last executing test programs: 44.136974186s ago: executing program 4 (id=31): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 43.823870283s ago: executing program 4 (id=34): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x1e8, 0x0, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0x0, 0xe, 0x9, {@mac, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xb856, 0xc3c9, 0xb, 0x2, 0x4, 0x6, 'ip6erspan0\x00', 'vcan0\x00', {}, {0xff}, 0x0, 0x82}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0xc, 0xfff, 'system_u:object_r:urandom_device_t:s0\x00'}}}, {{@arp={@remote, @loopback, 0x0, 0xffffffff, 0x0, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xe, 0xd735, 0x7f, 0x7f, 0x7fff, 0x3, 'bridge_slave_0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x1, 0xffffffff}}}, {{@arp={@loopback, @local, 0xff000000, 0xffffffff, 0xd, 0xa, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff]}}, 0x3, 0x0, 0xffff, 0x200, 0xd538, 0x4, 'bond_slave_1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x4b}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) 43.783174497s ago: executing program 4 (id=36): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 43.7482322s ago: executing program 4 (id=37): sched_setscheduler(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) 41.972926507s ago: executing program 4 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601020000000000000040000000000900020073797a310000000005000400010000000500010007000000050005000a0000001c000780050015000b000000080011400000001805001400090000000c000300686173683a6970"], 0x60}}, 0x0) 41.159895728s ago: executing program 4 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, 0x0, &(0x7f0000000640)=0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000019400)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000002, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x2f}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r5, 0x0) syz_io_uring_setup(0x6f26, &(0x7f0000019300)={0x0, 0xdbe6, 0x200, 0x1, 0x302, 0x0, r2}, &(0x7f0000019380), &(0x7f00000193c0)) io_uring_enter(r5, 0x47f6, 0x6e4f, 0x14, 0x0, 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 40.748009004s ago: executing program 32 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, 0x0, &(0x7f0000000640)=0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000019400)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000002, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x2f}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r5, 0x0) syz_io_uring_setup(0x6f26, &(0x7f0000019300)={0x0, 0xdbe6, 0x200, 0x1, 0x302, 0x0, r2}, &(0x7f0000019380), &(0x7f00000193c0)) io_uring_enter(r5, 0x47f6, 0x6e4f, 0x14, 0x0, 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.429431226s ago: executing program 5 (id=608): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7.361430792s ago: executing program 5 (id=609): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x2080) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x6) 7.264006661s ago: executing program 5 (id=610): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x3, 0xfffffff2, 0x4}]}}}}}}}, 0x0) 7.243745063s ago: executing program 5 (id=611): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) 6.949297439s ago: executing program 5 (id=617): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="ca97", 0x2}], 0x1}, 0x10000000) 6.81441997s ago: executing program 1 (id=624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000500), 0x0, 0x92, 0x0) 6.765495354s ago: executing program 1 (id=625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc={0x4, {@llc={0xe, 0xfc, "a4"}}}}}, 0x0) 6.732878427s ago: executing program 1 (id=627): unshare(0x22020600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 6.645506895s ago: executing program 1 (id=628): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) 6.645315895s ago: executing program 5 (id=629): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000005c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@resgid}, {@grpquota}, {@usrjquota}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x3, 0x44f, &(0x7f0000000880)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) 6.617985098s ago: executing program 33 (id=629): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000005c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@resgid}, {@grpquota}, {@usrjquota}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x3, 0x44f, &(0x7f0000000880)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) 6.503840008s ago: executing program 1 (id=635): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) 5.318450212s ago: executing program 1 (id=641): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000680), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 5.291404804s ago: executing program 34 (id=641): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000680), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 4.098781419s ago: executing program 2 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.115724026s ago: executing program 2 (id=664): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/41, 0x29}, 0xffffffff}], 0x1, 0x92, 0x0) 2.412965468s ago: executing program 0 (id=674): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\bO9\x1b\x11\rv0<\xe5\xe2\xad\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9ds\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8ex\x00\x00\x00\xc7%\xb0\x0f(Ff\xb0\x9f\xab\xb0\xae#\xbdd\xaa\f\xd2\xfb t?\xc3\x1f\xb1\xcf\x1e\xac\xa8\xebC\xab\xc3v\xd6\xc1\x0f9$\x95\xd3e(E1m\a\xfd\x9d\xb39\xfd\xfdp\xcf\xc5s\x9b2\x00\xcbnF\xceg\xbdd\x9br\x95e\x9d,\xc4fP-\xae\\{\xf9\x01\x10\t\x00\v\xcb\xfcv\xa6\xfd\x19\xabI', 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x7, 0x86, 0x3a}) io_uring_enter(r2, 0x11f1, 0x18d6, 0x9, &(0x7f00000005c0)={[0x1]}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) read(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.15988814s ago: executing program 2 (id=675): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.428560014s ago: executing program 3 (id=681): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r3, 0x0) 1.306294025s ago: executing program 2 (id=682): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x22020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fstatfs(r0, 0x0) 1.274629358s ago: executing program 0 (id=684): socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 666.575531ms ago: executing program 0 (id=686): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x18, 0x29, 0x39, {0x1d, 0x0, 0x2, 0x4}}}], 0x18}, 0x40c0) 483.971338ms ago: executing program 3 (id=687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4200, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb", 0x7b}, {0x0}, {&(0x7f00000005c0)="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", 0x1c6}], 0x3}}], 0x1, 0x400d5) 483.838767ms ago: executing program 0 (id=688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000100"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) 471.980238ms ago: executing program 6 (id=689): request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0) 471.405598ms ago: executing program 2 (id=690): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="da97d2", 0x3}, {&(0x7f0000000400)="ca97", 0x2}], 0x2}, 0x10000000) 471.203709ms ago: executing program 3 (id=691): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 418.963213ms ago: executing program 2 (id=692): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 364.345868ms ago: executing program 0 (id=693): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x7000000, &(0x7f00000005c0), 0x1, 0x532, &(0x7f0000000600)="$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") recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 364.040898ms ago: executing program 3 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) 336.64122ms ago: executing program 7 (id=642): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 336.15343ms ago: executing program 6 (id=695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=""/41, 0x29}, 0xffffffff}], 0x1, 0x92, 0x0) 293.847184ms ago: executing program 3 (id=696): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x3010018, &(0x7f00000003c0), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x800, 0x8000c62) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r0, 0x8, 0x0, 0x8000) 290.369034ms ago: executing program 7 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015000900000013000300686173683a6e65742c6966616365"], 0x60}}, 0x44040880) 215.952061ms ago: executing program 6 (id=698): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x18, 0x29, 0x39, {0x1d, 0x0, 0x2, 0x4}}}], 0x18}, 0x40c0) 215.814791ms ago: executing program 6 (id=699): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 210.926632ms ago: executing program 0 (id=700): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = getpgrp(0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x400, 0x200, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={r4, r5, r6}, 0xc) sendmmsg$inet(r2, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 201.939372ms ago: executing program 7 (id=701): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="da97d2", 0x3}, {&(0x7f0000000400)="ca97", 0x2}], 0x2}, 0x10000000) 113.72401ms ago: executing program 6 (id=702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a2", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000100"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) 113.53061ms ago: executing program 7 (id=703): syz_open_dev$sg(0x0, 0x0, 0x8002) socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 113.23314ms ago: executing program 3 (id=704): r0 = socket(0x22, 0x2, 0x3) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x21, 0x6, 0x8) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x2020400) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf2503000000060001004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c800) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20020081) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, 0x0, 0x4000020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 0s ago: executing program 6 (id=705): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) kernel console output (not intermixed with test programs): [ 17.570448][ T28] audit: type=1400 audit(1771899269.235:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.592374][ T28] audit: type=1400 audit(1771899269.235:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.615011][ T28] audit: type=1400 audit(1771899269.235:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.637930][ T28] audit: type=1400 audit(1771899269.235:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.660875][ T28] audit: type=1400 audit(1771899269.235:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 23.627235][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 23.627249][ T28] audit: type=1400 audit(1771899275.285:70): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.656113][ T28] audit: type=1400 audit(1771899275.315:71): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.656833][ T3296] cgroup: Unknown subsys name 'net' [ 23.683657][ T28] audit: type=1400 audit(1771899275.345:72): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.858437][ T3296] cgroup: Unknown subsys name 'cpuset' [ 23.864399][ T3296] cgroup: Unknown subsys name 'rlimit' [ 23.994304][ T28] audit: type=1400 audit(1771899275.655:73): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.017640][ T28] audit: type=1400 audit(1771899275.655:74): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.038090][ T28] audit: type=1400 audit(1771899275.655:75): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.053504][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.058414][ T28] audit: type=1400 audit(1771899275.655:76): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.087194][ T28] audit: type=1400 audit(1771899275.665:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.104159][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.108025][ T28] audit: type=1400 audit(1771899275.685:78): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.141515][ T28] audit: type=1400 audit(1771899275.685:79): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.939917][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.964843][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.022734][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.029809][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.036919][ T3313] bridge_slave_0: entered allmulticast mode [ 26.043341][ T3313] bridge_slave_0: entered promiscuous mode [ 26.050109][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.057203][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.064348][ T3313] bridge_slave_1: entered allmulticast mode [ 26.070796][ T3313] bridge_slave_1: entered promiscuous mode [ 26.081182][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.098817][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.105848][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.112977][ T3315] bridge_slave_0: entered allmulticast mode [ 26.119370][ T3315] bridge_slave_0: entered promiscuous mode [ 26.142841][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.149890][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.156938][ T3315] bridge_slave_1: entered allmulticast mode [ 26.163312][ T3315] bridge_slave_1: entered promiscuous mode [ 26.192667][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.206747][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.218239][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.235356][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.261221][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.280051][ T3313] team0: Port device team_slave_0 added [ 26.288418][ T3313] team0: Port device team_slave_1 added [ 26.306652][ T3315] team0: Port device team_slave_0 added [ 26.321868][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.333708][ T3315] team0: Port device team_slave_1 added [ 26.343218][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.350306][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.357478][ T3307] bridge_slave_0: entered allmulticast mode [ 26.363717][ T3307] bridge_slave_0: entered promiscuous mode [ 26.385109][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.392045][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.417928][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.428649][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.435691][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.442806][ T3307] bridge_slave_1: entered allmulticast mode [ 26.449039][ T3307] bridge_slave_1: entered promiscuous mode [ 26.463761][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.470827][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.477916][ T3308] bridge_slave_0: entered allmulticast mode [ 26.484220][ T3308] bridge_slave_0: entered promiscuous mode [ 26.494962][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.502090][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.509149][ T3308] bridge_slave_1: entered allmulticast mode [ 26.515812][ T3308] bridge_slave_1: entered promiscuous mode [ 26.522139][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.529171][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.555073][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.575511][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.582553][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.608462][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.637330][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.648884][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.655808][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.681685][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.696825][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.707322][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.723242][ T3313] hsr_slave_0: entered promiscuous mode [ 26.729291][ T3313] hsr_slave_1: entered promiscuous mode [ 26.740753][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.767746][ T3308] team0: Port device team_slave_0 added [ 26.773634][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.780798][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.787952][ T3311] bridge_slave_0: entered allmulticast mode [ 26.794432][ T3311] bridge_slave_0: entered promiscuous mode [ 26.804939][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.812024][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.819133][ T3311] bridge_slave_1: entered allmulticast mode [ 26.825406][ T3311] bridge_slave_1: entered promiscuous mode [ 26.832234][ T3308] team0: Port device team_slave_1 added [ 26.846661][ T3307] team0: Port device team_slave_0 added [ 26.870604][ T3307] team0: Port device team_slave_1 added [ 26.877206][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.892050][ T3315] hsr_slave_0: entered promiscuous mode [ 26.898163][ T3315] hsr_slave_1: entered promiscuous mode [ 26.903882][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 26.909627][ T3315] Cannot create hsr debugfs directory [ 26.924381][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.931336][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.957270][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.968940][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.994998][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.002029][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.027930][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.045209][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.052312][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.078344][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.094278][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.101250][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.127193][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.143488][ T3311] team0: Port device team_slave_0 added [ 27.163714][ T3311] team0: Port device team_slave_1 added [ 27.206600][ T3308] hsr_slave_0: entered promiscuous mode [ 27.212569][ T3308] hsr_slave_1: entered promiscuous mode [ 27.218541][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.224244][ T3308] Cannot create hsr debugfs directory [ 27.233539][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.240504][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.266457][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.288680][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.295601][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.321557][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.347011][ T3307] hsr_slave_0: entered promiscuous mode [ 27.353114][ T3307] hsr_slave_1: entered promiscuous mode [ 27.359082][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 27.364818][ T3307] Cannot create hsr debugfs directory [ 27.434376][ T3311] hsr_slave_0: entered promiscuous mode [ 27.440358][ T3311] hsr_slave_1: entered promiscuous mode [ 27.446095][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.451813][ T3311] Cannot create hsr debugfs directory [ 27.484958][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.499909][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.508473][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.529848][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.574082][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.593941][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.602571][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.620783][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.645395][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.654080][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.667634][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.676182][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.703479][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.716509][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.729686][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.750825][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.757824][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.782484][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.791062][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.799706][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.808383][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.825050][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.834556][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.847436][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.866014][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.873101][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.881673][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.888704][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.898894][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.910594][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.917656][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.926183][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.933205][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.945205][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.984483][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.000525][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.007551][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.033299][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.044646][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.060711][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.067735][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.117019][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.133335][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.146620][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.157075][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.179031][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.188942][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.195993][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.205343][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.212364][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.255563][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.266369][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.279784][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.290524][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.297582][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.306435][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.313547][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.332873][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.386296][ T3315] veth0_vlan: entered promiscuous mode [ 28.395071][ T3315] veth1_vlan: entered promiscuous mode [ 28.459443][ T3315] veth0_macvtap: entered promiscuous mode [ 28.469004][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.477064][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.488191][ T3315] veth1_macvtap: entered promiscuous mode [ 28.535756][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.554964][ T3308] veth0_vlan: entered promiscuous mode [ 28.569155][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.589116][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.601977][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.617742][ T3313] veth0_vlan: entered promiscuous mode [ 28.625213][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.634241][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.655946][ T3307] veth0_vlan: entered promiscuous mode [ 28.662265][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 28.662277][ T28] audit: type=1400 audit(1771899280.325:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.3WtKze/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.683443][ T3308] veth1_vlan: entered promiscuous mode [ 28.698127][ T28] audit: type=1400 audit(1771899280.345:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.700346][ T3313] veth1_vlan: entered promiscuous mode [ 28.728096][ T28] audit: type=1400 audit(1771899280.345:94): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.3WtKze/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.734643][ T3307] veth1_vlan: entered promiscuous mode [ 28.758827][ T28] audit: type=1400 audit(1771899280.345:95): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.781156][ T28] audit: type=1400 audit(1771899280.345:96): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.3WtKze/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.787799][ T3308] veth0_macvtap: entered promiscuous mode [ 28.814237][ T28] audit: type=1400 audit(1771899280.345:97): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.3WtKze/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.843407][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.847626][ T3313] veth0_macvtap: entered promiscuous mode [ 28.865742][ T3313] veth1_macvtap: entered promiscuous mode [ 28.879829][ T3311] veth0_vlan: entered promiscuous mode [ 28.885861][ T28] audit: type=1400 audit(1771899280.345:98): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.906080][ T28] audit: type=1400 audit(1771899280.365:99): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.929472][ T3308] veth1_macvtap: entered promiscuous mode [ 28.938223][ T28] audit: type=1400 audit(1771899280.365:100): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.960638][ T28] audit: type=1400 audit(1771899280.605:101): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.972222][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.001909][ T3307] veth0_macvtap: entered promiscuous mode [ 29.023017][ T3311] veth1_vlan: entered promiscuous mode [ 29.034878][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.043169][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.053786][ T3307] veth1_macvtap: entered promiscuous mode [ 29.067033][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.091376][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.109031][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.117806][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.133144][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.145203][ T3484] loop0: detected capacity change from 0 to 512 [ 29.147379][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.163767][ T3311] veth0_macvtap: entered promiscuous mode [ 29.177822][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.186228][ T3311] veth1_macvtap: entered promiscuous mode [ 29.204722][ T165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.217625][ T3484] FAT-fs (loop0): FAT read failed (blocknr 128) [ 29.218005][ T165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.245891][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.257911][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.284427][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.398808][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.419318][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.438123][ T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.446842][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.481528][ T3496] process 'syz.4.5' launched '/dev/fd/5' with NULL argv: empty string added [ 29.537830][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 29.692432][ T3504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 29.905478][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.934992][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.307887][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.328982][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.358270][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.550257][ T3522] loop3: detected capacity change from 0 to 1024 [ 30.580060][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.756792][ T3522] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 30.800338][ T3522] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 30.911534][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.525997][ T3545] loop3: detected capacity change from 0 to 2048 [ 31.698353][ T35] hid-generic FFFF:0003:0000.0001: unknown main item tag 0x0 [ 31.738794][ T3545] EXT4-fs error (device loop3): __ext4_iget:5378: inode #2: block 65536: comm syz.3.20: invalid block [ 31.751878][ T35] hid-generic FFFF:0003:0000.0001: unknown main item tag 0x0 [ 31.793322][ T3545] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 31.794017][ T3545] EXT4-fs (loop3): get root inode failed [ 31.803069][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 31.803083][ C1] EXT4-fs (loop3): initial error at time 1771899283: __ext4_iget:5378: inode 2: block 65536 [ 31.803130][ C1] EXT4-fs (loop3): last error at time 1771899283: __ext4_iget:5378: inode 2: block 65536 [ 32.059178][ T35] hid-generic FFFF:0003:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 32.094464][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 32.237104][ T3545] EXT4-fs (loop3): mount failed [ 32.249027][ T3557] fido_id[3557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.289432][ T3560] loop1: detected capacity change from 0 to 2048 [ 32.334216][ T3567] netlink: 'syz.3.30': attribute type 39 has an invalid length. [ 32.349641][ T3560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.422821][ T3572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.703616][ T3560] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.28: bg 0: block 234: padding at end of block bitmap is not set [ 32.727289][ T3580] loop0: detected capacity change from 0 to 128 [ 32.759146][ T3580] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.790982][ T3560] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28 [ 32.834446][ T3580] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.848076][ T3560] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.848076][ T3560] [ 32.882042][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.890709][ T3560] EXT4-fs (loop1): Total free blocks count 0 [ 32.899222][ T3560] EXT4-fs (loop1): Free/Dirty block details [ 32.913520][ T3560] EXT4-fs (loop1): free_blocks=0 [ 32.925840][ T3560] EXT4-fs (loop1): dirty_blocks=240 [ 32.931337][ T3560] EXT4-fs (loop1): Block reservation details [ 32.937473][ T3560] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 32.950180][ T3590] loop4: detected capacity change from 0 to 512 [ 33.050684][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 33.059497][ T3596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.35'. [ 33.071131][ T3560] syz.1.28 (3560) used greatest stack depth: 10240 bytes left [ 33.091961][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 33.130004][ T3596] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 33.177793][ T3596] loop0: detected capacity change from 0 to 2048 [ 33.184371][ T3596] ext2: Unknown parameter 'obj_role' [ 33.333794][ T3607] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.484440][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.504623][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.518623][ T3590] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.173082][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 34.197280][ T3620] batadv1: entered promiscuous mode [ 34.203035][ T28] audit: type=1400 audit(1771899285.475:180): avc: denied { write } for pid=3608 comm="syz.2.46" name="snmp" dev="proc" ino=4026532504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.409292][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 34.532639][ T3590] loop4: detected capacity change from 512 to 64 [ 34.621952][ T28] audit: type=1400 audit(1771899286.075:181): avc: denied { ioctl } for pid=3615 comm="syz.0.48" path="socket:[5504]" dev="sockfs" ino=5504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.646275][ T28] audit: type=1400 audit(1771899286.205:182): avc: denied { getopt } for pid=3623 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.708951][ T3313] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Out of memory [ 34.718820][ T3313] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 34.732618][ T3626] loop2: detected capacity change from 0 to 512 [ 34.764687][ T28] audit: type=1400 audit(1771899286.425:183): avc: denied { mount } for pid=3627 comm="syz.1.52" name="/" dev="ramfs" ino=5535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.798107][ T3626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.849569][ T3626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.864001][ T3626] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.878656][ T3626] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.891623][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 34.891643][ C1] EXT4-fs (loop2): initial error at time 1771899286: ext4_mb_generate_buddy:1315 [ 34.891683][ C1] EXT4-fs (loop2): last error at time 1771899286: ext4_mb_generate_buddy:1315 [ 34.916988][ T3632] loop1: detected capacity change from 0 to 1024 [ 34.929188][ T3626] EXT4-fs (loop2): 1 truncate cleaned up [ 34.935362][ T3626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.980047][ T3632] EXT4-fs (loop1): failed to initialize system zone (-117) [ 34.991370][ T3632] EXT4-fs (loop1): mount failed [ 34.996843][ T3626] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 35.015213][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.071472][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.078646][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.091634][ T3611] kmmpd-loop4: attempt to access beyond end of device [ 35.091634][ T3611] loop4: rw=8402945, sector=64, nr_sectors = 8 limit=64 [ 35.105431][ T3611] Buffer I/O error on dev loop4, logical block 8, lost sync page write [ 35.165585][ T3639] loop0: detected capacity change from 0 to 512 [ 35.583618][ T3639] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 35.594075][ T3639] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.54: iget: bad i_size value: 360287970189639680 [ 35.606882][ T3639] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.607253][ T3639] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.54: couldn't read orphan inode 15 (err -117) [ 35.616373][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 35.616392][ C0] EXT4-fs (loop0): initial error at time 1771899287: ext4_orphan_get:1391: inode 15 [ 35.616418][ C0] EXT4-fs (loop0): last error at time 1771899287: ext4_orphan_get:1391: inode 15 [ 35.652923][ T3639] loop0: lost filesystem error report for type 5 error -117 [ 35.658954][ T3639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.711796][ T3637] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.726163][ T3637] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.54: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 35.936296][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.959121][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.000749][ T3653] loop0: detected capacity change from 0 to 512 [ 36.023238][ T3653] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.096629][ T3653] EXT4-fs (loop0): 1 truncate cleaned up [ 36.105851][ T3653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.123962][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.141930][ T28] audit: type=1400 audit(1771899287.805:184): avc: denied { read write } for pid=3652 comm="syz.0.58" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.178073][ T28] audit: type=1400 audit(1771899287.805:185): avc: denied { open } for pid=3652 comm="syz.0.58" path="/13/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.202948][ T28] audit: type=1400 audit(1771899287.845:186): avc: denied { read } for pid=3665 comm="syz.2.64" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.244776][ T28] audit: type=1400 audit(1771899287.905:187): avc: denied { read write } for pid=3667 comm="syz.1.65" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.270861][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.279969][ T3673] loop2: detected capacity change from 0 to 256 [ 36.281719][ T28] audit: type=1400 audit(1771899287.905:188): avc: denied { open } for pid=3667 comm="syz.1.65" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.295937][ T3673] ======================================================= [ 36.295937][ T3673] WARNING: The mand mount option has been deprecated and [ 36.295937][ T3673] and is ignored by this kernel. Remove the mand [ 36.295937][ T3673] option from the mount to silence this warning. [ 36.295937][ T3673] ======================================================= [ 36.349001][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.399963][ T3673] FAT-fs (loop2): IO charset cp855 not found [ 36.432738][ T28] audit: type=1400 audit(1771899288.095:189): avc: denied { read write } for pid=3684 comm="syz.0.70" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.541688][ T41] bridge_slave_1: left allmulticast mode [ 36.613295][ T41] bridge_slave_1: left promiscuous mode [ 36.619239][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.761312][ T41] bridge_slave_0: left allmulticast mode [ 36.790336][ T41] bridge_slave_0: left promiscuous mode [ 36.840291][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.656035][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.667453][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.710793][ T41] bond0 (unregistering): Released all slaves [ 37.929567][ T41] hsr_slave_0: left promiscuous mode [ 37.999394][ T41] hsr_slave_1: left promiscuous mode [ 38.063562][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.138524][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.215719][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.288169][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.361295][ T41] veth1_macvtap: left promiscuous mode [ 38.377988][ T41] veth0_macvtap: left promiscuous mode [ 38.383556][ T41] veth1_vlan: left promiscuous mode [ 38.388857][ T41] veth0_vlan: left promiscuous mode [ 38.525818][ T41] team0 (unregistering): Port device team_slave_1 removed [ 38.535117][ T41] team0 (unregistering): Port device team_slave_0 removed [ 38.572673][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 38.899592][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.550560][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.557729][ T3650] bridge_slave_0: entered allmulticast mode [ 39.668215][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 39.688124][ T28] audit: type=1400 audit(1771899291.315:194): avc: denied { accept } for pid=3749 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.746610][ T3650] bridge_slave_0: entered promiscuous mode [ 40.061902][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.133866][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.160009][ T3650] bridge_slave_1: entered allmulticast mode [ 40.166490][ T3650] bridge_slave_1: entered promiscuous mode [ 40.229388][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.329628][ T3779] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.032930][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.053559][ T28] audit: type=1400 audit(1771899292.715:195): avc: denied { getopt } for pid=3775 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.183119][ T3779] netlink: 156 bytes leftover after parsing attributes in process `syz.2.87'. [ 41.194819][ T3650] team0: Port device team_slave_0 added [ 41.205628][ T28] audit: type=1400 audit(1771899292.845:196): avc: denied { write } for pid=3775 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.290525][ T3650] team0: Port device team_slave_1 added [ 41.424941][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.448002][ T28] audit: type=1400 audit(1771899292.845:197): avc: denied { nlmsg_write } for pid=3775 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.501935][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.627382][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.656850][ T28] audit: type=1400 audit(1771899293.315:198): avc: denied { bind } for pid=3788 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.753090][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.823047][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.863404][ T28] audit: type=1400 audit(1771899293.345:199): avc: denied { ioctl } for pid=3788 comm="syz.2.89" path="socket:[6202]" dev="sockfs" ino=6202 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.943562][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.984837][ T3650] hsr_slave_0: entered promiscuous mode [ 41.992173][ T3650] hsr_slave_1: entered promiscuous mode [ 42.161488][ T28] audit: type=1400 audit(1771899293.825:200): avc: denied { read } for pid=3807 comm="syz.2.93" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.190113][ T3650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.196929][ T28] audit: type=1400 audit(1771899293.845:201): avc: denied { create } for pid=3811 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.220253][ T3650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.231302][ T3818] loop0: detected capacity change from 0 to 512 [ 42.240325][ T3650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.254019][ T3822] loop1: detected capacity change from 0 to 1024 [ 42.260643][ T3818] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.267196][ T28] audit: type=1400 audit(1771899293.845:202): avc: denied { connect } for pid=3811 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.289103][ T3650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.296214][ T3818] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 42.307220][ T3818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 42.321776][ T3818] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.95: attempt to clear invalid blocks 2 len 1 [ 42.326894][ T3822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.334455][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 42.334469][ C0] EXT4-fs (loop0): initial error at time 1771899293: ext4_mb_generate_buddy:1315 [ 42.334490][ C0] EXT4-fs (loop0): last error at time 1771899293: ext4_mb_generate_buddy:1315 [ 42.371850][ T3818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.372567][ T3818] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.95: invalid indirect mapped block 1819239214 (level 0) [ 42.407785][ T3818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.408016][ T3818] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.95: invalid indirect mapped block 1819239214 (level 1) [ 42.450581][ T3818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.450860][ T3818] EXT4-fs (loop0): 1 truncate cleaned up [ 42.466422][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.540989][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.547786][ T28] audit: type=1400 audit(1771899294.205:203): avc: denied { remount } for pid=3817 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.551686][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.573786][ T3818] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.598487][ T3818] EXT4-fs error (device loop0): __ext4_remount:6804: comm syz.0.95: Abort forced by user [ 42.609596][ T3818] EXT4-fs (loop0): Remounting filesystem read-only [ 42.616159][ T3818] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.655979][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.663064][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.724637][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.731720][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.752462][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.786296][ T3650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.797828][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.051799][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.158683][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.239353][ T3873] loop2: detected capacity change from 0 to 512 [ 43.258762][ T3873] EXT4-fs: Ignoring removed oldalloc option [ 43.276752][ T3870] syz.1.99 uses obsolete (PF_INET,SOCK_PACKET) [ 43.277434][ T3873] EXT4-fs (loop2): 1 truncate cleaned up [ 43.315287][ T3873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.504222][ T3650] veth0_vlan: entered promiscuous mode [ 43.513920][ T3650] veth1_vlan: entered promiscuous mode [ 44.362669][ T3650] veth0_macvtap: entered promiscuous mode [ 44.441407][ T3650] veth1_macvtap: entered promiscuous mode [ 44.452569][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.482425][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.507144][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.520426][ T3900] loop0: detected capacity change from 0 to 512 [ 44.530070][ T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.548898][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.568064][ T3900] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.104: inode has both inline data and extents flags [ 44.581251][ T3900] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.581472][ T3900] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.104: couldn't read orphan inode 15 (err -117) [ 44.590618][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 44.590634][ C1] EXT4-fs (loop0): initial error at time 1771899296: ext4_orphan_get:1391: inode 15 [ 44.590677][ C1] EXT4-fs (loop0): last error at time 1771899296: ext4_orphan_get:1391 [ 44.590649][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.590715][ C1] : inode 15 [ 44.591625][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.602504][ T3900] loop0: lost filesystem error report for type 5 error -117 [ 44.648173][ T3900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 45.089545][ T3922] loop5: detected capacity change from 0 to 1024 [ 45.329885][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 45.329905][ T28] audit: type=1400 audit(1771899296.995:215): avc: denied { bind } for pid=3923 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.529192][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 45.568379][ T3922] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec019, mo2=0002] [ 45.587050][ T3922] System zones: 1-12 [ 45.598527][ T3922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.298037][ T28] audit: type=1400 audit(1771899297.425:216): avc: denied { create } for pid=3911 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 46.317605][ T28] audit: type=1400 audit(1771899297.425:217): avc: denied { ioctl } for pid=3911 comm="syz.1.109" path="cgroup:[4026532374]" dev="nsfs" ino=4026532374 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.342463][ T28] audit: type=1400 audit(1771899297.815:218): avc: denied { setattr } for pid=3920 comm="syz.5.59" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.400339][ T3934] loop1: detected capacity change from 0 to 1024 [ 46.428974][ T3934] EXT4-fs (loop1): failed to initialize system zone (-117) [ 46.441260][ T3934] EXT4-fs (loop1): mount failed [ 46.491691][ T3939] Zero length message leads to an empty skb [ 46.503060][ T28] audit: type=1400 audit(1771899298.165:219): avc: denied { bind } for pid=3935 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.536248][ T28] audit: type=1400 audit(1771899298.165:220): avc: denied { write } for pid=3935 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.571005][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.947860][ T3948] loop3: detected capacity change from 0 to 512 [ 47.024904][ T3952] loop5: detected capacity change from 0 to 512 [ 47.047099][ T3952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.059565][ T3948] FAT-fs (loop3): FAT read failed (blocknr 128) [ 47.085277][ T3952] EXT4-fs (loop5): 1 truncate cleaned up [ 47.105311][ T3952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.133997][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.271586][ T3968] loop3: detected capacity change from 0 to 1024 [ 47.281923][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.750961][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811baefa00: rx timeout, send abort [ 47.759229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811baefa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 47.811041][ T28] audit: type=1400 audit(1771899299.455:221): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.860215][ T28] audit: type=1400 audit(1771899299.455:222): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.883002][ T28] audit: type=1400 audit(1771899299.455:223): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.928021][ T28] audit: type=1400 audit(1771899299.455:224): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.073941][ T3998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 48.195884][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.974034][ T4018] loop3: detected capacity change from 0 to 1024 [ 49.030034][ T4018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec019, mo2=0002] [ 49.073507][ T4018] System zones: 1-12 [ 49.118647][ T4018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.849458][ T4051] loop0: detected capacity change from 0 to 512 [ 49.911859][ T4051] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.156: inode has both inline data and extents flags [ 49.925136][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.945583][ T4051] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.945948][ T4051] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.156: couldn't read orphan inode 15 (err -117) [ 49.955301][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.955320][ C1] EXT4-fs (loop0): initial error at time 1771899301: ext4_orphan_get:1391: inode 15 [ 49.955344][ C1] EXT4-fs (loop0): last error at time 1771899301: ext4_orphan_get:1391: inode 15 [ 49.992226][ T4051] loop0: lost filesystem error report for type 5 error -117 [ 49.994419][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 50.047853][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 50.136229][ T4070] loop0: detected capacity change from 0 to 512 [ 50.185239][ T4070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.266566][ T4070] EXT4-fs (loop0): 1 truncate cleaned up [ 50.267134][ T4070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.519809][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.552414][ T4093] loop2: detected capacity change from 0 to 512 [ 50.605200][ T4093] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.618857][ T4093] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 50.628632][ T4093] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 50.645931][ T4093] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.174: attempt to clear invalid blocks 2 len 1 [ 50.658667][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 50.658686][ C0] EXT4-fs (loop2): initial error at time 1771899302: ext4_mb_generate_buddy:1315 [ 50.658715][ C0] EXT4-fs (loop2): last error at time 1771899302: ext4_mb_generate_buddy:1315 [ 50.683601][ T4093] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.684036][ T4093] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.174: invalid indirect mapped block 1819239214 (level 0) [ 50.707441][ T4093] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.707688][ T4093] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.174: invalid indirect mapped block 1819239214 (level 1) [ 50.730884][ T4093] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.731165][ T4093] EXT4-fs (loop2): 1 truncate cleaned up [ 50.749759][ T4096] loop0: detected capacity change from 0 to 512 [ 50.759282][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.771841][ T4096] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.173: inode has both inline data and extents flags [ 50.784991][ T4096] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.787989][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 50.794289][ T4096] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.173: couldn't read orphan inode 15 (err -117) [ 50.797103][ C1] EXT4-fs (loop0): initial error at time 1771899302: ext4_orphan_get:1391 [ 50.803763][ T4096] loop0: lost filesystem error report for type 5 error -117 [ 50.815224][ C1] : inode 15 [ 50.815239][ C1] EXT4-fs (loop0): last error at time 1771899302: ext4_orphan_get:1391 [ 50.824652][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 50.830990][ C1] [ 50.854400][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.891343][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 51.010085][ T4117] loop3: detected capacity change from 0 to 512 [ 51.021520][ T4117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.034176][ T4117] EXT4-fs (loop3): 1 truncate cleaned up [ 51.048569][ T4117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.096166][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.139960][ T4131] loop1: detected capacity change from 0 to 512 [ 51.222592][ T4148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 51.337147][ T4167] loop1: detected capacity change from 0 to 1024 [ 51.368955][ T4167] EXT4-fs (loop1): failed to initialize system zone (-117) [ 51.382349][ T4167] EXT4-fs (loop1): mount failed [ 51.436116][ T4183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.210'. [ 51.448935][ T4188] loop1: detected capacity change from 0 to 512 [ 51.560354][ T4199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 51.620112][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 51.629534][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.636829][ T4211] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.676325][ T4213] EXT4-fs (loop5): failed to initialize system zone (-117) [ 51.685823][ T4213] EXT4-fs (loop5): mount failed [ 51.807902][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 52.219821][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 52.858992][ T4261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 54.232062][ T4306] set_capacity_and_notify: 1 callbacks suppressed [ 54.232077][ T4306] loop0: detected capacity change from 0 to 2048 [ 54.280608][ T4306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.454759][ T4306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.259: bg 0: block 234: padding at end of block bitmap is not set [ 54.494211][ T4306] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 248 with max blocks 124 with error 28 [ 54.538132][ T4306] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.538132][ T4306] [ 54.551379][ T4306] EXT4-fs (loop0): Total free blocks count 0 [ 54.557473][ T4306] EXT4-fs (loop0): Free/Dirty block details [ 54.568158][ T4306] EXT4-fs (loop0): free_blocks=0 [ 54.595849][ T4306] EXT4-fs (loop0): dirty_blocks=384 [ 54.616269][ T4306] EXT4-fs (loop0): Block reservation details [ 54.622517][ T4306] EXT4-fs (loop0): i_reserved_data_blocks=24 [ 54.739467][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.920676][ T4359] loop0: detected capacity change from 0 to 2048 [ 54.988153][ T4359] EXT4-fs error (device loop0): __ext4_iget:5378: inode #2: block 65536: comm syz.0.267: invalid block [ 55.146181][ T4359] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 55.147358][ T4359] EXT4-fs (loop0): get root inode failed [ 55.156493][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 55.156506][ C1] EXT4-fs (loop0): initial error at time 1771899306: __ext4_iget:5378: inode 2: block 65536 [ 55.156571][ C1] EXT4-fs (loop0): last error at time 1771899306: __ext4_iget:5378: inode 2: block 65536 [ 55.222606][ T4359] EXT4-fs (loop0): mount failed [ 55.927408][ T4394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.272'. [ 56.455228][ T4412] netlink: 'syz.0.277': attribute type 39 has an invalid length. [ 56.541177][ T4417] loop5: detected capacity change from 0 to 2048 [ 56.640213][ T4417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.749989][ T4417] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.280: bg 0: block 234: padding at end of block bitmap is not set [ 56.789527][ T4417] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 146 with error 28 [ 56.856462][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 56.868192][ T4417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 56.868192][ T4417] [ 56.877822][ T4417] EXT4-fs (loop5): Total free blocks count 0 [ 56.940133][ T4417] EXT4-fs (loop5): Free/Dirty block details [ 57.042546][ T4417] EXT4-fs (loop5): free_blocks=0 [ 57.090934][ T4417] EXT4-fs (loop5): dirty_blocks=160 [ 57.181466][ T4417] EXT4-fs (loop5): Block reservation details [ 57.238508][ T4417] EXT4-fs (loop5): i_reserved_data_blocks=10 [ 57.328757][ T4417] syz.5.280 (4417) used greatest stack depth: 10192 bytes left [ 57.342979][ T4445] loop2: detected capacity change from 0 to 1024 [ 57.353877][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.577473][ T4451] loop3: detected capacity change from 0 to 512 [ 57.630401][ T4451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.697650][ T4445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.714247][ T4451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.737978][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 57.744410][ C1] EXT4-fs (loop3): initial error at time 1771899309: ext4_mb_generate_buddy:1315 [ 57.753559][ C1] EXT4-fs (loop3): last error at time 1771899309: ext4_mb_generate_buddy:1315 [ 57.898989][ T4451] EXT4-fs (loop3): 1 truncate cleaned up [ 57.960939][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.976593][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.035654][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.121795][ T4484] loop5: detected capacity change from 0 to 512 [ 58.131224][ T4484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.145035][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 58.145105][ T28] audit: type=1400 audit(1771899309.805:233): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.206070][ T4484] EXT4-fs (loop5): 1 truncate cleaned up [ 58.218726][ T4484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.246959][ T4496] loop3: detected capacity change from 0 to 512 [ 58.255922][ T4496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.266375][ T28] audit: type=1400 audit(1771899309.915:234): avc: denied { node_bind } for pid=4497 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.275426][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.299739][ T4496] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 58.317976][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.324279][ T4496] EXT4-fs (loop3): 1 truncate cleaned up [ 58.324394][ C0] EXT4-fs (loop3): initial error at time 1771899309: ext4_mb_generate_buddy:1315 [ 58.339120][ C0] EXT4-fs (loop3): last error at time 1771899309: ext4_mb_generate_buddy:1315 [ 58.340173][ T4496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.389938][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.462058][ T4517] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.504043][ T4521] loop3: detected capacity change from 0 to 512 [ 58.526585][ T4521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.558120][ T4521] EXT4-fs (loop3): 1 truncate cleaned up [ 58.561440][ T4527] loop0: detected capacity change from 0 to 512 [ 58.564341][ T4521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.592163][ T4527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.621567][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.646786][ T4527] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 58.668016][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 58.674449][ C0] EXT4-fs (loop0): initial error at time 1771899310: ext4_mb_generate_buddy:1315 [ 58.683572][ C0] EXT4-fs (loop0): last error at time 1771899310: ext4_mb_generate_buddy:1315 [ 58.706047][ T4527] EXT4-fs (loop0): 1 truncate cleaned up [ 58.725519][ T4527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.817901][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.893118][ T4554] loop1: detected capacity change from 0 to 512 [ 58.934324][ T4558] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.962046][ T4554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.997792][ T4554] EXT4-fs (loop1): 1 truncate cleaned up [ 59.025364][ T4554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.083813][ T4560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.115857][ T4560] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.171405][ T28] audit: type=1400 audit(1771899310.835:235): avc: denied { remove_name } for pid=3650 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.173582][ T4569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.196759][ T28] audit: type=1400 audit(1771899310.835:236): avc: denied { rmdir } for pid=3650 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.229226][ T28] audit: type=1400 audit(1771899310.855:237): avc: denied { unlink } for pid=3650 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.252019][ T28] audit: type=1400 audit(1771899310.855:238): avc: denied { unlink } for pid=3650 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 59.252437][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.274739][ T28] audit: type=1400 audit(1771899310.915:239): avc: denied { unlink } for pid=3650 comm="syz-executor" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.318332][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.318984][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.344801][ T4574] netlink: 'syz.0.344': attribute type 39 has an invalid length. [ 59.384702][ T4580] set_capacity_and_notify: 2 callbacks suppressed [ 59.384718][ T4580] loop2: detected capacity change from 0 to 512 [ 59.412495][ T4580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.494729][ T4580] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 59.509691][ T4580] EXT4-fs (loop2): 1 truncate cleaned up [ 59.515928][ T4580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.588541][ T4580] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.412057][ T4598] loop5: detected capacity change from 0 to 512 [ 60.504039][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.513436][ T4598] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.536528][ T4602] loop0: detected capacity change from 0 to 512 [ 60.572568][ T4598] EXT4-fs (loop5): 1 truncate cleaned up [ 60.578927][ T4598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.604003][ T4602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.654511][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.675661][ T4602] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.790054][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.876478][ T4631] loop1: detected capacity change from 0 to 1024 [ 61.477002][ T4630] loop3: detected capacity change from 0 to 512 [ 61.492448][ T4630] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 61.505712][ T4631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.549050][ T4630] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.362: iget: bad i_size value: 360287970189639680 [ 61.562070][ T4630] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.562591][ T4630] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.362: couldn't read orphan inode 15 (err -117) [ 61.571716][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.571731][ C1] EXT4-fs (loop3): initial error at time 1771899313: ext4_orphan_get:1391: inode 15 [ 61.571764][ C1] EXT4-fs (loop3): last error at time 1771899313: ext4_orphan_get:1391: inode 15 [ 61.608487][ T4630] loop3: lost filesystem error report for type 5 error -117 [ 61.612742][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.637631][ T4630] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.652011][ T4630] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.362: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 61.686567][ T4635] loop2: detected capacity change from 0 to 1024 [ 61.757697][ T4635] EXT4-fs (loop2): failed to initialize system zone (-117) [ 61.855410][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.878325][ T4635] EXT4-fs (loop2): mount failed [ 61.932924][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.005362][ T4646] loop1: detected capacity change from 0 to 512 [ 62.032385][ T4646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.067505][ T4646] EXT4-fs (loop1): 1 truncate cleaned up [ 62.107662][ T4646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.131514][ T4659] loop3: detected capacity change from 0 to 512 [ 62.209462][ T4659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.336580][ T4659] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.550435][ T4691] loop0: detected capacity change from 0 to 1024 [ 62.581296][ T4691] EXT4-fs (loop0): failed to initialize system zone (-117) [ 62.602194][ T4691] EXT4-fs (loop0): mount failed [ 62.700496][ T4701] loop1: detected capacity change from 0 to 512 [ 62.724299][ T4701] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.752454][ T4701] EXT4-fs (loop1): 1 truncate cleaned up [ 62.851757][ T4707] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.909942][ T4711] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.922341][ T28] audit: type=1400 audit(1771899314.585:240): avc: denied { ioctl } for pid=4710 comm="syz.3.395" path="/80/file0/bus" dev="loop3" ino=18 ioctlcmd=0x4c04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.010466][ T4722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.399'. [ 63.116779][ T4732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.147943][ T4732] EXT4-fs (loop3): 1 truncate cleaned up [ 63.312647][ T4764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.341081][ T4764] EXT4-fs (loop3): 1 truncate cleaned up [ 63.690413][ T4810] netlink: 20 bytes leftover after parsing attributes in process `syz.5.439'. [ 63.965259][ T4830] netlink: 68 bytes leftover after parsing attributes in process `syz.5.446'. [ 64.113768][ T4843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.452'. [ 64.862750][ T4895] set_capacity_and_notify: 6 callbacks suppressed [ 64.862864][ T4895] loop1: detected capacity change from 0 to 1024 [ 64.878741][ T4895] EXT4-fs (loop1): failed to initialize system zone (-117) [ 64.886099][ T4895] EXT4-fs (loop1): mount failed [ 65.032637][ T28] audit: type=1400 audit(1771899316.695:241): avc: denied { ioctl } for pid=4904 comm="syz.5.479" path="socket:[8906]" dev="sockfs" ino=8906 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.127559][ T4924] netlink: 'syz.1.486': attribute type 39 has an invalid length. [ 65.197939][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 65.286031][ T4951] loop8: detected capacity change from 0 to 8 [ 65.465595][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 65.686903][ T4975] loop5: detected capacity change from 0 to 4096 [ 65.784409][ T4981] netlink: 'syz.1.511': attribute type 39 has an invalid length. [ 65.798834][ T4975] EXT4-fs mount: 16 callbacks suppressed [ 65.798849][ T4975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.888251][ T28] audit: type=1400 audit(1771899317.535:242): avc: denied { setattr } for pid=4974 comm="syz.5.509" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.928597][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.956955][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'. [ 66.000581][ T4990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.516'. [ 66.053621][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 66.081149][ T4996] loop3: detected capacity change from 0 to 1024 [ 66.125850][ T4996] EXT4-fs (loop3): failed to initialize system zone (-117) [ 66.148288][ T4996] EXT4-fs (loop3): mount failed [ 66.193240][ T5013] netlink: 'syz.0.524': attribute type 39 has an invalid length. [ 66.344981][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.528'. [ 66.517599][ T5031] loop2: detected capacity change from 0 to 512 [ 66.566709][ T5031] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.780061][ T5031] EXT4-fs (loop2): 1 truncate cleaned up [ 66.842587][ T5031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.933889][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.946162][ T5045] netlink: 'syz.0.536': attribute type 39 has an invalid length. [ 67.878008][ T28] audit: type=1400 audit(1771899319.505:243): avc: denied { create } for pid=5092 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.987384][ T28] audit: type=1400 audit(1771899319.505:244): avc: denied { bind } for pid=5092 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.006546][ T28] audit: type=1400 audit(1771899319.505:245): avc: denied { write } for pid=5092 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.047781][ T35] hid-generic FFFF:0003:0000.0002: unknown main item tag 0x0 [ 68.061864][ T35] hid-generic FFFF:0003:0000.0002: unknown main item tag 0x0 [ 68.070172][ T35] hid-generic FFFF:0003:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 68.117567][ T5112] fido_id[5112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.207160][ T5120] loop1: detected capacity change from 0 to 2048 [ 68.299611][ T5120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.311918][ T28] audit: type=1400 audit(1771899319.975:246): avc: denied { read } for pid=5123 comm="syz.5.569" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.338079][ T28] audit: type=1400 audit(1771899319.975:247): avc: denied { open } for pid=5123 comm="syz.5.569" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.446089][ T5120] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.567: bg 0: block 234: padding at end of block bitmap is not set [ 68.469605][ T5120] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 946 with error 28 [ 68.482076][ T5120] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.482076][ T5120] [ 68.491872][ T5120] EXT4-fs (loop1): Total free blocks count 0 [ 68.498003][ T5120] EXT4-fs (loop1): Free/Dirty block details [ 68.503927][ T5120] EXT4-fs (loop1): free_blocks=0 [ 68.513662][ T5140] __nla_validate_parse: 5 callbacks suppressed [ 68.513749][ T5140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 68.528963][ T28] audit: type=1400 audit(1771899320.175:248): avc: denied { read write } for pid=5123 comm="syz.5.569" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.552336][ T5120] EXT4-fs (loop1): dirty_blocks=960 [ 68.557582][ T5120] EXT4-fs (loop1): Block reservation details [ 68.563582][ T28] audit: type=1400 audit(1771899320.175:249): avc: denied { open } for pid=5123 comm="syz.5.569" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.587035][ T5120] EXT4-fs (loop1): i_reserved_data_blocks=60 [ 68.606604][ T28] audit: type=1400 audit(1771899320.175:250): avc: denied { ioctl } for pid=5123 comm="syz.5.569" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.632350][ T5147] loop2: detected capacity change from 0 to 128 [ 68.650669][ T5147] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 68.691951][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.705511][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.770837][ T5165] loop2: detected capacity change from 0 to 512 [ 68.782572][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.805373][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 68.826448][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'. [ 68.839831][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.895534][ T10] hid-generic FFFF:0003:0000.0003: unknown main item tag 0x0 [ 68.903283][ T10] hid-generic FFFF:0003:0000.0003: unknown main item tag 0x0 [ 68.918366][ T10] hid-generic FFFF:0003:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 68.940389][ T5185] fido_id[5185]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.062643][ T5205] capability: warning: `syz.1.603' uses 32-bit capabilities (legacy support in use) [ 69.138573][ T10] hid-generic FFFF:0003:0000.0004: unknown main item tag 0x0 [ 69.146978][ T10] hid-generic FFFF:0003:0000.0004: unknown main item tag 0x0 [ 69.156333][ T10] hid-generic FFFF:0003:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 69.470880][ T5225] loop5: detected capacity change from 0 to 512 [ 69.497449][ T5225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.529822][ T5225] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.698130][ T5225] loop5: detected capacity change from 512 to 64 [ 69.735294][ T3650] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Out of memory [ 69.748235][ T3650] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 69.833347][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 69.917284][ T5251] EXT4-fs (loop0): failed to initialize system zone (-117) [ 69.926572][ T5260] set_capacity_and_notify: 1 callbacks suppressed [ 69.926632][ T5260] loop2: detected capacity change from 0 to 128 [ 69.933500][ T5251] EXT4-fs (loop0): mount failed [ 69.947573][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.972519][ T5260] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 69.984680][ T5226] kmmpd-loop5: attempt to access beyond end of device [ 69.984680][ T5226] loop5: rw=8402945, sector=64, nr_sectors = 8 limit=64 [ 70.000493][ T5226] Buffer I/O error on dev loop5, logical block 8, lost sync page write [ 70.004167][ T5265] loop1: detected capacity change from 0 to 512 [ 70.034061][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.061869][ T5265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.076602][ T5265] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.138019][ T5265] loop1: detected capacity change from 512 to 64 [ 70.174137][ T3307] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Out of memory [ 70.183660][ T3307] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 70.305697][ T5273] chnl_net:caif_netlink_parms(): no params data found [ 70.347949][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.356916][ T5273] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.364270][ T5273] bridge_slave_0: entered allmulticast mode [ 70.371140][ T5273] bridge_slave_0: entered promiscuous mode [ 70.377876][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.385144][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.392392][ T5273] bridge_slave_1: entered allmulticast mode [ 70.399111][ T5273] bridge_slave_1: entered promiscuous mode [ 70.417053][ T5273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.427559][ T5273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.448085][ T5273] team0: Port device team_slave_0 added [ 70.454649][ T5273] team0: Port device team_slave_1 added [ 70.472913][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.480044][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.506185][ T5273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.517490][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.524601][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.550728][ T5273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.600567][ T5273] hsr_slave_0: entered promiscuous mode [ 70.607718][ T5273] hsr_slave_1: entered promiscuous mode [ 70.614592][ T5273] debugfs: 'hsr0' already exists in 'hsr' [ 70.620846][ T5273] Cannot create hsr debugfs directory [ 70.878290][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 70.878332][ T28] audit: type=1400 audit(1771899322.545:255): avc: denied { bind } for pid=5300 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.944750][ T28] audit: type=1400 audit(1771899322.565:256): avc: denied { create } for pid=5300 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.973205][ T5273] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.982672][ T5273] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.991902][ T5273] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.001155][ T5273] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.045483][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.057284][ T5273] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.077278][ T5273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.087676][ T5273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.108358][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.115385][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.132083][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.139209][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.181654][ T5273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.289893][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.303336][ T5036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.314902][ T5267] kmmpd-loop1: attempt to access beyond end of device [ 71.314902][ T5267] loop1: rw=8402945, sector=64, nr_sectors = 8 limit=64 [ 71.328596][ T5267] Buffer I/O error on dev loop1, logical block 8, lost sync page write [ 71.330670][ T5273] veth0_vlan: entered promiscuous mode [ 71.354475][ T5273] veth1_vlan: entered promiscuous mode [ 71.372835][ T5036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.388368][ T5273] veth0_macvtap: entered promiscuous mode [ 71.407796][ T5273] veth1_macvtap: entered promiscuous mode [ 71.428521][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.444515][ T5036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.473708][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.490806][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.526503][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.536776][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.559058][ T5036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.572781][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.726102][ T5036] bridge_slave_1: left allmulticast mode [ 71.733312][ T5036] bridge_slave_1: left promiscuous mode [ 71.739260][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.751375][ T5036] bridge_slave_0: left allmulticast mode [ 71.757092][ T5036] bridge_slave_0: left promiscuous mode [ 71.763949][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.781060][ T5351] loop6: detected capacity change from 0 to 512 [ 71.807653][ T5352] loop0: detected capacity change from 0 to 1024 [ 71.824438][ T5351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.837273][ T5351] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.848423][ T5352] EXT4-fs (loop0): failed to initialize system zone (-117) [ 71.855710][ T5352] EXT4-fs (loop0): mount failed [ 71.871186][ T5273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.920121][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.925817][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 71.941141][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.951760][ T5036] bond0 (unregistering): Released all slaves [ 72.013555][ T5375] loop3: detected capacity change from 0 to 512 [ 72.077373][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.655'. [ 72.152610][ T5036] hsr_slave_0: left promiscuous mode [ 72.165532][ T5036] hsr_slave_1: left promiscuous mode [ 72.177260][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.211353][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.243919][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.264840][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.322149][ T5036] veth1_macvtap: left promiscuous mode [ 72.356994][ T5036] veth0_macvtap: left promiscuous mode [ 72.374816][ T5036] veth1_vlan: left promiscuous mode [ 72.394396][ T5036] veth0_vlan: left promiscuous mode [ 72.414005][ T5395] loop2: detected capacity change from 0 to 512 [ 72.449802][ T5395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.482153][ T5395] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.535910][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.561403][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 72.570934][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 72.709317][ T5375] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 72.790831][ T5330] chnl_net:caif_netlink_parms(): no params data found [ 73.241721][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.296302][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.303436][ T5330] bridge_slave_0: entered allmulticast mode [ 73.309926][ T5330] bridge_slave_0: entered promiscuous mode [ 73.316668][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.336313][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.394708][ T5330] bridge_slave_1: entered allmulticast mode [ 73.427301][ T5330] bridge_slave_1: entered promiscuous mode [ 73.508938][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.545205][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 73.568531][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.607724][ T5330] team0: Port device team_slave_0 added [ 73.624814][ T5330] team0: Port device team_slave_1 added [ 73.655266][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.672431][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.749521][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.789943][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.805614][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.871004][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.890331][ T5439] loop6: detected capacity change from 0 to 1024 [ 73.932102][ T5330] hsr_slave_0: entered promiscuous mode [ 73.938631][ T5330] hsr_slave_1: entered promiscuous mode [ 73.944572][ T5330] debugfs: 'hsr0' already exists in 'hsr' [ 73.950462][ T5330] Cannot create hsr debugfs directory [ 73.988668][ T5439] EXT4-fs (loop6): failed to initialize system zone (-117) [ 73.996006][ T5439] EXT4-fs (loop6): mount failed [ 74.089557][ T5330] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.113935][ T5330] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.128570][ T5330] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.149785][ T5330] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.282332][ T5462] netlink: 27 bytes leftover after parsing attributes in process `syz.3.673'. [ 74.291413][ T28] audit: type=1400 audit(1771899325.945:257): avc: denied { setopt } for pid=5457 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.344766][ T28] audit: type=1400 audit(1771899326.005:258): avc: denied { read } for pid=3039 comm="dhcpcd" name="n31" dev="tmpfs" ino=3976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.371318][ T28] audit: type=1400 audit(1771899326.005:259): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.396675][ T28] audit: type=1400 audit(1771899326.005:260): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.507788][ T28] audit: type=1400 audit(1771899326.165:261): avc: denied { name_bind } for pid=5470 comm="syz.2.675" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.596790][ T28] audit: type=1400 audit(1771899326.245:262): avc: denied { open } for pid=5460 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.649096][ T28] audit: type=1400 audit(1771899326.245:263): avc: denied { kernel } for pid=5460 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.776394][ T5469] bond0: entered promiscuous mode [ 74.781544][ T5469] bond_slave_0: entered promiscuous mode [ 74.787263][ T5469] bond_slave_1: entered promiscuous mode [ 74.794563][ T5469] batadv0: entered promiscuous mode [ 74.800338][ T5469] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 74.813980][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.835175][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.846033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.853138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.872028][ T5330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.883157][ T5330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.898885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.906027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.955655][ T28] audit: type=1400 audit(1771899326.615:264): avc: denied { create } for pid=5475 comm="dhcpcd-run-hook" name="resolv.conf.eth7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.022383][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.410898][ T5534] loop2: detected capacity change from 0 to 512 [ 75.438523][ T5461] syz.0.674 (5461) used greatest stack depth: 8568 bytes left [ 75.507735][ C1] hrtimer: interrupt took 46562 ns [ 75.521935][ T5330] veth0_vlan: entered promiscuous mode [ 75.576499][ T5330] veth1_vlan: entered promiscuous mode [ 75.643706][ T5541] loop6: detected capacity change from 0 to 512 [ 75.723964][ T5542] loop0: detected capacity change from 0 to 1024 [ 75.751849][ T5541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 75.777493][ T5330] veth0_macvtap: entered promiscuous mode [ 75.858600][ T5330] veth1_macvtap: entered promiscuous mode [ 75.866353][ T5541] EXT4-fs (loop6): 1 truncate cleaned up [ 75.867343][ T5542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.875215][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.892168][ T5541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.910803][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.928066][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 75.928128][ T28] audit: type=1400 audit(1771899327.585:270): avc: denied { add_name } for pid=5540 comm="syz.6.685" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.011461][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.074970][ T5036] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.101790][ T5534] FAT-fs (loop2): FAT read failed (blocknr 128) [ 76.153775][ T5036] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194761][ T5036] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.214039][ T5036] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.226365][ T5273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.304954][ T5564] loop2: detected capacity change from 0 to 1024 [ 76.312856][ T5567] loop0: detected capacity change from 0 to 1024 [ 76.328728][ T5564] EXT4-fs: Ignoring removed oldalloc option [ 76.334723][ T5564] EXT4-fs: Ignoring removed bh option [ 76.363032][ T5567] EXT4-fs (loop0): failed to initialize system zone (-117) [ 76.372827][ T5567] EXT4-fs (loop0): mount failed [ 76.400709][ T5564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.448658][ T5583] loop3: detected capacity change from 0 to 512 [ 76.477939][ T5583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.591296][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.662932][ T5596] ================================================================== [ 76.671007][ T5596] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 76.678885][ T5596] [ 76.681182][ T5596] write to 0xffff888107fc29ec of 4 bytes by task 5564 on cpu 1: [ 76.688782][ T5596] xas_set_mark+0x12b/0x140 [ 76.693287][ T5596] __folio_start_writeback+0x17b/0x370 [ 76.698729][ T5596] ext4_bio_write_folio+0x5ad/0x9f0 [ 76.703919][ T5596] mpage_process_page_bufs+0x4a1/0x620 [ 76.709359][ T5596] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 76.715154][ T5596] ext4_do_writepages+0xa07/0x2840 [ 76.720260][ T5596] ext4_writepages+0x18f/0x320 [ 76.724999][ T5596] do_writepages+0x1c6/0x310 [ 76.729565][ T5596] file_write_and_wait_range+0x178/0x2f0 [ 76.735195][ T5596] generic_buffers_fsync_noflush+0x45/0x130 [ 76.741064][ T5596] ext4_sync_file+0x1aa/0x6b0 [ 76.745712][ T5596] vfs_fsync_range+0xc5/0xe0 [ 76.750277][ T5596] ext4_buffered_write_iter+0x34f/0x3c0 [ 76.755805][ T5596] ext4_file_write_iter+0x380/0xfa0 [ 76.760981][ T5596] iter_file_splice_write+0x6c4/0xa80 [ 76.766327][ T5596] direct_splice_actor+0x156/0x2a0 [ 76.771411][ T5596] splice_direct_to_actor+0x311/0x670 [ 76.776756][ T5596] do_splice_direct+0x119/0x1a0 [ 76.781578][ T5596] do_sendfile+0x382/0x650 [ 76.785967][ T5596] __x64_sys_sendfile64+0x105/0x150 [ 76.791138][ T5596] x64_sys_call+0x2dc4/0x3020 [ 76.795791][ T5596] do_syscall_64+0x12c/0x370 [ 76.800360][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.806225][ T5596] [ 76.808531][ T5596] read to 0xffff888107fc29ec of 4 bytes by task 5596 on cpu 0: [ 76.816054][ T5596] __writeback_single_inode+0x26b/0x860 [ 76.821582][ T5596] writeback_single_inode+0x16d/0x3f0 [ 76.826932][ T5596] sync_inode_metadata+0x6e/0xa0 [ 76.831846][ T5596] generic_buffers_fsync_noflush+0xee/0x130 [ 76.837713][ T5596] ext4_sync_file+0x1aa/0x6b0 [ 76.842362][ T5596] vfs_fsync_range+0xc5/0xe0 [ 76.846925][ T5596] ext4_buffered_write_iter+0x34f/0x3c0 [ 76.852447][ T5596] ext4_file_write_iter+0x380/0xfa0 [ 76.857622][ T5596] iter_file_splice_write+0x6c4/0xa80 [ 76.862966][ T5596] direct_splice_actor+0x156/0x2a0 [ 76.868054][ T5596] splice_direct_to_actor+0x311/0x670 [ 76.873407][ T5596] do_splice_direct+0x119/0x1a0 [ 76.878231][ T5596] do_sendfile+0x382/0x650 [ 76.882634][ T5596] __x64_sys_sendfile64+0x105/0x150 [ 76.887805][ T5596] x64_sys_call+0x2dc4/0x3020 [ 76.892460][ T5596] do_syscall_64+0x12c/0x370 [ 76.897029][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.902895][ T5596] [ 76.905193][ T5596] value changed: 0x0a000021 -> 0x00000021 [ 76.910880][ T5596] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.913182][ T5596] Reported by Kernel Concurrency Sanitizer on: [ 76.919319][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.2.692 Not tainted syzkaller #0 PREEMPT(full) [ 76.928507][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.938545][ T5596] ================================================================== [ 77.314835][ T4048] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.359196][ T5564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.400912][ T4048] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.449997][ T4048] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.490435][ T4048] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.559501][ T4048] bridge_slave_1: left allmulticast mode [ 77.565120][ T4048] bridge_slave_1: left promiscuous mode [ 77.570939][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.578748][ T4048] bridge_slave_0: left allmulticast mode [ 77.584359][ T4048] bridge_slave_0: left promiscuous mode [ 77.590132][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.689608][ T4048] bond0 (unregistering): left promiscuous mode [ 77.695815][ T4048] bond_slave_0: left promiscuous mode [ 77.701387][ T4048] bond_slave_1: left promiscuous mode [ 77.707279][ T4048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.717151][ T4048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.727131][ T4048] bond0 (unregistering): Released all slaves [ 77.769924][ T4048] batadv0: left promiscuous mode [ 77.777897][ T4048] hsr_slave_0: left promiscuous mode [ 77.783817][ T4048] hsr_slave_1: left promiscuous mode [ 77.789609][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.797003][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.804833][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.812359][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.823289][ T4048] veth1_macvtap: left promiscuous mode [ 77.828813][ T4048] veth0_macvtap: left promiscuous mode [ 77.834278][ T4048] veth1_vlan: left promiscuous mode [ 77.839604][ T4048] veth0_vlan: left promiscuous mode [ 77.897614][ T4048] team0 (unregistering): Port device team_slave_1 removed [ 77.906706][ T4048] team0 (unregistering): Port device team_slave_0 removed [ 78.162437][ T4048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.210846][ T4048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.261888][ T4048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.310619][ T4048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.396504][ T4048] bridge_slave_1: left allmulticast mode [ 78.405564][ T4048] bridge_slave_1: left promiscuous mode [ 78.411355][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.420622][ T4048] bridge_slave_0: left allmulticast mode [ 78.426274][ T4048] bridge_slave_0: left promiscuous mode [ 78.432066][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.510861][ T4048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.520297][ T4048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.529744][ T4048] bond0 (unregistering): Released all slaves [ 78.601784][ T4048] hsr_slave_0: left promiscuous mode [ 78.608669][ T4048] hsr_slave_1: left promiscuous mode [ 78.614250][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.623666][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.632926][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.640333][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.650007][ T4048] veth1_macvtap: left promiscuous mode [ 78.655457][ T4048] veth0_macvtap: left promiscuous mode [ 78.661103][ T4048] veth1_vlan: left promiscuous mode [ 78.666423][ T4048] veth0_vlan: left promiscuous mode [ 78.719012][ T4048] team0 (unregistering): Port device team_slave_1 removed [ 78.727923][ T4048] team0 (unregistering): Port device team_slave_0 removed [ 79.000420][ T4048] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.050302][ T4048] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.110673][ T4048] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.160174][ T4048] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.226590][ T4048] bridge_slave_1: left allmulticast mode [ 79.232346][ T4048] bridge_slave_1: left promiscuous mode [ 79.238164][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.245757][ T4048] bridge_slave_0: left allmulticast mode [ 79.251545][ T4048] bridge_slave_0: left promiscuous mode [ 79.257197][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.319655][ T4048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.329099][ T4048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.338500][ T4048] bond0 (unregistering): Released all slaves [ 79.361694][ T4048] hsr_slave_0: left promiscuous mode [ 79.367456][ T4048] hsr_slave_1: left promiscuous mode [ 79.373174][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.380629][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.388431][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.396984][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.406983][ T4048] veth1_macvtap: left promiscuous mode [ 79.412696][ T4048] veth0_macvtap: left promiscuous mode [ 79.418280][ T4048] veth1_vlan: left promiscuous mode [ 79.423965][ T4048] veth0_vlan: left promiscuous mode [ 79.493502][ T4048] team0 (unregistering): Port device team_slave_1 removed [ 79.503462][ T4048] team0 (unregistering): Port device team_slave_0 removed