only [ 63.427009][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 63.427039][ C0] EXT4-fs (loop4): initial error at time 1787311696: ext4_validate_block_bitmap:436 [ 63.427095][ C0] EXT4-fs (loop4): last error at time 1787311696: ext4_validate_block_bitmap:436 [ 63.460023][ T4480] EXT4-fs (loop4): 1 orphan inode deleted [ 63.467329][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.547051][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.867153][ T4557] loop3: detected capacity change from 0 to 512 [ 63.881044][ T4559] usb usb7: usbfs: process 4559 (syz.1.327) did not claim interface 0 before use [ 63.889537][ T4557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.324: bg 0: block 393: padding at end of block bitmap is not set [ 63.917052][ T4557] loop3: lost filesystem error report for type 5 error -117 [ 63.920711][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.927773][ T4557] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 63.928172][ C0] EXT4-fs (loop3): initial error at time 1787311696: ext4_validate_block_bitmap:445 [ 63.952708][ C0] EXT4-fs (loop3): last error at time 1787311696: ext4_validate_block_bitmap:445 [ 63.959266][ T4557] loop3: lost filesystem error report for type 5 error -117 [ 63.976138][ T4557] EXT4-fs (loop3): 2 truncates cleaned up [ 63.996500][ T4557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.028482][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.092035][ T4574] loop3: detected capacity change from 0 to 2048 [ 64.133521][ T4574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.153176][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 64.153194][ T28] audit: type=1400 audit(1787311696.753:443): avc: denied { read } for pid=4573 comm="syz.3.333" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 64.214143][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.377502][ T28] audit: type=1400 audit(1787311696.973:444): avc: denied { map } for pid=4611 comm="syz.4.348" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.505940][ T28] audit: type=1400 audit(1787311697.103:445): avc: denied { create } for pid=4625 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.552161][ T28] audit: type=1400 audit(1787311697.133:446): avc: denied { bind } for pid=4625 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.779128][ T28] audit: type=1326 audit(1787311697.373:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.4.374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589e74e0d9 code=0x7ffc0000 [ 64.821460][ T4663] EXT4-fs: Ignoring removed oldalloc option [ 64.829127][ T28] audit: type=1326 audit(1787311697.373:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.4.374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589e74e0d9 code=0x7ffc0000 [ 64.829206][ T28] audit: type=1326 audit(1787311697.373:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.4.374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589e74e0d9 code=0x7ffc0000 [ 64.829246][ T28] audit: type=1326 audit(1787311697.373:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.4.374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589e74e0d9 code=0x7ffc0000 [ 64.829351][ T28] audit: type=1326 audit(1787311697.403:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.4.374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f589e74e0d9 code=0x7ffc0000 [ 64.829389][ T28] audit: type=1326 audit(1787311697.403:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.4.374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589e74e0d9 code=0x7ffc0000 [ 64.829482][ T4663] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 64.831406][ T4663] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.376: corrupted in-inode xattr: e_value size too large [ 64.831446][ T4663] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.831685][ T4663] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.376: couldn't read orphan inode 15 (err -117) [ 64.831721][ T4663] loop2: lost filesystem error report for type 5 error -117 [ 64.832260][ T4663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.110987][ T4682] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 65.155526][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.184651][ T4690] EXT4-fs: Ignoring removed oldalloc option [ 65.223928][ T4690] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 65.251808][ T4690] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.387: corrupted in-inode xattr: e_value size too large [ 65.278998][ T4690] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.280710][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 65.296397][ C1] EXT4-fs (loop4): initial error at time 1787311697: ext4_iget_extra_inode:5210: inode 15 [ 65.306365][ C1] EXT4-fs (loop4): last error at time 1787311697: ext4_iget_extra_inode:5210: inode 15 [ 65.316161][ T4690] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.387: couldn't read orphan inode 15 (err -117) [ 65.328644][ T4690] loop4: lost filesystem error report for type 5 error -117 [ 65.330514][ T4690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.471520][ T4719] futex_wake_op: syz.3.401 tries to shift op by -1; fix this program [ 65.560908][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.677878][ T4745] bridge1: entered promiscuous mode [ 65.685294][ T4745] bridge1: entered allmulticast mode [ 66.019544][ T4797] __nla_validate_parse: 9 callbacks suppressed [ 66.019562][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 66.138902][ T4814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'. [ 66.177274][ T4818] set_capacity_and_notify: 2 callbacks suppressed [ 66.177292][ T4818] loop4: detected capacity change from 0 to 512 [ 66.199199][ T4818] EXT4-fs: Ignoring removed oldalloc option [ 66.227738][ T4826] netlink: 'syz.2.452': attribute type 5 has an invalid length. [ 66.230355][ T4818] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.252942][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 66.269440][ T4818] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.449: corrupted in-inode xattr: e_value size too large [ 66.295434][ T4826] netlink: 76 bytes leftover after parsing attributes in process `syz.2.452'. [ 66.297082][ T4829] program syz.1.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.310447][ T4818] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.316950][ T4818] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.449: couldn't read orphan inode 15 (err -117) [ 66.326200][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 66.326233][ C0] EXT4-fs (loop4): initial error at time 1787311698: ext4_iget_extra_inode:5210: inode 15 [ 66.326275][ C0] EXT4-fs (loop4): last error at time 1787311698: ext4_iget_extra_inode:5210: inode 15 [ 66.364601][ T4818] loop4: lost filesystem error report for type 5 error -117 [ 66.366515][ T4818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.509601][ T4849] loop1: detected capacity change from 0 to 512 [ 66.524132][ T4849] EXT4-fs: Ignoring removed oldalloc option [ 66.549906][ T4849] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 66.554009][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.572383][ T4856] syz_tun: entered promiscuous mode [ 66.597085][ T4849] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.464: corrupted in-inode xattr: e_value size too large [ 66.611595][ T3760] ================================================================== [ 66.619723][ T3760] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 66.627931][ T3760] [ 66.630279][ T3760] read-write to 0xffff88810048a978 of 8 bytes by task 3300 on cpu 0: [ 66.638374][ T3760] __filemap_remove_folio+0x218/0x2e0 [ 66.639634][ T4849] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.643796][ T3760] __remove_mapping+0x396/0x4c0 [ 66.643829][ T3760] remove_mapping+0x22/0x90 [ 66.643857][ T3760] mapping_try_invalidate+0x293/0x430 [ 66.667714][ T3760] invalidate_mapping_pages+0x27/0x40 [ 66.673116][ T3760] invalidate_bdev+0x58/0x70 [ 66.677746][ T3760] ext4_put_super+0x620/0x7c0 [ 66.682455][ T3760] generic_shutdown_super+0xee/0x220 [ 66.687772][ T3760] kill_block_super+0x2d/0xb0 [ 66.692485][ T3760] ext4_kill_sb+0x42/0x80 [ 66.696947][ T3760] deactivate_locked_super+0x75/0x200 [ 66.702378][ T3760] deactivate_super+0x9a/0xb0 [ 66.707107][ T3760] cleanup_mnt+0x2c3/0x340 [ 66.710752][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 66.711549][ T3760] __cleanup_mnt+0x19/0x20 [ 66.717983][ C0] EXT4-fs (loop1): initial error at time 1787311699: ext4_iget_extra_inode:5210 [ 66.722415][ T3760] task_work_run+0x130/0x1a0 [ 66.722449][ T3760] exit_to_user_mode_loop+0x1e4/0x8c0 [ 66.722481][ T3760] do_syscall_64+0x212/0x360 [ 66.731549][ C0] : inode 15 [ 66.736087][ T3760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.741510][ C0] [ 66.746057][ T3760] [ 66.746065][ T3760] read to 0xffff88810048a978 of 8 bytes by task 3760 on cpu 1: [ 66.749332][ C0] EXT4-fs (loop1): last error at time 1787311699: ext4_iget_extra_inode:5210 [ 66.755193][ T3760] nr_blockdev_pages+0x7e/0xd0 [ 66.755228][ T3760] si_meminfo+0x87/0xd0 [ 66.757559][ C0] : inode 15 [ 66.759916][ T3760] update_defense_level+0x44/0x5c0 [ 66.793491][ T3760] defense_work_handler+0x1f/0x80 [ 66.798548][ T3760] process_scheduled_works+0x56a/0xa50 [ 66.804038][ T3760] worker_thread+0x569/0x750 [ 66.809017][ T3760] kthread+0x223/0x270 [ 66.813106][ T3760] ret_from_fork+0x146/0x330 [ 66.817746][ T3760] ret_from_fork_asm+0x1a/0x30 [ 66.822538][ T3760] [ 66.824874][ T3760] value changed: 0x000000000000000a -> 0x0000000000000003 [ 66.831992][ T3760] [ 66.834331][ T3760] Reported by Kernel Concurrency Sanitizer on: [ 66.840522][ T3760] CPU: 1 UID: 0 PID: 3760 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.850093][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.860193][ T3760] Workqueue: events_dfl_long defense_work_handler [ 66.866636][ T3760] ================================================================== [ 66.878642][ T4849] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.464: couldn't read orphan inode 15 (err -117) [ 66.897965][ T4849] loop1: lost filesystem error report for type 5 error -117 [ 66.905953][ T4849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.962518][ T4864] loop3: detected capacity change from 0 to 512 [ 66.972840][ T4864] EXT4-fs: Ignoring removed oldalloc option [ 66.985410][ T4864] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 66.997835][ T4864] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.469: corrupted in-inode xattr: e_value size too large [ 67.012188][ T4864] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.012735][ T4864] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.469: couldn't read orphan inode 15 (err -117) [ 67.021989][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 67.022006][ C0] EXT4-fs (loop3): initial error at time 1787311699: ext4_iget_extra_inode:5210: inode 15 [ 67.022049][ C0] EXT4-fs (loop3): last error at time 1787311699: ext4_iget_extra_inode:5210: inode 15 [ 67.060857][ T4864] loop3: lost filesystem error report for type 5 error -117 [ 67.072549][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.095835][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.203369][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.