last executing test programs: 1.765388448s ago: executing program 1 (id=873): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x5f70, 0x30, 0xa1, 0x6}, &(0x7f0000000080)=0x18) 1.752201628s ago: executing program 0 (id=874): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) 1.138817513s ago: executing program 0 (id=886): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 1.074813714s ago: executing program 4 (id=888): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="102e", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001b40)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)='t', 0x1}], 0x1}}], 0x5, 0x2401c4c5) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 1.049761615s ago: executing program 4 (id=891): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) listen(r0, 0x7) 1.024672756s ago: executing program 0 (id=892): r0 = socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffd9f, &(0x7f0000001340)={&(0x7f0000000080)={0x4c, 0x14, 0xd34c172462246f6b, 0x70bd25, 0x25dfdbfd, {0x1, 0x23, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0x800, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 970.565146ms ago: executing program 4 (id=893): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018010000646c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") 970.272886ms ago: executing program 4 (id=894): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 932.973117ms ago: executing program 0 (id=896): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 880.965859ms ago: executing program 1 (id=897): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="eda8d2fb226a", 0x6}], 0x1}}], 0x2, 0xc040) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6}}}}}}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="3c6a0f", 0x3}], 0x1) 806.791501ms ago: executing program 1 (id=898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1f, 0x0, 0x0) 725.955852ms ago: executing program 1 (id=900): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 691.165603ms ago: executing program 0 (id=901): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 503.270708ms ago: executing program 0 (id=904): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0xff}}}, &(0x7f0000000440)=0x84) 503.022137ms ago: executing program 3 (id=905): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r0) 397.192831ms ago: executing program 3 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) 396.82938ms ago: executing program 2 (id=907): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0xf00c, 0x8001, 0x5, 0xc, 0x20001, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 396.579251ms ago: executing program 3 (id=908): socket$kcm(0xa, 0x3, 0x106) socket$kcm(0xa, 0x3, 0x106) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 326.713912ms ago: executing program 2 (id=909): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 326.334152ms ago: executing program 1 (id=910): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0x8000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 324.187022ms ago: executing program 3 (id=911): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x1d0c0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x3c, r1, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 309.309622ms ago: executing program 1 (id=912): r0 = syz_io_uring_setup(0x141c, &(0x7f00000003c0)={0x0, 0x62b7, 0x800, 0x101, 0x1ed}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x44ec, 0xcac9, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) 278.477813ms ago: executing program 2 (id=913): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) gettimeofday(0x0, 0x0) 190.748035ms ago: executing program 3 (id=914): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 178.837736ms ago: executing program 2 (id=915): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@ipv4_delrule={0x28, 0x21, 0x8, 0x70bd26, 0x25dfdbff, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xb}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) 97.364107ms ago: executing program 2 (id=916): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000032") 97.088378ms ago: executing program 3 (id=917): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@bh, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@noblock_validity}, {@data_writeback}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x520, &(0x7f0000000440)="$eJzs3E1rG+kdAPD/yLId581u+pa3NmrTUtPSOHZeDz0koYVcCoWWkh5V2wlpnKTELiTGNE4pCfTQkk/Ql1uh9AP01L0su7B7WPa6Ya/LQlh8SXYPyywjjbSSJdmyI1s4/v1AyjOjZ2ae/8w88fOiUQC7Vil7SyL2R8QHETFaXWzOUKr+83JlafrTlaXpJNL0l58klXwvVpama1mbtksixgsRhT8ncaz1sMPzDxZvlefmZu/lKyYWCnnqdvnG7I3ZO1MXL549M3Lh/NS5nsS5Lyvr0T/ePX7k6m+e/nz62tPfvv2frLxp/nljHFVjlfehro8w0LKmFKXmc9Lg+90XfUc40JBOitl7oX+FoWvZXZtdrsFK/R+NgcpS1Wj87E99LRywpdI0TYdb1tb/li2njZKkukGaPkqB10AS/S4B0B+1P/QvVrKe6tJ0az/49fb8clR6QFncL/NX9ZNipQdbGqv2jQa36Phfi4hry5/9PXtF23EIAIDe+v/liCdXqu2O2qv6SSG+0ZDvYD43NBYRX4mIQxHx1bz98vWISt5vRsThhm0OdDELUFq13Nr+eW8kTzQ2V3sma//9JJ/bam7/1Us+NpAvHajEP5hcvzk3ezo/J+MxOJwtT7buuj6s9sZP3/9bp+OXGtp/2Ss7fq0tmJfj4+KqAbqZ8kL5VeOuef6ocmIftsafRDGppSKORMTRTew/O2c3f/jv450+b4o/i7Ml/r923nlxEwVaJf1nxA+q1385KvHXxj6rwQ/Ff99NKvOTt38/Mf9g8cc3G+cnJy+cnzo3sSfmZk9P1O6KVnvj8S/yZEs3ovn6p2nD9a9VjY5V6OArR1+9/nvb3v/1mcuxLFWfr53f+DEeP3vSsU+z2ft/KPlVJV2bn71fXli4NxkxlCy3rp/6ctv75ZGm/Fn84yfb1/9DEZ//I9/uWERkN/G3IuLbEXEiL/t3IuK7EXFyjfjfuvK933XqQq4f/9bK4p/Z0PV/sDgSeaK+JktceieieU0tMXDrzf+1HPgvpZb4B6PT9T9bSY3na2bKC3vWi6tNAdsmXvkEAgAAwA5wIiL2R1I4lQ807Y9C4dSpiH31EZT5hR9dv/uHOzPVZwTGYrBQG+kabRgPnczHhrPlbKuphuXs8zOVceM0TdORbDnrv88d7m/osOvt61D/Mx+1PtICvG42NI/W6Yk2YEdaXf+fdb1l77+QAWyvHnyPBtih1H/Yvbqu/1v1FBzQN+3q/8OIl30oCrDN2tX/X7esubQtZQG2V7v6b+4fdofNj//5MgDsdMb/YVfq6iH5TSQOXV0jT1Lsbj/Frh/jXy9RiLV/BWAs6r9pUGvTrL3DDwsRvTljAz098yNN17TQNs+e6MWxorBunuIGfohhexOF8txc7QGXvpdnOCLWuXvrN9vDWmJxqwtWOTf/6t//TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xRQAAAP//MqTOdg==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) 34.767269ms ago: executing program 4 (id=918): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000200)={0x100000001, 0x8, 0x8, 0x8}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 34.422309ms ago: executing program 2 (id=919): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) nanosleep(&(0x7f0000000300)={0x3d}, 0x0) 0s ago: executing program 4 (id=920): pipe(&(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): [ 24.322882][ T28] audit: type=1400 audit(1786455498.002:103): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.344996][ T28] audit: type=1400 audit(1786455498.002:104): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.565631][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 25.565649][ T28] audit: type=1400 audit(1786455499.242:116): avc: denied { write } for pid=3206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.600592][ T28] audit: type=1400 audit(1786455499.282:117): avc: denied { write } for pid=3217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.676529][ T28] audit: type=1400 audit(1786455499.362:118): avc: denied { write } for pid=3220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.706989][ T28] audit: type=1400 audit(1786455499.392:119): avc: denied { write } for pid=3231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.135721][ T28] audit: type=1400 audit(1786455499.812:120): avc: denied { write } for pid=3234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.165724][ T28] audit: type=1400 audit(1786455499.842:121): avc: denied { write } for pid=3245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.638459][ T28] audit: type=1400 audit(1786455500.322:122): avc: denied { write } for pid=3248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.670504][ T28] audit: type=1400 audit(1786455500.352:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.747118][ T28] audit: type=1400 audit(1786455500.432:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.777165][ T28] audit: type=1400 audit(1786455500.462:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 30.647113][ T28] audit: type=1400 audit(1786455504.332:126): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.670274][ T28] audit: type=1400 audit(1786455504.352:127): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.672631][ T3281] cgroup: Unknown subsys name 'net' [ 30.698190][ T28] audit: type=1400 audit(1786455504.382:128): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.797093][ T3281] cgroup: Unknown subsys name 'cpuset' [ 30.803474][ T3281] cgroup: Unknown subsys name 'rlimit' [ 30.896879][ T28] audit: type=1400 audit(1786455504.582:129): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.920865][ T28] audit: type=1400 audit(1786455504.582:130): avc: denied { create } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.950416][ T28] audit: type=1400 audit(1786455504.582:131): avc: denied { write } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.971315][ T28] audit: type=1400 audit(1786455504.582:132): avc: denied { read } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.992010][ T28] audit: type=1400 audit(1786455504.602:133): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.992724][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.017660][ T28] audit: type=1400 audit(1786455504.602:134): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.049013][ T28] audit: type=1400 audit(1786455504.622:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.074384][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.083785][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.091011][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.098358][ T3299] bridge_slave_0: entered allmulticast mode [ 33.104892][ T3299] bridge_slave_0: entered promiscuous mode [ 33.133090][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.140269][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.147518][ T3299] bridge_slave_1: entered allmulticast mode [ 33.154022][ T3299] bridge_slave_1: entered promiscuous mode [ 33.183050][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.190331][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.197553][ T3294] bridge_slave_0: entered allmulticast mode [ 33.204130][ T3294] bridge_slave_0: entered promiscuous mode [ 33.225803][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.232996][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.240297][ T3294] bridge_slave_1: entered allmulticast mode [ 33.246972][ T3294] bridge_slave_1: entered promiscuous mode [ 33.266373][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.292485][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.309737][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.316887][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.324075][ T3293] bridge_slave_0: entered allmulticast mode [ 33.330620][ T3293] bridge_slave_0: entered promiscuous mode [ 33.345914][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.357723][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.364935][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.372142][ T3293] bridge_slave_1: entered allmulticast mode [ 33.378600][ T3293] bridge_slave_1: entered promiscuous mode [ 33.394964][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.421713][ T3299] team0: Port device team_slave_0 added [ 33.441716][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.448906][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.456279][ T3297] bridge_slave_0: entered allmulticast mode [ 33.462914][ T3297] bridge_slave_0: entered promiscuous mode [ 33.470386][ T3299] team0: Port device team_slave_1 added [ 33.480813][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.488056][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.495324][ T3298] bridge_slave_0: entered allmulticast mode [ 33.501989][ T3298] bridge_slave_0: entered promiscuous mode [ 33.510615][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.519870][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.527065][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.534265][ T3297] bridge_slave_1: entered allmulticast mode [ 33.540783][ T3297] bridge_slave_1: entered promiscuous mode [ 33.552687][ T3294] team0: Port device team_slave_0 added [ 33.558428][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.565642][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.572904][ T3298] bridge_slave_1: entered allmulticast mode [ 33.579490][ T3298] bridge_slave_1: entered promiscuous mode [ 33.587036][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.607468][ T3294] team0: Port device team_slave_1 added [ 33.627220][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.634240][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.660259][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.686000][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.695485][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.702534][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.728568][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.746220][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.756189][ T3293] team0: Port device team_slave_0 added [ 33.762902][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.780879][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.787944][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.813997][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.825904][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.835735][ T3293] team0: Port device team_slave_1 added [ 33.857401][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.864478][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.890582][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.912146][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.919157][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.945214][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.957049][ T3297] team0: Port device team_slave_0 added [ 33.966622][ T3297] team0: Port device team_slave_1 added [ 33.978426][ T3298] team0: Port device team_slave_0 added [ 33.984472][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.991541][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.017562][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.053192][ T3298] team0: Port device team_slave_1 added [ 34.086451][ T3299] hsr_slave_0: entered promiscuous mode [ 34.092752][ T3299] hsr_slave_1: entered promiscuous mode [ 34.099149][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.106199][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.132568][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.150618][ T3294] hsr_slave_0: entered promiscuous mode [ 34.156851][ T3294] hsr_slave_1: entered promiscuous mode [ 34.162762][ T3294] debugfs: 'hsr0' already exists in 'hsr' [ 34.168578][ T3294] Cannot create hsr debugfs directory [ 34.174404][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.181475][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.207527][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.218990][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.226067][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.252173][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.263223][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.270284][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.296301][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.314251][ T3293] hsr_slave_0: entered promiscuous mode [ 34.320555][ T3293] hsr_slave_1: entered promiscuous mode [ 34.326451][ T3293] debugfs: 'hsr0' already exists in 'hsr' [ 34.332186][ T3293] Cannot create hsr debugfs directory [ 34.384288][ T3297] hsr_slave_0: entered promiscuous mode [ 34.390582][ T3297] hsr_slave_1: entered promiscuous mode [ 34.396829][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.402637][ T3297] Cannot create hsr debugfs directory [ 34.446281][ T3298] hsr_slave_0: entered promiscuous mode [ 34.452497][ T3298] hsr_slave_1: entered promiscuous mode [ 34.458560][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 34.464419][ T3298] Cannot create hsr debugfs directory [ 34.645818][ T3293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.654821][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.662484][ T3293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.671435][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.679532][ T3293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.688188][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.698784][ T3293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.707954][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.733496][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.742369][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.750227][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.759048][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.776573][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.785223][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.793191][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.802027][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.820566][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.829287][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.837216][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.845893][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.854512][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.863584][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.871873][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.880649][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.932637][ T3294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.942224][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.950539][ T3294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.959898][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.968435][ T3294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.977367][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.985570][ T3294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.994746][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.014335][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.039907][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.048984][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.057144][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.065922][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.074235][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.083212][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.091041][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.100283][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.115670][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.127410][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.134553][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.154197][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.161375][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.181745][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.205657][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.219959][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.227095][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.249150][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.256292][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.289700][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.324029][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.336373][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.348531][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.359150][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.366324][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.386117][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.393251][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.403070][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.419133][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.426411][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.435483][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.455455][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.462671][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.488565][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.495722][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.505996][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.513124][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.640766][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.784126][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.802840][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.876849][ T3293] veth0_vlan: entered promiscuous mode [ 35.891006][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.910560][ T3293] veth1_vlan: entered promiscuous mode [ 35.935198][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.972104][ T3293] veth0_macvtap: entered promiscuous mode [ 35.989812][ T3293] veth1_macvtap: entered promiscuous mode [ 36.026315][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.041407][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.081132][ T3299] veth0_vlan: entered promiscuous mode [ 36.090417][ T3298] veth0_vlan: entered promiscuous mode [ 36.109324][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.109343][ T28] audit: type=1400 audit(1786455509.782:146): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/root/syzkaller.Pn37AF/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.118244][ T3299] veth1_vlan: entered promiscuous mode [ 36.151220][ T28] audit: type=1400 audit(1786455509.782:147): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.183107][ T3298] veth1_vlan: entered promiscuous mode [ 36.188781][ T28] audit: type=1400 audit(1786455509.832:148): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/root/syzkaller.Pn37AF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.218168][ T3293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.227936][ T3297] veth0_vlan: entered promiscuous mode [ 36.238395][ T28] audit: type=1400 audit(1786455509.832:149): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.255316][ T3297] veth1_vlan: entered promiscuous mode [ 36.263312][ T28] audit: type=1400 audit(1786455509.832:150): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/root/syzkaller.Pn37AF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.295133][ T28] audit: type=1400 audit(1786455509.832:151): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/root/syzkaller.Pn37AF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.322994][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.325508][ T28] audit: type=1400 audit(1786455509.832:152): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.356159][ T324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.365033][ T324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.374130][ T28] audit: type=1400 audit(1786455509.852:153): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.375162][ T3299] veth0_macvtap: entered promiscuous mode [ 36.407134][ T28] audit: type=1400 audit(1786455509.852:154): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="gadgetfs" ino=3922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.428620][ T3299] veth1_macvtap: entered promiscuous mode [ 36.440765][ T28] audit: type=1400 audit(1786455510.082:155): avc: denied { read write } for pid=3293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.468295][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.504959][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.517559][ T3298] veth0_macvtap: entered promiscuous mode [ 36.525316][ T3502] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 36.535960][ T3297] veth0_macvtap: entered promiscuous mode [ 36.546807][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.566816][ T3294] veth0_vlan: entered promiscuous mode [ 36.574074][ T3297] veth1_macvtap: entered promiscuous mode [ 36.581390][ T3298] veth1_macvtap: entered promiscuous mode [ 36.597824][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.610600][ T3294] veth1_vlan: entered promiscuous mode [ 36.823367][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.841237][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.860170][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.887658][ T3294] veth0_macvtap: entered promiscuous mode [ 36.904254][ T3294] veth1_macvtap: entered promiscuous mode [ 36.913084][ T3509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 36.930618][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.946736][ T324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.963742][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.028947][ T3430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.159884][ T3521] loop4: detected capacity change from 0 to 1024 [ 37.166508][ T3430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.183812][ T3521] EXT4-fs: Ignoring removed bh option [ 37.205563][ T3430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.234878][ T3519] loop3: detected capacity change from 0 to 8192 [ 37.242038][ T3519] ======================================================= [ 37.242038][ T3519] WARNING: The mand mount option has been deprecated and [ 37.242038][ T3519] and is ignored by this kernel. Remove the mand [ 37.242038][ T3519] option from the mount to silence this warning. [ 37.242038][ T3519] ======================================================= [ 37.256857][ T3521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.305334][ T324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.316629][ T3521] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.341899][ T324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.376827][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.436313][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.445239][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.666144][ T324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.694621][ T3510] syz.1.8 (3510) used greatest stack depth: 11208 bytes left [ 37.709188][ T324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.766103][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.788753][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.826552][ T3546] capability: warning: `syz.4.15' uses deprecated v2 capabilities in a way that may be insecure [ 37.838984][ T3540] syz.3.12 (3540) used greatest stack depth: 11008 bytes left [ 37.886295][ T3430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.895326][ T3430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.905661][ T3430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.926700][ T3430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.049578][ T3566] netlink: 'syz.0.28': attribute type 9 has an invalid length. [ 38.083367][ T3566] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.28'. [ 38.141638][ T3572] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 38.205240][ T3575] syz.1.32 (3575) used greatest stack depth: 10560 bytes left [ 38.475698][ T3590] loop2: detected capacity change from 0 to 128 [ 38.535727][ T3594] loop4: detected capacity change from 0 to 512 [ 38.574907][ T3598] loop0: detected capacity change from 0 to 512 [ 38.584239][ T3596] loop2: detected capacity change from 0 to 512 [ 38.607181][ T3598] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 38.635615][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.652092][ T3596] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.689652][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.858429][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 38.965404][ T3619] hsr_slave_1 (unregistering): left promiscuous mode [ 39.340343][ T3645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 39.368458][ T3645] Zero length message leads to an empty skb [ 39.799141][ T3684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 39.958988][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.249191][ T3709] loop4: detected capacity change from 0 to 512 [ 40.292870][ T3709] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 40.428749][ T3727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 40.446835][ T3728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.96'. [ 40.456137][ T3727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 40.466039][ T324] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 40.487870][ T3731] loop4: detected capacity change from 0 to 256 [ 40.547249][ T3733] loop1: detected capacity change from 0 to 512 [ 40.562628][ T3735] netlink: 256 bytes leftover after parsing attributes in process `syz.4.101'. [ 40.593814][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.726412][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.789113][ T3753] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.107'. [ 41.210441][ T3778] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 41.218275][ T3778] netlink: 'syz.0.117': attribute type 7 has an invalid length. [ 41.229246][ T3778] netlink: 'syz.0.117': attribute type 8 has an invalid length. [ 41.246098][ T3778] netlink: 'syz.0.117': attribute type 7 has an invalid length. [ 41.301950][ T3782] loop2: detected capacity change from 0 to 512 [ 41.334133][ T3782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.119: bg 0: block 393: padding at end of block bitmap is not set [ 41.349402][ T3782] loop2: lost filesystem error report for type 5 error -117 [ 41.352784][ T3782] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 41.354249][ T3785] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 41.360241][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 41.368829][ T3785] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 41.389425][ C1] EXT4-fs (loop2): initial error at time 1786455515: ext4_validate_block_bitmap:441 [ 41.398895][ C1] EXT4-fs (loop2): last error at time 1786455515: ext4_validate_block_bitmap:441 [ 41.407419][ T3788] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 41.408919][ T3782] loop2: lost filesystem error report for type 5 error -117 [ 41.414678][ T3788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 41.430066][ T3785] vhci_hcd vhci_hcd.0: Device attached [ 41.440223][ T3782] EXT4-fs (loop2): 2 truncates cleaned up [ 41.457893][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.470953][ T3785] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 41.477515][ T3785] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 41.486432][ T3785] vhci_hcd vhci_hcd.0: Device attached [ 41.493087][ T3782] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.2.119: path /26/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 41.503868][ T3788] vhci_hcd vhci_hcd.0: Device attached [ 41.517129][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 41.517172][ T28] audit: type=1400 audit(1786455515.172:258): avc: denied { watch } for pid=3781 comm="syz.2.119" path="/26/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.576207][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.593515][ T3793] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 41.600098][ T3793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.612820][ T3793] vhci_hcd vhci_hcd.0: Device attached [ 41.629034][ T28] audit: type=1326 audit(1786455515.302:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc966e0d9 code=0x7ffc0000 [ 41.655232][ T3797] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.661047][ T3786] vhci_hcd: connection closed [ 41.662051][ T3791] vhci_hcd: connection closed [ 41.662096][ T3430] vhci_hcd vhci_hcd.0: stop threads [ 41.662121][ T3430] vhci_hcd vhci_hcd.0: release socket [ 41.662189][ T3430] vhci_hcd vhci_hcd.0: disconnect device [ 41.669648][ T3797] EXT4-fs: Ignoring removed oldalloc option [ 41.678124][ T3794] vhci_hcd: connection closed [ 41.686316][ T23] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 41.689910][ T3789] vhci_hcd: connection closed [ 41.714674][ T28] audit: type=1326 audit(1786455515.302:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc966e0d9 code=0x7ffc0000 [ 41.745478][ T3430] vhci_hcd vhci_hcd.0: stop threads [ 41.751071][ T3430] vhci_hcd vhci_hcd.0: release socket [ 41.756698][ T3430] vhci_hcd vhci_hcd.0: disconnect device [ 41.761480][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.762571][ T28] audit: type=1326 audit(1786455515.302:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc966e0d9 code=0x7ffc0000 [ 41.799746][ T3430] vhci_hcd vhci_hcd.0: stop threads [ 41.799749][ T3797] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.815393][ T3430] vhci_hcd vhci_hcd.0: release socket [ 41.815423][ T3430] vhci_hcd vhci_hcd.0: disconnect device [ 41.824124][ T3430] vhci_hcd vhci_hcd.0: stop threads [ 41.834388][ T28] audit: type=1326 audit(1786455515.302:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbbc966e0d9 code=0x7ffc0000 [ 41.860087][ T28] audit: type=1326 audit(1786455515.302:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbc966de42 code=0x7ffc0000 [ 41.860484][ T3430] vhci_hcd vhci_hcd.0: release socket [ 41.885511][ T28] audit: type=1326 audit(1786455515.302:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbc962e90e code=0x7ffc0000 [ 41.946061][ T28] audit: type=1326 audit(1786455515.312:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbbc966df07 code=0x7ffc0000 [ 41.973220][ T28] audit: type=1326 audit(1786455515.312:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbc962e90e code=0x7ffc0000 [ 41.983379][ T3430] vhci_hcd vhci_hcd.0: disconnect device [ 42.007871][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.014021][ T3701] Bluetooth: hci0: command 0x1003 tx timeout [ 42.017458][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.035823][ T28] audit: type=1326 audit(1786455515.312:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.4.121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbc966dd6b code=0x7ffc0000 [ 42.143323][ T3811] __nla_validate_parse: 1 callbacks suppressed [ 42.143344][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 42.200623][ T3811] macvtap1: entered allmulticast mode [ 42.245530][ T3811] bridge0: entered allmulticast mode [ 42.257292][ T3811] bridge0: entered promiscuous mode [ 42.265288][ T3811] bridge0: port 3(macvtap1) entered blocking state [ 42.281582][ T3811] bridge0: port 3(macvtap1) entered disabled state [ 42.301476][ T3811] bridge0: left allmulticast mode [ 42.336921][ T35] bridge0: left promiscuous mode [ 42.432584][ T3811] syz.2.127 (3811) used greatest stack depth: 9864 bytes left [ 42.448666][ T3828] set_capacity_and_notify: 1 callbacks suppressed [ 42.448681][ T3828] loop3: detected capacity change from 0 to 8192 [ 42.471984][ T3833] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 42.937217][ T3879] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 42.937217][ T3879] The task syz.1.153 (3879) triggered the difference, watch for misbehavior. [ 43.015358][ T3885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.161'. [ 43.093374][ T3891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 43.103095][ T3889] sd 0:0:1:0: PR command failed: 1026 [ 43.108876][ T3889] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 43.115785][ T3889] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 43.173693][ T3893] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.314217][ T3904] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 44.241981][ T3927] loop3: detected capacity change from 0 to 512 [ 44.256470][ T3927] EXT4-fs: inline encryption not supported [ 44.268095][ T3927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.306422][ T3927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.329676][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 44.349957][ T3927] EXT4-fs (loop3): 1 truncate cleaned up [ 44.356559][ T3932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 44.362250][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.378821][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 44.391025][ T3927] EXT4-fs error (device loop3): ext4_nfs_get_inode:1578: inode #11: comm syz.3.179: iget: bad extra_isize 62 (inode size 256) [ 44.404622][ T3932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 44.414257][ T3927] EXT4-fs (loop3): Remounting filesystem read-only [ 44.470999][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.505734][ T3946] loop4: detected capacity change from 0 to 512 [ 44.525278][ T3946] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 44.546234][ T3946] EXT4-fs (loop4): 1 truncate cleaned up [ 44.556525][ T3946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.729182][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.730132][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.747928][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.952538][ T3977] netlink: 'syz.4.200': attribute type 2 has an invalid length. [ 45.034785][ T3970] loop1: detected capacity change from 0 to 512 [ 45.081824][ T3957] hid-generic 0000:0000:0000.0001: pid 3957 passed too short report [ 45.104092][ T3991] loop4: detected capacity change from 0 to 512 [ 45.127508][ T3970] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.197: bg 0: block 4: invalid block bitmap [ 45.143040][ T3970] loop1: lost filesystem error report for type 5 error -117 [ 45.144624][ T3970] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.145960][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 45.153323][ C0] EXT4-fs (loop1): initial error at time 1786455518: ext4_validate_block_bitmap:432 [ 45.153357][ C0] EXT4-fs (loop1): last error at time 1786455518: ext4_validate_block_bitmap:432 [ 45.212597][ T3991] EXT4-fs: Ignoring removed nobh option [ 45.264072][ T3991] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 45.273179][ T3970] loop1: lost filesystem error report for type 5 error -117 [ 45.276769][ T3991] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.206: attempt to clear invalid blocks 1 len 1 [ 45.279192][ T3970] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.197: invalid indirect mapped block 1 (level 1) [ 45.288729][ T3991] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.317042][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 45.331464][ T3991] EXT4-fs (loop4): Remounting filesystem read-only [ 45.332671][ C0] EXT4-fs (loop4): initial error at time 1786455518: ext4_clear_blocks:876: inode 13 [ 45.348740][ C0] EXT4-fs (loop4): last error at time 1786455518: ext4_clear_blocks:876: inode 13 [ 45.361003][ T3991] EXT4-fs (loop4): 1 truncate cleaned up [ 45.380385][ T3970] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.383349][ T3991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.404203][ T3970] EXT4-fs (loop1): 1 truncate cleaned up [ 45.472487][ T3970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.675179][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.172127][ T4050] loop1: detected capacity change from 0 to 512 [ 46.249862][ T4050] EXT4-fs (loop1): 1 orphan inode deleted [ 46.266216][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 46.267309][ T4050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.290731][ T36] loop1: lost filesystem error report for type 5 error -117 [ 46.298534][ T4050] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.337942][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.534547][ T4062] loop0: detected capacity change from 0 to 2048 [ 46.767143][ T23] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 46.780343][ T4062] loop0: p1 < > p3 [ 46.799328][ T4062] loop0: p3 size 134217728 extends beyond EOD, truncated [ 46.892770][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 46.892788][ T28] audit: type=1400 audit(1786455520.572:344): avc: denied { read } for pid=4069 comm="syz.3.239" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.967489][ T28] audit: type=1400 audit(1786455520.572:345): avc: denied { open } for pid=4069 comm="syz.3.239" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.135060][ T28] audit: type=1400 audit(1786455520.812:346): avc: denied { read } for pid=4080 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.208012][ T28] audit: type=1400 audit(1786455520.892:347): avc: denied { setopt } for pid=4082 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.356215][ T28] audit: type=1400 audit(1786455521.042:348): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.490531][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 47.518395][ T4098] loop3: detected capacity change from 0 to 2048 [ 47.600531][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.631813][ T4098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.720584][ T28] audit: type=1400 audit(1786455521.402:349): avc: denied { append } for pid=4104 comm="syz.1.254" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.812231][ T28] audit: type=1400 audit(1786455521.492:350): avc: denied { read } for pid=4110 comm="syz.3.257" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.870745][ T28] audit: type=1400 audit(1786455521.492:351): avc: denied { open } for pid=4110 comm="syz.3.257" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.941812][ T28] audit: type=1400 audit(1786455521.622:352): avc: denied { ioctl } for pid=4117 comm="syz.1.260" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.968243][ T28] audit: type=1400 audit(1786455521.622:353): avc: denied { cpu } for pid=4117 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.988152][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.041951][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.079556][ T4124] loop0: detected capacity change from 0 to 512 [ 48.087457][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.108414][ T4124] EXT4-fs: Ignoring removed oldalloc option [ 48.124624][ T4124] EXT4-fs: Ignoring removed oldalloc option [ 48.143696][ T4124] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.263: corrupted in-inode xattr: invalid ea_ino [ 48.242825][ T4124] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.243072][ T4124] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.263: couldn't read orphan inode 15 (err -117) [ 48.252331][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 48.252351][ C0] EXT4-fs (loop0): initial error at time 1786455521: ext4_iget_extra_inode:5180: inode 15 [ 48.252378][ C0] EXT4-fs (loop0): last error at time 1786455521: ext4_iget_extra_inode:5180: inode 15 [ 48.316117][ T4124] loop0: lost filesystem error report for type 5 error -117 [ 48.316798][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.350509][ T4124] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.263: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 48.428282][ T4146] loop1: detected capacity change from 0 to 164 [ 48.445419][ T4146] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 48.462356][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.709219][ T4158] netlink: 'syz.1.278': attribute type 6 has an invalid length. [ 48.955587][ T4178] loop0: detected capacity change from 0 to 1024 [ 48.999669][ T4178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.049308][ T4178] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.118571][ T4178] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.284: bg 0: block 112: padding at end of block bitmap is not set [ 49.184785][ T4178] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.284: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.242081][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.301002][ T4198] loop3: detected capacity change from 0 to 7 [ 49.328060][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.337748][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.351086][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.360737][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.372665][ T4198] loop3: unable to read partition table [ 49.381678][ T4198] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 49.395834][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.405468][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.417725][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.427426][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.442446][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.452091][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.464452][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.474122][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.488458][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 49.498136][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.567851][ T4216] netlink: 'syz.3.299': attribute type 3 has an invalid length. [ 49.582868][ T4216] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 49.597658][ T4216] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.299'. [ 49.793495][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 49.913155][ T4249] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(8) [ 49.925479][ T4250] loop3: detected capacity change from 0 to 512 [ 49.933076][ T4246] syzkaller1: entered promiscuous mode [ 49.951599][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.961043][ T4246] syzkaller1: entered allmulticast mode [ 50.194671][ T4261] ------------[ cut here ]------------ [ 50.200746][ T4261] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 50.208726][ T4261] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x317/0x340, CPU#1: syz.1.318/4261 [ 50.221539][ T4261] Modules linked in: [ 50.227235][ T4261] CPU: 1 UID: 0 PID: 4261 Comm: syz.1.318 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.237994][ T4261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.249466][ T4261] RIP: 0010:netdev_queue_get_dma_dev+0x323/0x340 [ 50.256737][ T4261] Code: d4 f4 fc bf f0 0a 00 00 48 03 3b e8 07 49 1a 01 eb 85 e8 10 ef d5 fc 48 8d 3d 19 83 9c 02 48 c7 c6 a0 b8 7a 86 ba 48 00 00 00 <67> 48 0f b9 3a e9 92 fd ff ff e8 ee ee d5 fc 90 0f 0b 66 66 2e 0f [ 50.277336][ T4261] RSP: 0018:ffffc9001374bc10 EFLAGS: 00010283 [ 50.284754][ T4261] RAX: ffffffff84836970 RBX: ffff88810b354000 RCX: 0000000000080000 [ 50.293636][ T4261] RDX: 0000000000000048 RSI: ffffffff867ab8a0 RDI: ffffffff871fec90 [ 50.302186][ T4261] RBP: 0000000002000000 R08: 0001ffff85b35e0f R09: 0000000000000000 [ 50.311236][ T4261] R10: 0001c9001374bb4c R11: 0001c9001374bb4f R12: ffffffff85b35b50 [ 50.320216][ T4261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.328826][ T4261] FS: 00007f485ba976c0(0000) GS:ffff8882ae9c7000(0000) knlGS:0000000000000000 [ 50.338896][ T4261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.346717][ T4261] CR2: 0000001b32a23ffc CR3: 000000011b36a000 CR4: 00000000003506f0 [ 50.356326][ T4261] Call Trace: [ 50.360485][ T4261] [ 50.364526][ T4261] zcrx_register_netdev+0x10f/0x2a0 [ 50.371486][ T4261] io_register_zcrx+0x793/0x980 [ 50.505905][ T4261] __se_sys_io_uring_register+0x96b/0x1330 [ 50.513196][ T4261] ? __se_sys_io_uring_register+0x3/0x1330 [ 50.520296][ T4261] __x64_sys_io_uring_register+0x55/0x70 [ 50.527026][ T4261] x64_sys_call+0x2be0/0x3020 [ 50.532536][ T4261] do_syscall_64+0x136/0x3c0 [ 50.544137][ T4261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.551586][ T4261] RIP: 0033:0x7f485d03e0d9 [ 50.556587][ T4261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.578647][ T4261] RSP: 002b:00007f485ba97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 50.588336][ T4261] RAX: ffffffffffffffda RBX: 00007f485d2c5fa0 RCX: 00007f485d03e0d9 [ 50.597537][ T4261] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000005 [ 50.606738][ T4261] RBP: 00007f485d0d5024 R08: 0000000000000000 R09: 0000000000000000 [ 50.615826][ T4261] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 50.625185][ T4261] R13: 00007f485d2c6038 R14: 00007f485d2c5fa0 R15: 00007fff060787c8 [ 50.634316][ T4261] [ 50.638515][ T4261] ---[ end trace 0000000000000000 ]--- [ 50.647058][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.711638][ T4274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 50.743356][ T4282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 50.769865][ T4282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 50.830064][ T4287] netlink: 256 bytes leftover after parsing attributes in process `syz.0.330'. [ 50.854862][ T4287] netlink: 256 bytes leftover after parsing attributes in process `syz.0.330'. [ 51.071064][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.099442][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.213065][ T4316] loop1: detected capacity change from 0 to 256 [ 54.186514][ T23] IPVS: starting estimator thread 0... [ 54.271092][ T4337] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 54.298992][ T4331] IPVS: using max 2016 ests per chain, 100800 per kthread [ 54.435755][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 54.435769][ T28] audit: type=1326 audit(1786455528.112:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.518159][ T28] audit: type=1326 audit(1786455528.152:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.611750][ T28] audit: type=1326 audit(1786455528.152:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.667081][ T4368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.366'. [ 54.696334][ T28] audit: type=1326 audit(1786455528.152:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.773582][ T28] audit: type=1326 audit(1786455528.152:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.836493][ T28] audit: type=1326 audit(1786455528.152:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.891970][ T28] audit: type=1326 audit(1786455528.152:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 54.915909][ T4384] loop2: detected capacity change from 0 to 512 [ 54.971232][ T28] audit: type=1326 audit(1786455528.242:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.1.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f485d03e0d9 code=0x7ffc0000 [ 55.051273][ T4393] capability: warning: `syz.4.375' uses 32-bit capabilities (legacy support in use) [ 55.076299][ T28] audit: type=1400 audit(1786455528.362:425): avc: denied { create } for pid=4369 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.155308][ T28] audit: type=1400 audit(1786455528.362:426): avc: denied { bind } for pid=4369 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.251269][ T4406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4406 comm=syz.2.383 [ 55.297078][ T4403] loop1: detected capacity change from 0 to 8192 [ 55.975032][ T3396] IPVS: starting estimator thread 0... [ 56.052465][ T4454] loop3: detected capacity change from 0 to 128 [ 56.076148][ T4454] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.096519][ T4446] IPVS: using max 2256 ests per chain, 112800 per kthread [ 56.147711][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'. [ 56.171364][ T4454] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.240870][ T4454] process 'syz.3.405' launched './file0' with NULL argv: empty string added [ 56.277208][ T4472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 56.359530][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.762219][ T4511] bridge0: port 3(vlan2) entered blocking state [ 56.774709][ T4511] bridge0: port 3(vlan2) entered disabled state [ 56.789643][ T4511] vlan2: entered allmulticast mode [ 56.800107][ T4511] geneve0: entered allmulticast mode [ 56.813039][ T4511] vlan2: entered promiscuous mode [ 56.824514][ T4511] geneve0: entered promiscuous mode [ 56.976599][ T4523] loop1: detected capacity change from 0 to 512 [ 57.004543][ T4523] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.026221][ T4523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 57.076968][ T4523] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.103780][ T4523] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.433: iget: bad i_size value: 12154761577498 [ 57.171153][ T4523] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.171463][ T4523] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.433: couldn't read orphan inode 13 (err -117) [ 57.180793][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 57.180814][ C0] EXT4-fs (loop1): initial error at time 1786455530: ext4_orphan_get:1399: inode 13 [ 57.180857][ C0] EXT4-fs (loop1): last error at time 1786455530: ext4_orphan_get:1399: inode 13 [ 57.246021][ T4523] loop1: lost filesystem error report for type 5 error -117 [ 57.248156][ T4523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.459551][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.692417][ T4559] loop1: detected capacity change from 0 to 4096 [ 57.729281][ T4559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.748425][ T4536] mmap: syz.2.439 (4536) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.846170][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.980880][ T4587] loop0: detected capacity change from 0 to 512 [ 57.999296][ T4587] EXT4-fs: inline encryption not supported [ 58.017625][ T4587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.047201][ T4587] EXT4-fs (loop0): 1 truncate cleaned up [ 58.066488][ T4587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.135780][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.162602][ T4602] loop0: detected capacity change from 0 to 512 [ 58.189349][ T4602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.206283][ T4602] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.523186][ T4615] loop4: detected capacity change from 0 to 1764 [ 58.531488][ T4617] netlink: 463 bytes leftover after parsing attributes in process `syz.3.469'. [ 58.543058][ T4615] iso9660: Bad value for 'uid' [ 58.555978][ T4615] iso9660: Bad value for 'uid' [ 58.899251][ T4644] loop1: detected capacity change from 0 to 512 [ 58.914418][ T4644] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.482: iget: bad i_size value: 12154757448730 [ 58.936217][ T4644] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 58.939566][ T4644] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.482: couldn't read orphan inode 13 (err -117) [ 58.948802][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 58.948828][ C0] EXT4-fs (loop1): initial error at time 1786455532: ext4_orphan_get:1399: inode 13 [ 58.948864][ C0] EXT4-fs (loop1): last error at time 1786455532: ext4_orphan_get:1399: inode 13 [ 59.004321][ T4647] bond0: entered promiscuous mode [ 59.045708][ T4647] bond_slave_0: entered promiscuous mode [ 59.063914][ T4647] bond_slave_1: entered promiscuous mode [ 59.074528][ T4644] loop1: lost filesystem error report for type 5 error -117 [ 59.076189][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.076883][ T4644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.118779][ T4647] batadv0: entered promiscuous mode [ 59.124709][ T4644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'. [ 59.152152][ T4647] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 59.193783][ T4647] bond0: left promiscuous mode [ 59.212994][ T4647] bond_slave_0: left promiscuous mode [ 59.219890][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.232965][ T4658] loop0: detected capacity change from 0 to 512 [ 59.240014][ T4647] bond_slave_1: left promiscuous mode [ 59.247149][ T4647] batadv0: left promiscuous mode [ 59.277109][ T4658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.296313][ T4658] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.793796][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 60.006216][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 60.006236][ T28] audit: type=1400 audit(1786455533.682:544): avc: denied { mount } for pid=4660 comm="syz.1.489" name="/" dev="loop1" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.087089][ T4681] set_capacity_and_notify: 1 callbacks suppressed [ 60.087108][ T4681] loop2: detected capacity change from 0 to 128 [ 60.137738][ T4681] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.185231][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.204498][ T28] audit: type=1400 audit(1786455533.882:545): avc: denied { map } for pid=4683 comm="syz.4.499" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.232232][ T4681] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.247188][ T28] audit: type=1400 audit(1786455533.882:546): avc: denied { read write } for pid=4683 comm="syz.4.499" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.286045][ T28] audit: type=1400 audit(1786455533.962:547): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.339097][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.405035][ T28] audit: type=1400 audit(1786455534.082:548): avc: denied { ioctl } for pid=4694 comm="syz.2.502" path="socket:[7896]" dev="sockfs" ino=7896 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.503631][ T4702] loop4: detected capacity change from 0 to 512 [ 60.517860][ T28] audit: type=1400 audit(1786455534.122:549): avc: denied { bind } for pid=4695 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.574317][ T4706] loop3: detected capacity change from 0 to 4096 [ 60.588005][ T4702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.591667][ T28] audit: type=1400 audit(1786455534.122:550): avc: denied { name_bind } for pid=4695 comm="syz.3.504" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.603656][ T4706] EXT4-fs: Ignoring removed bh option [ 60.621314][ T28] audit: type=1400 audit(1786455534.122:551): avc: denied { node_bind } for pid=4695 comm="syz.3.504" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.621345][ T28] audit: type=1400 audit(1786455534.142:552): avc: denied { create } for pid=4698 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.668616][ T28] audit: type=1400 audit(1786455534.182:553): avc: denied { create } for pid=4705 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.680722][ T4702] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.715210][ T4704] loop2: detected capacity change from 0 to 8192 [ 60.725640][ T4704] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.783974][ T4704] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 60.797988][ T4704] FAT-fs (loop2): Filesystem has been set read-only [ 60.804752][ T4704] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 60.812192][ T4704] FAT-fs (loop2): error, clusters badly computed (3 != 2) [ 60.819730][ T4704] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 60.819996][ T4706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.827129][ T4704] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 60.846849][ T4704] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 60.854736][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.864087][ T4704] FAT-fs (loop2): error, clusters badly computed (7 != 6) [ 60.871371][ T4704] FAT-fs (loop2): error, clusters badly computed (8 != 7) [ 60.879098][ T4704] FAT-fs (loop2): error, clusters badly computed (9 != 8) [ 60.886662][ T4704] FAT-fs (loop2): error, clusters badly computed (10 != 9) [ 60.911901][ T4706] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.995500][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.039372][ T4717] loop4: detected capacity change from 0 to 512 [ 61.087867][ T4719] loop3: detected capacity change from 0 to 512 [ 61.111922][ T4717] EXT4-fs (loop4): 1 orphan inode deleted [ 61.139340][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 61.165004][ T4719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.175362][ T4717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.190241][ T12] loop4: lost filesystem error report for type 5 error -117 [ 61.191783][ T4717] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.209924][ T4719] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.336000][ T4717] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.352487][ T4732] loop0: detected capacity change from 0 to 256 [ 61.361606][ T4717] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 61.381109][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.398737][ T4732] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.420631][ T4717] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.434468][ T4732] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.483217][ T4736] loop3: detected capacity change from 0 to 512 [ 61.497240][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.517023][ T4736] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.565284][ T4736] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #11: comm syz.3.517: corrupted in-inode xattr: invalid ea_ino [ 61.584424][ T4736] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.585989][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.601671][ C1] EXT4-fs (loop3): initial error at time 1786455535: ext4_iget_extra_inode:5180: inode 11 [ 61.611640][ C1] EXT4-fs (loop3): last error at time 1786455535: ext4_iget_extra_inode:5180: inode 11 [ 61.624600][ T4736] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.517: couldn't read orphan inode 11 (err -117) [ 61.636671][ T4736] loop3: lost filesystem error report for type 5 error -117 [ 61.678771][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.754387][ T4750] loop1: detected capacity change from 0 to 128 [ 61.772797][ T4751] sctp: [Deprecated]: syz.0.523 (pid 4751) Use of int in maxseg socket option. [ 61.772797][ T4751] Use struct sctp_assoc_value instead [ 61.802486][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.815028][ T3375] IPVS: starting estimator thread 0... [ 61.830197][ T4756] netlink: 'syz.1.527': attribute type 7 has an invalid length. [ 61.841601][ T4756] netlink: 'syz.1.527': attribute type 23 has an invalid length. [ 61.897280][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 61.906153][ T4754] IPVS: using max 2304 ests per chain, 115200 per kthread [ 62.098133][ T4777] loop4: detected capacity change from 0 to 512 [ 62.114725][ T4777] EXT4-fs: Ignoring removed i_version option [ 62.191785][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.225826][ T4777] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.265003][ T4787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.325453][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.435969][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 62.456133][ T4802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 62.663043][ T4818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.717112][ T4818] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.738572][ T4818] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.553: Freeing blocks not in datazone - block = 0, count = 16 [ 62.752183][ T4818] EXT4-fs (loop0): Remounting filesystem read-only [ 62.779717][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.801950][ T4816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.826252][ T4816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.890570][ T4812] EXT4-fs: Ignoring removed nobh option [ 63.092155][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.168143][ T4812] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.314208][ T4834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.357150][ T4834] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.411328][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.445708][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.590806][ T4838] SELinux: Context OPcǙ?s U^tQ`w& m [ 63.590806][ T4838] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 63.791698][ T4873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.575'. [ 63.858316][ T4871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.036138][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.165326][ T4893] Invalid argument reading file caps for ./file0 [ 64.501317][ T3396] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 64.513525][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 64.562468][ T4914] fido_id[4914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.034152][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 65.034170][ T28] audit: type=1400 audit(1786455538.712:702): avc: denied { create } for pid=4943 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.095770][ T28] audit: type=1400 audit(1786455538.742:703): avc: denied { write } for pid=4943 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.129078][ T4952] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.606'. [ 65.138789][ T28] audit: type=1400 audit(1786455538.752:704): avc: denied { tracepoint } for pid=4946 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.164320][ T4954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'. [ 65.213756][ T4937] set_capacity_and_notify: 4 callbacks suppressed [ 65.214004][ T4937] loop2: detected capacity change from 0 to 512 [ 65.232269][ T4947] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.606'. [ 65.398105][ T4937] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.399725][ T28] audit: type=1400 audit(1786455539.082:705): avc: denied { create } for pid=4966 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.428905][ T4937] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.445470][ T4937] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.602: bad orphan inode 15 [ 65.457269][ T4937] loop2: lost filesystem error report for type 5 error -117 [ 65.461593][ T4937] ext4_test_bit(bit=14, block=5) = 0 [ 65.470358][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 65.470471][ C1] EXT4-fs (loop2): initial error at time 1786455539: ext4_orphan_get:1425 [ 65.470593][ C1] EXT4-fs (loop2): last error at time 1786455539: ext4_orphan_get:1425 [ 65.483082][ T4972] Invalid argument reading file caps for ./file0 [ 65.488615][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 65.510680][ T28] audit: type=1400 audit(1786455539.122:706): avc: denied { allowed } for pid=4966 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.637675][ T28] audit: type=1400 audit(1786455539.122:707): avc: denied { sqpoll } for pid=4966 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.703492][ T28] audit: type=1400 audit(1786455539.132:708): avc: denied { create } for pid=4966 comm="syz.1.616" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.769531][ T28] audit: type=1400 audit(1786455539.142:709): avc: denied { read } for pid=4966 comm="syz.1.616" path="socket:[9049]" dev="sockfs" ino=9049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.803936][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.817425][ T4988] loop0: detected capacity change from 0 to 128 [ 65.877420][ T28] audit: type=1400 audit(1786455539.162:710): avc: denied { name_bind } for pid=4969 comm="syz.3.615" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 65.900953][ T324] kworker/u8:6: attempt to access beyond end of device [ 65.900953][ T324] loop0: rw=1, sector=138, nr_sectors = 2 limit=128 [ 65.951230][ T4995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 65.970573][ T28] audit: type=1400 audit(1786455539.172:711): avc: denied { create } for pid=4969 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.000413][ T4999] loop4: detected capacity change from 0 to 128 [ 66.232926][ T5002] infiniband syz1: set active [ 66.256650][ T5002] infiniband syz1: added bond_slave_1 [ 66.302142][ T5002] RDS/IB: syz1: added [ 66.329873][ T5002] smc: adding ib device syz1 with port count 1 [ 66.360567][ T5002] smc: ib device syz1 port 1 has no pnetid [ 66.519905][ T5030] loop2: detected capacity change from 0 to 512 [ 66.575436][ T5030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.621520][ T5030] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.716855][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.245346][ T5075] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 67.258799][ T5075] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 67.266655][ T5077] loop2: detected capacity change from 0 to 512 [ 67.273598][ T5077] EXT4-fs: Ignoring removed bh option [ 67.326560][ T5077] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.377895][ T5083] gtp0: entered promiscuous mode [ 67.389640][ T5077] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 3: comm syz.2.664: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 67.422819][ T5083] gtp0: entered allmulticast mode [ 67.453188][ T5083] team0: Device gtp0 is of different type [ 67.474695][ T5077] EXT4-fs (loop2): Remounting filesystem read-only [ 67.494095][ T5096] xt_hashlimit: size too large, truncated to 1048576 [ 67.564536][ T5100] : renamed from vxcan1 (while UP) [ 67.876980][ T5117] loop2: detected capacity change from 0 to 512 [ 68.213530][ T5140] loop2: detected capacity change from 0 to 2048 [ 68.554886][ T5166] loop4: detected capacity change from 0 to 512 [ 68.587184][ T5166] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.773778][ T5180] netlink: 144 bytes leftover after parsing attributes in process `syz.3.706'. [ 68.855768][ T5189] loop3: detected capacity change from 0 to 512 [ 68.865830][ T5189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.889263][ T5189] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.046857][ T5195] loop4: detected capacity change from 0 to 512 [ 69.074575][ T5195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.110828][ T5195] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.468383][ T5224] device-mapper: ioctl: Unable to rename non-existent device, to B [ 70.020797][ T5249] sctp: [Deprecated]: syz.1.736 (pid 5249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.020797][ T5249] Use struct sctp_sack_info instead [ 70.069697][ T5222] loop2: p1 p3 < > [ 70.215112][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 70.215128][ T28] audit: type=1400 audit(1786455543.892:828): avc: denied { mount } for pid=5261 comm="syz.2.742" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 70.305514][ T28] audit: type=1400 audit(1786455543.982:829): avc: denied { setopt } for pid=5263 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.343194][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.350305][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 70.381140][ T28] audit: type=1400 audit(1786455544.012:830): avc: denied { read } for pid=5263 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.558357][ T28] audit: type=1326 audit(1786455544.242:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 70.627402][ T28] audit: type=1326 audit(1786455544.242:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 70.687877][ T28] audit: type=1326 audit(1786455544.242:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 70.736031][ T28] audit: type=1326 audit(1786455544.242:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 70.796094][ T28] audit: type=1326 audit(1786455544.242:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 70.857632][ T28] audit: type=1326 audit(1786455544.242:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 70.935454][ T28] audit: type=1326 audit(1786455544.242:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddbbee0d9 code=0x7ffc0000 [ 71.061382][ T5297] netlink: 'syz.2.757': attribute type 10 has an invalid length. [ 71.114715][ T5301] set_capacity_and_notify: 1 callbacks suppressed [ 71.114738][ T5301] loop0: detected capacity change from 0 to 256 [ 71.141492][ T5297] team0: Device wg2 is of different type [ 71.481643][ T5319] serial 00:03: in use; can't configure [ 71.511607][ T5328] 9p: Bad value for 'rfdno' [ 71.574364][ T5335] loop2: detected capacity change from 0 to 512 [ 71.591214][ T5335] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.774: inode has both inline data and extents flags [ 71.604696][ T5335] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.604830][ T5335] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.774: couldn't read orphan inode 15 (err -117) [ 71.614103][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 71.614127][ C0] EXT4-fs (loop2): initial error at time 1786455545: ext4_orphan_get:1399: inode 15 [ 71.614152][ C0] EXT4-fs (loop2): last error at time 1786455545: ext4_orphan_get:1399: inode 15 [ 71.654313][ T5335] loop2: lost filesystem error report for type 5 error -117 [ 71.654934][ T5335] EXT4-fs mount: 10 callbacks suppressed [ 71.654947][ T5335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.727205][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.788713][ T5346] 9p: Unknown uid 00000000004294967295 [ 71.790747][ T5344] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.777'. [ 71.822730][ T5344] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.777'. [ 72.122029][ T3355] kernel read not supported for file /vcsa (pid: 3355 comm: kworker/0:2) [ 72.434224][ T5397] veth0: entered promiscuous mode [ 72.434228][ T5395] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 72.467653][ T5396] veth0: left promiscuous mode [ 72.542727][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 72.727100][ T5415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.795083][ T5415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.850774][ T5415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.900557][ T5415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.005530][ T3430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.030966][ T3430] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.077125][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.096118][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.197846][ T36] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.308055][ T5438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'. [ 73.342716][ T5438] loop0: detected capacity change from 0 to 256 [ 73.363940][ T5438] vfat: Bad value for 'uni_xlate' [ 73.383155][ T5438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'. [ 73.765229][ T5473] vhci_hcd vhci_hcd.0: failed to lookup sock [ 73.848184][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 73.866770][ T5483] netlink: 'syz.2.841': attribute type 4 has an invalid length. [ 73.880638][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 73.975782][ T5498] loop2: detected capacity change from 0 to 1024 [ 74.010335][ T5498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.026408][ T5498] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.057881][ T5507] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 74.107154][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.130593][ T5514] syzkaller1: entered promiscuous mode [ 74.158806][ T5514] syzkaller1: entered allmulticast mode [ 74.171890][ T5519] netlink: 'syz.2.854': attribute type 12 has an invalid length. [ 74.238427][ T5519] netlink: 'syz.2.854': attribute type 29 has an invalid length. [ 74.275801][ T5519] netlink: 148 bytes leftover after parsing attributes in process `syz.2.854'. [ 74.300622][ T5519] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 74.330858][ T5519] netlink: 47 bytes leftover after parsing attributes in process `syz.2.854'. [ 74.371366][ T5540] loop3: detected capacity change from 0 to 512 [ 74.384210][ T5541] loop0: detected capacity change from 0 to 1024 [ 74.402600][ T5541] EXT4-fs: Ignoring removed orlov option [ 74.419085][ T5540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.436297][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.456230][ T5540] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.527261][ T5552] loop4: detected capacity change from 0 to 512 [ 74.556781][ T5550] xt_hashlimit: size too large, truncated to 1048576 [ 74.588550][ T5552] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.870: ea_inode file size=4294967295 entry size=4 [ 74.625334][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.654361][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.670970][ T5552] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.870: corrupted inode contents [ 74.733607][ T5552] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.733744][ T5552] EXT4-fs (loop4): Remounting filesystem read-only [ 74.742986][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 74.743002][ C1] EXT4-fs (loop4): initial error at time 1786455548: ext4_do_update_inode:5742: inode 15 [ 74.743036][ C1] EXT4-fs (loop4): last error at time 1786455548: ext4_do_update_inode:5742: inode 15 [ 74.782067][ T5552] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -30) [ 74.789397][ T3382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.800913][ T5552] EXT4-fs (loop4): 1 orphan inode deleted [ 74.807751][ T5552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.822169][ T3382] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.885497][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.242177][ T5587] sock: sock_set_timeout: `syz.3.884' (pid 5587) tries to set negative timeout [ 75.341109][ T5599] loop3: detected capacity change from 0 to 512 [ 75.362255][ T5599] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.889: inode has both inline data and extents flags [ 75.399009][ T5608] device-mapper: ioctl: Invalid ioctl structure: name , dev fff81a7b [ 75.419720][ T5599] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.420694][ T5599] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.889: couldn't read orphan inode 15 (err -117) [ 75.430050][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 75.430068][ C1] EXT4-fs (loop3): initial error at time 1786455549: ext4_orphan_get:1399: inode 15 [ 75.430099][ C1] EXT4-fs (loop3): last error at time 1786455549: ext4_orphan_get:1399: inode 15 [ 75.467303][ T5599] loop3: lost filesystem error report for type 5 error -117 [ 75.473740][ T5599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.557505][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 75.557522][ T28] audit: type=1400 audit(1786455549.242:905): avc: denied { write } for pid=5598 comm="syz.3.889" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.618753][ T28] audit: type=1400 audit(1786455549.242:906): avc: denied { setattr } for pid=5598 comm="syz.3.889" name="control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.650856][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.663656][ T28] audit: type=1400 audit(1786455549.242:907): avc: denied { write } for pid=5598 comm="syz.3.889" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.730541][ T28] audit: type=1400 audit(1786455549.242:908): avc: denied { rmdir } for pid=5598 comm="syz.3.889" name="control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.770287][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 75.784752][ T28] audit: type=1400 audit(1786455549.462:909): avc: denied { read append } for pid=5622 comm="syz.0.901" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.853264][ T28] audit: type=1400 audit(1786455549.462:910): avc: denied { open } for pid=5622 comm="syz.0.901" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.905994][ T28] audit: type=1400 audit(1786455549.462:911): avc: denied { ioctl } for pid=5622 comm="syz.0.901" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.051977][ T28] audit: type=1400 audit(1786455549.732:912): avc: denied { create } for pid=5643 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.098822][ T28] audit: type=1400 audit(1786455549.732:913): avc: denied { nlmsg_read } for pid=5644 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.144148][ T28] audit: type=1400 audit(1786455549.762:914): avc: denied { bind } for pid=5643 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.240566][ T5659] loop2: detected capacity change from 0 to 512 [ 76.343032][ T5663] loop3: detected capacity change from 0 to 512 [ 76.361634][ T5663] EXT4-fs: Ignoring removed bh option [ 76.392400][ T5663] EXT4-fs (loop3): invalid first ino: 0 [ 76.403054][ T3391] IPVS: starting estimator thread 0... [ 76.419037][ T2981] ================================================================== [ 76.427247][ T2981] BUG: KCSAN: data-race in set_nlink / set_nlink [ 76.433638][ T2981] [ 76.435988][ T2981] read to 0xffff8881070af678 of 4 bytes by task 3601 on cpu 1: [ 76.443591][ T2981] set_nlink+0x29/0xb0 [ 76.447704][ T2981] kernfs_iop_permission+0x1e5/0x220 [ 76.453036][ T2981] inode_permission+0x2a5/0x3b0 [ 76.457959][ T2981] link_path_walk+0x875/0xdd0 [ 76.462682][ T2981] path_openat+0x1ac/0x2000 [ 76.467210][ T2981] do_file_open+0x16c/0x290 [ 76.471764][ T2981] do_sys_openat2+0xa0/0x130 [ 76.476406][ T2981] __x64_sys_openat+0xf2/0x120 [ 76.481232][ T2981] x64_sys_call+0x1e39/0x3020 [ 76.485986][ T2981] do_syscall_64+0x136/0x3c0 [ 76.490635][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.496562][ T2981] [ 76.498909][ T2981] write to 0xffff8881070af678 of 4 bytes by task 2981 on cpu 0: [ 76.506560][ T2981] set_nlink+0x99/0xb0 [ 76.510671][ T2981] kernfs_iop_permission+0x1e5/0x220 [ 76.516010][ T2981] inode_permission+0x2a5/0x3b0 [ 76.520910][ T2981] link_path_walk+0x875/0xdd0 [ 76.525632][ T2981] path_lookupat+0x53/0x4c0 [ 76.530175][ T2981] filename_lookup+0x18f/0x390 [ 76.532127][ T5670] IPVS: using max 1920 ests per chain, 96000 per kthread [ 76.534983][ T2981] vfs_statx+0x96/0x170 [ 76.535015][ T2981] vfs_fstatat+0x118/0x170 [ 76.550644][ T2981] __se_sys_newfstatat+0x55/0x3e0 [ 76.555717][ T2981] __x64_sys_newfstatat+0x55/0x70 [ 76.560788][ T2981] x64_sys_call+0x2c64/0x3020 [ 76.565512][ T2981] do_syscall_64+0x136/0x3c0 [ 76.570140][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.576077][ T2981] [ 76.578425][ T2981] value changed: 0x00000009 -> 0x00000008 [ 76.584168][ T2981] [ 76.586520][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 76.592737][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 76.603199][ T2981] Tainted: [W]=WARN [ 76.607028][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.617114][ T2981] ==================================================================