last executing test programs: 2.382526742s ago: executing program 0 (id=923): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500000000000000000000003ee54d9bdd7cb5fd821c304881a7c4381178a67fc49cf1943e99b1f8aeca7afa855fda156c0ecc3ef1754fd55a7e70861fffdd62f8dcaeaeb1329e574927514d4a629a5441327c95a0fc2498265fa054fdfc87a48bda5b483b528a57c15830e1ab1ebac6598052ab7fdb9e79c83d255db602cb7b2086da29fcbf70d2512dd1f48db6b4d676ef22e18460fdcc77061db61f7872a726006a1208148a26dc8eb003f2323ef7bdf7c35c12374cebd16c8da84f1f9135eca4b476d489ebb1", @ANYRES32, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.05570998s ago: executing program 0 (id=932): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) 1.965341706s ago: executing program 0 (id=935): openat$sndseq(0xffffffffffffff9c, &(0x7f00000016c0), 0xc0900) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.586883408s ago: executing program 4 (id=948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 1.54899759s ago: executing program 4 (id=949): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) 1.492399843s ago: executing program 4 (id=951): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x41, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 1.489709373s ago: executing program 1 (id=952): unshare(0x62040200) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44890) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xfffffffffffffffd, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0xe}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) 1.361570171s ago: executing program 4 (id=954): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.360884701s ago: executing program 1 (id=955): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) 1.278441916s ago: executing program 1 (id=957): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.20149502s ago: executing program 3 (id=959): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) 1.177864512s ago: executing program 3 (id=960): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 1.088441537s ago: executing program 0 (id=962): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) 983.222543ms ago: executing program 0 (id=964): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000240001800a000100726564697200000014000280080001400000001108000240000000110900010073797a300000000014000000110001"], 0xf8}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff0e, 0x10008095, 0x0, 0x0) 878.441919ms ago: executing program 2 (id=966): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x40000d, 0x4) 877.969709ms ago: executing program 2 (id=967): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) 533.992219ms ago: executing program 2 (id=968): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 508.407921ms ago: executing program 4 (id=969): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 482.582892ms ago: executing program 4 (id=970): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="49064091ba4d0c6cba626a668b82f4ee28ad0a285d1da3bc69c11f465544884821bca3f5c6b739f60acdadf90b5da34e16765f4eabe6b786f21a73d1c2aeffca057380716027601299906474d62c84684ff990a7c0cbeeb4c5c9c1c7ff780e906979bab5a950c03050fa740bb87a35b1dac309da5b7417f84cef746b479870a60bcec8e750bd92470200b1ae2261ac50c9c6582e622cbf585d9f34107d9521cd0173a98b3e87609629e91bfe02dcb23fe1619c9614b022ca22b8b0be44c8d2db6fa4accc25ce898870266955bb9b73697dbfe1f37c332a6274", 0xfffffffffffffdce, 0x10008095, 0x0, 0x0) 439.923364ms ago: executing program 1 (id=971): connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0xe56}]}) 418.815356ms ago: executing program 3 (id=972): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 340.70587ms ago: executing program 1 (id=973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, &(0x7f0000000140)=0xe8, 0x9, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 245.177896ms ago: executing program 2 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a000000020000000900000042"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 244.749636ms ago: executing program 1 (id=975): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0xffffffffffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="331204"], 0x98) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x0, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x1c) syz_extract_tcp_res(0x0, 0xf7, 0x9) 244.408576ms ago: executing program 2 (id=976): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0xfffffffffffffeaa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x9, 0x8, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 215.852537ms ago: executing program 2 (id=977): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 192.714719ms ago: executing program 3 (id=978): prlimit64(0x0, 0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 102.566034ms ago: executing program 0 (id=979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x800003, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 6.27526ms ago: executing program 3 (id=980): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000290000000400"], 0x18}, 0x1400c0c0) 0s ago: executing program 3 (id=981): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x4, 0x7fffffff, 0xffffff92, 0x2, 0x5, "3c70284cddce56c09a5a0332224cd937d50c1a"}) kernel console output (not intermixed with test programs): { siginh } for pid=3187 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.212449][ T29] audit: type=1400 audit(1770379471.868:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.263924][ T29] audit: type=1400 audit(1770379471.868:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.286521][ T29] audit: type=1400 audit(1770379471.868:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.309420][ T29] audit: type=1400 audit(1770379471.868:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.332386][ T29] audit: type=1400 audit(1770379471.868:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 29.814771][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.814788][ T29] audit: type=1400 audit(1770379480.478:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.843885][ T29] audit: type=1400 audit(1770379480.498:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.846101][ T3299] cgroup: Unknown subsys name 'net' [ 29.871566][ T29] audit: type=1400 audit(1770379480.528:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.004648][ T3299] cgroup: Unknown subsys name 'cpuset' [ 30.010865][ T3299] cgroup: Unknown subsys name 'rlimit' [ 30.162249][ T29] audit: type=1400 audit(1770379480.818:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.195700][ T29] audit: type=1400 audit(1770379480.828:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.216283][ T29] audit: type=1400 audit(1770379480.828:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.235808][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.236760][ T29] audit: type=1400 audit(1770379480.828:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.265553][ T29] audit: type=1400 audit(1770379480.838:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.290385][ T29] audit: type=1400 audit(1770379480.838:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.312952][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.313965][ T29] audit: type=1400 audit(1770379480.848:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.489086][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 31.498511][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 31.539281][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.552320][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.561454][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.631771][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.638979][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.646115][ T3321] bridge_slave_0: entered allmulticast mode [ 31.652554][ T3321] bridge_slave_0: entered promiscuous mode [ 31.671382][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678472][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.685620][ T3321] bridge_slave_1: entered allmulticast mode [ 31.692030][ T3321] bridge_slave_1: entered promiscuous mode [ 31.705998][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.713049][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.720235][ T3312] bridge_slave_0: entered allmulticast mode [ 31.726699][ T3312] bridge_slave_0: entered promiscuous mode [ 31.751858][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.759089][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.766360][ T3312] bridge_slave_1: entered allmulticast mode [ 31.772708][ T3312] bridge_slave_1: entered promiscuous mode [ 31.789063][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.811453][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.818665][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.825802][ T3315] bridge_slave_0: entered allmulticast mode [ 31.832287][ T3315] bridge_slave_0: entered promiscuous mode [ 31.839917][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.850114][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.868036][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.875188][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.882301][ T3311] bridge_slave_0: entered allmulticast mode [ 31.888902][ T3311] bridge_slave_0: entered promiscuous mode [ 31.895459][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.902512][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.909909][ T3315] bridge_slave_1: entered allmulticast mode [ 31.916609][ T3315] bridge_slave_1: entered promiscuous mode [ 31.923994][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.937947][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.945022][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.952194][ T3318] bridge_slave_0: entered allmulticast mode [ 31.958760][ T3318] bridge_slave_0: entered promiscuous mode [ 31.965253][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.972333][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.979637][ T3311] bridge_slave_1: entered allmulticast mode [ 31.986045][ T3311] bridge_slave_1: entered promiscuous mode [ 32.010375][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.017504][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.024877][ T3318] bridge_slave_1: entered allmulticast mode [ 32.031392][ T3318] bridge_slave_1: entered promiscuous mode [ 32.051951][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.062009][ T3312] team0: Port device team_slave_0 added [ 32.068612][ T3321] team0: Port device team_slave_0 added [ 32.084749][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.094793][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.109074][ T3312] team0: Port device team_slave_1 added [ 32.119861][ T3321] team0: Port device team_slave_1 added [ 32.126101][ T3315] team0: Port device team_slave_0 added [ 32.132976][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.143111][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.153111][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.176385][ T3315] team0: Port device team_slave_1 added [ 32.182114][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.189124][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.215025][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.244605][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.251602][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.277614][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.297746][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.304826][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.330961][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.349296][ T3311] team0: Port device team_slave_0 added [ 32.355950][ T3318] team0: Port device team_slave_0 added [ 32.361744][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.368856][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.394771][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.405788][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.412804][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.438778][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.450028][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.457015][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.482983][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.495293][ T3311] team0: Port device team_slave_1 added [ 32.502034][ T3318] team0: Port device team_slave_1 added [ 32.539048][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.546026][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.571930][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.583698][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.590730][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.616647][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.637165][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.644147][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.670094][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.689781][ T3312] hsr_slave_0: entered promiscuous mode [ 32.695799][ T3312] hsr_slave_1: entered promiscuous mode [ 32.706008][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.712973][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.738951][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.756427][ T3315] hsr_slave_0: entered promiscuous mode [ 32.762383][ T3315] hsr_slave_1: entered promiscuous mode [ 32.768180][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.773942][ T3315] Cannot create hsr debugfs directory [ 32.814929][ T3311] hsr_slave_0: entered promiscuous mode [ 32.821006][ T3311] hsr_slave_1: entered promiscuous mode [ 32.826892][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.832626][ T3311] Cannot create hsr debugfs directory [ 32.840338][ T3321] hsr_slave_0: entered promiscuous mode [ 32.846359][ T3321] hsr_slave_1: entered promiscuous mode [ 32.852128][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 32.857922][ T3321] Cannot create hsr debugfs directory [ 32.888690][ T3318] hsr_slave_0: entered promiscuous mode [ 32.895109][ T3318] hsr_slave_1: entered promiscuous mode [ 32.901038][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.906800][ T3318] Cannot create hsr debugfs directory [ 33.092332][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.106325][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.119672][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.133892][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.155381][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.164792][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.173717][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.188903][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.198996][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.207645][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.216903][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.228073][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.272546][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.287594][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.304655][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.325640][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.351575][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.361250][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.370526][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.379644][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.403121][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.415285][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.441774][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.467330][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.474477][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.483375][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.490467][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.509818][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.520029][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.537622][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.544706][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.555784][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.572993][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.585877][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.592981][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.618148][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.625282][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.634179][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.641303][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.660293][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.684815][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.719271][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.730003][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.745739][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.761511][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.791505][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.798702][ T2127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.811063][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.818169][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.852314][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.875778][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.882913][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.894204][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.901363][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.939817][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.949620][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.984973][ T3318] veth0_vlan: entered promiscuous mode [ 34.010828][ T3318] veth1_vlan: entered promiscuous mode [ 34.055651][ T3318] veth0_macvtap: entered promiscuous mode [ 34.063339][ T3318] veth1_macvtap: entered promiscuous mode [ 34.074983][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.085203][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.106016][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.132776][ T3312] veth0_vlan: entered promiscuous mode [ 34.141336][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.152559][ T3312] veth1_vlan: entered promiscuous mode [ 34.168945][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.186691][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.196275][ T3312] veth0_macvtap: entered promiscuous mode [ 34.209234][ T2118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.219057][ T3312] veth1_macvtap: entered promiscuous mode [ 34.236327][ T2118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.262577][ T3315] veth0_vlan: entered promiscuous mode [ 34.276074][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.289011][ T3315] veth1_vlan: entered promiscuous mode [ 34.307581][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.331293][ T3315] veth0_macvtap: entered promiscuous mode [ 34.362922][ T3311] veth0_vlan: entered promiscuous mode [ 34.380838][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.388533][ T3315] veth1_macvtap: entered promiscuous mode [ 34.398986][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.428602][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.438422][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 34.438959][ T3311] veth1_vlan: entered promiscuous mode [ 34.447379][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 34.472541][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.482772][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.509139][ T3321] veth0_vlan: entered promiscuous mode [ 34.518412][ T3483] Zero length message leads to an empty skb [ 34.524646][ T2127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.548313][ T2127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.560543][ T3321] veth1_vlan: entered promiscuous mode [ 34.587197][ T3311] veth0_macvtap: entered promiscuous mode [ 34.596033][ T3487] loop3: detected capacity change from 0 to 1024 [ 34.602665][ T3487] ======================================================= [ 34.602665][ T3487] WARNING: The mand mount option has been deprecated and [ 34.602665][ T3487] and is ignored by this kernel. Remove the mand [ 34.602665][ T3487] option from the mount to silence this warning. [ 34.602665][ T3487] ======================================================= [ 34.656651][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.678736][ T3487] EXT4-fs: Ignoring removed bh option [ 34.679981][ T3311] veth1_macvtap: entered promiscuous mode [ 34.684502][ T3487] EXT4-fs: Ignoring removed nobh option [ 34.713557][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.725232][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.738236][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.749098][ T3487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.749500][ T3321] veth0_macvtap: entered promiscuous mode [ 34.779589][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.791385][ T3321] veth1_macvtap: entered promiscuous mode [ 34.808096][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.825225][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.834305][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 34.834326][ T29] audit: type=1400 audit(1770379485.498:112): avc: denied { add_name } for pid=3486 comm="syz.3.7" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.860884][ T29] audit: type=1400 audit(1770379485.498:113): avc: denied { create } for pid=3486 comm="syz.3.7" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.914776][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.923364][ T29] audit: type=1400 audit(1770379485.538:114): avc: denied { read write } for pid=3486 comm="syz.3.7" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.928333][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.945782][ T29] audit: type=1400 audit(1770379485.538:115): avc: denied { open } for pid=3486 comm="syz.3.7" path="/2/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.976864][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.986944][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.996343][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.033958][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.058038][ T29] audit: type=1400 audit(1770379485.708:116): avc: denied { create } for pid=3503 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.095503][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.114087][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.148099][ T29] audit: type=1400 audit(1770379485.728:117): avc: denied { allowed } for pid=3503 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.167595][ T29] audit: type=1400 audit(1770379485.738:118): avc: denied { create } for pid=3503 comm="syz.3.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.188772][ T29] audit: type=1400 audit(1770379485.738:119): avc: denied { map } for pid=3503 comm="syz.3.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.209878][ T3509] loop2: detected capacity change from 0 to 512 [ 35.212962][ T29] audit: type=1400 audit(1770379485.738:120): avc: denied { read write } for pid=3503 comm="syz.3.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.243572][ T29] audit: type=1400 audit(1770379485.748:121): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.267778][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.294158][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.337750][ T3509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.450703][ T3511] loop4: detected capacity change from 0 to 2048 [ 35.491866][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.545328][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.747579][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.467711][ T3563] netlink: 68 bytes leftover after parsing attributes in process `syz.3.32'. [ 36.569006][ T3573] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.638099][ C0] hrtimer: interrupt took 47575 ns [ 36.652930][ T3579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40'. [ 36.706121][ T3583] loop4: detected capacity change from 0 to 512 [ 36.723687][ T3583] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 36.754232][ T3583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 36.803750][ T3587] loop1: detected capacity change from 0 to 1024 [ 36.818151][ T3587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 36.831839][ T3587] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 36.863293][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 36.958376][ T3603] netlink: 152 bytes leftover after parsing attributes in process `syz.4.49'. [ 37.308551][ T3630] loop1: detected capacity change from 0 to 1024 [ 37.332432][ T3630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.350738][ T3630] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.364676][ T3630] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.59: lblock 0 mapped to illegal pblock 0 (length 4) [ 37.378460][ T3630] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 37.390823][ T3630] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.390823][ T3630] [ 37.404082][ T3630] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.59: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.417669][ T3630] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.59: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.445614][ T3630] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.59: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.460773][ T3630] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.59: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.479232][ T3630] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.59: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.509941][ T2127] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 1) [ 37.525539][ T2127] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 37.537920][ T2127] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.537920][ T2127] [ 37.552712][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.831487][ T3664] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.877730][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 37.887116][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 37.895954][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.002165][ T3678] sctp: [Deprecated]: syz.4.78 (pid 3678) Use of int in max_burst socket option deprecated. [ 38.002165][ T3678] Use struct sctp_assoc_value instead [ 38.154661][ T23] IPVS: starting estimator thread 0... [ 38.155113][ T3684] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 38.243952][ T3686] IPVS: using max 2448 ests per chain, 122400 per kthread [ 38.302884][ T3702] loop3: detected capacity change from 0 to 512 [ 38.311672][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.373254][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.401792][ T3707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'. [ 38.464463][ T3712] syz.3.92 uses obsolete (PF_INET,SOCK_PACKET) [ 38.536113][ T3720] loop2: detected capacity change from 0 to 4096 [ 38.549983][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.743996][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.167942][ T3780] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 39.287580][ T3788] capability: warning: `syz.1.118' uses deprecated v2 capabilities in a way that may be insecure [ 39.350088][ T3794] loop2: detected capacity change from 0 to 512 [ 39.374318][ T3794] xt_hashlimit: size too large, truncated to 1048576 [ 39.551568][ T3805] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 39.559451][ T3805] netlink: 'syz.0.124': attribute type 4 has an invalid length. [ 39.567156][ T3805] __nla_validate_parse: 2 callbacks suppressed [ 39.567226][ T3805] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.124'. [ 39.848555][ T3834] loop3: detected capacity change from 0 to 2048 [ 39.877464][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 39.877478][ T29] audit: type=1400 audit(1770379490.538:222): avc: denied { mounton } for pid=3822 comm="syz.3.132" path="/32/bus" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.966102][ T3834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.118225][ T3834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.148642][ T29] audit: type=1400 audit(1770379490.808:223): avc: denied { accept } for pid=3851 comm="syz.2.141" path="socket:[5507]" dev="sockfs" ino=5507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.276455][ T29] audit: type=1400 audit(1770379490.938:224): avc: denied { read write } for pid=3862 comm="syz.4.146" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.301708][ T29] audit: type=1400 audit(1770379490.938:225): avc: denied { open } for pid=3862 comm="syz.4.146" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.428024][ T3871] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 40.437981][ T29] audit: type=1400 audit(1770379491.088:226): avc: denied { execute } for pid=3866 comm="syz.4.149" path="/35/file1" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.502673][ T3871] syz.3.150 (3871) used greatest stack depth: 10064 bytes left [ 40.543818][ T29] audit: type=1400 audit(1770379491.198:227): avc: denied { mounton } for pid=3875 comm="syz.3.152" path="/proc/82/task" dev="proc" ino=6421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 40.623933][ T29] audit: type=1326 audit(1770379491.278:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3827 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f42eaaeb9 code=0x7fc00000 [ 40.742623][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 40.779024][ T29] audit: type=1400 audit(1770379491.438:229): avc: denied { ioctl } for pid=3890 comm="syz.3.159" path="socket:[5586]" dev="sockfs" ino=5586 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.854639][ T29] audit: type=1400 audit(1770379491.518:230): avc: denied { shutdown } for pid=3896 comm="syz.0.162" laddr=fe80::16 lport=49023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.882705][ T3897] syz.0.162 (3897) used greatest stack depth: 9352 bytes left [ 41.003629][ T3914] loop0: detected capacity change from 0 to 128 [ 41.109605][ T29] audit: type=1400 audit(1770379491.768:231): avc: denied { read write } for pid=3899 comm="syz.4.163" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.133451][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.142665][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.179565][ T3925] syz.0.170: attempt to access beyond end of device [ 41.179565][ T3925] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 41.510795][ T3951] netlink: 92 bytes leftover after parsing attributes in process `syz.2.186'. [ 41.711167][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 41.860309][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.867617][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.032193][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.062071][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.110444][ T2127] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.134029][ T2127] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.156238][ T2127] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.173906][ T2127] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.335515][ T4023] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 42.886589][ T4043] SELinux: unknown common  [ 42.891262][ T4043] SELinux: failed to load policy [ 43.404769][ T4078] Invalid ELF header len 1 [ 43.961062][ T4096] syzkaller1: entered promiscuous mode [ 43.966705][ T4096] syzkaller1: entered allmulticast mode [ 44.111667][ T4109] loop0: detected capacity change from 0 to 128 [ 44.150356][ T4109] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.162629][ T4105] loop1: detected capacity change from 0 to 8192 [ 44.182922][ T4109] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.244275][ T3304] loop1: p2 p3 p4 < > [ 44.250426][ T3304] loop1: p2 size 590592 extends beyond EOD, truncated [ 44.264699][ T4109] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.257: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 44.272276][ T3304] loop1: p3 start 589824 is beyond EOD, truncated [ 44.291225][ T4109] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 44.308428][ T4105] loop1: p2 p3 p4 < > [ 44.309921][ T4113] SELinux: failed to load policy [ 44.312905][ T4105] loop1: p2 size 590592 extends beyond EOD, truncated [ 44.328871][ T4105] loop1: p3 start 589824 is beyond EOD, truncated [ 44.354450][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.424038][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.438113][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 44.513914][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 44.524385][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.680441][ T4154] loop4: detected capacity change from 0 to 1024 [ 44.718003][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.798573][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.060541][ T4174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.284'. [ 45.274779][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 45.274797][ T29] audit: type=1400 audit(1770379495.938:359): avc: denied { read append } for pid=4186 comm="syz.1.290" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.305327][ T29] audit: type=1400 audit(1770379495.938:360): avc: denied { open } for pid=4186 comm="syz.1.290" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.377529][ T4194] netlink: 35 bytes leftover after parsing attributes in process `syz.4.292'. [ 45.386559][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 45.468719][ T4200] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 45.484163][ T4200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.532459][ T29] audit: type=1400 audit(1770379496.188:361): avc: denied { write } for pid=4204 comm="syz.0.299" path="socket:[6124]" dev="sockfs" ino=6124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.572959][ T29] audit: type=1326 audit(1770379496.228:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.596387][ T29] audit: type=1326 audit(1770379496.228:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.620804][ T29] audit: type=1326 audit(1770379496.228:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.644125][ T29] audit: type=1326 audit(1770379496.228:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.667545][ T29] audit: type=1326 audit(1770379496.228:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.690863][ T29] audit: type=1326 audit(1770379496.228:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.714151][ T29] audit: type=1326 audit(1770379496.228:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 45.900497][ T4230] loop4: detected capacity change from 0 to 512 [ 45.907417][ T4230] EXT4-fs: Ignoring removed orlov option [ 45.913242][ T4230] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.925979][ T4230] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.308: corrupted in-inode xattr: e_value size too large [ 45.940754][ T4230] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.308: couldn't read orphan inode 15 (err -117) [ 45.954518][ T4230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.983814][ T4230] Invalid ELF header magic: != ELF [ 46.057867][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.183163][ T4249] loop2: detected capacity change from 0 to 128 [ 46.221741][ T4249] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.317574][ T4249] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.872083][ T4277] syzkaller1: entered promiscuous mode [ 46.877730][ T4277] syzkaller1: entered allmulticast mode [ 47.492232][ T4308] loop0: detected capacity change from 0 to 1024 [ 47.519337][ T4308] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.527960][ T4308] EXT4-fs: Ignoring removed bh option [ 47.555222][ T4308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.574095][ T4308] xt_hashlimit: size too large, truncated to 1048576 [ 47.686704][ T4288] loop3: detected capacity change from 0 to 512 [ 47.693570][ T4288] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.822495][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.083254][ T4329] loop1: detected capacity change from 0 to 1024 [ 48.100590][ T4329] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.114418][ T4329] /dev/loop1: Can't open blockdev [ 48.197478][ T4337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.350'. [ 48.302603][ T4342] loop4: detected capacity change from 0 to 512 [ 48.310212][ T4343] loop1: detected capacity change from 0 to 512 [ 48.331900][ T4342] EXT4-fs: Ignoring removed bh option [ 48.357707][ T4342] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 48.376999][ T4342] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 48.388802][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.394246][ T4342] EXT4-fs (loop4): failed to open journal device unknown-block(8,224) -6 [ 48.417887][ T4343] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.760520][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.082537][ T4368] loop1: detected capacity change from 0 to 1024 [ 49.110869][ T4368] EXT4-fs: Ignoring removed bh option [ 49.134361][ T4368] EXT4-fs: Ignoring removed nobh option [ 49.161717][ T4368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.179257][ T4372] loop3: detected capacity change from 0 to 512 [ 49.240244][ T4372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.264488][ T4372] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.275880][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.301545][ T4372] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.363: corrupted inode contents [ 49.318047][ T4372] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.363: mark_inode_dirty error [ 49.334066][ T4372] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.363: corrupted inode contents [ 49.356267][ T4378] netlink: 64 bytes leftover after parsing attributes in process `syz.0.366'. [ 49.366060][ T4372] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.363: mark_inode_dirty error [ 49.441721][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.469728][ T4384] loop3: detected capacity change from 0 to 128 [ 49.583201][ T4386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.654773][ T4386] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.679610][ T4386] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 49.692136][ T4386] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.692136][ T4386] [ 49.701879][ T4386] EXT4-fs (loop1): Total free blocks count 0 [ 49.708951][ T4386] EXT4-fs (loop1): Free/Dirty block details [ 49.715226][ T4386] EXT4-fs (loop1): free_blocks=2415919104 [ 49.721099][ T4386] EXT4-fs (loop1): dirty_blocks=32 [ 49.726260][ T4386] EXT4-fs (loop1): Block reservation details [ 49.732458][ T4386] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 49.745362][ T4404] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.901341][ T4412] SELinux: failed to load policy [ 49.944700][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 49.978249][ T4421] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.013593][ T4421] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.045502][ T4421] EXT4-fs (loop4): shut down requested (0) [ 50.087862][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.439139][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 50.439232][ T29] audit: type=1400 audit(1770379501.098:756): avc: denied { write } for pid=4432 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.533905][ T29] audit: type=1400 audit(1770379501.188:757): avc: denied { read } for pid=4438 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.581370][ T29] audit: type=1400 audit(1770379501.238:758): avc: denied { listen } for pid=4440 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.637866][ T29] audit: type=1326 audit(1770379501.298:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 50.662297][ T29] audit: type=1326 audit(1770379501.328:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 50.685698][ T29] audit: type=1400 audit(1770379501.328:761): avc: denied { execute } for pid=4444 comm="syz.0.394" name="cgroup" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 50.708181][ T29] audit: type=1326 audit(1770379501.328:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 50.731727][ T29] audit: type=1326 audit(1770379501.328:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 50.789970][ T4447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.809517][ T4447] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.395: Allocating blocks 449-513 which overlap fs metadata [ 50.855554][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.066841][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 51.077370][ T29] audit: type=1400 audit(1770379501.738:764): avc: denied { connect } for pid=4467 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.109750][ T4471] set_capacity_and_notify: 3 callbacks suppressed [ 51.109763][ T4471] loop3: detected capacity change from 0 to 512 [ 51.148090][ T4471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.178719][ T4475] loop1: detected capacity change from 0 to 512 [ 51.183310][ T4471] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.195247][ T4475] EXT4-fs: inline encryption not supported [ 51.209049][ T29] audit: type=1400 audit(1770379501.868:765): avc: denied { add_name } for pid=4470 comm="syz.3.406" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.264024][ T2118] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.270412][ T4475] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.367041][ T4475] EXT4-fs (loop1): 1 orphan inode deleted [ 51.373255][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.385991][ T2118] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 51.424065][ T4475] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.455841][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.499558][ T4484] veth0: entered promiscuous mode [ 51.505462][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 51.620271][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.856796][ T4506] loop4: detected capacity change from 0 to 512 [ 51.905332][ T4506] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.420: iget: bad i_size value: 38620345925642 [ 51.944112][ T4506] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.420: couldn't read orphan inode 15 (err -117) [ 51.963842][ T4510] 9pnet: p9_errstr2errno: server reported unknown error ˙ [ 51.984375][ T4506] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.051336][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 52.072091][ T4517] loop3: detected capacity change from 0 to 1024 [ 52.079111][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.091353][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.091353][ T12] [ 52.098341][ T4517] EXT4-fs: inline encryption not supported [ 52.101110][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 52.112853][ T12] EXT4-fs (loop4): Free/Dirty block details [ 52.118796][ T12] EXT4-fs (loop4): free_blocks=0 [ 52.123813][ T12] EXT4-fs (loop4): dirty_blocks=1 [ 52.128945][ T12] EXT4-fs (loop4): Block reservation details [ 52.128976][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.143958][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 52.156719][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 52.159170][ T4517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.250567][ T4505] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.419: Allocating blocks 385-513 which overlap fs metadata [ 52.281467][ T4505] EXT4-fs (loop3): pa ffff888107a39150: logic 16, phys. 129, len 24 [ 52.289632][ T4505] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 52.301381][ T4505] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 52.313885][ T4505] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.313885][ T4505] [ 52.323554][ T4505] EXT4-fs (loop3): Total free blocks count 0 [ 52.329701][ T4505] EXT4-fs (loop3): Free/Dirty block details [ 52.335759][ T4505] EXT4-fs (loop3): free_blocks=128 [ 52.340906][ T4505] EXT4-fs (loop3): dirty_blocks=0 [ 52.345988][ T4505] EXT4-fs (loop3): Block reservation details [ 52.352056][ T4505] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 52.785769][ T4569] SELinux: failed to load policy [ 52.786016][ T4547] loop3: detected capacity change from 0 to 32768 [ 52.862590][ T4547] loop3: p1 p2 p3 < p5 p6 > [ 52.912055][ T4547] loop3: p2 size 16775168 extends beyond EOD, truncated [ 52.941543][ T4547] loop3: p5 start 4294970168 is beyond EOD, truncated [ 52.969876][ T3001] loop3: p1 p2 p3 < p5 p6 > [ 52.976601][ T3001] loop3: p2 size 16775168 extends beyond EOD, truncated [ 52.988294][ T3001] loop3: p5 start 4294970168 is beyond EOD, truncated [ 53.019259][ T4584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.452'. [ 53.152955][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.164907][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 53.176050][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.197158][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.231659][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 53.231919][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.246956][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.257014][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.293885][ T4479] Bluetooth: hci0: command 0x1003 tx timeout [ 53.303906][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.407432][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 53.437487][ T4609] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 53.457132][ T4609] SELinux: failed to load policy [ 53.500100][ T4614] loop3: detected capacity change from 0 to 8192 [ 53.544744][ T4628] loop2: detected capacity change from 0 to 512 [ 53.596304][ T4628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.631778][ T4628] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.664562][ T4642] loop1: detected capacity change from 0 to 512 [ 53.673067][ T4642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.684753][ T4642] EXT4-fs (loop1): 1 truncate cleaned up [ 53.693009][ T4642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.717658][ T4642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.476: bg 0: block 255: padding at end of block bitmap is not set [ 53.764298][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.865768][ T4652] loop1: detected capacity change from 0 to 512 [ 53.949169][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.087144][ T4672] loop2: detected capacity change from 0 to 1024 [ 54.096865][ T4672] EXT4-fs: Ignoring removed nobh option [ 54.102451][ T4672] EXT4-fs: inline encryption not supported [ 54.153489][ T4672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.197163][ T4672] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 54.273116][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 54.282189][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 54.291063][ T4685] netlink: 'syz.0.493': attribute type 6 has an invalid length. [ 54.298932][ T4685] netlink: 'syz.0.493': attribute type 5 has an invalid length. [ 54.318639][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.329419][ T2127] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.329475][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 54.329489][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 54.329510][ T4685] netlink: 'syz.0.493': attribute type 6 has an invalid length. [ 54.329520][ T4685] netlink: 'syz.0.493': attribute type 5 has an invalid length. [ 54.344447][ T2127] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.390343][ T2127] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.400334][ T2127] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.717976][ T4724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.730695][ T4724] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.744588][ T4724] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.509: corrupted xattr block 6: invalid header [ 54.758546][ T4724] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 54.775913][ T4724] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.509: corrupted xattr block 6: invalid header [ 54.789433][ T4724] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 54.824426][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.897271][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 54.914318][ T4737] EXT4-fs: inline encryption not supported [ 54.954530][ T4737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.084948][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.133126][ T3435] IPVS: starting estimator thread 0... [ 55.180675][ T4768] EXT4-fs: Ignoring removed bh option [ 55.204323][ T4768] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 55.225044][ T4768] EXT4-fs (loop1): 1 truncate cleaned up [ 55.231256][ T4768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.244051][ T4763] IPVS: using max 2544 ests per chain, 127200 per kthread [ 55.329837][ T4781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 55.358147][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.416187][ T4787] FAT-fs (loop1): Directory bread(block 64) failed [ 55.431699][ T4787] FAT-fs (loop1): Directory bread(block 65) failed [ 55.438318][ T4787] FAT-fs (loop1): Directory bread(block 66) failed [ 55.445272][ T4787] FAT-fs (loop1): Directory bread(block 67) failed [ 55.451908][ T4787] FAT-fs (loop1): Directory bread(block 68) failed [ 55.458861][ T4787] FAT-fs (loop1): Directory bread(block 69) failed [ 55.465502][ T4787] FAT-fs (loop1): Directory bread(block 70) failed [ 55.472173][ T4787] FAT-fs (loop1): Directory bread(block 71) failed [ 55.479013][ T4787] FAT-fs (loop1): Directory bread(block 72) failed [ 55.494265][ T4787] FAT-fs (loop1): Directory bread(block 73) failed [ 55.553856][ T4787] syz.1.533: attempt to access beyond end of device [ 55.553856][ T4787] loop1: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 55.588003][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 55.588020][ T29] audit: type=1400 audit(1770379506.238:825): avc: denied { connect } for pid=4794 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.675317][ T4799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.707161][ T4803] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 55.765591][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.808933][ T4815] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 55.903815][ T4821] xt_hashlimit: max too large, truncated to 1048576 [ 55.957364][ T4823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.002529][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.026954][ T29] audit: type=1400 audit(1770379506.688:826): avc: denied { name_bind } for pid=4833 comm="syz.1.555" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 56.093087][ T4838] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.099522][ T4838] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 56.112186][ T4838] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 56.133179][ T4841] set_capacity_and_notify: 10 callbacks suppressed [ 56.133193][ T4841] loop0: detected capacity change from 0 to 512 [ 56.141028][ T4838] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.556: attempt to clear invalid blocks 2 len 1 [ 56.163096][ T4838] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.556: invalid indirect mapped block 1819239214 (level 0) [ 56.177305][ T4838] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.556: invalid indirect mapped block 1819239214 (level 1) [ 56.192906][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.202838][ T4838] EXT4-fs (loop1): 1 truncate cleaned up [ 56.209673][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.218564][ T4841] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.557: ea_inode with extended attributes [ 56.232224][ T4838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.251446][ T4841] EXT4-fs (loop0): Remounting filesystem read-only [ 56.258288][ T4841] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 56.267504][ T4841] EXT4-fs (loop0): 1 orphan inode deleted [ 56.273360][ T29] audit: type=1400 audit(1770379506.928:827): avc: denied { remount } for pid=4837 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.274483][ T4838] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 56.302668][ T4841] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.303150][ T4838] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 56.303289][ T4841] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 56.343765][ T4838] EXT4-fs: user quota file already specified [ 56.368305][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.416438][ T4853] __nla_validate_parse: 2 callbacks suppressed [ 56.416457][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 56.431614][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 56.450453][ T4853] geneve2: entered promiscuous mode [ 56.455807][ T4853] geneve2: entered allmulticast mode [ 56.514070][ T4864] netlink: 46 bytes leftover after parsing attributes in process `syz.4.567'. [ 56.770301][ T4877] loop4: detected capacity change from 0 to 256 [ 56.779075][ T4877] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 56.936520][ T29] audit: type=1400 audit(1770379507.598:828): avc: denied { mount } for pid=4884 comm="syz.4.573" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 56.977862][ T4887] loop4: detected capacity change from 0 to 128 [ 56.990370][ T4887] syz.4.574: attempt to access beyond end of device [ 56.990370][ T4887] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 57.005548][ T4887] syz.4.574: attempt to access beyond end of device [ 57.005548][ T4887] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 57.019532][ T4887] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 57.028652][ T4887] syz.4.574: attempt to access beyond end of device [ 57.028652][ T4887] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 57.042306][ T4887] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 57.285114][ T4893] loop4: detected capacity change from 0 to 512 [ 57.295632][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.309774][ T4893] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.324896][ T29] audit: type=1400 audit(1770379507.988:829): avc: denied { setattr } for pid=4892 comm="syz.4.576" path="/131/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.348389][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.589340][ T4917] SELinux: failed to load policy [ 57.782992][ T4937] netlink: 182 bytes leftover after parsing attributes in process `syz.1.595'. [ 57.801866][ T4939] tipc: Started in network mode [ 57.806895][ T4939] tipc: Node identity ac14140f, cluster identity 4711 [ 57.814192][ T4939] tipc: New replicast peer: 100.1.1.0 [ 57.819730][ T4939] tipc: Enabled bearer , priority 10 [ 57.993732][ T29] audit: type=1400 audit(1770379508.648:830): avc: denied { create } for pid=4961 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.013562][ T29] audit: type=1400 audit(1770379508.658:831): avc: denied { write } for pid=4961 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.052067][ T29] audit: type=1400 audit(1770379508.708:832): avc: denied { bind } for pid=4966 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.059061][ T4967] netlink: 120 bytes leftover after parsing attributes in process `syz.0.610'. [ 58.081628][ T29] audit: type=1400 audit(1770379508.738:833): avc: denied { create } for pid=4968 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.130509][ T29] audit: type=1400 audit(1770379508.768:834): avc: denied { append } for pid=4968 comm="syz.1.609" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.206323][ T4980] SELinux: failed to load policy [ 58.469952][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 58.499734][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 58.524159][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 58.616323][ T4993] SELinux: failed to load policy [ 58.799861][ T5004] syzkaller1: entered promiscuous mode [ 58.805581][ T5004] syzkaller1: entered allmulticast mode [ 58.934041][ T1037] tipc: Node number set to 2886997007 [ 59.029868][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 59.203554][ T5034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.639'. [ 59.326186][ T5042] loop1: detected capacity change from 0 to 128 [ 59.354697][ T5042] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.377215][ T5042] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.405148][ T5042] EXT4-fs (loop1): shut down requested (2) [ 59.429765][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.443255][ T5047] loop4: detected capacity change from 0 to 2048 [ 59.504105][ T3304] loop4: p1 p3 p4 [ 59.508954][ T3304] loop4: p4 size 589824 extends beyond EOD, truncated [ 59.528989][ T5047] loop4: p1 p3 p4 [ 59.535070][ T5047] loop4: p4 size 589824 extends beyond EOD, truncated [ 59.555159][ T5051] loop7: detected capacity change from 0 to 16384 [ 59.572530][ T3001] loop4: p1 p3 p4 [ 59.577540][ T3001] loop4: p4 size 589824 extends beyond EOD, truncated [ 59.663986][ T5053] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 59.683963][ T5054] loop7: detected capacity change from 16384 to 0 [ 59.685326][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.700639][ C0] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 59.714660][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 59.725282][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.753612][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 59.757742][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.774561][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.824745][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 59.827379][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 60.052260][ T5075] netlink: 'syz.4.652': attribute type 8 has an invalid length. [ 60.062465][ T5075] bond0: entered promiscuous mode [ 60.067637][ T5075] bond_slave_0: entered promiscuous mode [ 60.073418][ T5075] bond_slave_1: entered promiscuous mode [ 60.081495][ T5075] gretap0: entered promiscuous mode [ 60.087958][ T5075] hsr1: entered promiscuous mode [ 60.230910][ T2118] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.118754][ T4973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.160275][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 61.160291][ T29] audit: type=1400 audit(1770379511.818:852): avc: denied { setopt } for pid=5225 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.207198][ T5231] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 61.218113][ T5231] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 61.230934][ T29] audit: type=1400 audit(1770379511.888:853): avc: denied { allowed } for pid=5227 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.250341][ T29] audit: type=1400 audit(1770379511.888:854): avc: denied { sqpoll } for pid=5227 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.315942][ T5237] loop1: detected capacity change from 0 to 128 [ 61.342392][ T5237] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.358529][ T5237] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.403623][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.416012][ T29] audit: type=1400 audit(1770379512.078:855): avc: denied { mount } for pid=5241 comm="syz.3.666" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.662765][ T5257] loop3: detected capacity change from 0 to 512 [ 61.686069][ T5257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.698724][ T5257] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.722512][ T29] audit: type=1400 audit(1770379512.378:856): avc: denied { setopt } for pid=5260 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.742246][ T29] audit: type=1400 audit(1770379512.378:857): avc: denied { write } for pid=5260 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.957605][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.037593][ T29] audit: type=1400 audit(1770379512.698:858): avc: denied { create } for pid=5284 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.253892][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.254349][ T4479] Bluetooth: hci0: command 0x1003 tx timeout [ 62.278698][ T5302] __nla_validate_parse: 1 callbacks suppressed [ 62.278714][ T5302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'. [ 62.432647][ T29] audit: type=1400 audit(1770379513.088:859): avc: denied { connect } for pid=5310 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.493717][ T12] tipc: Subscription rejected, illegal request [ 62.627070][ T5324] loop4: detected capacity change from 0 to 128 [ 62.646457][ T5324] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.676932][ T5324] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.696635][ T5322] loop2: detected capacity change from 0 to 8192 [ 62.754540][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.032980][ T29] audit: type=1400 audit(1770379513.688:860): avc: denied { mount } for pid=5344 comm="syz.4.709" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.126255][ T29] audit: type=1400 audit(1770379513.698:861): avc: denied { unmount } for pid=5344 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.373070][ T5375] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 63.384878][ T5374] IPVS: stopping master sync thread 5375 ... [ 63.411522][ T5378] loop3: detected capacity change from 0 to 1024 [ 63.427573][ T5378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.448247][ T5378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.723'. [ 63.474286][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.501855][ T5387] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 63.528084][ T5387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.552167][ T5387] bond1: (slave gretap1): making interface the new active one [ 63.561236][ T5387] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 63.579659][ T5392] loop1: detected capacity change from 0 to 1024 [ 63.611201][ T5392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.773958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.818332][ T5405] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 63.826151][ T5405] netlink: 84 bytes leftover after parsing attributes in process `syz.3.733'. [ 63.835085][ T5405] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 63.868433][ T5414] loop1: detected capacity change from 0 to 1024 [ 63.890991][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 64.139368][ T5433] loop2: detected capacity change from 0 to 128 [ 64.154227][ T5433] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.189597][ T5436] netlink: 'syz.3.744': attribute type 3 has an invalid length. [ 64.197407][ T5436] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 64.205176][ T5436] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.744'. [ 64.404500][ T5440] loop2: detected capacity change from 0 to 512 [ 64.424084][ T5440] EXT4-fs: Ignoring removed i_version option [ 64.438664][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.438729][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.453031][ T5440] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 64.453443][ T5440] EXT4-fs (loop2): 1 truncate cleaned up [ 64.542871][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 64.652066][ T5471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.706423][ T5479] loop0: detected capacity change from 0 to 4096 [ 64.795341][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 64.804489][ T5490] netlink: 9 bytes leftover after parsing attributes in process `syz.3.767'. [ 64.908258][ T5503] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 64.923256][ T5498] netlink: 'syz.0.771': attribute type 12 has an invalid length. [ 64.931169][ T5498] netlink: 'syz.0.771': attribute type 29 has an invalid length. [ 64.938930][ T5498] netlink: 148 bytes leftover after parsing attributes in process `syz.0.771'. [ 64.964643][ T5503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.017141][ T5507] bond2: (slave gretap1): making interface the new active one [ 65.026851][ T5507] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 65.104969][ T5517] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 65.139817][ T5528] netlink: 'syz.3.787': attribute type 33 has an invalid length. [ 65.147795][ T5528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.787'. [ 65.316206][ T5549] veth0: entered promiscuous mode [ 65.327735][ T5549] veth0: left promiscuous mode [ 65.622204][ T5583] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 65.646805][ T37] bridge_slave_1: left allmulticast mode [ 65.652526][ T37] bridge_slave_1: left promiscuous mode [ 65.658282][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.675998][ T5583] EXT4-fs (loop3): 1 truncate cleaned up [ 65.689501][ T37] bridge_slave_0: left allmulticast mode [ 65.695632][ T37] bridge_slave_0: left promiscuous mode [ 65.701350][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.770963][ T37] bond2 (unregistering): (slave gretap1): Releasing active interface [ 65.826260][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.843524][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.852682][ T37] bond0 (unregistering): Released all slaves [ 65.860925][ T37] bond1 (unregistering): Released all slaves [ 65.869957][ T37] bond2 (unregistering): Released all slaves [ 65.941977][ T37] hsr_slave_0: left promiscuous mode [ 65.952938][ T5596] loop1: p1 p3 < > [ 65.957077][ T37] hsr_slave_1: left promiscuous mode [ 65.972038][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.984376][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.032850][ T5620] process 'syz.1.815' launched './file1' with NULL argv: empty string added [ 66.098411][ T37] team0 (unregistering): Port device team_slave_1 removed [ 66.120784][ T37] team0 (unregistering): Port device team_slave_0 removed [ 66.139212][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 66.139578][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.333358][ T5632] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.351295][ T5632] smc: removing net device bond0 with user defined pnetid SYZ2 [ 66.359129][ T5632] bond0 (unregistering): left promiscuous mode [ 66.365459][ T5632] bond_slave_0: left promiscuous mode [ 66.371142][ T5632] bond_slave_1: left promiscuous mode [ 66.377907][ T5632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.408322][ T5632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.422104][ T5632] bond0 (unregistering): Released all slaves [ 66.450782][ T5560] chnl_net:caif_netlink_parms(): no params data found [ 66.496044][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.503207][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.510400][ T5560] bridge_slave_0: entered allmulticast mode [ 66.517072][ T5560] bridge_slave_0: entered promiscuous mode [ 66.523791][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.530920][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.538147][ T5560] bridge_slave_1: entered allmulticast mode [ 66.544773][ T5560] bridge_slave_1: entered promiscuous mode [ 66.563134][ T5560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.573811][ T5560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.594300][ T5560] team0: Port device team_slave_0 added [ 66.601090][ T5560] team0: Port device team_slave_1 added [ 66.619763][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.626860][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.652840][ T5560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.664973][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.671969][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.697947][ T5560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.726238][ T5560] hsr_slave_0: entered promiscuous mode [ 66.732625][ T5560] hsr_slave_1: entered promiscuous mode [ 66.738871][ T5560] debugfs: 'hsr0' already exists in 'hsr' [ 66.744649][ T5560] Cannot create hsr debugfs directory [ 67.062863][ T5697] SELinux: failed to load policy [ 67.073271][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 67.073346][ T29] audit: type=1400 audit(1770379518.727:907): avc: denied { associate } for pid=5707 comm="syz.3.822" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.139822][ T5710] SELinux: failed to load policy [ 67.154342][ T5560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.179988][ T5560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.205593][ T29] audit: type=1400 audit(1770379518.867:908): avc: denied { create } for pid=5713 comm="syz.4.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.215618][ T5560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.267973][ T5721] set_capacity_and_notify: 3 callbacks suppressed [ 67.268020][ T5721] loop4: detected capacity change from 0 to 128 [ 67.286456][ T5560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.304162][ T5724] __nla_validate_parse: 4 callbacks suppressed [ 67.304180][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 67.319824][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 67.419637][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.446073][ T5560] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.455137][ T5745] netlink: 'syz.1.831': attribute type 3 has an invalid length. [ 67.457643][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.462812][ T5745] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 67.462825][ T5745] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.831'. [ 67.487071][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.514243][ T5560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.524802][ T5560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.545980][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.553176][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.602112][ T29] audit: type=1400 audit(1770379519.257:909): avc: denied { mounton } for pid=5755 comm="syz.3.832" path="/file0" dev="mqueue" ino=11657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.718479][ T5560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.791711][ T29] audit: type=1326 audit(1770379519.437:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 67.815108][ T29] audit: type=1326 audit(1770379519.437:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 67.838517][ T29] audit: type=1326 audit(1770379519.447:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 67.861822][ T29] audit: type=1326 audit(1770379519.447:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 67.885185][ T29] audit: type=1326 audit(1770379519.447:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c15b4aeb9 code=0x7ffc0000 [ 67.916928][ T5787] loop1: detected capacity change from 0 to 1024 [ 67.957393][ T5560] veth0_vlan: entered promiscuous mode [ 67.975817][ T5560] veth1_vlan: entered promiscuous mode [ 67.983840][ T5787] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.843: inode #1717973040: comm syz.1.843: iget: illegal inode # [ 67.996947][ T5560] veth0_macvtap: entered promiscuous mode [ 68.011157][ T5560] veth1_macvtap: entered promiscuous mode [ 68.030155][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.039597][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.051889][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.056680][ T29] audit: type=1400 audit(1770379519.707:915): avc: denied { execute } for pid=5797 comm="syz.3.847" name="sg#" dev="devtmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 68.082418][ T29] audit: type=1400 audit(1770379519.707:916): avc: denied { execute_no_trans } for pid=5797 comm="syz.3.847" path="/dev/sg#" dev="devtmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 68.118686][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.132518][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148951][ T5787] EXT4-fs (loop1): Remounting filesystem read-only [ 68.164742][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175740][ T5787] EXT4-fs warning (device loop1): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.1.843: cleanup dec ref error -30 [ 68.188759][ T5787] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.843: dec ref error=-30 [ 68.263456][ T5809] ipvlan2: entered allmulticast mode [ 68.277365][ T5809] dummy0: entered allmulticast mode [ 68.346789][ T5819] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 68.580549][ T5836] loop3: detected capacity change from 0 to 512 [ 68.600550][ T5836] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.862: bg 0: block 5: invalid block bitmap [ 68.624054][ T5836] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 68.635693][ T5836] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.862: invalid indirect mapped block 3 (level 2) [ 68.670853][ T5836] EXT4-fs (loop3): 1 orphan inode deleted [ 68.676655][ T5836] EXT4-fs (loop3): 1 truncate cleaned up [ 68.683034][ T5836] EXT4-fs mount: 16 callbacks suppressed [ 68.683045][ T5836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.715822][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.788218][ T5844] 9pnet: p9_errstr2errno: server reported unknown error ˙˙ [ 68.811939][ T5846] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 68.872337][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 68.897712][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 68.910835][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.917468][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 68.929103][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.939378][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.948242][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 68.948599][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.957098][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 68.974607][ T5861] netlink: 'syz.4.873': attribute type 6 has an invalid length. [ 69.016934][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 69.025822][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 69.034829][ T5861] netlink: 'syz.4.873': attribute type 6 has an invalid length. [ 69.035474][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.035887][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.035923][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.035955][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.137462][ T1037] kernel read not supported for file /vcs (pid: 1037 comm: kworker/0:2) [ 69.174550][ T5883] netlink: 'syz.1.883': attribute type 18 has an invalid length. [ 69.187666][ T5883] netlink: 'syz.1.883': attribute type 18 has an invalid length. [ 69.192707][ T2127] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.208356][ T2127] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.225515][ T2127] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.234452][ T2127] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.585747][ T5922] loop1: detected capacity change from 0 to 1024 [ 69.659277][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.705547][ T5915] loop2: detected capacity change from 0 to 32768 [ 69.732468][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.744310][ T3303] loop2: p1 p3 < > [ 69.752017][ T5915] loop2: p1 p3 < > [ 69.796872][ T5932] loop1: detected capacity change from 0 to 256 [ 69.888563][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.899818][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.940678][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.941123][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.161869][ T5962] netlink: 'syz.3.916': attribute type 6 has an invalid length. [ 70.235643][ T5966] loop4: detected capacity change from 0 to 1024 [ 70.306611][ T5966] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 70.343960][ T5966] System zones: 0-1, 3-8 [ 70.348902][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.408846][ T5966] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.437033][ T5966] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.920: lblock 0 mapped to illegal pblock 0 (length 5) [ 70.450693][ T5966] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.920: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 70.472643][ T5966] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.920: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.494020][ T5986] loop2: detected capacity change from 0 to 512 [ 70.522429][ T5986] EXT4-fs: inline encryption not supported [ 70.535030][ T5986] /dev/loop2: Can't open blockdev [ 70.549488][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.649733][ T5999] loop4: detected capacity change from 0 to 128 [ 70.680351][ T5993] loop3: detected capacity change from 0 to 8192 [ 70.746143][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.784182][ T6003] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.803604][ T6003] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 70.839063][ T3318] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 70.847037][ T3318] FAT-fs (loop3): Filesystem has been set read-only [ 70.855536][ T5560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.036636][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.057762][ T6030] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.077476][ T6030] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 3: comm syz.3.947: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 71.118078][ T6030] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.947: path /193/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 71.145524][ T6030] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.947: path /193/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 71.168764][ T6030] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.947: path /193/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 71.215594][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.280701][ T6049] Unable to read rock-ridge attributes [ 71.295060][ T6047] wireguard0: entered promiscuous mode [ 71.300764][ T6047] wireguard0: entered allmulticast mode [ 71.406328][ T6060] ALSA: seq fatal error: cannot create timer (-16) [ 71.444729][ T6062] bridge_slave_0: left allmulticast mode [ 71.450424][ T6062] bridge_slave_0: left promiscuous mode [ 71.456197][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.476465][ T6062] bridge_slave_1: left allmulticast mode [ 71.482190][ T6062] bridge_slave_1: left promiscuous mode [ 71.487994][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.504755][ T6062] bond0: (slave bond_slave_0): Releasing backup interface [ 71.515268][ T6062] bond0: (slave bond_slave_1): Releasing backup interface [ 71.527741][ T6062] team0: Port device team_slave_0 removed [ 71.537044][ T6062] team0: Port device team_slave_1 removed [ 71.543972][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.551439][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.560612][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.568061][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.581903][ T6062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.734830][ T6079] cgroup: fork rejected by pids controller in /syz2 [ 72.428470][ T8770] set_capacity_and_notify: 3 callbacks suppressed [ 72.428489][ T8770] loop2: detected capacity change from 0 to 8192 [ 72.454823][ T8773] loop3: detected capacity change from 0 to 4096 [ 72.473420][ T8773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.507380][ T8773] EXT4-fs (loop3): shut down requested (1) [ 72.513598][ T8773] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 72.522728][ T8773] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 72.531640][ T8773] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 72.555003][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.587615][ T3468] ================================================================== [ 72.595769][ T3468] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 72.604046][ T3468] [ 72.606396][ T3468] write to 0xffff88810da9c3dc of 2 bytes by task 8770 on cpu 1: [ 72.614066][ T3468] fat16_ent_put+0x28/0x60 [ 72.618533][ T3468] fat_alloc_clusters+0x57b/0xc50 [ 72.623887][ T3468] fat_get_block+0x258/0x5e0 [ 72.628524][ T3468] __block_write_begin_int+0x400/0xf90 [ 72.634024][ T3468] cont_write_begin+0x5fe/0x970 [ 72.638919][ T3468] fat_write_begin+0x4f/0xe0 [ 72.643551][ T3468] generic_perform_write+0x183/0x490 [ 72.648878][ T3468] __generic_file_write_iter+0x9e/0x120 [ 72.654472][ T3468] generic_file_write_iter+0x8d/0x310 [ 72.659927][ T3468] vfs_write+0x5a6/0x9f0 [ 72.664204][ T3468] ksys_write+0xdc/0x1a0 [ 72.668474][ T3468] __x64_sys_write+0x40/0x50 [ 72.673103][ T3468] x64_sys_call+0x2847/0x3000 [ 72.677817][ T3468] do_syscall_64+0xc0/0x2a0 [ 72.682362][ T3468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.688276][ T3468] [ 72.690616][ T3468] read to 0xffff88810da9c200 of 512 bytes by task 3468 on cpu 0: [ 72.698348][ T3468] copy_folio_from_iter_atomic+0x75f/0x1170 [ 72.704279][ T3468] generic_perform_write+0x2c1/0x490 [ 72.709611][ T3468] shmem_file_write_iter+0xc5/0xf0 [ 72.714790][ T3468] lo_rw_aio+0x67d/0x730 [ 72.719057][ T3468] loop_process_work+0x56c/0xac0 [ 72.724019][ T3468] loop_workfn+0x31/0x40 [ 72.728286][ T3468] process_scheduled_works+0x4cd/0x9d0 [ 72.733771][ T3468] worker_thread+0x6bc/0x8b0 [ 72.738391][ T3468] kthread+0x488/0x510 [ 72.742491][ T3468] ret_from_fork+0x148/0x280 [ 72.747114][ T3468] ret_from_fork_asm+0x1a/0x30 [ 72.751910][ T3468] [ 72.754249][ T3468] Reported by Kernel Concurrency Sanitizer on: [ 72.760442][ T3468] CPU: 0 UID: 0 PID: 3468 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.770373][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 72.780446][ T3468] Workqueue: loop2 loop_workfn [ 72.785236][ T3468] ==================================================================