last executing test programs: 6.986953068s ago: executing program 2 (id=838): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 6.916856112s ago: executing program 2 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 6.522786235s ago: executing program 2 (id=847): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 6.426908994s ago: executing program 2 (id=851): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93e286dc7854b21f3f0db8a295cdae6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e9acd39d9011d1d9d53"], 0xf9, 0x1223, &(0x7f0000003480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x20600, 0x80) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6.341691255s ago: executing program 3 (id=856): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000001080)=0x8) 6.232355851s ago: executing program 3 (id=857): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x47c}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000a00)={'#! ', './file1'}, 0xb) lseek(r1, 0x7, 0x4) 6.160749766s ago: executing program 3 (id=859): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 6.096992282s ago: executing program 2 (id=862): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8916, 0x0) 5.740568323s ago: executing program 3 (id=868): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5.702141195s ago: executing program 2 (id=869): r0 = socket(0x10, 0x80002, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x84, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x70}}, 0x0) 5.695484913s ago: executing program 3 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0xfff, 0x40, 0xfffffff8}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0x7}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 5.655596094s ago: executing program 32 (id=869): r0 = socket(0x10, 0x80002, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x84, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x70}}, 0x0) 5.45503145s ago: executing program 3 (id=875): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0x80) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x129) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 5.413228631s ago: executing program 33 (id=875): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0x80) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x129) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 3.239839053s ago: executing program 1 (id=898): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000180), 0x6e, &(0x7f0000002080)=[{0x0}], 0x1}, 0x2000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.208813016s ago: executing program 1 (id=906): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000005c0)={r2, 0x6}, 0x8) 2.084519389s ago: executing program 0 (id=907): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x100}, 0x10) 1.980044866s ago: executing program 1 (id=909): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB='6'], 0x20}}, 0x4000) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.824008851s ago: executing program 0 (id=911): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000500)={r1, 0x1, 0x6, @local}, 0x10) 1.580135828s ago: executing program 0 (id=912): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, 0x0, 0x0, 0x600}]) 1.27387533s ago: executing program 1 (id=913): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.081127538s ago: executing program 0 (id=914): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 950.857249ms ago: executing program 0 (id=915): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @private1, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, 0x0) 950.762619ms ago: executing program 4 (id=916): rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffffefffffffffe]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) tkill(r0, 0x3) 647.041612ms ago: executing program 4 (id=917): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 539.211959ms ago: executing program 4 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020e46c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 506.483402ms ago: executing program 0 (id=919): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x808302, &(0x7f0000000680)={[{@noload}, {@journal_dev={'journal_dev', 0x3d, 0xfd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x482, &(0x7f0000001040)="$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") syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 421.267583ms ago: executing program 1 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000440)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x27) 421.044763ms ago: executing program 4 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 315.11338ms ago: executing program 4 (id=922): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 191.685073ms ago: executing program 1 (id=923): r0 = socket(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) io_setup(0x1, 0x0) 2.377031ms ago: executing program 5 (id=873): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@can, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 4 (id=924): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000104"], 0x34}}, 0x44084) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x1, 0x0, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) kernel console output (not intermixed with test programs): [ 30.100857][ T29] audit: type=1400 audit(1772017675.772:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.129196][ T29] audit: type=1400 audit(1772017675.772:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.158255][ T29] audit: type=1400 audit(1772017675.772:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.189293][ T29] audit: type=1400 audit(1772017675.772:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.217131][ T29] audit: type=1400 audit(1772017675.772:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 35.850340][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 35.850360][ T29] audit: type=1400 audit(1772017681.532:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.886497][ T29] audit: type=1400 audit(1772017681.562:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.889704][ T3298] cgroup: Unknown subsys name 'net' [ 35.923139][ T29] audit: type=1400 audit(1772017681.592:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.087207][ T3298] cgroup: Unknown subsys name 'cpuset' [ 36.095305][ T3298] cgroup: Unknown subsys name 'rlimit' [ 36.225484][ T29] audit: type=1400 audit(1772017681.902:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.266101][ T29] audit: type=1400 audit(1772017681.902:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.291000][ T29] audit: type=1400 audit(1772017681.902:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.317851][ T29] audit: type=1400 audit(1772017681.902:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.343069][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.344596][ T29] audit: type=1400 audit(1772017681.912:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.392095][ T29] audit: type=1400 audit(1772017681.912:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.425195][ T29] audit: type=1400 audit(1772017681.932:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.467089][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.727053][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.764078][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.811520][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.872932][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.882330][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.891322][ T3319] bridge_slave_0: entered allmulticast mode [ 37.899494][ T3319] bridge_slave_0: entered promiscuous mode [ 37.910993][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.919574][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.930781][ T3319] bridge_slave_1: entered allmulticast mode [ 37.940550][ T3319] bridge_slave_1: entered promiscuous mode [ 37.991417][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 38.013060][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 38.031762][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.040638][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.049717][ T3314] bridge_slave_0: entered allmulticast mode [ 38.059385][ T3314] bridge_slave_0: entered promiscuous mode [ 38.071465][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.079528][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.089258][ T3316] bridge_slave_0: entered allmulticast mode [ 38.096538][ T3316] bridge_slave_0: entered promiscuous mode [ 38.109852][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.121400][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.130662][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.140225][ T3314] bridge_slave_1: entered allmulticast mode [ 38.148995][ T3314] bridge_slave_1: entered promiscuous mode [ 38.163480][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.172725][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.181829][ T3316] bridge_slave_1: entered allmulticast mode [ 38.190339][ T3316] bridge_slave_1: entered promiscuous mode [ 38.211017][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.243528][ T3319] team0: Port device team_slave_0 added [ 38.272690][ T3319] team0: Port device team_slave_1 added [ 38.284101][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.297444][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.322648][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.335612][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.384381][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.392545][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.423582][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.447003][ T3314] team0: Port device team_slave_0 added [ 38.455475][ T3316] team0: Port device team_slave_0 added [ 38.468305][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.477639][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.509962][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.531821][ T3314] team0: Port device team_slave_1 added [ 38.539487][ T3316] team0: Port device team_slave_1 added [ 38.546205][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.555017][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.563710][ T3312] bridge_slave_0: entered allmulticast mode [ 38.572004][ T3312] bridge_slave_0: entered promiscuous mode [ 38.583379][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.592108][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.601052][ T3323] bridge_slave_0: entered allmulticast mode [ 38.609134][ T3323] bridge_slave_0: entered promiscuous mode [ 38.628955][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.637972][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.646023][ T3312] bridge_slave_1: entered allmulticast mode [ 38.655391][ T3312] bridge_slave_1: entered promiscuous mode [ 38.670756][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.680460][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.690792][ T3323] bridge_slave_1: entered allmulticast mode [ 38.699385][ T3323] bridge_slave_1: entered promiscuous mode [ 38.726384][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.733667][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.771917][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.791175][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.800871][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.833447][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.864062][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.873156][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.906547][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.921314][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.932635][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.942114][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.979088][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.995328][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.020016][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.038389][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.060105][ T3319] hsr_slave_0: entered promiscuous mode [ 39.069431][ T3319] hsr_slave_1: entered promiscuous mode [ 39.132394][ T3323] team0: Port device team_slave_0 added [ 39.143838][ T3316] hsr_slave_0: entered promiscuous mode [ 39.151250][ T3316] hsr_slave_1: entered promiscuous mode [ 39.159060][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 39.167310][ T3316] Cannot create hsr debugfs directory [ 39.175766][ T3312] team0: Port device team_slave_0 added [ 39.187384][ T3312] team0: Port device team_slave_1 added [ 39.198817][ T3314] hsr_slave_0: entered promiscuous mode [ 39.205989][ T3314] hsr_slave_1: entered promiscuous mode [ 39.213275][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 39.221580][ T3314] Cannot create hsr debugfs directory [ 39.234377][ T3323] team0: Port device team_slave_1 added [ 39.274787][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.284382][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.317736][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.339209][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.349045][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.382396][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.405684][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.415478][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.446774][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.465154][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.473831][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.511416][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.591976][ T3312] hsr_slave_0: entered promiscuous mode [ 39.600617][ T3312] hsr_slave_1: entered promiscuous mode [ 39.609131][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 39.615493][ T3312] Cannot create hsr debugfs directory [ 39.639376][ T3323] hsr_slave_0: entered promiscuous mode [ 39.647452][ T3323] hsr_slave_1: entered promiscuous mode [ 39.655734][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 39.662807][ T3323] Cannot create hsr debugfs directory [ 39.813640][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.832568][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.853934][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.879341][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.907234][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.924529][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.946070][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.961660][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.998880][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.018255][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.038351][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.056132][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.097027][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.109229][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.121107][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.139828][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.149311][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.189700][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.212887][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.224573][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.241647][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.252107][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.264548][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.279532][ T2571] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.289155][ T2571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.300972][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.313688][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.330859][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.365312][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.375047][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.392265][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.401985][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.476200][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.498971][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.531212][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.545699][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.560852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.569271][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.588564][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.610838][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.620805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.642913][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.667381][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.679055][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.688801][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.708279][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.716876][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.745419][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.754776][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.768096][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.777403][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.803127][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.825207][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.859462][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.928234][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.951661][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.973006][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.997438][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.114050][ T3314] veth0_vlan: entered promiscuous mode [ 41.145606][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.177468][ T3314] veth1_vlan: entered promiscuous mode [ 41.225929][ T3314] veth0_macvtap: entered promiscuous mode [ 41.272382][ T3314] veth1_macvtap: entered promiscuous mode [ 41.291049][ T3323] veth0_vlan: entered promiscuous mode [ 41.301557][ T3319] veth0_vlan: entered promiscuous mode [ 41.318706][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.342043][ T3316] veth0_vlan: entered promiscuous mode [ 41.351954][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.361448][ T3323] veth1_vlan: entered promiscuous mode [ 41.380697][ T3316] veth1_vlan: entered promiscuous mode [ 41.393762][ T3319] veth1_vlan: entered promiscuous mode [ 41.402001][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.415818][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.434651][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.447474][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.476723][ T3323] veth0_macvtap: entered promiscuous mode [ 41.486999][ T3323] veth1_macvtap: entered promiscuous mode [ 41.505729][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 41.505744][ T29] audit: type=1400 audit(1772017687.182:90): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.4nt12F/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.513744][ T3319] veth0_macvtap: entered promiscuous mode [ 41.526561][ T29] audit: type=1400 audit(1772017687.192:91): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.591971][ T3312] veth0_vlan: entered promiscuous mode [ 41.603201][ T29] audit: type=1400 audit(1772017687.192:92): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.4nt12F/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.609779][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.639517][ T29] audit: type=1400 audit(1772017687.192:93): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.674884][ T29] audit: type=1400 audit(1772017687.192:94): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.4nt12F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.709263][ T3319] veth1_macvtap: entered promiscuous mode [ 41.719030][ T29] audit: type=1400 audit(1772017687.192:95): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.4nt12F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.753868][ T3312] veth1_vlan: entered promiscuous mode [ 41.764295][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.774442][ T29] audit: type=1400 audit(1772017687.232:96): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.777004][ T3316] veth0_macvtap: entered promiscuous mode [ 41.807391][ T29] audit: type=1400 audit(1772017687.272:97): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.814046][ T3316] veth1_macvtap: entered promiscuous mode [ 41.846613][ T29] audit: type=1400 audit(1772017687.272:98): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.846677][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.904259][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.915163][ T29] audit: type=1400 audit(1772017687.572:99): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.949431][ T3312] veth0_macvtap: entered promiscuous mode [ 41.960788][ T3312] veth1_macvtap: entered promiscuous mode [ 41.975719][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.998950][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.020033][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.047827][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.059810][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.072673][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.089530][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.111586][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.125155][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.148352][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.173603][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.187751][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.223812][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.236108][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.283333][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.297301][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.320126][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.341712][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.376507][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.395971][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.448392][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.575225][ T3505] netlink: 'syz.3.11': attribute type 29 has an invalid length. [ 42.612346][ T3505] netlink: 'syz.3.11': attribute type 29 has an invalid length. [ 42.645308][ T3505] netlink: 500 bytes leftover after parsing attributes in process `syz.3.11'. [ 42.856185][ T3520] loop1: detected capacity change from 0 to 1024 [ 42.868755][ T3520] ======================================================= [ 42.868755][ T3520] WARNING: The mand mount option has been deprecated and [ 42.868755][ T3520] and is ignored by this kernel. Remove the mand [ 42.868755][ T3520] option from the mount to silence this warning. [ 42.868755][ T3520] ======================================================= [ 42.940007][ T3520] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.985321][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.052964][ T3520] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.18: inode #65079: comm syz.1.18: iget: illegal inode # [ 43.095409][ T3520] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.18: error while reading EA inode 65079 err=-117 [ 43.146928][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.160263][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.203221][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 43.216701][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.312447][ T3554] loop2: detected capacity change from 0 to 128 [ 43.323095][ T3555] loop1: detected capacity change from 0 to 512 [ 43.339613][ T3555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.387212][ T3555] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.33: invalid indirect mapped block 4294967295 (level 1) [ 43.406517][ T3555] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.406684][ T3555] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.33: invalid indirect mapped block 4294967295 (level 1) [ 43.418867][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 43.418888][ C1] EXT4-fs (loop1): initial error at time 1772017689: ext4_free_branches:1023: inode 11 [ 43.418930][ C1] EXT4-fs (loop1): last error at time 1772017689: ext4_free_branches:1023: inode 11 [ 43.474151][ T3555] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.479773][ T3555] EXT4-fs (loop1): 2 truncates cleaned up [ 43.499477][ T3555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.541359][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.726476][ T3579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.005163][ T3597] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 44.346617][ T3614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.396654][ T3614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.419230][ T3614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.445094][ T3614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.549085][ T3604] loop1: detected capacity change from 0 to 32768 [ 44.763822][ T3633] loop1: detected capacity change from 0 to 128 [ 44.825888][ T3640] process 'syz.4.71' launched './file1' with NULL argv: empty string added [ 44.963807][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 44.990044][ T3648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.74'. [ 45.151994][ T3665] loop2: detected capacity change from 0 to 1024 [ 45.166887][ T3665] EXT4-fs: Ignoring removed orlov option [ 45.255451][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.256016][ C1] hrtimer: interrupt took 33296 ns [ 45.284859][ T3675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'. [ 45.369699][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.415479][ T3682] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.525730][ T3687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 45.555786][ T3687] netem: unknown loss type 13 [ 45.562251][ T3687] netem: change failed [ 45.591029][ T3671] loop4: detected capacity change from 0 to 512 [ 45.683226][ T3671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 45.697502][ T3671] System zones: 0-2, 18-18, 34-34 [ 45.713274][ T3671] EXT4-fs (loop4): too many log groups per flexible block group [ 45.728541][ T3671] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 45.748505][ T3671] EXT4-fs (loop4): mount failed [ 45.915519][ T3709] loop3: detected capacity change from 0 to 1024 [ 45.936569][ T3709] EXT4-fs: Ignoring removed bh option [ 45.969092][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.098873][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.438461][ T3756] bridge: RTM_NEWNEIGH with invalid ether address [ 46.460420][ T3756] bridge: RTM_NEWNEIGH with invalid ether address [ 46.683747][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 46.683766][ T29] audit: type=1400 audit(1772017692.352:210): avc: denied { create } for pid=3774 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.889326][ T3786] loop1: detected capacity change from 0 to 164 [ 46.922344][ T3789] xt_hashlimit: size too large, truncated to 1048576 [ 46.942645][ T29] audit: type=1400 audit(1772017692.612:211): avc: denied { mount } for pid=3785 comm="syz.1.132" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 47.025005][ T29] audit: type=1400 audit(1772017692.642:212): avc: denied { watch watch_reads } for pid=3785 comm="syz.1.132" path="/28/file0/file0" dev="loop1" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 47.079303][ T3795] loop1: detected capacity change from 0 to 512 [ 47.101186][ T3795] EXT4-fs: Ignoring removed i_version option [ 47.121882][ T3795] EXT4-fs: Ignoring removed oldalloc option [ 47.131047][ T29] audit: type=1400 audit(1772017692.692:213): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 47.210299][ T3795] EXT4-fs (loop1): 1 truncate cleaned up [ 47.220587][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.253306][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.291611][ T3803] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.137: inode has both inline data and extents flags [ 47.335449][ T3803] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.336697][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.358605][ C1] EXT4-fs (loop4): initial error at time 1772017693: ext4_orphan_get:1391: inode 15 [ 47.359554][ T3803] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.137: couldn't read orphan inode 15 (err -117) [ 47.371447][ C1] EXT4-fs (loop4): last error at time 1772017693: ext4_orphan_get:1391: inode 15 [ 47.432730][ T29] audit: type=1400 audit(1772017693.102:214): avc: denied { append } for pid=3805 comm="syz.1.138" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.441592][ T3085] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 47.476902][ T3803] loop4: lost filesystem error report for type 5 error -117 [ 47.477835][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.513876][ T29] audit: type=1400 audit(1772017693.112:215): avc: denied { map } for pid=3805 comm="syz.1.138" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.572384][ T29] audit: type=1400 audit(1772017693.242:216): avc: denied { setattr } for pid=3801 comm="syz.4.137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.600698][ T29] audit: type=1400 audit(1772017693.242:217): avc: denied { create } for pid=3801 comm="syz.4.137" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.655766][ T29] audit: type=1400 audit(1772017693.242:218): avc: denied { create } for pid=3801 comm="syz.4.137" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.682534][ T29] audit: type=1400 audit(1772017693.242:219): avc: denied { read write open } for pid=3801 comm="syz.4.137" path="/29/file0/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.735804][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.795007][ T3812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.846732][ T3812] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.008871][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.337817][ T3860] Illegal XDP return value 4294967274 on prog (id 22) dev syz_tun, expect packet loss! [ 48.525927][ T3870] set_capacity_and_notify: 3 callbacks suppressed [ 48.525949][ T3870] loop2: detected capacity change from 0 to 512 [ 48.675575][ T3879] tipc: Started in network mode [ 48.684232][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 48.716695][ T3879] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 48.729051][ T3879] tipc: Enabled bearer , priority 10 [ 48.782812][ T3877] veth0_macvtap: left promiscuous mode [ 49.300412][ T3905] loop3: detected capacity change from 0 to 512 [ 49.508670][ T3911] loop3: detected capacity change from 0 to 2048 [ 49.856702][ T3393] tipc: Node number set to 4269801504 [ 50.005818][ T3926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 50.098194][ T3931] loop0: detected capacity change from 0 to 128 [ 50.173401][ T3931] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.231598][ T3931] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.407562][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.718542][ T3951] loop1: detected capacity change from 0 to 8192 [ 51.835775][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 51.835794][ T29] audit: type=1400 audit(1772017697.502:263): avc: denied { ioctl } for pid=4001 comm="syz.0.223" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.067561][ T4007] netlink: 104 bytes leftover after parsing attributes in process `syz.3.225'. [ 52.182818][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 52.299348][ T29] audit: type=1400 audit(1772017697.972:264): avc: denied { getopt } for pid=4021 comm="syz.4.233" laddr=fe80::e lport=45466 faddr=fe80::20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.475759][ T29] audit: type=1400 audit(1772017698.142:265): avc: denied { connect } for pid=4033 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.637581][ T29] audit: type=1400 audit(1772017698.312:266): avc: denied { cpu } for pid=4046 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.678879][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 52.730174][ T29] audit: type=1400 audit(1772017698.402:267): avc: denied { append } for pid=4052 comm="syz.1.246" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.732543][ T4049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 52.778935][ T4049] geneve2: entered promiscuous mode [ 52.786096][ T4049] geneve2: entered allmulticast mode [ 52.794286][ T4049] Zero length message leads to an empty skb [ 52.836583][ T4055] loop4: detected capacity change from 0 to 512 [ 53.133439][ T3768] syz.2.124 (3768) used greatest stack depth: 10240 bytes left [ 53.739891][ T29] audit: type=1400 audit(1772017699.412:268): avc: denied { create } for pid=4060 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.806390][ T29] audit: type=1400 audit(1772017699.452:269): avc: denied { write } for pid=4060 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.140865][ T3996] syz.2.221 (3996) used greatest stack depth: 7112 bytes left [ 54.571361][ T3990] syz.2.217 (3990) used greatest stack depth: 7000 bytes left [ 55.464955][ T29] audit: type=1326 audit(1772017701.132:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 55.532253][ T4088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.554409][ T29] audit: type=1326 audit(1772017701.132:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 55.658662][ T29] audit: type=1326 audit(1772017701.132:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 56.060253][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 56.115938][ T4126] loop0: detected capacity change from 0 to 2048 [ 56.219456][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.220812][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 56.333246][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 56.491526][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.510374][ T4159] loop2: detected capacity change from 0 to 2048 [ 56.542936][ T4159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.586719][ T4159] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.870991][ T4191] loop4: detected capacity change from 0 to 164 [ 56.912360][ T4189] loop0: detected capacity change from 0 to 4096 [ 56.928719][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 56.928735][ T29] audit: type=1400 audit(1772017702.602:302): avc: denied { setopt } for pid=4192 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.946130][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.006372][ T29] audit: type=1400 audit(1772017702.682:303): avc: denied { bind } for pid=4192 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.065076][ T29] audit: type=1400 audit(1772017702.742:304): avc: denied { create } for pid=4196 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.089604][ T29] audit: type=1400 audit(1772017702.742:305): avc: denied { write } for pid=4196 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.116157][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.157755][ T26] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.196907][ T4174] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.286: bg 0: block 345: padding at end of block bitmap is not set [ 57.218857][ T4174] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 57.235281][ T4174] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.235281][ T4174] [ 57.285520][ T4204] loop4: detected capacity change from 0 to 512 [ 57.295970][ T4204] EXT4-fs: Ignoring removed bh option [ 57.328867][ T4204] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.350751][ T4204] EXT4-fs (loop4): 1 truncate cleaned up [ 57.359308][ T4204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.369110][ T55] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 57.396609][ T29] audit: type=1400 audit(1772017703.072:306): avc: denied { map } for pid=4203 comm="syz.4.304" path="/59/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.434061][ T55] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.434061][ T55] [ 57.447010][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.458925][ T55] EXT4-fs (loop2): Total free blocks count 0 [ 57.467361][ T55] EXT4-fs (loop2): Free/Dirty block details [ 57.488178][ T55] EXT4-fs (loop2): free_blocks=0 [ 57.496753][ T29] audit: type=1400 audit(1772017703.072:307): avc: denied { execute } for pid=4203 comm="syz.4.304" path="/59/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.497383][ T55] EXT4-fs (loop2): dirty_blocks=2048 [ 57.531846][ T55] EXT4-fs (loop2): Block reservation details [ 57.815174][ T29] audit: type=1400 audit(1772017703.472:308): avc: denied { create } for pid=4237 comm="syz.2.320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.889533][ T29] audit: type=1400 audit(1772017703.482:309): avc: denied { setattr } for pid=4237 comm="syz.2.320" name="file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.922251][ T4245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 57.950355][ T29] audit: type=1400 audit(1772017703.482:310): avc: denied { unlink } for pid=4237 comm="syz.2.320" name="file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.052804][ T29] audit: type=1400 audit(1772017703.722:311): avc: denied { kexec_image_load } for pid=4250 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 58.144523][ T4256] Invalid argument reading file caps for ./file0 [ 58.225499][ T4258] loop1: detected capacity change from 0 to 2048 [ 58.263716][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.367416][ T4269] loop4: detected capacity change from 0 to 128 [ 58.377596][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.550413][ T4282] unsupported nla_type 210 [ 58.704612][ T4299] lo: entered allmulticast mode [ 58.712224][ T4299] lo: left allmulticast mode [ 58.800847][ T4302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 59.216407][ T3649] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.553602][ T4312] loop2: detected capacity change from 0 to 128 [ 59.656679][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'. [ 59.675243][ T4312] syz.2.353: attempt to access beyond end of device [ 59.675243][ T4312] loop2: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 59.710068][ T4325] loop3: detected capacity change from 0 to 512 [ 59.719466][ T4328] loop4: detected capacity change from 0 to 1024 [ 59.734580][ T4328] EXT4-fs: Ignoring removed nobh option [ 59.754594][ T4328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.778412][ T12] kworker/u8:0: attempt to access beyond end of device [ 59.778412][ T12] loop2: rw=8388609, sector=171, nr_sectors = 1 limit=128 [ 59.778883][ T4325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.812750][ T4325] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.814696][ T4328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.841399][ T12] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 59.844902][ T4325] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.359: corrupted inode contents [ 59.884203][ T4325] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.359: mark_inode_dirty error [ 59.899163][ T4325] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.359: corrupted inode contents [ 59.915032][ T4325] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.359: mark_inode_dirty error [ 59.932628][ T4337] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.359: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 59.932628][ T4337] [ 59.972245][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.028407][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.080782][ T4340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.123332][ T4340] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.143566][ T4340] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 60.187215][ T4340] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.187215][ T4340] [ 60.213904][ T4340] EXT4-fs (loop2): Total free blocks count 0 [ 60.246188][ T4340] EXT4-fs (loop2): Free/Dirty block details [ 60.255157][ T4340] EXT4-fs (loop2): free_blocks=2415919504 [ 60.263610][ T4340] EXT4-fs (loop2): dirty_blocks=16 [ 60.271414][ T4340] EXT4-fs (loop2): Block reservation details [ 60.279130][ T4340] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 60.302653][ T4351] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.577701][ T4372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.374'. [ 60.642760][ T4376] EXT4-fs: inline encryption not supported [ 60.667748][ T4376] EXT4-fs: Ignoring removed bh option [ 60.690147][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.769068][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.881231][ T4390] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.382: invalid indirect mapped block 256 (level 2) [ 60.907516][ T4390] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.907941][ T4390] EXT4-fs (loop1): 2 truncates cleaned up [ 60.919010][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 60.919037][ C0] EXT4-fs (loop1): initial error at time 1772017706: ext4_free_branches:1023: inode 11 [ 60.919073][ C0] EXT4-fs (loop1): last error at time 1772017706: ext4_free_branches:1023: inode 11 [ 60.966743][ T4390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.074365][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.091854][ T3414] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.155334][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.339512][ T4422] netlink: 27 bytes leftover after parsing attributes in process `syz.0.394'. [ 61.648509][ T3414] kernel write not supported for file /sg0 (pid: 3414 comm: kworker/0:3) [ 61.758156][ T4462] set_capacity_and_notify: 3 callbacks suppressed [ 61.758177][ T4462] loop2: detected capacity change from 0 to 1024 [ 61.794896][ T4462] EXT4-fs: dax option not supported [ 61.809314][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 61.821718][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 61.889216][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 61.940191][ T4472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 61.956989][ T4470] veth0_macvtap: left promiscuous mode [ 61.989323][ T4472] bond0: entered promiscuous mode [ 62.005190][ T4472] bond_slave_0: entered promiscuous mode [ 62.038775][ T4472] bond_slave_1: entered promiscuous mode [ 62.066377][ T4472] bond0: left promiscuous mode [ 62.086650][ T4472] bond_slave_0: left promiscuous mode [ 62.095470][ T4472] bond_slave_1: left promiscuous mode [ 62.149990][ T4481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=4481 comm=syz.2.431 [ 62.216059][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 62.216076][ T29] audit: type=1326 audit(1772017963.891:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba142c629 code=0x7ffc0000 [ 62.257620][ T29] audit: type=1326 audit(1772017963.891:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7ba142c629 code=0x7ffc0000 [ 62.286710][ T29] audit: type=1326 audit(1772017963.891:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba142c629 code=0x7ffc0000 [ 62.315436][ T29] audit: type=1326 audit(1772017963.891:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba142c629 code=0x7ffc0000 [ 62.375122][ T4492] loop4: detected capacity change from 0 to 1024 [ 62.384055][ T4492] EXT4-fs: inline encryption not supported [ 62.391194][ T4492] EXT4-fs: Ignoring removed nobh option [ 62.399373][ T4492] EXT4-fs: Ignoring removed bh option [ 62.416900][ T4489] xt_hashlimit: size too large, truncated to 1048576 [ 62.432046][ T4496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 62.445563][ T4496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 62.463104][ T4492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.489717][ T29] audit: type=1400 audit(1772017964.171:356): avc: denied { watch watch_reads } for pid=4491 comm="syz.4.425" path="/81/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.548518][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.566063][ T29] audit: type=1400 audit(1772017964.171:357): avc: denied { rename } for pid=4491 comm="syz.4.425" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.598965][ T4498] capability: warning: `syz.2.427' uses 32-bit capabilities (legacy support in use) [ 62.640621][ T4498] program syz.2.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.719278][ T4505] loop2: detected capacity change from 0 to 512 [ 62.745359][ T4505] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 62.781353][ T4511] sctp: [Deprecated]: syz.4.434 (pid 4511) Use of int in maxseg socket option. [ 62.781353][ T4511] Use struct sctp_assoc_value instead [ 62.786745][ T29] audit: type=1400 audit(1772017964.461:358): avc: denied { getopt } for pid=4510 comm="syz.4.434" lport=55596 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 62.850648][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 62.861186][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.890855][ T4505] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.430: invalid indirect mapped block 4294901760 (level 0) [ 62.909259][ T29] audit: type=1400 audit(1772017964.561:359): avc: denied { ioctl } for pid=4504 comm="syz.2.430" path="/76/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.939727][ T4505] EXT4-fs (loop2): Remounting filesystem read-only [ 62.966995][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.015148][ T29] audit: type=1400 audit(1772017964.671:360): avc: denied { create } for pid=4518 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.047419][ T29] audit: type=1400 audit(1772017964.681:361): avc: denied { accept } for pid=4518 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.175161][ T4525] loop2: detected capacity change from 0 to 8192 [ 63.249651][ T4533] syzkaller1: entered promiscuous mode [ 63.265550][ T4525] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.278845][ T4533] syzkaller1: entered allmulticast mode [ 63.347294][ T4539] syzkaller1: entered promiscuous mode [ 63.358437][ T4539] syzkaller1: entered allmulticast mode [ 63.442658][ T4545] loop1: detected capacity change from 0 to 512 [ 63.460644][ T4547] sctp: [Deprecated]: syz.2.450 (pid 4547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.460644][ T4547] Use struct sctp_sack_info instead [ 63.522243][ T4549] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.535536][ T4545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.575903][ T4545] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.608631][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.719074][ T4559] loop2: detected capacity change from 0 to 512 [ 63.759652][ T4559] FAT-fs (loop2): Directory bread(block 199916) failed [ 63.772479][ T4559] FAT-fs (loop2): Directory bread(block 199917) failed [ 63.795316][ T4559] FAT-fs (loop2): Directory bread(block 199918) failed [ 63.805958][ T4559] FAT-fs (loop2): Directory bread(block 199919) failed [ 63.823710][ T4559] FAT-fs (loop2): Directory bread(block 199920) failed [ 63.832951][ T4559] FAT-fs (loop2): Directory bread(block 199921) failed [ 63.841117][ T4559] FAT-fs (loop2): Directory bread(block 199922) failed [ 63.849060][ T4559] FAT-fs (loop2): Directory bread(block 199923) failed [ 63.857316][ T4563] loop0: detected capacity change from 0 to 1024 [ 63.868550][ T4559] FAT-fs (loop2): Directory bread(block 199916) failed [ 63.883572][ T4559] FAT-fs (loop2): Directory bread(block 199917) failed [ 63.903626][ T4563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.962873][ T4563] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 63.995214][ T4563] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.044506][ T4563] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.060630][ T4563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.060630][ T4563] [ 64.072045][ T4563] EXT4-fs (loop0): Total free blocks count 0 [ 64.079698][ T4563] EXT4-fs (loop0): Free/Dirty block details [ 64.087830][ T4563] EXT4-fs (loop0): free_blocks=20480 [ 64.094453][ T4563] EXT4-fs (loop0): dirty_blocks=96 [ 64.101057][ T4563] EXT4-fs (loop0): Block reservation details [ 64.110249][ T4563] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 64.138364][ T26] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 64.250248][ T4584] netlink: 88 bytes leftover after parsing attributes in process `syz.1.466'. [ 64.420113][ T4605] syzkaller1: entered promiscuous mode [ 64.435487][ T4605] syzkaller1: entered allmulticast mode [ 64.727006][ T4633] loop4: detected capacity change from 0 to 1024 [ 64.741090][ T4633] EXT4-fs: inline encryption not supported [ 64.768305][ T4633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.824491][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 64.838330][ T4639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.489'. [ 64.841226][ T4633] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.487: Allocating blocks 497-513 which overlap fs metadata [ 64.852559][ T4641] batadv_slave_1: entered promiscuous mode [ 64.869133][ T4633] EXT4-fs (loop4): Remounting filesystem read-only [ 64.880208][ T4640] batadv_slave_1: left promiscuous mode [ 64.942370][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.472453][ T3414] IPVS: starting estimator thread 0... [ 65.479752][ T4666] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.546329][ T3649] Bluetooth: hci0: command 0x1003 tx timeout [ 65.555618][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.576422][ T4668] IPVS: using max 1776 ests per chain, 88800 per kthread [ 65.843704][ T4684] loop1: detected capacity change from 0 to 512 [ 65.890845][ T4684] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.916366][ T4684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.944221][ T4688] loop3: detected capacity change from 0 to 512 [ 65.974154][ T4684] EXT4-fs (loop1): 1 orphan inode deleted [ 65.983730][ T4688] EXT4-fs: Ignoring removed orlov option [ 66.005729][ T4684] EXT4-fs (loop1): 1 truncate cleaned up [ 66.019406][ T4688] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 66.027270][ T4684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.067053][ T4688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 66.101078][ T4688] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.511: corrupted in-inode xattr: e_value size too large [ 66.111032][ T4684] EXT4-fs error (device loop1): empty_inline_dir:1770: inode #12: block 7: comm syz.1.508: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 66.136891][ T4688] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.146395][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 66.165544][ C1] EXT4-fs (loop3): initial error at time 1772017967: ext4_iget_extra_inode:5025: inode 15 [ 66.177583][ C1] EXT4-fs (loop3): last error at time 1772017967: ext4_iget_extra_inode:5025: inode 15 [ 66.204884][ T4688] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.511: couldn't read orphan inode 15 (err -117) [ 66.227550][ T4684] EXT4-fs (loop1): Remounting filesystem read-only [ 66.234401][ T4688] loop3: lost filesystem error report for type 5 error -117 [ 66.238149][ T4684] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 66.276989][ T4688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.343564][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.428514][ T4718] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.522: iget: bad i_size value: 38620345925642 [ 66.447144][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.464130][ T4718] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.466317][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 66.483938][ C1] EXT4-fs (loop1): initial error at time 1772017968: ext4_orphan_get:1391: inode 15 [ 66.494700][ C1] EXT4-fs (loop1): last error at time 1772017968: ext4_orphan_get:1391: inode 15 [ 66.510953][ T4718] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.522: couldn't read orphan inode 15 (err -117) [ 66.553033][ T4718] loop1: lost filesystem error report for type 5 error -117 [ 66.568548][ T4718] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.600285][ T4720] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.668194][ T4718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.522: bg 0: block 5: invalid block bitmap [ 66.723081][ T4718] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1 with error 28 [ 66.737616][ T4718] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.737616][ T4718] [ 66.760471][ T4718] EXT4-fs (loop1): Total free blocks count 0 [ 66.792210][ T4718] EXT4-fs (loop1): Free/Dirty block details [ 66.799551][ T4718] EXT4-fs (loop1): free_blocks=0 [ 66.806059][ T4718] EXT4-fs (loop1): dirty_blocks=2 [ 66.817035][ T4739] __nla_validate_parse: 2 callbacks suppressed [ 66.817288][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 66.835906][ T4718] EXT4-fs (loop1): Block reservation details [ 66.870892][ T4739] bond1: Invalid ad_actor_system MAC address. [ 66.879853][ T4739] bond1: option ad_actor_system: invalid value (4294967295) [ 66.889235][ T4718] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 66.903596][ T4739] bond1 (unregistering): Released all slaves [ 66.955697][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 67.560367][ T4786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 67.594201][ T4786] netlink: 9 bytes leftover after parsing attributes in process `syz.4.553'. [ 67.675842][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 67.675861][ T29] audit: type=1400 audit(1772017969.351:389): avc: denied { create } for pid=4791 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.756356][ T29] audit: type=1400 audit(1772017969.411:390): avc: denied { write } for pid=4791 comm="syz.4.556" path="socket:[8114]" dev="sockfs" ino=8114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.965208][ T4805] set_capacity_and_notify: 2 callbacks suppressed [ 67.965230][ T4805] loop2: detected capacity change from 0 to 512 [ 67.992450][ T4805] EXT4-fs: Ignoring removed nobh option [ 68.011988][ T4805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.053859][ T4805] EXT4-fs (loop2): 1 truncate cleaned up [ 68.074533][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 68.099312][ T29] audit: type=1400 audit(1772017969.771:391): avc: denied { map } for pid=4809 comm="syz.1.564" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.128897][ T4805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.260875][ T29] audit: type=1400 audit(1772017969.941:392): avc: denied { create } for pid=4818 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.366403][ T29] audit: type=1400 audit(1772017969.991:393): avc: denied { append } for pid=4804 comm="syz.2.562" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.573122][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.584111][ T29] audit: type=1400 audit(1772017970.041:394): avc: denied { write } for pid=4818 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.642973][ T4800] loop4: detected capacity change from 0 to 65536 [ 68.668031][ T29] audit: type=1400 audit(1772017970.351:395): avc: denied { watch } for pid=4799 comm="syz.4.560" path="/114/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 68.855544][ T29] audit: type=1400 audit(1772017970.531:396): avc: denied { create } for pid=4838 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.881602][ T4839] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 68.911544][ T29] audit: type=1400 audit(1772017970.561:397): avc: denied { write } for pid=4838 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.938734][ T4839] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.940898][ T4841] loop7: detected capacity change from 0 to 7 [ 69.012562][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.034477][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.168819][ T4852] loop0: detected capacity change from 0 to 512 [ 69.196116][ T4852] FAT-fs (loop0): Directory bread(block 199916) failed [ 69.214014][ T4852] FAT-fs (loop0): Directory bread(block 199917) failed [ 69.226015][ T4852] FAT-fs (loop0): Directory bread(block 199918) failed [ 69.246519][ T4852] FAT-fs (loop0): Directory bread(block 199919) failed [ 69.281905][ T4852] FAT-fs (loop0): Directory bread(block 199920) failed [ 69.325099][ T4852] FAT-fs (loop0): Directory bread(block 199921) failed [ 69.350832][ T4852] FAT-fs (loop0): Directory bread(block 199922) failed [ 69.416443][ T4852] FAT-fs (loop0): Directory bread(block 199923) failed [ 69.449222][ T4852] FAT-fs (loop0): Directory bread(block 199916) failed [ 69.463438][ T4852] FAT-fs (loop0): Directory bread(block 199917) failed [ 69.852867][ T4860] loop1: detected capacity change from 0 to 65536 [ 70.426129][ T4890] loop3: detected capacity change from 0 to 512 [ 70.474453][ T4890] FAT-fs (loop3): Directory bread(block 199916) failed [ 70.483734][ T4890] FAT-fs (loop3): Directory bread(block 199917) failed [ 70.499473][ T4890] FAT-fs (loop3): Directory bread(block 199918) failed [ 70.520054][ T4890] FAT-fs (loop3): Directory bread(block 199919) failed [ 70.530155][ T4890] FAT-fs (loop3): Directory bread(block 199920) failed [ 70.538222][ T4890] FAT-fs (loop3): Directory bread(block 199921) failed [ 70.547604][ T4890] FAT-fs (loop3): Directory bread(block 199922) failed [ 70.556858][ T4890] FAT-fs (loop3): Directory bread(block 199923) failed [ 70.568981][ T4890] FAT-fs (loop3): Directory bread(block 199916) failed [ 70.604478][ T4890] FAT-fs (loop3): Directory bread(block 199917) failed [ 70.856941][ T29] audit: type=1400 audit(1772017972.531:398): avc: denied { ioctl } for pid=4900 comm="syz.4.602" path="socket:[9434]" dev="sockfs" ino=9434 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.041634][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 71.066559][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 71.090598][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 71.090604][ T55] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.114584][ T55] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.128422][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 71.154543][ T55] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.182550][ T55] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.300867][ T4933] loop3: detected capacity change from 0 to 256 [ 71.329200][ T4929] capability: warning: `syz.2.614' uses deprecated v2 capabilities in a way that may be insecure [ 71.402933][ T4937] loop2: detected capacity change from 0 to 1024 [ 71.448982][ T4937] EXT4-fs: Ignoring removed orlov option [ 71.508777][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.744735][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.799983][ T4957] netlink: 14 bytes leftover after parsing attributes in process `syz.2.623'. [ 71.833994][ T4957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.920465][ T4957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.966110][ T4957] bond0 (unregistering): Released all slaves [ 72.110813][ T4968] program syz.0.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.394538][ T5001] netlink: 14 bytes leftover after parsing attributes in process `syz.1.641'. [ 72.404807][ T5001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.437857][ T5001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.441673][ T5001] bond0 (unregistering): Released all slaves [ 72.494687][ T5005] syzkaller1: entered promiscuous mode [ 72.494712][ T5005] syzkaller1: entered allmulticast mode [ 72.820085][ T5032] netlink: 14 bytes leftover after parsing attributes in process `syz.4.654'. [ 72.854644][ T5032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.868850][ T5032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.884268][ T5032] bond0 (unregistering): Released all slaves [ 73.074224][ T5043] loop3: detected capacity change from 0 to 2048 [ 73.115911][ T5043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.138340][ T5043] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.183095][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.341964][ T5061] loop3: detected capacity change from 0 to 512 [ 73.354889][ T5061] ext4: Bad value for 'barrier' [ 73.396470][ T5065] loop4: detected capacity change from 0 to 2048 [ 73.421115][ T5065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.437531][ T5065] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.750825][ T5078] loop2: detected capacity change from 0 to 512 [ 73.765276][ T5078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.777017][ T5070] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.667: bg 0: block 345: padding at end of block bitmap is not set [ 73.830367][ T5078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.885617][ T5070] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 73.903525][ T5078] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.922063][ T5078] EXT4-fs (loop2): shut down requested (0) [ 73.932173][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 73.932190][ T29] audit: type=1400 audit(1772017975.611:401): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 73.947901][ T5070] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.947901][ T5070] [ 74.001169][ T29] audit: type=1400 audit(1772017975.611:402): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.036695][ T5089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 74.063455][ T29] audit: type=1400 audit(1772017975.611:403): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.094470][ T5089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 74.116913][ T5089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 74.133012][ T29] audit: type=1400 audit(1772017975.611:404): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.170503][ T26] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 74.180565][ T29] audit: type=1400 audit(1772017975.611:405): avc: denied { create } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.210606][ T26] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.210606][ T26] [ 74.246881][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.255593][ T26] EXT4-fs (loop4): Total free blocks count 0 [ 74.282975][ T26] EXT4-fs (loop4): Free/Dirty block details [ 74.299836][ T26] EXT4-fs (loop4): free_blocks=0 [ 74.312602][ T26] EXT4-fs (loop4): dirty_blocks=2048 [ 74.328296][ T26] EXT4-fs (loop4): Block reservation details [ 74.366353][ T29] audit: type=1400 audit(1772017975.611:406): avc: denied { append open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.417992][ T29] audit: type=1400 audit(1772017975.611:407): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.458630][ T29] audit: type=1400 audit(1772017975.801:408): avc: denied { append } for pid=5077 comm="syz.2.671" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.486507][ T29] audit: type=1400 audit(1772017975.811:409): avc: denied { open } for pid=5077 comm="syz.2.671" path="/121/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.855181][ T29] audit: type=1400 audit(1772017976.531:410): avc: denied { create } for pid=5120 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.097865][ T5100] IPVS: You probably need to specify IP address on multicast interface. [ 75.128240][ T5100] IPVS: Error connecting to the multicast addr [ 75.260517][ T5147] syzkaller1: entered promiscuous mode [ 75.310637][ T5148] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 75.344327][ T5147] syzkaller1: entered allmulticast mode [ 75.673398][ T5164] xt_SECMARK: invalid security context 'unconfined' [ 75.735850][ T5171] loop2: detected capacity change from 0 to 512 [ 75.788333][ T5171] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.847045][ T5171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.936867][ T5171] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.983141][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.020933][ T5185] loop4: detected capacity change from 0 to 512 [ 76.075227][ T5185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.134617][ T5185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.172096][ T5185] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.231347][ T5185] EXT4-fs (loop4): shut down requested (0) [ 76.251917][ T5198] loop1: detected capacity change from 0 to 2048 [ 76.265366][ T5185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 76.286120][ T5185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 76.298641][ T5185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 76.338946][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.350414][ T5198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.406835][ T5202] loop4: detected capacity change from 0 to 512 [ 76.415039][ T5198] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.438056][ T5202] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.466502][ T5202] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 76.486717][ T5202] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 76.495716][ T5202] System zones: 0-2, 18-18, 34-35 [ 76.516968][ T5202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.563206][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.892928][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 76.944900][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 76.981539][ T5217] loop0: detected capacity change from 0 to 1024 [ 76.993929][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.993929][ T12] [ 77.016197][ T5222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.727'. [ 77.034465][ T5217] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.085589][ T5222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.727'. [ 77.100303][ T5217] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.736: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 77.119032][ T5222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.727'. [ 77.137025][ T5217] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.137589][ T5217] EXT4-fs error (device loop0): ext4_quota_enable:7195: comm syz.0.736: Bad quota inode: 3, type: 0 [ 77.148336][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 77.148361][ C1] EXT4-fs (loop0): initial error at time 1772017978: ext4_ext_check_inode:521: inode 3 [ 77.148391][ C1] EXT4-fs (loop0): last error at time 1772017978: ext4_ext_check_inode:521: inode 3 [ 77.206446][ T5204] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 77.230229][ T5222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.727'. [ 77.238113][ T5217] loop0: lost filesystem error report for type 5 error -117 [ 77.240561][ T5217] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 77.256556][ T5204] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.256556][ T5204] [ 77.289393][ T5217] EXT4-fs (loop0): mount failed [ 77.296359][ T5204] EXT4-fs (loop1): Total free blocks count 0 [ 77.316039][ T5204] EXT4-fs (loop1): Free/Dirty block details [ 77.361572][ T5204] EXT4-fs (loop1): free_blocks=0 [ 77.370363][ T5204] EXT4-fs (loop1): dirty_blocks=2048 [ 77.378386][ T5204] EXT4-fs (loop1): Block reservation details [ 77.459814][ T5235] netlink: 'syz.2.732': attribute type 3 has an invalid length. [ 77.482433][ T5235] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 77.516402][ T5235] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.732'. [ 77.597082][ T5239] 9p: Invalid uid '0x00000000ffffffff' [ 77.610116][ T5241] loop2: detected capacity change from 0 to 128 [ 77.629813][ T5241] EXT4-fs: Ignoring removed nobh option [ 77.646626][ T5241] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.680462][ T5241] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.830306][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.077362][ T5207] syz.4.722 (5207) used greatest stack depth: 5736 bytes left [ 78.122862][ T5260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.177528][ T5260] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.512801][ T5286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.757'. [ 78.803749][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.893033][ T5293] set_capacity_and_notify: 1 callbacks suppressed [ 78.893055][ T5293] loop3: detected capacity change from 0 to 512 [ 79.039009][ T5297] netlink: 'syz.4.762': attribute type 3 has an invalid length. [ 79.061050][ T5297] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 79.081613][ T5297] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.762'. [ 79.158724][ T5293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.196237][ T5293] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.381908][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 79.381926][ T29] audit: type=1400 audit(1772017981.061:422): avc: denied { create } for pid=5315 comm="syz.1.765" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 79.472101][ T29] audit: type=1400 audit(1772017981.151:423): avc: denied { read } for pid=5320 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.618712][ T5303] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #18: comm syz.3.761: corrupted inode contents [ 79.663032][ T5303] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.664342][ T5303] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.761: mark_inode_dirty error [ 79.691267][ T5303] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.691784][ T5303] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #18: comm syz.3.761: corrupted inode contents [ 79.733255][ T5303] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.733419][ T5303] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #18: comm syz.3.761: mark_inode_dirty error [ 79.774557][ T5303] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.774745][ T5303] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #18: comm syz.3.761: mark inode dirty (error -117) [ 79.817745][ T5303] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.817991][ T5303] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 79.901390][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.196501][ T5337] loop3: detected capacity change from 0 to 128 [ 80.241544][ T5337] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.313878][ T5337] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.459017][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.472017][ T29] audit: type=1400 audit(1772017982.151:424): avc: denied { ioctl } for pid=5345 comm="syz.2.778" path="socket:[10935]" dev="sockfs" ino=10935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.590432][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 80.671089][ T29] audit: type=1326 audit(1772017982.351:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 80.740843][ T29] audit: type=1326 audit(1772017982.351:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 80.786009][ T29] audit: type=1326 audit(1772017982.351:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 80.844745][ T29] audit: type=1326 audit(1772017982.351:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 80.881063][ T29] audit: type=1326 audit(1772017982.351:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 80.914923][ T29] audit: type=1326 audit(1772017982.351:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x0 [ 80.946429][ T29] audit: type=1326 audit(1772017982.351:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4b1c629 code=0x7ffc0000 [ 81.146445][ T5386] loop2: detected capacity change from 0 to 512 [ 81.175392][ T5386] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.796: inode has both inline data and extents flags [ 81.216941][ T5386] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.221641][ T5386] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.796: couldn't read orphan inode 15 (err -117) [ 81.232970][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 81.232993][ C0] EXT4-fs (loop2): initial error at time 1772017982: ext4_orphan_get:1391: inode 15 [ 81.233030][ C0] EXT4-fs (loop2): last error at time 1772017982: ext4_orphan_get:1391: inode 15 [ 81.277873][ T5386] loop2: lost filesystem error report for type 5 error -117 [ 81.278535][ T5386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.307216][ T5386] EXT4-fs (loop2): shut down requested (2) [ 81.325790][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.598151][ T5422] loop3: detected capacity change from 0 to 2048 [ 81.638662][ T3301] loop3: p1 p3 p4 [ 81.645787][ T3301] loop3: p4 size 589824 extends beyond EOD, truncated [ 81.664172][ T5428] loop4: detected capacity change from 0 to 128 [ 81.671360][ T5422] loop3: p1 p3 p4 [ 81.677621][ T5422] loop3: p4 size 589824 extends beyond EOD, truncated [ 81.705708][ T5428] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.731683][ T5428] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.893311][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.908355][ T4112] udevd[4112]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 81.911212][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 81.988746][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.992855][ T4112] udevd[4112]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 82.003683][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 82.300528][ T5467] xt_hashlimit: size too large, truncated to 1048576 [ 82.465427][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.539366][ T5483] loop4: detected capacity change from 0 to 1024 [ 82.582132][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.592740][ T5483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.640840][ T5491] loop1: detected capacity change from 0 to 1024 [ 82.651014][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.700436][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.727310][ T5491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.757137][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.807816][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.817631][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.856197][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.919036][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 83.141654][ T5521] loop2: detected capacity change from 0 to 8192 [ 83.156256][ T5521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.176852][ T5527] syzkaller1: entered promiscuous mode [ 83.193007][ T5527] syzkaller1: entered allmulticast mode [ 83.231779][ T5533] loop3: detected capacity change from 0 to 1024 [ 83.252677][ T5533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.327984][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.742239][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.822922][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 83.838864][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.888569][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.919868][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.934390][ T5586] loop1: detected capacity change from 0 to 512 [ 83.953711][ T5586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.982199][ T5586] EXT4-fs (loop1): 1 truncate cleaned up [ 83.999760][ T5586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.037438][ T42] bridge_slave_1: left allmulticast mode [ 84.043561][ T42] bridge_slave_1: left promiscuous mode [ 84.058295][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.070891][ T42] bridge_slave_0: left allmulticast mode [ 84.079085][ T42] bridge_slave_0: left promiscuous mode [ 84.086868][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.230931][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.349211][ T42] hsr_slave_0: left promiscuous mode [ 84.362929][ T42] hsr_slave_1: left promiscuous mode [ 84.371307][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.382976][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.396920][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.406785][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.430955][ T42] veth1_macvtap: left promiscuous mode [ 84.446665][ T42] veth1_vlan: left promiscuous mode [ 84.463481][ T42] veth0_vlan: left promiscuous mode [ 84.480380][ T5633] loop0: detected capacity change from 0 to 2048 [ 84.532554][ T5633] loop0: p1 p2 [ 84.546460][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 84.546476][ T29] audit: type=1400 audit(1772017986.231:750): avc: denied { read } for pid=5631 comm="syz.0.882" name="loop0p2" dev="devtmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.641473][ T42] team0 (unregistering): Port device team_slave_1 removed [ 84.656143][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.669011][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 84.681911][ T42] team0 (unregistering): Port device team_slave_0 removed [ 84.701622][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 84.709617][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.752655][ T5625] loop1: detected capacity change from 0 to 32768 [ 84.872255][ T5646] netlink: 'syz.1.886': attribute type 64 has an invalid length. [ 84.906425][ T5646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 84.967046][ T5657] netlink: 'syz.1.886': attribute type 64 has an invalid length. [ 84.990309][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 85.170233][ T42] IPVS: stop unused estimator thread 0... [ 85.213633][ T5582] chnl_net:caif_netlink_parms(): no params data found [ 85.235167][ T5602] chnl_net:caif_netlink_parms(): no params data found [ 85.258349][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.331050][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.407507][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.444089][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.454396][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.462562][ T5582] bridge_slave_0: entered allmulticast mode [ 85.471771][ T5582] bridge_slave_0: entered promiscuous mode [ 85.479524][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.490711][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.500703][ T5582] bridge_slave_1: entered allmulticast mode [ 85.508853][ T5582] bridge_slave_1: entered promiscuous mode [ 85.523139][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.532684][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.542130][ T5602] bridge_slave_0: entered allmulticast mode [ 85.550892][ T5602] bridge_slave_0: entered promiscuous mode [ 85.562818][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.587325][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.597354][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.607035][ T5602] bridge_slave_1: entered allmulticast mode [ 85.616577][ T5602] bridge_slave_1: entered promiscuous mode [ 85.644714][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.661861][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.689021][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.708067][ T5582] team0: Port device team_slave_0 added [ 85.716544][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.764255][ T5582] team0: Port device team_slave_1 added [ 85.828551][ T5602] team0: Port device team_slave_0 added [ 85.835626][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.844212][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.882555][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.898180][ T5602] team0: Port device team_slave_1 added [ 85.911472][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.919723][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.954507][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.969147][ T5711] netlink: 52 bytes leftover after parsing attributes in process `syz.0.895'. [ 85.988554][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.997673][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.034843][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.069446][ T5715] loop1: detected capacity change from 0 to 1024 [ 86.073168][ T42] bridge_slave_1: left allmulticast mode [ 86.086720][ T5715] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.100711][ T42] bridge_slave_1: left promiscuous mode [ 86.108212][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.138592][ T5715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.156789][ T42] bridge_slave_0: left allmulticast mode [ 86.172466][ T42] bridge_slave_0: left promiscuous mode [ 86.181984][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.233301][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.309053][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.323770][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.338341][ T42] bond0 (unregistering): Released all slaves [ 86.361181][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.369683][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.406735][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.448386][ T5582] hsr_slave_0: entered promiscuous mode [ 86.455687][ T5582] hsr_slave_1: entered promiscuous mode [ 86.464593][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 86.472350][ T5582] Cannot create hsr debugfs directory [ 86.496220][ T42] hsr_slave_0: left promiscuous mode [ 86.504357][ T42] hsr_slave_1: left promiscuous mode [ 86.512436][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.524190][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.535289][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.546463][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.559266][ T42] veth1_macvtap: left promiscuous mode [ 86.566597][ T42] veth1_vlan: left promiscuous mode [ 86.572662][ T42] veth0_vlan: left promiscuous mode [ 86.691522][ T42] team0 (unregistering): Port device team_slave_1 removed [ 86.703230][ T42] team0 (unregistering): Port device team_slave_0 removed [ 86.789405][ T5602] hsr_slave_0: entered promiscuous mode [ 86.802173][ T5602] hsr_slave_1: entered promiscuous mode [ 86.809781][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 86.816743][ T5602] Cannot create hsr debugfs directory [ 86.886378][ T29] audit: type=1400 audit(1772017988.561:751): avc: denied { load_policy } for pid=5745 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.005571][ T5746] SELinux: failed to load policy [ 87.109003][ T5582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.164853][ T5761] loop4: detected capacity change from 0 to 2048 [ 87.175351][ T5582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.207727][ T5582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.219538][ T5582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.227915][ T5764] loop0: detected capacity change from 0 to 1024 [ 87.239029][ T3301] loop4: p1 p3 p4 [ 87.262552][ T3301] loop4: p4 size 589824 extends beyond EOD, truncated [ 87.286220][ T5764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.318769][ T5761] loop4: p1 p3 p4 [ 87.326648][ T5602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 87.336012][ T5761] loop4: p4 size 589824 extends beyond EOD, truncated [ 87.389136][ T5602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 87.398666][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.427063][ T5602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.439254][ T5602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 87.505914][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 87.508533][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 87.533019][ T4112] udevd[4112]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 87.592692][ T5791] loop4: detected capacity change from 0 to 128 [ 87.595227][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.616456][ T5791] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.660669][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.669383][ T5791] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.709609][ T5794] veth1_to_bond: entered allmulticast mode [ 87.740137][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.749278][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.791348][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.802376][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.822138][ T5793] veth1_to_bond: left allmulticast mode [ 87.881326][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.912738][ T5807] loop0: detected capacity change from 0 to 512 [ 87.924934][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.943375][ T5807] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.912: inode has both inline data and extents flags [ 87.973074][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.983457][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.996633][ T5807] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.010199][ T2571] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.031636][ T2571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.040559][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.048642][ C1] EXT4-fs (loop0): initial error at time 1772017989: ext4_orphan_get:1391: inode 15 [ 88.059279][ T5807] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.912: couldn't read orphan inode 15 (err -117) [ 88.060323][ C1] EXT4-fs (loop0): last error at time 1772017989: ext4_orphan_get:1391: inode 15 [ 88.102104][ T5602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.115307][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.139260][ T5807] loop0: lost filesystem error report for type 5 error -117 [ 88.140064][ T5807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.207933][ T5820] loop1: detected capacity change from 0 to 256 [ 88.251799][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.285786][ T5820] FAT-fs (loop1): Directory bread(block 64) failed [ 88.324047][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.326565][ T5820] FAT-fs (loop1): Directory bread(block 65) failed [ 88.369141][ T5820] FAT-fs (loop1): Directory bread(block 66) failed [ 88.390064][ T5820] FAT-fs (loop1): Directory bread(block 67) failed [ 88.404672][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.418311][ T5820] FAT-fs (loop1): Directory bread(block 68) failed [ 88.425212][ T5820] FAT-fs (loop1): Directory bread(block 69) failed [ 88.509974][ T5820] FAT-fs (loop1): Directory bread(block 70) failed [ 88.550506][ T5820] FAT-fs (loop1): Directory bread(block 71) failed [ 88.564113][ T5820] FAT-fs (loop1): Directory bread(block 72) failed [ 88.582946][ T5820] FAT-fs (loop1): Directory bread(block 73) failed [ 88.619280][ T5820] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 88.646223][ T5820] FAT-fs (loop1): Filesystem has been set read-only [ 88.664283][ T5820] syz.1.913: attempt to access beyond end of device [ 88.664283][ T5820] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 88.694243][ T5820] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 88.716905][ T5820] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 88.740040][ T5820] syz.1.913: attempt to access beyond end of device [ 88.740040][ T5820] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 88.760076][ T5582] veth0_vlan: entered promiscuous mode [ 88.776594][ T5820] syz.1.913: attempt to access beyond end of device [ 88.776594][ T5820] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 88.789693][ T5582] veth1_vlan: entered promiscuous mode [ 88.826428][ T5820] syz.1.913: attempt to access beyond end of device [ 88.826428][ T5820] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 88.854232][ T5582] veth0_macvtap: entered promiscuous mode [ 88.866567][ T5820] syz.1.913: attempt to access beyond end of device [ 88.866567][ T5820] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 88.898752][ T5582] veth1_macvtap: entered promiscuous mode [ 88.912518][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.944590][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.995792][ T5602] veth0_vlan: entered promiscuous mode [ 89.008953][ T5885] loop0: detected capacity change from 0 to 512 [ 89.020545][ T5602] veth1_vlan: entered promiscuous mode [ 89.072136][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.095907][ T5885] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.919: EA inode hash validation failed [ 89.115200][ T2571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.140593][ T5885] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.919: corrupted inode contents [ 89.156798][ T5885] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.166323][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 89.186585][ C1] EXT4-fs (loop0): initial error at time 1772017990: ext4_do_update_inode:5569: inode 15 [ 89.187591][ T2571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.198740][ C1] EXT4-fs (loop0): last error at time 1772017990: ext4_do_update_inode:5569: inode 15 [ 89.214813][ T5885] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.919: mark_inode_dirty error [ 89.246369][ T5885] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.247266][ T5885] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.919: corrupted inode contents [ 89.302874][ T5602] veth0_macvtap: entered promiscuous mode [ 89.322529][ T2571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.345009][ T5885] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.348068][ T5885] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.919: mark_inode_dirty error [ 89.364797][ T5602] veth1_macvtap: entered promiscuous mode [ 89.380405][ T29] audit: type=1400 audit(1772017991.041:752): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/root/syzkaller.fiOr59/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.384839][ T5885] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.426211][ T5900] loop1: detected capacity change from 0 to 8192 [ 89.445174][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.486773][ T29] audit: type=1400 audit(1772017991.101:753): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.500231][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.526054][ T5900] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.548140][ T5885] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.919: mark inode dirty (error -117) [ 89.567582][ T29] audit: type=1400 audit(1772017991.251:754): avc: denied { remount } for pid=5899 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 89.598233][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.605613][ T5885] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.611670][ T5885] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 89.636306][ T2571] ================================================================== [ 89.636649][ T5885] EXT4-fs (loop0): 1 orphan inode deleted [ 89.646905][ T2571] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 89.646964][ T2571] [ 89.658254][ T5885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.664125][ T2571] write to 0xffff88811c33c908 of 44 bytes by task 5908 on cpu 0: [ 89.664158][ T2571] tty_set_termios+0xc0/0x910 [ 89.664193][ T2571] set_termios+0x4a7/0x4f0 [ 89.702442][ T2571] tty_mode_ioctl+0x37f/0x5b0 [ 89.708194][ T2571] n_tty_ioctl_helper+0x87/0x370 [ 89.714041][ T2571] n_tty_ioctl+0x101/0x230 [ 89.720822][ T2571] tty_ioctl+0x83e/0xb80 [ 89.727206][ T2571] __se_sys_ioctl+0xce/0x140 [ 89.733892][ T2571] __x64_sys_ioctl+0x43/0x50 [ 89.742228][ T2571] x64_sys_call+0x1563/0x3020 [ 89.747840][ T2571] do_syscall_64+0x12c/0x370 [ 89.754437][ T2571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.761526][ T2571] [ 89.764156][ T2571] read to 0xffff88811c33c922 of 1 bytes by task 2571 on cpu 1: [ 89.772962][ T2571] n_tty_lookahead_flow_ctrl+0x1bd/0x300 [ 89.779166][ T2571] tty_port_default_lookahead_buf+0x91/0xc0 [ 89.786598][ T2571] flush_to_ldisc+0x288/0x340 [ 89.793215][ T2571] process_scheduled_works+0x4de/0x9e0 [ 89.799862][ T2571] worker_thread+0x581/0x770 [ 89.805761][ T2571] kthread+0x22a/0x280 [ 89.811133][ T2571] ret_from_fork+0x150/0x360 [ 89.818041][ T2571] ret_from_fork_asm+0x1a/0x30 [ 89.823309][ T2571] [ 89.826106][ T2571] value changed: 0x13 -> 0x40 [ 89.831238][ T2571] [ 89.833917][ T2571] Reported by Kernel Concurrency Sanitizer on: [ 89.843776][ T2571] CPU: 1 UID: 0 PID: 2571 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 89.856955][ T2571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.870069][ T2571] Workqueue: events_unbound flush_to_ldisc [ 89.878842][ T2571] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.891557][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.902241][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.004330][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.170144][ T3414] infiniband syz1: ib_query_port failed (-19) [ 90.321073][ T2571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.350154][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.441079][ T2571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.509028][ T2571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.569987][ T2571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.671221][ T2571] bridge_slave_1: left allmulticast mode [ 90.678713][ T2571] bridge_slave_1: left promiscuous mode [ 90.686088][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.694774][ T2571] bridge_slave_0: left allmulticast mode [ 90.702142][ T2571] bridge_slave_0: left promiscuous mode [ 90.710054][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.872765][ T2571] hsr_slave_0: left promiscuous mode [ 90.881504][ T2571] hsr_slave_1: left promiscuous mode [ 90.888811][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.900300][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.910598][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.919743][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.933953][ T2571] veth1_macvtap: left promiscuous mode [ 90.940581][ T2571] veth0_macvtap: left promiscuous mode [ 90.947373][ T2571] veth1_vlan: left promiscuous mode [ 90.953298][ T2571] veth0_vlan: left promiscuous mode [ 91.038573][ T2571] team0 (unregistering): Port device team_slave_1 removed [ 91.050132][ T2571] team0 (unregistering): Port device team_slave_0 removed [ 91.373233][ T2571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.429511][ T2571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.478877][ T2571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.529503][ T2571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.611765][ T2571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.625276][ T2571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.680072][ T2571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.691742][ T2571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.760805][ T2571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.772324][ T2571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.830595][ T2571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.844092][ T2571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.915930][ T2571] bridge_slave_1: left allmulticast mode [ 91.922356][ T2571] bridge_slave_1: left promiscuous mode [ 91.931286][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.946799][ T2571] bridge_slave_0: left allmulticast mode [ 91.954444][ T2571] bridge_slave_0: left promiscuous mode [ 91.963216][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.978865][ T2571] bridge_slave_1: left allmulticast mode [ 91.985076][ T2571] bridge_slave_1: left promiscuous mode [ 91.992130][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.001616][ T2571] bridge_slave_0: left allmulticast mode [ 92.010825][ T2571] bridge_slave_0: left promiscuous mode [ 92.017631][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.180453][ T2571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.191956][ T2571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.203642][ T2571] bond0 (unregistering): Released all slaves [ 92.249879][ T2571] tipc: Disabling bearer [ 92.257573][ T2571] tipc: Left network mode [ 92.266147][ T2571] hsr_slave_0: left promiscuous mode [ 92.274306][ T2571] hsr_slave_1: left promiscuous mode [ 92.281914][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.291335][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.300957][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.310785][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.322724][ T2571] hsr_slave_0: left promiscuous mode [ 92.329013][ T2571] hsr_slave_1: left promiscuous mode [ 92.338374][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.349023][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.358899][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.368952][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.387651][ T2571] veth1_macvtap: left promiscuous mode [ 92.394087][ T2571] veth0_macvtap: left promiscuous mode [ 92.402403][ T2571] veth1_vlan: left promiscuous mode [ 92.409068][ T2571] veth0_vlan: left promiscuous mode [ 92.419917][ T2571] veth1_macvtap: left promiscuous mode [ 92.427434][ T2571] veth0_macvtap: left promiscuous mode [ 92.435035][ T2571] veth1_vlan: left promiscuous mode [ 92.442496][ T2571] veth0_vlan: left promiscuous mode [ 92.565145][ T2571] team0 (unregistering): Port device team_slave_1 removed [ 92.576725][ T2571] team0 (unregistering): Port device team_slave_0 removed [ 92.644153][ T2571] team0 (unregistering): Port device team_slave_1 removed [ 92.656046][ T2571] team0 (unregistering): Port device team_slave_0 removed [ 93.211553][ T2469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.260044][ T2469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.310108][ T2469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.359703][ T2469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.432041][ T2469] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.487496][ T2469] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.540564][ T2469] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.580106][ T2469] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.670989][ T2469] bridge_slave_1: left allmulticast mode [ 93.677360][ T2469] bridge_slave_1: left promiscuous mode [ 93.683953][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.695913][ T2469] bridge_slave_0: left allmulticast mode [ 93.705219][ T2469] bridge_slave_0: left promiscuous mode [ 93.712504][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.722263][ T2469] bridge_slave_1: left allmulticast mode [ 93.729628][ T2469] bridge_slave_1: left promiscuous mode [ 93.738669][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.750492][ T2469] bridge_slave_0: left allmulticast mode [ 93.758636][ T2469] bridge_slave_0: left promiscuous mode [ 93.766119][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.918901][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.933348][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.946712][ T2469] bond0 (unregistering): Released all slaves [ 93.998859][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.012052][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.026794][ T2469] bond0 (unregistering): Released all slaves [ 94.054399][ T2469] hsr_slave_0: left promiscuous mode [ 94.061461][ T2469] hsr_slave_1: left promiscuous mode [ 94.069078][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.078197][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.090080][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.100170][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.113384][ T2469] hsr_slave_0: left promiscuous mode [ 94.125350][ T2469] hsr_slave_1: left promiscuous mode [ 94.132176][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.141594][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.151863][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.160512][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.179535][ T2469] veth1_macvtap: left promiscuous mode [ 94.186701][ T2469] veth0_macvtap: left promiscuous mode [ 94.193529][ T2469] veth1_vlan: left promiscuous mode [ 94.200045][ T2469] veth0_vlan: left promiscuous mode [ 94.208153][ T2469] veth1_macvtap: left promiscuous mode [ 94.215085][ T2469] veth0_macvtap: left promiscuous mode [ 94.221879][ T2469] veth1_vlan: left promiscuous mode [ 94.228792][ T2469] veth0_vlan: left promiscuous mode [ 94.357937][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 94.372337][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 94.437500][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 94.449042][ T2469] team0 (unregistering): Port device team_slave_0 removed