last executing test programs: 30.429083135s ago: executing program 1 (id=10): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4001, 0xb, 0x5, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000040)) 30.256622985s ago: executing program 1 (id=14): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x107042, 0x59) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f0000000b00)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000980)={0x3920e, r0, 0xd, 0x1, 0x3, 0x6}) 30.080374465s ago: executing program 1 (id=21): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1215, 0x0, &(0x7f0000000000), &(0x7f0000000580)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@errors_remount}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4ec, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80000005, 0x6, 0x48}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 29.81822957s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10f18c0, 0x0) 29.719957396s ago: executing program 1 (id=32): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b"], 0x92fc}}, 0x0) 28.070986253s ago: executing program 1 (id=68): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 28.070828783s ago: executing program 32 (id=68): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.621541875s ago: executing program 0 (id=777): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r1, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 1.510356022s ago: executing program 0 (id=780): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) 1.166489912s ago: executing program 0 (id=789): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ptrace(0x10, 0x0) rt_sigqueueinfo(0x0, 0x36, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1.141420043s ago: executing program 0 (id=790): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1.062022378s ago: executing program 0 (id=793): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000800, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@abort}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x2, @perf_config_ext={0x4, 0x40000000000001ff}, 0x1024a0, 0x0, 0x1, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x383140, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 861.632159ms ago: executing program 5 (id=797): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 791.798814ms ago: executing program 5 (id=801): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/45, 0x2d) getdents(r2, 0xfffffffffffffffd, 0x58) 739.520107ms ago: executing program 5 (id=804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4096, 0x1000}}], 0x1, 0x120a0, 0x0) 679.87303ms ago: executing program 5 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) 657.971342ms ago: executing program 0 (id=808): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x2070bd27, 0x25dfdbff, {0xa, 0x40, 0xc0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_FLAGS={0x8, 0x8, 0x313}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 580.185656ms ago: executing program 5 (id=809): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) 498.791641ms ago: executing program 5 (id=813): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10044, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 443.858194ms ago: executing program 3 (id=815): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0xa) 405.866856ms ago: executing program 4 (id=817): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r1) r2 = gettid() tkill(r2, 0x16) 366.444058ms ago: executing program 4 (id=818): setresuid(0xee01, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) 365.760728ms ago: executing program 4 (id=819): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 356.723409ms ago: executing program 3 (id=820): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 328.713631ms ago: executing program 4 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r3, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "e3cef2"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048045}, 0x0) 293.983973ms ago: executing program 2 (id=823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 266.688924ms ago: executing program 2 (id=824): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) 223.976617ms ago: executing program 4 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73) 220.670847ms ago: executing program 3 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 209.589498ms ago: executing program 2 (id=827): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 112.321773ms ago: executing program 2 (id=828): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x200000000000000, 0x0) 111.884533ms ago: executing program 3 (id=829): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) close(r1) 100.983544ms ago: executing program 4 (id=830): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="000101000040000000", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/30, 0x1e}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 69.511566ms ago: executing program 2 (id=831): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 57.548507ms ago: executing program 3 (id=832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 316.28µs ago: executing program 3 (id=833): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 0s ago: executing program 2 (id=834): r0 = syz_io_uring_setup(0xbff, &(0x7f0000000500)={0x0, 0xe09b, 0x800, 0x0, 0x1e2}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x4044010) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r3, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 25.770810][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.770826][ T29] audit: type=1400 audit(1769210949.284:70): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.800440][ T29] audit: type=1400 audit(1769210949.314:71): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.801192][ T3309] cgroup: Unknown subsys name 'net' [ 25.828172][ T29] audit: type=1400 audit(1769210949.354:72): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.972729][ T3309] cgroup: Unknown subsys name 'cpuset' [ 25.978949][ T3309] cgroup: Unknown subsys name 'rlimit' [ 26.148660][ T29] audit: type=1400 audit(1769210949.664:73): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.179369][ T29] audit: type=1400 audit(1769210949.664:74): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.201138][ T29] audit: type=1400 audit(1769210949.664:75): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.222692][ T29] audit: type=1400 audit(1769210949.664:76): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.243545][ T29] audit: type=1400 audit(1769210949.674:77): avc: denied { read } for pid=3049 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.250518][ T3314] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.266193][ T29] audit: type=1400 audit(1769210949.684:78): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.301976][ T29] audit: type=1400 audit(1769210949.684:79): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.336564][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.428106][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.444561][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.479633][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 27.507546][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 27.568019][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.575185][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.582653][ T3322] bridge_slave_0: entered allmulticast mode [ 27.589041][ T3322] bridge_slave_0: entered promiscuous mode [ 27.608023][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.615099][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.622484][ T3322] bridge_slave_1: entered allmulticast mode [ 27.628828][ T3322] bridge_slave_1: entered promiscuous mode [ 27.639221][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.646689][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.653874][ T3321] bridge_slave_0: entered allmulticast mode [ 27.660369][ T3321] bridge_slave_0: entered promiscuous mode [ 27.676549][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.683633][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.690879][ T3328] bridge_slave_0: entered allmulticast mode [ 27.697422][ T3328] bridge_slave_0: entered promiscuous mode [ 27.703787][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.711007][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.718573][ T3321] bridge_slave_1: entered allmulticast mode [ 27.725090][ T3321] bridge_slave_1: entered promiscuous mode [ 27.744419][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.751644][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.758864][ T3328] bridge_slave_1: entered allmulticast mode [ 27.765473][ T3328] bridge_slave_1: entered promiscuous mode [ 27.775830][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.783242][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.790577][ T3331] bridge_slave_0: entered allmulticast mode [ 27.797095][ T3331] bridge_slave_0: entered promiscuous mode [ 27.804479][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.823940][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.831099][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.838448][ T3331] bridge_slave_1: entered allmulticast mode [ 27.845604][ T3331] bridge_slave_1: entered promiscuous mode [ 27.852099][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 27.861908][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.876534][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.898100][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.908334][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.926745][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.940746][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.960869][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.975378][ T3322] team0: Port device team_slave_0 added [ 27.995819][ T3322] team0: Port device team_slave_1 added [ 28.006224][ T3321] team0: Port device team_slave_0 added [ 28.015118][ T3331] team0: Port device team_slave_0 added [ 28.026213][ T3328] team0: Port device team_slave_0 added [ 28.036726][ T3321] team0: Port device team_slave_1 added [ 28.045991][ T3331] team0: Port device team_slave_1 added [ 28.052922][ T3328] team0: Port device team_slave_1 added [ 28.058951][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.066195][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.093700][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.125782][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.133107][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.159560][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.170801][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.177995][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.205208][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.231636][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.238780][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.264940][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.276608][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.283748][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.291149][ T3324] bridge_slave_0: entered allmulticast mode [ 28.297657][ T3324] bridge_slave_0: entered promiscuous mode [ 28.304442][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.311384][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.338323][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.349463][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.356550][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.386083][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.401289][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.408480][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.415791][ T3324] bridge_slave_1: entered allmulticast mode [ 28.422008][ T3324] bridge_slave_1: entered promiscuous mode [ 28.428841][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.435963][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.462042][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.478415][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.485614][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.511881][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.555379][ T3322] hsr_slave_0: entered promiscuous mode [ 28.561394][ T3322] hsr_slave_1: entered promiscuous mode [ 28.575116][ T3321] hsr_slave_0: entered promiscuous mode [ 28.581216][ T3321] hsr_slave_1: entered promiscuous mode [ 28.587040][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 28.592892][ T3321] Cannot create hsr debugfs directory [ 28.600296][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.615817][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.652260][ T3328] hsr_slave_0: entered promiscuous mode [ 28.658448][ T3328] hsr_slave_1: entered promiscuous mode [ 28.664366][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 28.670113][ T3328] Cannot create hsr debugfs directory [ 28.681354][ T3331] hsr_slave_0: entered promiscuous mode [ 28.687398][ T3331] hsr_slave_1: entered promiscuous mode [ 28.693155][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 28.699482][ T3331] Cannot create hsr debugfs directory [ 28.709844][ T3324] team0: Port device team_slave_0 added [ 28.723096][ T3324] team0: Port device team_slave_1 added [ 28.762909][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.769890][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.796132][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.815547][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.822709][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.848705][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.933337][ T3324] hsr_slave_0: entered promiscuous mode [ 28.940353][ T3324] hsr_slave_1: entered promiscuous mode [ 28.946346][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 28.952119][ T3324] Cannot create hsr debugfs directory [ 29.010143][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.023280][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.037014][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.049760][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.085837][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.098689][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.109299][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.120208][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.154164][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.165934][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.178491][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.189916][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.208656][ T3331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.218750][ T3331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.227587][ T3331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.237862][ T3331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.287890][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.297696][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.307024][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.317293][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.350908][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.372008][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.390109][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.401346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.408676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.421284][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.428567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.448200][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.468590][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.477680][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.484893][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.495591][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.507489][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.514582][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.540494][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.551712][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.560990][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.574156][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.581412][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.590277][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.597767][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.615753][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.623092][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.634891][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.641970][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.657615][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.671952][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.679409][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.697660][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.704934][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.742649][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.783115][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.801721][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.903215][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.915392][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.943812][ T3322] veth0_vlan: entered promiscuous mode [ 29.957757][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.971489][ T3321] veth0_vlan: entered promiscuous mode [ 29.978143][ T3322] veth1_vlan: entered promiscuous mode [ 30.013589][ T3321] veth1_vlan: entered promiscuous mode [ 30.049664][ T3322] veth0_macvtap: entered promiscuous mode [ 30.067603][ T3321] veth0_macvtap: entered promiscuous mode [ 30.079092][ T3322] veth1_macvtap: entered promiscuous mode [ 30.089343][ T3321] veth1_macvtap: entered promiscuous mode [ 30.096741][ T3328] veth0_vlan: entered promiscuous mode [ 30.113305][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.127901][ T3328] veth1_vlan: entered promiscuous mode [ 30.137930][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.146830][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.161078][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.176366][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.185877][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.195070][ T3324] veth0_vlan: entered promiscuous mode [ 30.204634][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.216908][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.227985][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.239297][ T3324] veth1_vlan: entered promiscuous mode [ 30.246660][ T3331] veth0_vlan: entered promiscuous mode [ 30.253949][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.270822][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.281078][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.299179][ T3331] veth1_vlan: entered promiscuous mode [ 30.310589][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.327194][ T3324] veth0_macvtap: entered promiscuous mode [ 30.334299][ T3328] veth0_macvtap: entered promiscuous mode [ 30.345280][ T3324] veth1_macvtap: entered promiscuous mode [ 30.362188][ T3328] veth1_macvtap: entered promiscuous mode [ 30.410891][ T3331] veth0_macvtap: entered promiscuous mode [ 30.418657][ T3495] loop1: detected capacity change from 0 to 512 [ 30.420034][ T3331] veth1_macvtap: entered promiscuous mode [ 30.436055][ T3495] ======================================================= [ 30.436055][ T3495] WARNING: The mand mount option has been deprecated and [ 30.436055][ T3495] and is ignored by this kernel. Remove the mand [ 30.436055][ T3495] option from the mount to silence this warning. [ 30.436055][ T3495] ======================================================= [ 30.476940][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.485481][ T3495] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.502001][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.502692][ T3495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 30.511410][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.530085][ T3495] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2: Invalid inode bitmap blk 4 in block_group 0 [ 30.544431][ T3495] EXT4-fs (loop1): Remounting filesystem read-only [ 30.559194][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.568509][ T3495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.585953][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.596099][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.607588][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.618804][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.643806][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.658725][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.668601][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.688374][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.707002][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.722993][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787856][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 30.787872][ T29] audit: type=1400 audit(1769210954.304:117): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.818454][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.829705][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.838678][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.848347][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.858993][ T29] audit: type=1400 audit(1769210954.344:118): avc: denied { write } for pid=3506 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.878579][ T29] audit: type=1400 audit(1769210954.384:119): avc: denied { read write } for pid=3517 comm="syz.4.5" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.901868][ T29] audit: type=1400 audit(1769210954.384:120): avc: denied { open } for pid=3517 comm="syz.4.5" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.925711][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.930283][ T29] audit: type=1400 audit(1769210954.384:121): avc: denied { ioctl } for pid=3517 comm="syz.4.5" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.968762][ T29] audit: type=1326 audit(1769210954.464:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb69eacb9 code=0x7ffc0000 [ 30.993809][ T29] audit: type=1326 audit(1769210954.464:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3cb69eacb9 code=0x7ffc0000 [ 31.021679][ T29] audit: type=1400 audit(1769210954.544:124): avc: denied { prog_run } for pid=3523 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.043124][ T29] audit: type=1400 audit(1769210954.544:125): avc: denied { create } for pid=3526 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.130523][ T3539] loop1: detected capacity change from 0 to 512 [ 31.139325][ T29] audit: type=1400 audit(1769210954.544:126): avc: denied { tracepoint } for pid=3515 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.163204][ T3539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.176782][ T3539] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.214791][ T3539] syz.1.14 (3539) used greatest stack depth: 10512 bytes left [ 31.277851][ T3548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3548 comm=syz.2.18 [ 31.291666][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.330545][ T3555] loop1: detected capacity change from 0 to 512 [ 31.341177][ T3557] loop0: detected capacity change from 0 to 1024 [ 31.357590][ T3555] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.358550][ T3557] EXT4-fs: Ignoring removed nobh option [ 31.373864][ T3557] EXT4-fs: Ignoring removed bh option [ 31.389953][ T3555] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 31.409177][ T3555] EXT4-fs (loop1): Remounting filesystem read-only [ 31.428784][ T3555] EXT4-fs (loop1): 1 truncate cleaned up [ 31.435840][ T3555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.454000][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0002-000000000000 r/w without journal. Quota mode: writeback. [ 31.492447][ T3555] syz.1.21 (3555) used greatest stack depth: 9168 bytes left [ 31.517694][ T3570] sock: sock_set_timeout: `syz.2.26' (pid 3570) tries to set negative timeout [ 31.537022][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.547678][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0002-000000000000. [ 31.927300][ T3606] vhci_hcd vhci_hcd.4: invalid port number 255 [ 31.933606][ T3606] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 32.090081][ T3619] loop4: detected capacity change from 0 to 1024 [ 32.113488][ T3619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.135877][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.189291][ T3625] SELinux: failed to load policy [ 32.250623][ T3635] process 'syz.0.52' launched './file1' with NULL argv: empty string added [ 32.442989][ T3646] vlan2: entered allmulticast mode [ 32.448146][ T3646] bond0: entered allmulticast mode [ 32.453345][ T3646] bond_slave_0: entered allmulticast mode [ 32.459115][ T3646] bond_slave_1: entered allmulticast mode [ 32.468133][ T3646] netlink: 14 bytes leftover after parsing attributes in process `syz.4.57'. [ 32.490355][ T3646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.499735][ T3646] bond_slave_0: left allmulticast mode [ 32.509198][ T3646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.519382][ T3646] bond_slave_1: left allmulticast mode [ 32.533107][ T3646] bond0 (unregistering): Released all slaves [ 33.119442][ T3669] loop2: detected capacity change from 0 to 32768 [ 33.172607][ T3312] loop2: p1 p3 < > [ 33.186203][ T3669] loop2: p1 p3 < > [ 33.244665][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.375206][ T3683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 33.435362][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.453776][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.480926][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 33.503877][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.521196][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.545632][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.609419][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.618432][ T3706] netlink: 'syz.3.76': attribute type 11 has an invalid length. [ 33.626775][ T3706] netlink: 'syz.3.76': attribute type 14 has an invalid length. [ 33.665228][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.695355][ T3706] vxlan0: entered promiscuous mode [ 33.706321][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.733318][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.761210][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.794668][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.805417][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 33.827695][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.844043][ T3679] chnl_net:caif_netlink_parms(): no params data found [ 33.961889][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.969274][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.007380][ T3679] bridge_slave_0: entered allmulticast mode [ 34.037667][ T3731] loop2: detected capacity change from 0 to 256 [ 34.044555][ T3679] bridge_slave_0: entered promiscuous mode [ 34.056034][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.063480][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.071239][ T3679] bridge_slave_1: entered allmulticast mode [ 34.078373][ T3679] bridge_slave_1: entered promiscuous mode [ 34.098472][ T60] bridge_slave_1: left allmulticast mode [ 34.105036][ T60] bridge_slave_1: left promiscuous mode [ 34.110831][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.120655][ T60] bridge_slave_0: left allmulticast mode [ 34.127013][ T60] bridge_slave_0: left promiscuous mode [ 34.133416][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.225181][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.236162][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.248119][ T60] bond0 (unregistering): Released all slaves [ 34.277492][ T3679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.295818][ T3679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.308900][ T60] hsr_slave_0: left promiscuous mode [ 34.352877][ T60] hsr_slave_1: left promiscuous mode [ 34.361268][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.369231][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.382595][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.390643][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.401717][ T60] veth1_macvtap: left promiscuous mode [ 34.407880][ T60] veth0_macvtap: left promiscuous mode [ 34.414336][ T60] veth1_vlan: left promiscuous mode [ 34.419770][ T60] veth0_vlan: left promiscuous mode [ 34.446897][ T3754] loop0: detected capacity change from 0 to 512 [ 34.464850][ T3754] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 34.476264][ T3754] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.486572][ T3754] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.92: Block bitmap for bg 0 marked uninitialized [ 34.501031][ T3754] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 34.510559][ T3754] EXT4-fs (loop0): 1 orphan inode deleted [ 34.517140][ T3754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.529409][ T60] team0 (unregistering): Port device team_slave_1 removed [ 34.539870][ T60] team0 (unregistering): Port device team_slave_0 removed [ 34.610504][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.613564][ T3679] team0: Port device team_slave_0 added [ 34.626946][ T3679] team0: Port device team_slave_1 added [ 34.665849][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.673326][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.699927][ T3679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.733951][ T3777] loop4: detected capacity change from 0 to 512 [ 34.740077][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.747390][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.775537][ T3679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.793727][ T3777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.813449][ T3777] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.821999][ T3679] hsr_slave_0: entered promiscuous mode [ 34.827933][ T3777] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 34.832469][ T3679] hsr_slave_1: entered promiscuous mode [ 34.842595][ T3777] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 34.854179][ T3679] debugfs: 'hsr0' already exists in 'hsr' [ 34.854725][ T3777] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.103: bad orphan inode 768 [ 34.860423][ T3679] Cannot create hsr debugfs directory [ 34.877997][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.987386][ T3679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.996935][ T3679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.007525][ T3679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.017962][ T3679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.055601][ T3679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.071313][ T3679] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.083900][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.091630][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.105098][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.112945][ T2475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.133122][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.235895][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.322246][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.331729][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.388646][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.389104][ T3844] Zero length message leads to an empty skb [ 35.402546][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.416820][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.434910][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.485721][ T3859] loop4: detected capacity change from 0 to 128 [ 35.517490][ T3679] veth0_vlan: entered promiscuous mode [ 35.540028][ T3859] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.554741][ T3679] veth1_vlan: entered promiscuous mode [ 35.599551][ T3875] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3875 comm=syz.0.111 [ 35.608459][ T3679] veth0_macvtap: entered promiscuous mode [ 35.623528][ T3859] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.639636][ T3679] veth1_macvtap: entered promiscuous mode [ 35.684469][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.711179][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.732305][ T3331] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.743285][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.778708][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.822141][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.851772][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.861348][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 35.861376][ T29] audit: type=1400 audit(1769210959.364:252): avc: denied { read } for pid=3888 comm="syz.5.69" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.894342][ T29] audit: type=1400 audit(1769210959.364:253): avc: denied { open } for pid=3888 comm="syz.5.69" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.015102][ T29] audit: type=1400 audit(1769210959.524:254): avc: denied { map } for pid=3888 comm="syz.5.69" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.039331][ T29] audit: type=1400 audit(1769210959.524:255): avc: denied { execute } for pid=3888 comm="syz.5.69" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.078052][ T29] audit: type=1400 audit(1769210959.564:256): avc: denied { watch watch_reads } for pid=3908 comm="syz.4.119" path="/31" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.086879][ T3911] syz.0.121: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/ [ 36.101560][ T29] audit: type=1400 audit(1769210959.594:257): avc: denied { create } for pid=3907 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.101586][ T29] audit: type=1400 audit(1769210959.594:258): avc: denied { setopt } for pid=3907 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.114726][ T3911] ,mems_allowed=0 [ 36.158551][ T3911] CPU: 1 UID: 0 PID: 3911 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.158583][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.158597][ T3911] Call Trace: [ 36.158607][ T3911] [ 36.158615][ T3911] __dump_stack+0x1d/0x30 [ 36.158643][ T3911] dump_stack_lvl+0x95/0xd0 [ 36.158670][ T3911] dump_stack+0x15/0x1b [ 36.158690][ T3911] warn_alloc+0x145/0x1c0 [ 36.158716][ T3911] ? kmem_cache_free+0xdf/0x380 [ 36.158791][ T3911] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 36.158829][ T3911] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 36.158855][ T3911] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 36.158924][ T3911] ? slow_avc_audit+0x14c/0x190 [ 36.158958][ T3911] ? should_fail_ex+0x30/0x280 [ 36.158979][ T3911] ? should_failslab+0x8c/0xb0 [ 36.159016][ T3911] vmalloc_user_noprof+0x7d/0xb0 [ 36.159041][ T3911] ? xskq_create+0x80/0xe0 [ 36.159069][ T3911] xskq_create+0x80/0xe0 [ 36.159111][ T3911] xsk_init_queue+0x91/0xe0 [ 36.159213][ T3911] xsk_setsockopt+0x477/0x640 [ 36.159310][ T3911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 36.159335][ T3911] __sys_setsockopt+0x184/0x200 [ 36.159359][ T3911] __x64_sys_setsockopt+0x64/0x80 [ 36.159381][ T3911] x64_sys_call+0x21d5/0x3000 [ 36.159431][ T3911] do_syscall_64+0xc0/0x2a0 [ 36.159528][ T3911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.159687][ T3911] RIP: 0033:0x7f3cb69eacb9 [ 36.159774][ T3911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.159796][ T3911] RSP: 002b:00007f3cb5447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.159820][ T3911] RAX: ffffffffffffffda RBX: 00007f3cb6c65fa0 RCX: 00007f3cb69eacb9 [ 36.159887][ T3911] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 36.159902][ T3911] RBP: 00007f3cb6a58bf7 R08: 0000000000000004 R09: 0000000000000000 [ 36.159966][ T3911] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 36.159982][ T3911] R13: 00007f3cb6c66038 R14: 00007f3cb6c65fa0 R15: 00007ffcf0d7a148 [ 36.160004][ T3911] [ 36.160051][ T3911] Mem-Info: [ 36.202129][ T29] audit: type=1400 audit(1769210959.704:259): avc: denied { unlink } for pid=3331 comm="syz-executor" name="file0" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.206402][ T3911] active_anon:5829 inactive_anon:0 isolated_anon:0 [ 36.206402][ T3911] active_file:18165 inactive_file:2444 isolated_file:0 [ 36.206402][ T3911] unevictable:0 dirty:1508 writeback:0 [ 36.206402][ T3911] slab_reclaimable:3197 slab_unreclaimable:14634 [ 36.206402][ T3911] mapped:29089 shmem:195 pagetables:1098 [ 36.206402][ T3911] sec_pagetables:0 bounce:0 [ 36.206402][ T3911] kernel_misc_reclaimable:0 [ 36.206402][ T3911] free:1872216 free_pcp:26170 free_cma:0 [ 36.358556][ T3921] syz.2.125 uses obsolete (PF_INET,SOCK_PACKET) [ 36.367786][ T3911] Node 0 active_anon:23316kB inactive_anon:0kB active_file:72660kB inactive_file:9776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116356kB dirty:6032kB writeback:0kB shmem:780kB kernel_stack:3648kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 36.410954][ T3924] netlink: 532 bytes leftover after parsing attributes in process `syz.4.124'. [ 36.432729][ T3911] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 36.486843][ T29] audit: type=1400 audit(1769210959.924:260): avc: denied { create } for pid=3916 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.486942][ T29] audit: type=1400 audit(1769210959.924:261): avc: denied { write } for pid=3916 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.516210][ T3760] Bluetooth: hci0: command 0x1003 tx timeout [ 36.525100][ T3911] lowmem_reserve[]: 0 2879 7858 7858 [ 36.535209][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.565845][ T3911] Node 0 DMA32 free:2945488kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949016kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 36.565930][ T3911] lowmem_reserve[]: 0 0 4978 4978 [ 36.566010][ T3911] Node 0 Normal free:4530440kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23504kB inactive_anon:0kB active_file:72660kB inactive_file:9780kB unevictable:0kB writepending:6032kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:100460kB local_pcp:63048kB free_cma:0kB [ 36.711310][ T3911] lowmem_reserve[]: 0 0 0 0 [ 36.716265][ T3911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 36.733747][ T3911] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945488kB [ 36.755283][ T3911] Node 0 Normal: 561*4kB (UME) 238*8kB (UME) 96*16kB (UME) 109*32kB (UM) 96*64kB (UM) 81*128kB (UME) 71*256kB (UME) 11*512kB (UME) 14*1024kB (UM) 7*2048kB (UME) 1087*4096kB (UM) = 4530516kB [ 36.777068][ T3911] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 36.788069][ T3911] 20800 total pagecache pages [ 36.794259][ T3911] 0 pages in swap cache [ 36.798971][ T3911] Free swap = 124996kB [ 36.804100][ T3911] Total swap = 124996kB [ 36.810050][ T3911] 2097051 pages RAM [ 36.814609][ T3911] 0 pages HighMem/MovableOnly [ 36.820294][ T3911] 81397 pages reserved [ 36.835428][ T3917] netlink: 'syz.4.124': attribute type 29 has an invalid length. [ 36.862230][ T3920] netlink: 'syz.4.124': attribute type 29 has an invalid length. [ 36.957385][ T3936] loop2: detected capacity change from 0 to 1024 [ 36.988138][ T3936] EXT4-fs: inline encryption not supported [ 37.032000][ T3944] loop5: detected capacity change from 0 to 256 [ 37.045469][ T3936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.203225][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.281934][ T3966] loop3: detected capacity change from 0 to 1024 [ 37.304556][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.325008][ T3966] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.364197][ C0] hrtimer: interrupt took 47405 ns [ 37.369270][ T3966] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 1: comm syz.3.142: lblock 1 mapped to illegal pblock 1 (length 5) [ 37.387693][ T3966] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 37.401017][ T3966] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.401017][ T3966] [ 37.409371][ T3977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.449084][ T3979] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 37.527634][ T2475] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 37.547209][ T3985] loop5: detected capacity change from 0 to 1024 [ 37.560123][ T2475] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 37.567657][ T3985] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.573349][ T2475] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.573349][ T2475] [ 37.611729][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.622662][ T3985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.651645][ T3985] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.012283][ T4014] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 38.015916][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.055262][ T4016] vlan2: entered promiscuous mode [ 38.223744][ T4030] loop2: detected capacity change from 0 to 1024 [ 38.231766][ T4028] loop5: detected capacity change from 0 to 1024 [ 38.248820][ T4030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.252194][ T4028] EXT4-fs: inline encryption not supported [ 38.300001][ T4028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.330853][ T4030] EXT4-fs error (device loop2): ext4_xattr_block_find:1879: inode #15: comm syz.2.165: corrupted xattr block 209: invalid header [ 38.349888][ T4030] EXT4-fs (loop2): Remounting filesystem read-only [ 38.367587][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.418041][ T4049] IPv6: Can't replace route, no match found [ 38.423045][ T4048] loop4: detected capacity change from 0 to 128 [ 38.442804][ T4049] loop3: detected capacity change from 0 to 2048 [ 38.458153][ T4048] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.471218][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.485774][ T4048] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.503447][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.558657][ T3331] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.558971][ T4061] loop2: detected capacity change from 0 to 512 [ 38.585748][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.600287][ T4061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.613754][ T4061] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.671523][ T4071] EXT4-fs: Ignoring removed nobh option [ 38.674955][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.693024][ T4071] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 38.702895][ T4071] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.178: invalid indirect mapped block 256 (level 1) [ 38.716666][ T4071] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.178: invalid indirect mapped block 2683928664 (level 1) [ 38.748879][ T4071] EXT4-fs (loop3): 1 truncate cleaned up [ 38.767426][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.827720][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.874289][ T4095] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.895956][ T4095] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.906204][ T4097] /dev/loop3: Can't open blockdev [ 38.924446][ T60] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.534778][ T4127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.559840][ T4127] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.586375][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.625385][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 39.756877][ T4149] netlink: 'syz.2.209': attribute type 1 has an invalid length. [ 39.770318][ T4149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.791656][ T4149] bond1: (slave geneve2): making interface the new active one [ 39.801085][ T4149] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 40.477518][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 40.692665][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 40.722782][ T4199] capability: warning: `syz.4.228' uses deprecated v2 capabilities in a way that may be insecure [ 40.746278][ T4202] set_capacity_and_notify: 6 callbacks suppressed [ 40.746297][ T4202] loop5: detected capacity change from 0 to 1024 [ 40.810398][ T4202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.872485][ T4202] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.893296][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 40.922977][ T4213] netlink: 36 bytes leftover after parsing attributes in process `syz.4.232'. [ 40.936560][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 40.963029][ T4202] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.227: lblock 3 mapped to illegal pblock 3 (length 3) [ 41.012468][ T4202] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 41.024993][ T4202] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.024993][ T4202] [ 41.030846][ T4218] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.227: bg 0: block 112: padding at end of block bitmap is not set [ 41.117430][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 41.117445][ T29] audit: type=1400 audit(1769210964.634:794): avc: denied { append } for pid=4201 comm="syz.5.227" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.178510][ T4232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.239'. [ 41.187844][ T4232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.239'. [ 41.201562][ T4202] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 41.213747][ T29] audit: type=1326 audit(1769210964.734:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.243701][ T4202] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 41.256231][ T4202] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.256231][ T4202] [ 41.270434][ T29] audit: type=1326 audit(1769210964.774:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.294530][ T29] audit: type=1326 audit(1769210964.774:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.318334][ T29] audit: type=1326 audit(1769210964.774:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.341753][ T29] audit: type=1326 audit(1769210964.774:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.365453][ T29] audit: type=1326 audit(1769210964.774:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.390156][ T29] audit: type=1326 audit(1769210964.774:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbeaadaa22 code=0x7ffc0000 [ 41.413694][ T29] audit: type=1326 audit(1769210964.774:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbeaadaa22 code=0x7ffc0000 [ 41.435998][ T4226] loop2: detected capacity change from 0 to 8192 [ 41.437138][ T29] audit: type=1326 audit(1769210964.774:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 41.468002][ T42] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 5) [ 41.497785][ T42] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 41.510129][ T42] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.510129][ T42] [ 41.523669][ T4226] loop2: p2 p3 p4 < > [ 41.527948][ T4226] loop2: partition table partially beyond EOD, truncated [ 41.531441][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.544836][ T4226] loop2: p2 size 590592 extends beyond EOD, truncated [ 41.570505][ T4226] loop2: p3 start 4294967295 is beyond EOD, truncated [ 41.577528][ T4226] loop2: p4 start 117440516 is beyond EOD, truncated [ 41.686086][ T4250] netlink: 'syz.4.246': attribute type 21 has an invalid length. [ 41.694807][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 41.782544][ T4250] netlink: 'syz.4.246': attribute type 21 has an invalid length. [ 41.790534][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 42.197047][ T4279] syzkaller0: entered promiscuous mode [ 42.202592][ T4279] syzkaller0: entered allmulticast mode [ 42.250898][ T4285] loop4: detected capacity change from 0 to 512 [ 42.263920][ T4285] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.273884][ T4285] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 42.283738][ T4285] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.260: attempt to clear invalid blocks 2 len 1 [ 42.316409][ T4285] EXT4-fs (loop4): Remounting filesystem read-only [ 42.353319][ T4290] netlink: 'syz.3.262': attribute type 7 has an invalid length. [ 42.361563][ T4290] netlink: 'syz.3.262': attribute type 7 has an invalid length. [ 42.362705][ T4285] EXT4-fs (loop4): 1 truncate cleaned up [ 42.382550][ T4285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.427982][ T4296] program syz.2.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.473940][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.543269][ T4302] loop4: detected capacity change from 0 to 2048 [ 42.565938][ T4302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.585522][ T4302] EXT4-fs (loop4): shut down requested (2) [ 42.603024][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.834637][ T4337] loop7: detected capacity change from 0 to 16384 [ 42.863453][ T4339] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.878541][ T4339] bridge_slave_1: left allmulticast mode [ 42.884255][ T4339] bridge_slave_1: left promiscuous mode [ 42.890034][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.925644][ T4339] bridge_slave_0: left allmulticast mode [ 42.931580][ T4339] bridge_slave_0: left promiscuous mode [ 42.937773][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.002243][ T4340] loop7: detected capacity change from 16384 to 0 [ 43.002779][ C1] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 43.391695][ T4392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4392 comm=syz.5.304 [ 43.439634][ T4397] loop2: detected capacity change from 0 to 1764 [ 43.678099][ T4431] loop4: detected capacity change from 0 to 512 [ 43.709577][ T4431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.722454][ T4431] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.729393][ T4438] netlink: 'syz.0.322': attribute type 11 has an invalid length. [ 43.747158][ T4438] netlink: 'syz.0.322': attribute type 11 has an invalid length. [ 43.829278][ T4443] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.320: corrupted inode contents [ 43.845291][ T4443] EXT4-fs (loop4): Remounting filesystem read-only [ 43.852402][ T4443] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 43.885440][ T4447] loop5: detected capacity change from 0 to 512 [ 43.917905][ T4447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.932430][ T4447] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.958000][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.970179][ T4447] EXT4-fs error (device loop5): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.5.326: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 43.992509][ T4447] EXT4-fs error (device loop5): ext4_get_first_dir_block:3538: inode #12: comm syz.5.326: directory missing '.' [ 44.053619][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.119834][ T4468] loop5: detected capacity change from 0 to 7 [ 44.154827][ T4468] Invalid logical block size (6) [ 44.186556][ T4474] EXT4-fs: Ignoring removed orlov option [ 44.244851][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.354678][ T3492] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.373113][ T3492] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.403001][ T4490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.478232][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.551324][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.702440][ T4516] SELinux: failed to load policy [ 44.709072][ T4522] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 44.803474][ T4537] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 44.812098][ T4537] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 45.060359][ T4557] __nla_validate_parse: 7 callbacks suppressed [ 45.060377][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 45.075539][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 45.087815][ T1869] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.088867][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 45.096912][ T1869] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.096952][ T1869] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.105787][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 45.117166][ T1869] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.169464][ T4559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.184028][ T4559] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.371: corrupted in-inode xattr: bad e_name length [ 45.199586][ T4559] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.371: couldn't read orphan inode 15 (err -117) [ 45.212374][ T4559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.235734][ T4559] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.371: Logical block already allocated [ 45.258063][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.306353][ T4566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.319229][ T4566] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.395088][ T4574] Illegal XDP return value 4294967274 on prog (id 46) dev syz_tun, expect packet loss! [ 45.449903][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.773768][ T4609] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 45.927462][ T4622] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 46.201587][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 46.201611][ T29] audit: type=1326 audit(1769210969.714:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 46.234666][ T29] audit: type=1326 audit(1769210969.714:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 46.258044][ T29] audit: type=1326 audit(1769210969.714:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 46.281963][ T29] audit: type=1326 audit(1769210969.714:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 46.306713][ T29] audit: type=1326 audit(1769210969.724:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 46.331011][ T29] audit: type=1326 audit(1769210969.724:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeaadacb9 code=0x7ffc0000 [ 46.397016][ T4666] set_capacity_and_notify: 6 callbacks suppressed [ 46.397031][ T4666] loop5: detected capacity change from 0 to 128 [ 46.411281][ T4666] EXT4-fs: Ignoring removed nobh option [ 46.436409][ T3312] udevd[3312]: incorrect ext4 checksum on /dev/loop5 [ 46.446943][ T4666] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.474977][ T4673] loop0: detected capacity change from 0 to 164 [ 46.480346][ T4666] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.552570][ T3679] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.607409][ T29] audit: type=1400 audit(1769210970.124:937): avc: denied { create } for pid=4680 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.649220][ T29] audit: type=1400 audit(1769210970.164:938): avc: denied { connect } for pid=4678 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.668771][ T29] audit: type=1400 audit(1769210970.164:939): avc: denied { write } for pid=4678 comm="syz.5.414" path="socket:[7920]" dev="sockfs" ino=7920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.939955][ T4703] mmap: syz.0.418 (4703) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.176408][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bad0c00: rx timeout, send abort [ 47.295338][ T4726] loop0: detected capacity change from 0 to 1024 [ 47.355998][ T4729] loop3: detected capacity change from 0 to 1024 [ 47.372566][ T4726] EXT4-fs: Ignoring removed orlov option [ 47.379193][ T4729] EXT4-fs: inline encryption not supported [ 47.399377][ T4729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.413148][ T4726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.454112][ T29] audit: type=1400 audit(1769210970.974:940): avc: denied { sqpoll } for pid=4735 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.475993][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.521516][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.684779][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bad0c00: abort rx timeout. Force session deactivation [ 47.730389][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 47.739600][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 48.117568][ T4801] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 48.125707][ T4801] netlink: 2 bytes leftover after parsing attributes in process `syz.3.453'. [ 48.145063][ T4801] team0: entered promiscuous mode [ 48.150134][ T4801] team_slave_0: entered promiscuous mode [ 48.155907][ T4801] team_slave_1: entered promiscuous mode [ 48.164210][ T4801] bridge0: port 3(team0) entered blocking state [ 48.170716][ T4801] bridge0: port 3(team0) entered disabled state [ 48.177694][ T4801] team0: entered allmulticast mode [ 48.182948][ T4801] team_slave_0: entered allmulticast mode [ 48.188714][ T4801] team_slave_1: entered allmulticast mode [ 48.207872][ T4801] bridge0: port 3(team0) entered blocking state [ 48.214307][ T4801] bridge0: port 3(team0) entered forwarding state [ 48.221759][ T4809] netlink: 'syz.2.456': attribute type 2 has an invalid length. [ 48.229686][ T4809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.242882][ T4811] loop5: detected capacity change from 0 to 512 [ 48.251141][ T4811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.279116][ T4811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.297781][ T4811] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.316009][ T4811] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.455: bg 0: block 217: padding at end of block bitmap is not set [ 48.380597][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.556231][ T4847] loop5: detected capacity change from 0 to 128 [ 48.568651][ T4847] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.581874][ T4847] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.653647][ T3679] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.700735][ T4854] loop4: detected capacity change from 0 to 256 [ 48.710249][ T4852] usb usb8: usbfs: process 4852 (syz.3.468) did not claim interface 0 before use [ 48.760915][ T4858] loop3: detected capacity change from 0 to 512 [ 48.789600][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.803575][ T4858] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.883580][ T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 48.899227][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 48.912088][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.912088][ T12] [ 48.921851][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 48.927961][ T12] EXT4-fs (loop3): Free/Dirty block details [ 48.934061][ T12] EXT4-fs (loop3): free_blocks=65280 [ 48.939365][ T12] EXT4-fs (loop3): dirty_blocks=1 [ 48.944605][ T12] EXT4-fs (loop3): Block reservation details [ 48.950595][ T12] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 48.960458][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.238549][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b81ac00: rx timeout, send abort [ 49.516194][ T4892] SELinux: failed to load policy [ 49.718493][ T4915] loop5: detected capacity change from 0 to 512 [ 49.736202][ T4915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.746829][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b81ac00: abort rx timeout. Force session deactivation [ 49.753010][ T4915] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.815879][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.851592][ T4928] loop4: detected capacity change from 0 to 1024 [ 49.883162][ T4928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.931734][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 49.980690][ T2475] tipc: Subscription rejected, illegal request [ 50.010634][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.229994][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 50.506089][ T4994] netlink: 144 bytes leftover after parsing attributes in process `syz.3.526'. [ 50.559556][ T5000] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 50.619160][ T5000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.751638][ T3760] Bluetooth: hci0: sending frame failed (-49) [ 50.758835][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 50.778852][ T5020] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.792152][ T5020] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 50.800984][ T5020] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.537: attempt to clear invalid blocks 2 len 1 [ 50.807704][ T5024] ip6gre1: entered promiscuous mode [ 50.814162][ T5020] EXT4-fs (loop5): Remounting filesystem read-only [ 50.819135][ T5024] ip6gre1: entered allmulticast mode [ 50.826386][ T5020] EXT4-fs (loop5): 1 truncate cleaned up [ 50.837317][ T5020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.847298][ T1869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.857911][ T1869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.872363][ T3508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.889803][ T5024] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.913607][ T5028] sg_write: data in/out 989/154 bytes for SCSI command 0x0-- guessing data in; [ 50.913607][ T5028] program syz.0.540 not setting count and/or reply_len properly [ 50.956593][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.003956][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 51.272187][ T3508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.342202][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 51.342292][ T29] audit: type=1400 audit(1769211230.854:1017): avc: denied { connect } for pid=5059 comm="syz.0.553" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.431688][ T5067] netlink: 136 bytes leftover after parsing attributes in process `syz.4.555'. [ 51.441809][ T5067] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 51.592127][ T3508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.123320][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 52.132734][ T5110] team0: left allmulticast mode [ 52.137737][ T5110] team_slave_0: left allmulticast mode [ 52.143752][ T5110] team_slave_1: left allmulticast mode [ 52.149335][ T5110] bridge0: port 3(team0) entered disabled state [ 52.155693][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 52.164628][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.574'. [ 52.176505][ T5110] bridge_slave_1: left allmulticast mode [ 52.182218][ T5110] bridge_slave_1: left promiscuous mode [ 52.187979][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.197717][ T5110] bridge_slave_0: left allmulticast mode [ 52.200249][ T5114] set_capacity_and_notify: 1 callbacks suppressed [ 52.200280][ T5114] loop0: detected capacity change from 0 to 128 [ 52.203883][ T5110] bridge_slave_0: left promiscuous mode [ 52.204067][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.214230][ T5114] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 52.237843][ T5114] FAT-fs (loop0): Filesystem has been set read-only [ 52.244727][ T5114] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 52.275952][ T5116] loop0: detected capacity change from 0 to 1024 [ 52.284014][ T5116] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 52.294192][ T5116] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.307055][ T5116] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 52.319216][ T2475] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.319233][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 52.319251][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.574'. [ 52.329852][ T5116] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.352306][ T2475] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.361719][ T2475] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.371055][ T2475] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.384962][ T5116] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.576: Inode bitmap for bg 0 marked uninitialized [ 52.398991][ T5116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.441419][ T29] audit: type=1400 audit(1769211231.954:1018): avc: denied { read append } for pid=5120 comm="syz.4.579" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.482547][ T5116] EXT4-fs (loop0): shut down requested (0) [ 52.502089][ T29] audit: type=1400 audit(1769211231.954:1019): avc: denied { open } for pid=5120 comm="syz.4.579" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.526990][ T29] audit: type=1400 audit(1769211231.954:1020): avc: denied { ioctl } for pid=5120 comm="syz.4.579" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.554315][ T29] audit: type=1326 audit(1769211232.054:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52f6facb9 code=0x7ffc0000 [ 52.580745][ T29] audit: type=1326 audit(1769211232.054:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52f6facb9 code=0x7ffc0000 [ 52.607958][ T29] audit: type=1326 audit(1769211232.054:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff52f6facb9 code=0x7ffc0000 [ 52.632865][ T29] audit: type=1326 audit(1769211232.054:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52f6facb9 code=0x7ffc0000 [ 52.659029][ T29] audit: type=1326 audit(1769211232.054:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52f6facb9 code=0x7ffc0000 [ 52.683591][ T29] audit: type=1326 audit(1769211232.054:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff52f6facb9 code=0x7ffc0000 [ 52.712629][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.825884][ T5140] loop2: detected capacity change from 0 to 1024 [ 52.878859][ T5140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.894212][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 52.939511][ T5140] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.004927][ T5140] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.078705][ T5140] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 53.091430][ T5140] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.091430][ T5140] [ 53.132210][ T5168] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.185693][ T5140] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.236556][ T5140] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.270790][ T5168] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.285574][ T5140] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.309676][ T5140] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.366532][ T5168] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.412287][ T5168] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.433786][ T5168] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.587: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.706146][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.753068][ T5212] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 53.759823][ T5212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.767819][ T5212] vhci_hcd vhci_hcd.0: Device attached [ 53.777542][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 53.784509][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 53.816020][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 53.871479][ T5212] infiniband yz0: set active [ 53.876386][ T5212] infiniband yz0: added xfrm0 [ 53.881552][ T3392] xfrm0 speed is unknown, defaulting to 1000 [ 53.901328][ T5212] RDS/IB: yz0: added [ 53.908665][ T5212] smc: adding ib device yz0 with port count 1 [ 53.922601][ T5225] ip6gretap1: entered allmulticast mode [ 53.930888][ T5212] smc: ib device yz0 port 1 has no pnetid [ 53.961557][ T3508] xfrm0 speed is unknown, defaulting to 1000 [ 53.972424][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 54.052192][ T3492] usb 6-1: SetAddress Request (2) to port 0 [ 54.080106][ T3492] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 54.115830][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 54.222395][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 54.318455][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 54.327244][ T5250] loop4: detected capacity change from 0 to 128 [ 54.411975][ T5212] xfrm0 speed is unknown, defaulting to 1000 [ 54.435562][ T5250] syz.4.633: attempt to access beyond end of device [ 54.435562][ T5250] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 54.499915][ T5263] loop0: detected capacity change from 0 to 2048 [ 54.517296][ T5213] vhci_hcd: connection reset by peer [ 54.523530][ T42] vhci_hcd vhci_hcd.2: stop threads [ 54.528860][ T42] vhci_hcd vhci_hcd.2: release socket [ 54.534282][ T42] vhci_hcd vhci_hcd.2: disconnect device [ 54.632739][ T3312] loop0: p1 < > p4 < > [ 54.640516][ T5263] loop0: p1 < > p4 < > [ 54.873189][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 55.307956][ T5314] netlink: 'syz.0.663': attribute type 16 has an invalid length. [ 55.316405][ T5314] netlink: 'syz.0.663': attribute type 17 has an invalid length. [ 55.332527][ T5316] tipc: Enabling of bearer rejected, failed to enable media [ 55.514474][ T5328] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 55.521705][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.526161][ T5328] SELinux: failed to load policy [ 55.532797][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.564511][ T5331] __nla_validate_parse: 2 callbacks suppressed [ 55.564529][ T5331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 55.728669][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.743714][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.816221][ T5314] vlan2: left promiscuous mode [ 55.830748][ T5314] ip6gre1: left promiscuous mode [ 55.836038][ T5314] ip6gre1: left allmulticast mode [ 55.842910][ T5314] ip6gretap1: left allmulticast mode [ 55.850590][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.864565][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.877598][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.891242][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.918771][ T5355] loop3: detected capacity change from 0 to 512 [ 55.937054][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.950535][ T5355] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.974241][ T5355] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 133 (only 1 groups) [ 56.042974][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.075860][ T5369] loop3: detected capacity change from 0 to 256 [ 56.086733][ T5369] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.329903][ T5389] syzkaller1: entered promiscuous mode [ 56.335603][ T5389] syzkaller1: entered allmulticast mode [ 56.375811][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 56.375825][ T29] audit: type=1400 audit(1769211235.894:1054): avc: denied { create } for pid=5396 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.383743][ T5395] loop3: detected capacity change from 0 to 1024 [ 56.425743][ T5395] EXT4-fs: Ignoring removed orlov option [ 56.454009][ T29] audit: type=1400 audit(1769211235.974:1055): avc: denied { connect } for pid=5396 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.481004][ T5395] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.695: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 56.502338][ T5401] loop2: detected capacity change from 0 to 512 [ 56.533402][ T5401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.548847][ T5401] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.585884][ T5395] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.695: Bad quota inode: 4, type: 1 [ 56.604488][ T5395] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.619730][ T5395] EXT4-fs (loop3): mount failed [ 56.680411][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.824900][ T5421] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 56.884207][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.900602][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 56.944260][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.954357][ T5421] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 56.969479][ T5421] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 56.999635][ T5436] netlink: 'syz.0.709': attribute type 11 has an invalid length. [ 57.007601][ T5436] netlink: 140 bytes leftover after parsing attributes in process `syz.0.709'. [ 57.081897][ T5443] loop4: detected capacity change from 0 to 1024 [ 57.094608][ T5443] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.110358][ T29] audit: type=1400 audit(1769211236.634:1056): avc: denied { sys_admin } for pid=5446 comm="syz.0.713" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.121878][ T5443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.712: bg 0: block 112: padding at end of block bitmap is not set [ 57.138462][ T29] audit: type=1400 audit(1769211236.634:1057): avc: denied { read write } for pid=5442 comm="syz.4.712" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.169287][ T29] audit: type=1400 audit(1769211236.634:1058): avc: denied { open } for pid=5442 comm="syz.4.712" path="/180/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.192757][ T29] audit: type=1400 audit(1769211236.634:1059): avc: denied { map } for pid=5442 comm="syz.4.712" path="/180/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.206908][ T5443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 57.216642][ T29] audit: type=1400 audit(1769211236.634:1060): avc: denied { execute } for pid=5442 comm="syz.4.712" path="/180/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.229009][ T5443] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.229009][ T5443] [ 57.321615][ T42] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.335617][ T42] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 57.348179][ T42] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.348179][ T42] [ 57.552122][ T29] audit: type=1400 audit(1769211237.064:1061): avc: denied { getopt } for pid=5455 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.692161][ T29] audit: type=1400 audit(1769211237.204:1062): avc: denied { getopt } for pid=5462 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.754571][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 57.929461][ T5482] team0: Port device team_slave_0 removed [ 57.953050][ T5482] team0: Port device team_slave_1 removed [ 57.971397][ T5482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.979215][ T5482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.104731][ T5482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.112945][ T5482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.164698][ T5482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.216722][ T5492] syzkaller0: entered promiscuous mode [ 58.222323][ T5492] syzkaller0: entered allmulticast mode [ 58.333962][ T5487] loop3: detected capacity change from 0 to 512 [ 58.365338][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 58.382002][ T5487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.396319][ T5487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.482660][ T5487] EXT4-fs (loop3): 1 truncate cleaned up [ 58.489340][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'. [ 58.502568][ T29] audit: type=1326 audit(1769211237.994:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb69eacb9 code=0x0 [ 58.522492][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'. [ 58.650220][ T5522] netlink: 'syz.4.742': attribute type 3 has an invalid length. [ 58.658989][ T5522] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 58.666664][ T5522] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.742'. [ 58.832588][ T5536] loop2: detected capacity change from 0 to 2048 [ 59.193139][ T3492] usb 6-1: device descriptor read/8, error -110 [ 59.213673][ T5553] loop5: detected capacity change from 0 to 128 [ 59.220586][ T5553] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.237875][ T5553] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.297342][ T5558] vlan2: entered allmulticast mode [ 59.302539][ T5558] bond0: entered allmulticast mode [ 59.307655][ T5558] bond_slave_0: entered allmulticast mode [ 59.313545][ T5558] bond_slave_1: entered allmulticast mode [ 59.319597][ T3492] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.331193][ T5558] netlink: 14 bytes leftover after parsing attributes in process `syz.3.755'. [ 59.342299][ T3492] usb 6-1: enqueue for inactive port 0 [ 59.347780][ T3492] usb 6-1: enqueue for inactive port 0 [ 59.353847][ T3492] usb 6-1: enqueue for inactive port 0 [ 59.372771][ T5558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.391662][ T5558] bond_slave_0: left allmulticast mode [ 59.398987][ T5558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.408208][ T5558] bond_slave_1: left allmulticast mode [ 59.415823][ T5558] bond0 (unregistering): Released all slaves [ 59.534981][ T5577] loop3: detected capacity change from 0 to 128 [ 59.760021][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 59.769041][ T5609] bridge_slave_1: left allmulticast mode [ 59.774905][ T5609] bridge_slave_1: left promiscuous mode [ 59.780682][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.789124][ T5609] bridge_slave_0: left allmulticast mode [ 59.794883][ T5609] bridge_slave_0: left promiscuous mode [ 59.800602][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.358815][ T5634] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 60.382418][ T3492] usb usb6-port1: attempt power cycle [ 60.598246][ T5666] loop3: detected capacity change from 0 to 512 [ 60.656160][ T5666] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.802: inode has both inline data and extents flags [ 60.696454][ T5675] __nla_validate_parse: 4 callbacks suppressed [ 60.696472][ T5675] netlink: 168 bytes leftover after parsing attributes in process `syz.4.806'. [ 60.713625][ T5666] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.802: couldn't read orphan inode 15 (err -117) [ 61.098176][ T5718] loop2: detected capacity change from 0 to 128 [ 61.161607][ T5722] syzkaller1: entered promiscuous mode [ 61.167618][ T5722] syzkaller1: entered allmulticast mode [ 61.406479][ T5738] ================================================================== [ 61.414786][ T5738] BUG: KCSAN: data-race in __tipc_sendstream / tipc_poll [ 61.421928][ T5738] [ 61.424342][ T5738] read-write to 0xffff88810b1dbf26 of 2 bytes by task 5741 on cpu 0: [ 61.432594][ T5738] __tipc_sendstream+0x804/0xb60 [ 61.437553][ T5738] tipc_sendstream+0x3e/0x60 [ 61.442431][ T5738] __sock_sendmsg+0x145/0x170 [ 61.447416][ T5738] sock_write_iter+0x1d2/0x210 [ 61.452288][ T5738] vfs_write+0x5a6/0x9f0 [ 61.456561][ T5738] ksys_write+0xdc/0x1a0 [ 61.460817][ T5738] __x64_sys_write+0x40/0x50 [ 61.465512][ T5738] x64_sys_call+0x2847/0x3000 [ 61.470213][ T5738] do_syscall_64+0xc0/0x2a0 [ 61.474830][ T5738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.480826][ T5738] [ 61.483152][ T5738] read to 0xffff88810b1dbf26 of 2 bytes by task 5738 on cpu 1: [ 61.490780][ T5738] tipc_poll+0x1f9/0x340 [ 61.495029][ T5738] sock_poll+0x21c/0x240 [ 61.499370][ T5738] __io_arm_poll_handler+0x1ee/0xb60 [ 61.504649][ T5738] io_poll_add+0x69/0xf0 [ 61.508885][ T5738] __io_issue_sqe+0xfd/0x2d0 [ 61.513475][ T5738] io_issue_sqe+0x56/0xa70 [ 61.517902][ T5738] io_submit_sqes+0x78a/0x11b0 [ 61.522862][ T5738] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 61.528415][ T5738] __x64_sys_io_uring_enter+0x78/0x90 [ 61.533810][ T5738] x64_sys_call+0x27e4/0x3000 [ 61.538488][ T5738] do_syscall_64+0xc0/0x2a0 [ 61.543446][ T5738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.549430][ T5738] [ 61.551747][ T5738] value changed: 0x0082 -> 0x00c3 [ 61.556838][ T5738] [ 61.559152][ T5738] Reported by Kernel Concurrency Sanitizer on: [ 61.565737][ T5738] CPU: 1 UID: 0 PID: 5738 Comm: syz.3.833 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.575932][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.586506][ T5738] ================================================================== [ 62.222195][ T3492] usb usb6-port1: unable to enumerate USB device