last executing test programs: 32.849268708s ago: executing program 1 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 32.785926542s ago: executing program 1 (id=2436): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@loopback, 0x0, 0x32}, @in=@private=0xa010102, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x7, 0xcc, 0x4}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x20040084) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 32.687311978s ago: executing program 1 (id=2439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() 32.417510874s ago: executing program 4 (id=2444): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 32.349083287s ago: executing program 4 (id=2445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a0104000000000000005c73d38c040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0000000b0a010100000000000000000a0000050900010073797a31"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 32.312491269s ago: executing program 4 (id=2446): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 32.061234954s ago: executing program 1 (id=2455): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f00000002c0)='./file1\x00') 31.992181988s ago: executing program 1 (id=2458): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 31.639648078s ago: executing program 1 (id=2464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) 31.599362771s ago: executing program 32 (id=2464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) 31.531212784s ago: executing program 4 (id=2469): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f00000002c0)='./file1\x00') 31.452045179s ago: executing program 4 (id=2471): r0 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 31.09487567s ago: executing program 4 (id=2479): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x47}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 31.010053625s ago: executing program 33 (id=2479): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x47}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.527475604s ago: executing program 6 (id=3388): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 2.462456207s ago: executing program 6 (id=3390): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001f0001cb0ab61c7e8d72d10001"], 0x20}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.25241117s ago: executing program 6 (id=3398): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e21, 0xbb, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x3, @empty, 0xfffffe01}}}, 0x108) 2.152585445s ago: executing program 6 (id=3400): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000003c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x2, 0x100000, 0x6, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) 1.164860203s ago: executing program 6 (id=3420): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xd) 1.164297543s ago: executing program 6 (id=3422): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x7}, {0x3, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.074068808s ago: executing program 0 (id=3428): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000040)={0x200000, 0x0, 0x21}, 0x18) 1.03953633s ago: executing program 0 (id=3430): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.016290172s ago: executing program 0 (id=3432): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0xfb, 0x0, 0x223d}, 0xc) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000008c0)) 984.426173ms ago: executing program 0 (id=3434): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r0, &(0x7f0000000300)=[{0x0, 0x60}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) 969.214124ms ago: executing program 0 (id=3435): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x5, 0x1}, 0x90) 528.956409ms ago: executing program 3 (id=3457): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$inet_pktinfo(r0, 0x29, 0x8, 0x0, &(0x7f00000003c0)) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 430.791845ms ago: executing program 2 (id=3460): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 357.216969ms ago: executing program 2 (id=3461): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 328.401041ms ago: executing program 2 (id=3462): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfff, 0x200400, 0xfbfffffd, 0xc6cd, 0x91, "0000080100", 0x23fff9, 0x1ed}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) 298.617123ms ago: executing program 2 (id=3463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x200, 0xd18, 0x2, r1}, &(0x7f0000000380)=0x10) 260.803595ms ago: executing program 2 (id=3465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001480)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) 237.793686ms ago: executing program 5 (id=3466): r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 222.786507ms ago: executing program 2 (id=3467): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 172.45209ms ago: executing program 5 (id=3468): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002"], 0x90}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 172.32233ms ago: executing program 3 (id=3469): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 135.243912ms ago: executing program 3 (id=3470): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 134.779802ms ago: executing program 5 (id=3471): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 113.001713ms ago: executing program 5 (id=3472): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 108.197904ms ago: executing program 3 (id=3473): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfff, 0x200400, 0xfbfffffd, 0xc6cd, 0x91, "0000080100", 0x23fff9, 0x1ed}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) 76.464416ms ago: executing program 0 (id=3474): syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0x20000) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 66.026237ms ago: executing program 3 (id=3475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000001, 0x4b56}) 46.224767ms ago: executing program 5 (id=3476): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2002) 10.33448ms ago: executing program 5 (id=3477): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x800, 0x7fff, 0xd, 0x1, 0xa2}, 0x14) 0s ago: executing program 3 (id=3478): r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): 573482][ T3001] loop0: p6 size 83886080 extends beyond EOD, truncated [ 83.585668][ T6633] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 83.612658][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.619999][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.700211][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.713750][ T6645] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1261'. [ 83.788943][ T6649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.845535][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.845538][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.849151][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.858436][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 83.911531][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.060097][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.097156][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.104406][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.149937][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.177141][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.184798][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.223586][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.231241][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.238962][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.246640][ T6678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.577565][ T29] audit: type=1400 audit(84.551:1394): avc: denied { map } for pid=6725 comm="syz.4.1297" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 84.703645][ T6734] set_capacity_and_notify: 12 callbacks suppressed [ 84.703662][ T6734] loop2: detected capacity change from 0 to 4096 [ 84.761876][ T6734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.800040][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.016737][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'. [ 85.254551][ T6774] loop1: detected capacity change from 0 to 4096 [ 85.303741][ T6755] loop2: detected capacity change from 0 to 32768 [ 85.340306][ T6774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.354015][ T3303] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 85.359776][ T3303] loop2: p1 start 460800 is beyond EOD, truncated [ 85.366282][ T3303] loop2: p2 size 83886080 extends beyond EOD, truncated [ 85.382585][ T3303] loop2: p5 start 460800 is beyond EOD, truncated [ 85.389073][ T3303] loop2: p6 size 83886080 extends beyond EOD, truncated [ 85.401287][ T6755] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 85.406674][ T6755] loop2: p1 start 460800 is beyond EOD, truncated [ 85.413150][ T6755] loop2: p2 size 83886080 extends beyond EOD, truncated [ 85.473663][ T6755] loop2: p5 start 460800 is beyond EOD, truncated [ 85.480187][ T6755] loop2: p6 size 83886080 extends beyond EOD, truncated [ 85.504609][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.721487][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 85.733137][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 85.787182][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 85.869814][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 85.918788][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 86.234855][ T29] audit: type=1400 audit(86.211:1395): avc: denied { watch_reads } for pid=6837 comm="syz.2.1344" path="/274/file1" dev="tmpfs" ino=1439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.294709][ T29] audit: type=1400 audit(86.271:1396): avc: denied { listen } for pid=6838 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 86.452714][ T6856] loop3: detected capacity change from 0 to 2048 [ 86.591825][ T6856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.640633][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.777356][ T6902] program syz.3.1375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.806678][ T29] audit: type=1400 audit(86.781:1397): avc: denied { map } for pid=6905 comm="syz.2.1376" path="socket:[14679]" dev="sockfs" ino=14679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.829286][ T29] audit: type=1400 audit(86.781:1398): avc: denied { accept } for pid=6905 comm="syz.2.1376" path="socket:[14679]" dev="sockfs" ino=14679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.887761][ T6904] loop4: detected capacity change from 0 to 2048 [ 86.911345][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 86.952919][ T6904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.021421][ T6924] netlink: 'syz.1.1395': attribute type 9 has an invalid length. [ 87.043245][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.231439][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 87.284918][ T6949] loop1: detected capacity change from 0 to 2048 [ 87.306953][ T6949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.343904][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.389364][ T6960] netlink: 'syz.3.1403': attribute type 9 has an invalid length. [ 87.542634][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 87.743543][ T6992] program syz.4.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.846363][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1422'. [ 87.893636][ T7007] tap0: tun_chr_ioctl cmd 1074025677 [ 87.904411][ T7007] tap0: linktype set to 805 [ 87.975358][ T23] IPVS: starting estimator thread 0... [ 87.995176][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 88.014565][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 88.029507][ T7022] netlink: 'syz.2.1430': attribute type 9 has an invalid length. [ 88.049553][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.057258][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.074216][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.074248][ T7016] IPVS: using max 2160 ests per chain, 108000 per kthread [ 88.157968][ T7032] loop4: detected capacity change from 0 to 1024 [ 88.174596][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.195313][ T7032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.256800][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.314245][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.365366][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 88.434225][ T23] IPVS: starting estimator thread 0... [ 88.528961][ T7073] loop0: detected capacity change from 0 to 1024 [ 88.534435][ T7060] IPVS: using max 2448 ests per chain, 122400 per kthread [ 88.566844][ T7073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.580452][ T7078] loop4: detected capacity change from 0 to 256 [ 88.621118][ T7078] FAT-fs (loop4): Directory bread(block 64) failed [ 88.680227][ T7078] FAT-fs (loop4): Directory bread(block 65) failed [ 88.687404][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.696582][ T7078] FAT-fs (loop4): Directory bread(block 66) failed [ 88.703130][ T7078] FAT-fs (loop4): Directory bread(block 67) failed [ 88.710048][ T7078] FAT-fs (loop4): Directory bread(block 68) failed [ 88.729979][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 88.774918][ T7078] FAT-fs (loop4): Directory bread(block 69) failed [ 88.781556][ T7078] FAT-fs (loop4): Directory bread(block 70) failed [ 88.788437][ T7078] FAT-fs (loop4): Directory bread(block 71) failed [ 88.798413][ T7078] FAT-fs (loop4): Directory bread(block 72) failed [ 88.809280][ T7078] FAT-fs (loop4): Directory bread(block 73) failed [ 88.816116][ T1036] IPVS: starting estimator thread 0... [ 88.924216][ T7097] IPVS: using max 2448 ests per chain, 122400 per kthread [ 88.939062][ T7108] tap0: tun_chr_ioctl cmd 1074025677 [ 88.964038][ T7108] tap0: linktype set to 805 [ 89.060103][ T7121] loop2: detected capacity change from 0 to 1024 [ 89.240409][ T29] audit: type=1400 audit(89.211:1399): avc: denied { setopt } for pid=7140 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.424286][ T29] audit: type=1400 audit(89.391:1400): avc: denied { bind } for pid=7153 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.460767][ T7157] RDS: rds_bind could not find a transport for c00::, load rds_tcp or rds_rdma? [ 89.500274][ T7164] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 89.500290][ T7164] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1492'. [ 89.541604][ T7172] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 89.541619][ T7172] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1504'. [ 89.718837][ T7185] FAT-fs (loop1): Directory bread(block 64) failed [ 89.718869][ T7185] FAT-fs (loop1): Directory bread(block 65) failed [ 89.718906][ T7185] FAT-fs (loop1): Directory bread(block 66) failed [ 89.718928][ T7185] FAT-fs (loop1): Directory bread(block 67) failed [ 89.719004][ T7185] FAT-fs (loop1): Directory bread(block 68) failed [ 89.719072][ T7185] FAT-fs (loop1): Directory bread(block 69) failed [ 89.719099][ T7185] FAT-fs (loop1): Directory bread(block 70) failed [ 89.719181][ T7185] FAT-fs (loop1): Directory bread(block 71) failed [ 89.719206][ T7185] FAT-fs (loop1): Directory bread(block 72) failed [ 89.719227][ T7185] FAT-fs (loop1): Directory bread(block 73) failed [ 90.006770][ T7210] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 90.068020][ T29] audit: type=1400 audit(90.041:1401): avc: denied { read write } for pid=7215 comm="syz.1.1514" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.090956][ T29] audit: type=1400 audit(90.041:1402): avc: denied { open } for pid=7215 comm="syz.1.1514" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.290845][ T7233] set_capacity_and_notify: 2 callbacks suppressed [ 90.290866][ T7233] loop1: detected capacity change from 0 to 1024 [ 90.291296][ T7233] EXT4-fs: inline encryption not supported [ 90.291335][ T7233] EXT4-fs: Ignoring removed bh option [ 90.309248][ T7238] net_ratelimit: 98 callbacks suppressed [ 90.309263][ T7238] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 90.315101][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.316195][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 90.324127][ T7233] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.336185][ T7233] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.343085][ T7233] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.1523: inode #2304: comm syz.1.1523: iget: illegal inode # [ 90.346878][ T7233] EXT4-fs (loop1): Remounting filesystem read-only [ 90.346936][ T7233] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 90.346998][ T7233] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 90.476054][ T7244] fido_id[7244]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.862643][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.863276][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 90.904529][ T7287] fido_id[7287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.996313][ T7298] loop3: detected capacity change from 0 to 512 [ 91.002881][ T7298] EXT4-fs: Ignoring removed i_version option [ 91.002940][ T7298] EXT4-fs: Ignoring removed oldalloc option [ 91.144252][ T7305] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 91.211917][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.220093][ T3377] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 91.265678][ T7317] fido_id[7317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.346950][ T29] audit: type=1400 audit(91.321:1403): avc: denied { map } for pid=7327 comm="syz.3.1561" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.370885][ T7328] vhci_hcd vhci_hcd.2: invalid port number 98 [ 91.377136][ T7328] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 91.387784][ T7335] loop1: detected capacity change from 0 to 128 [ 91.406264][ T29] audit: type=1400 audit(91.381:1404): avc: denied { associate } for pid=7332 comm="syz.0.1563" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.448044][ T29] audit: type=1400 audit(91.421:1405): avc: denied { create } for pid=7343 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.450836][ T7344] loop1: detected capacity change from 0 to 128 [ 91.472083][ T29] audit: type=1400 audit(91.421:1406): avc: denied { write } for pid=7343 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.650568][ T7352] netlink: 'syz.1.1571': attribute type 12 has an invalid length. [ 91.740833][ T7356] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 91.794167][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.830038][ T29] audit: type=1400 audit(91.801:1407): avc: denied { append } for pid=7361 comm="syz.2.1576" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.909811][ T29] audit: type=1400 audit(91.881:1408): avc: denied { create } for pid=7370 comm="syz.2.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.304035][ T7411] loop2: detected capacity change from 0 to 1024 [ 92.314511][ T7415] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 92.322717][ T7411] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.334424][ T7411] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 92.342564][ T7411] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.351740][ T7411] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1600: Failed to acquire dquot type 0 [ 92.365062][ T7411] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1600: Failed to acquire dquot type 0 [ 92.384509][ T7411] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1600: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.403774][ T7411] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1600: Failed to acquire dquot type 0 [ 92.416095][ T7411] EXT4-fs (loop2): 1 orphan inode deleted [ 92.426896][ T7411] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.1600: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.624445][ T7432] __nla_validate_parse: 5 callbacks suppressed [ 92.624462][ T7432] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1609'. [ 92.677284][ T7438] loop3: detected capacity change from 0 to 512 [ 92.688719][ T7438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.719498][ T7438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1612: bg 0: block 384: padding at end of block bitmap is not set [ 92.734148][ T7438] EXT4-fs (loop3): Remounting filesystem read-only [ 92.740817][ T7441] loop1: detected capacity change from 0 to 128 [ 92.746805][ T7438] EXT4-fs (loop3): 1 truncate cleaned up [ 92.750935][ T7441] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.765184][ T7441] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.799336][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.872512][ T7448] loop5: detected capacity change from 0 to 7 [ 92.977099][ C1] blk_print_req_error: 37 callbacks suppressed [ 92.977127][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 92.993384][ C1] buffer_io_error: 28 callbacks suppressed [ 92.993401][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 93.072553][ T7462] loop3: detected capacity change from 0 to 512 [ 93.089799][ T7462] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.308835][ T52] kworker/u8:3: attempt to access beyond end of device [ 93.308835][ T52] loop3: rw=1, sector=3976, nr_sectors = 2048 limit=512 [ 93.349671][ T52] kworker/u8:3: attempt to access beyond end of device [ 93.349671][ T52] loop3: rw=1, sector=6024, nr_sectors = 3552 limit=512 [ 93.382142][ T52] kworker/u8:3: attempt to access beyond end of device [ 93.382142][ T52] loop3: rw=1, sector=9576, nr_sectors = 2752 limit=512 [ 93.387046][ T7481] netlink: 'syz.0.1633': attribute type 8 has an invalid length. [ 93.403575][ T7481] netem: change failed [ 93.410238][ T52] kworker/u8:3: attempt to access beyond end of device [ 93.410238][ T52] loop3: rw=1, sector=12328, nr_sectors = 2800 limit=512 [ 93.428489][ T52] kworker/u8:3: attempt to access beyond end of device [ 93.428489][ T52] loop3: rw=1, sector=15128, nr_sectors = 1464 limit=512 [ 93.553327][ T7490] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1637'. [ 93.594597][ T7494] loop3: detected capacity change from 0 to 512 [ 93.636861][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 93.755224][ T23] kernel read not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 93.904762][ T7521] hugetlbfs: syz.4.1649 (7521): Using mlock ulimits for SHM_HUGETLB is obsolete [ 94.046350][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1658'. [ 94.061851][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1658'. [ 94.368397][ T7562] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1670'. [ 94.823059][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 94.823076][ T29] audit: type=1400 audit(94.791:1446): avc: denied { create } for pid=7589 comm="syz.3.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.913434][ T29] audit: type=1400 audit(94.881:1447): avc: denied { create } for pid=7593 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.961083][ T29] audit: type=1400 audit(94.891:1448): avc: denied { ioctl } for pid=7593 comm="syz.4.1685" path="socket:[16741]" dev="sockfs" ino=16741 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.190629][ T29] audit: type=1400 audit(95.001:1449): avc: denied { setopt } for pid=7600 comm="syz.4.1688" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.210564][ T29] audit: type=1400 audit(95.001:1450): avc: denied { connect } for pid=7600 comm="syz.4.1688" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.230436][ T29] audit: type=1400 audit(95.121:1451): avc: denied { setopt } for pid=7605 comm="syz.3.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.249199][ T29] audit: type=1400 audit(95.131:1452): avc: denied { bind } for pid=7605 comm="syz.3.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.371756][ T7614] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.391334][ T29] audit: type=1400 audit(95.281:1453): avc: denied { ioctl } for pid=7610 comm="syz.4.1692" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 95.409290][ T7614] vhci_hcd vhci_hcd.2: invalid port number 96 [ 95.422099][ T7614] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 95.443064][ T7618] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 95.457274][ T7618] pim6reg1: linktype set to 0 [ 95.467030][ T7620] set_capacity_and_notify: 2 callbacks suppressed [ 95.467049][ T7620] loop4: detected capacity change from 0 to 1024 [ 95.595407][ T7634] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 95.603282][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1703'. [ 95.629311][ T7634] bond0: option arp_all_targets: invalid value (196616) [ 95.828549][ T7650] loop4: detected capacity change from 0 to 512 [ 95.941164][ T3456] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.974749][ T7650] EXT4-fs: Ignoring removed orlov option [ 95.980561][ T7650] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 95.990101][ T7650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.000253][ T3456] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.011281][ T29] audit: type=1400 audit(95.951:1454): avc: denied { remount } for pid=7649 comm="syz.4.1719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.060522][ T3456] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.074731][ T3456] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.084355][ T7650] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.249793][ T7678] dummy0: entered promiscuous mode [ 96.267894][ T7678] dummy0: left promiscuous mode [ 96.274051][ T7680] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 96.394607][ T29] audit: type=1400 audit(96.371:1455): avc: denied { read } for pid=7693 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.788083][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1748'. [ 96.824655][ T7747] program syz.0.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.000744][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 97.032533][ T7773] bond0 (unregistering): left promiscuous mode [ 97.038783][ T7773] bond_slave_0: left promiscuous mode [ 97.044383][ T7773] bond_slave_1: left promiscuous mode [ 97.077980][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.095808][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.111932][ T7773] bond0 (unregistering): Released all slaves [ 97.121126][ T7784] netlink: 774 bytes leftover after parsing attributes in process `syz.2.1770'. [ 97.130331][ T7784] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 97.436551][ T7829] loop1: detected capacity change from 0 to 256 [ 97.465875][ T7829] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.507395][ T7834] loop2: detected capacity change from 0 to 128 [ 97.828234][ T7861] program syz.3.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.998863][ T7875] loop1: detected capacity change from 0 to 512 [ 98.048891][ T7875] EXT4-fs: Ignoring removed oldalloc option [ 98.070519][ T7875] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1813: Parent and EA inode have the same ino 15 [ 98.086728][ T7875] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1813: Parent and EA inode have the same ino 15 [ 98.181613][ T7875] EXT4-fs (loop1): 1 orphan inode deleted [ 98.213141][ T7875] EXT4-fs (loop1): shut down requested (1) [ 98.259963][ T7895] loop3: detected capacity change from 0 to 1024 [ 98.279438][ T7895] EXT4-fs: Ignoring removed orlov option [ 98.384767][ T7918] __nla_validate_parse: 1 callbacks suppressed [ 98.384832][ T7918] netlink: 774 bytes leftover after parsing attributes in process `syz.4.1832'. [ 98.400112][ T7918] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 98.580578][ T23] kernel read not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 98.625441][ T7952] loop4: detected capacity change from 0 to 256 [ 98.633547][ T7952] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.691900][ T7959] loop0: detected capacity change from 0 to 512 [ 98.704325][ T7959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.722590][ T7959] EXT4-fs (loop0): 1 truncate cleaned up [ 98.754406][ T7963] loop2: detected capacity change from 0 to 128 [ 98.825181][ T7975] loop4: detected capacity change from 0 to 512 [ 98.870478][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 98.914132][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.021538][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 99.038212][ T7998] bond0 (unregistering): left promiscuous mode [ 99.044537][ T7998] bond_slave_0: left promiscuous mode [ 99.050011][ T7998] bond_slave_1: left promiscuous mode [ 99.069506][ T7998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.089872][ T7998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.110915][ T7998] bond0 (unregistering): Released all slaves [ 99.187584][ T8009] netlink: 'syz.1.1875': attribute type 8 has an invalid length. [ 99.195488][ T8009] netem: change failed [ 99.242648][ T8017] netlink: 'syz.1.1879': attribute type 29 has an invalid length. [ 99.250564][ T8017] netlink: 'syz.1.1879': attribute type 4 has an invalid length. [ 99.423849][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 99.472856][ T8036] bond0 (unregistering): left promiscuous mode [ 99.479122][ T8036] bond_slave_0: left promiscuous mode [ 99.484770][ T8036] bond_slave_1: left promiscuous mode [ 99.498171][ T8036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.527683][ T8036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.556123][ T8044] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.568627][ T8036] bond0 (unregistering): Released all slaves [ 99.616718][ T8030] Process accounting resumed [ 99.623873][ T8030] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 99.831850][ T8069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.851119][ T8069] EXT4-fs (loop1): 1 truncate cleaned up [ 99.862515][ T8075] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.915386][ T3314] EXT4-fs unmount: 29 callbacks suppressed [ 99.915400][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.161905][ T3434] kworker/u8:7: attempt to access beyond end of device [ 100.161905][ T3434] loop4: rw=1, sector=2736, nr_sectors = 2080 limit=512 [ 100.190779][ T3434] kworker/u8:7: attempt to access beyond end of device [ 100.190779][ T3434] loop4: rw=1, sector=4816, nr_sectors = 2160 limit=512 [ 100.219326][ T3434] kworker/u8:7: attempt to access beyond end of device [ 100.219326][ T3434] loop4: rw=1, sector=6976, nr_sectors = 3040 limit=512 [ 100.256623][ T3434] kworker/u8:7: attempt to access beyond end of device [ 100.256623][ T3434] loop4: rw=1, sector=10016, nr_sectors = 2224 limit=512 [ 100.291001][ T3434] kworker/u8:7: attempt to access beyond end of device [ 100.291001][ T3434] loop4: rw=1, sector=12240, nr_sectors = 2248 limit=512 [ 100.325325][ T3434] kworker/u8:7: attempt to access beyond end of device [ 100.325325][ T3434] loop4: rw=1, sector=14488, nr_sectors = 2104 limit=512 [ 100.415804][ T8112] EXT4-fs: Ignoring removed orlov option [ 100.446697][ T8112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.546173][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 100.546267][ T29] audit: type=1400 audit(100.521:1505): avc: denied { mount } for pid=8120 comm="syz.1.1924" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.619670][ T29] audit: type=1400 audit(100.591:1506): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.660384][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.689176][ T29] audit: type=1400 audit(100.651:1507): avc: denied { setopt } for pid=8131 comm="syz.1.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.858978][ T8155] set_capacity_and_notify: 9 callbacks suppressed [ 100.858997][ T8155] loop1: detected capacity change from 0 to 128 [ 101.013426][ T29] audit: type=1400 audit(100.981:1508): avc: denied { create } for pid=8166 comm="syz.1.1955" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.126380][ T8181] loop0: detected capacity change from 0 to 512 [ 101.157896][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.195167][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.203948][ T8191] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1953'. [ 101.242510][ T8193] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1956'. [ 101.266800][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 101.508563][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 101.694808][ T8239] loop4: detected capacity change from 0 to 128 [ 101.710142][ T8239] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.739697][ T8239] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.764695][ T3434] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.782520][ T8243] loop0: detected capacity change from 0 to 128 [ 101.872088][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 101.874262][ T29] audit: type=1400 audit(101.841:1509): avc: denied { read } for pid=8248 comm="syz.4.1980" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.381023][ T8301] SELinux: ebitmap: truncated map [ 102.387518][ T8301] SELinux: failed to load policy [ 102.440109][ T29] audit: type=1400 audit(102.411:1510): avc: denied { create } for pid=8310 comm="syz.3.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.462201][ T8311] loop3: detected capacity change from 0 to 128 [ 102.476890][ T29] audit: type=1400 audit(102.431:1511): avc: denied { write } for pid=8310 comm="syz.3.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.531783][ T29] audit: type=1400 audit(102.501:1512): avc: denied { getopt } for pid=8316 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.612339][ T8327] loop3: detected capacity change from 0 to 1024 [ 102.628895][ T8327] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.644593][ T8327] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 102.652674][ T8327] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.660984][ T8327] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 102.675470][ T8327] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.697852][ T8327] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2016: Failed to acquire dquot type 0 [ 102.723707][ T8327] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2016: Failed to acquire dquot type 0 [ 102.737479][ T8327] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.2016: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.762776][ T8327] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2016: Failed to acquire dquot type 0 [ 102.780622][ T8327] EXT4-fs (loop3): 1 orphan inode deleted [ 102.797825][ T8327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.826055][ T8339] tap0: tun_chr_ioctl cmd 1074025673 [ 102.836190][ T8327] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2016: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 102.869044][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.890070][ T8341] netlink: 'syz.3.2022': attribute type 12 has an invalid length. [ 102.898159][ T8341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2022'. [ 102.966840][ T8347] erspan0: entered promiscuous mode [ 103.595164][ T8416] loop3: detected capacity change from 0 to 128 [ 103.637582][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 103.646618][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 103.679762][ T8426] tap0: tun_chr_ioctl cmd 1074025673 [ 103.790383][ T1728] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.084510][ T8472] erspan0: entered promiscuous mode [ 104.516588][ T8499] can0: slcan on ptm1. [ 104.594384][ T8498] can0 (unregistered): slcan off ptm1. [ 104.723470][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 104.732463][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 104.757563][ T8542] loop4: detected capacity change from 0 to 128 [ 104.909020][ T8567] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 104.922883][ T8566] loop1: detected capacity change from 0 to 1024 [ 104.960655][ T8566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.006611][ T8577] loop3: detected capacity change from 0 to 512 [ 105.014186][ T8566] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.029531][ T8566] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 34 with max blocks 1 with error 28 [ 105.041917][ T8566] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.041917][ T8566] [ 105.051595][ T8566] EXT4-fs (loop1): Total free blocks count 0 [ 105.057650][ T8566] EXT4-fs (loop1): Free/Dirty block details [ 105.063564][ T8566] EXT4-fs (loop1): free_blocks=68451041280 [ 105.069466][ T8566] EXT4-fs (loop1): dirty_blocks=32 [ 105.074781][ T8566] EXT4-fs (loop1): Block reservation details [ 105.080832][ T8566] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 105.085062][ T8577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.096450][ T8584] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.124351][ T8577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.150786][ T8577] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2121: Failed to acquire dquot type 0 [ 105.204810][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.326690][ T8610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2133'. [ 105.335911][ T8610] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2133'. [ 105.345010][ T8610] netlink: 'syz.1.2133': attribute type 6 has an invalid length. [ 105.352807][ T8610] netlink: 'syz.1.2133': attribute type 5 has an invalid length. [ 105.360601][ T8610] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2133'. [ 105.455983][ T8625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.500424][ T8625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.517319][ T8625] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2140: Failed to acquire dquot type 0 [ 105.545001][ T8636] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.2154: corrupted in-inode xattr: invalid ea_ino [ 105.565050][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.586550][ T8636] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2154: couldn't read orphan inode 15 (err -117) [ 105.607487][ T8636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.624851][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 105.674599][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.738521][ T8655] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 105.794362][ T3818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.903844][ T8671] can0: slcan on ptm0. [ 105.916119][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'. [ 105.939078][ T8676] set_capacity_and_notify: 3 callbacks suppressed [ 105.939095][ T8676] loop2: detected capacity change from 0 to 512 [ 105.972877][ T8676] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.2163: corrupted in-inode xattr: invalid ea_ino [ 105.986548][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 105.986564][ T29] audit: type=1400 audit(105.941:1539): avc: denied { getopt } for pid=8678 comm="syz.3.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.020514][ T8676] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2163: couldn't read orphan inode 15 (err -117) [ 106.024644][ T8669] can0 (unregistered): slcan off ptm0. [ 106.050736][ T8676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.116548][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.247834][ T8709] loop2: detected capacity change from 0 to 164 [ 106.254446][ T29] audit: type=1400 audit(106.221:1540): avc: denied { bind } for pid=8710 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.319856][ T29] audit: type=1326 audit(106.291:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.0.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd651f7aeb9 code=0x0 [ 106.363554][ T8725] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 106.371463][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2180'. [ 106.393304][ T8725] team0: Port device geneve1 added [ 106.437767][ T8732] Falling back ldisc for ptm0. [ 106.501611][ T8743] loop3: detected capacity change from 0 to 1024 [ 106.558331][ T8743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.584373][ T8743] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 106.600199][ T8743] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 34 with max blocks 1 with error 28 [ 106.612643][ T8743] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.612643][ T8743] [ 106.622390][ T8743] EXT4-fs (loop3): Total free blocks count 0 [ 106.628401][ T8743] EXT4-fs (loop3): Free/Dirty block details [ 106.634382][ T8743] EXT4-fs (loop3): free_blocks=68451041280 [ 106.640287][ T8743] EXT4-fs (loop3): dirty_blocks=32 [ 106.645442][ T8743] EXT4-fs (loop3): Block reservation details [ 106.651485][ T8743] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 106.652703][ T8752] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.794591][ T29] audit: type=1400 audit(106.771:1542): avc: denied { getopt } for pid=8768 comm="syz.3.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.829951][ T29] audit: type=1400 audit(106.801:1543): avc: denied { bind } for pid=8771 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.151660][ T29] audit: type=1400 audit(107.121:1544): avc: denied { write } for pid=8789 comm="syz.4.2202" path="socket:[20210]" dev="sockfs" ino=20210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.349901][ T8814] Falling back ldisc for ptm0. [ 107.370739][ T29] audit: type=1326 audit(107.341:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 107.393703][ T29] audit: type=1326 audit(107.341:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 107.401395][ T8816] loop4: detected capacity change from 0 to 256 [ 107.416608][ T29] audit: type=1326 audit(107.341:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 107.445622][ T29] audit: type=1326 audit(107.341:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 107.588574][ T8832] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 107.636392][ T8832] team0: Port device geneve1 added [ 107.716312][ T8850] loop1: detected capacity change from 0 to 128 [ 107.725686][ T8850] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.783790][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.186149][ T8898] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 108.186149][ T8898] program syz.4.2250 not setting count and/or reply_len properly [ 108.432581][ T8931] program syz.4.2267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.673445][ T8956] loop2: detected capacity change from 0 to 512 [ 108.798246][ T8968] loop1: detected capacity change from 0 to 512 [ 108.843719][ T8972] loop0: detected capacity change from 0 to 1024 [ 108.869306][ T8972] EXT4-fs: Ignoring removed orlov option [ 108.875123][ T8972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.901564][ T8972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.949521][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.215610][ T9013] netlink: 'syz.2.2305': attribute type 15 has an invalid length. [ 109.333507][ T9027] program syz.4.2311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.352672][ T9023] program syz.1.2309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.378962][ T9032] __nla_validate_parse: 2 callbacks suppressed [ 109.378995][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 109.440946][ T9038] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.452970][ T9038] bond0: (slave lo): Error: Device can not be enslaved while up [ 109.888597][ T9095] netlink: 'syz.0.2343': attribute type 3 has an invalid length. [ 110.033815][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 110.070109][ T9112] loop0: detected capacity change from 0 to 1024 [ 110.087024][ T9112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.103222][ T9112] EXT4-fs warning (device loop0): ext4_rmdir:3185: inode #11: comm syz.0.2348: empty directory 'file1' has too many links (111) [ 110.130592][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 110.144427][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.189982][ T9124] loop3: detected capacity change from 0 to 512 [ 110.492839][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 110.502011][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 110.511964][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 110.521067][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 110.557722][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 110.580078][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 110.823927][ T9173] tap0: tun_chr_ioctl cmd 35108 [ 111.111053][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 111.111070][ T29] audit: type=1400 audit(111.081:1590): avc: denied { wake_alarm } for pid=9195 comm="syz.2.2385" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.218383][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'. [ 111.656613][ T29] audit: type=1400 audit(111.631:1591): avc: denied { getopt } for pid=9225 comm="syz.2.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.833052][ T9269] pimreg3: entered allmulticast mode [ 111.954989][ T9285] set_capacity_and_notify: 1 callbacks suppressed [ 111.955066][ T9285] loop1: detected capacity change from 0 to 128 [ 111.972340][ T9287] pim6reg: entered allmulticast mode [ 111.976030][ T9285] FAT-fs (loop1): bogus logical sector size 2134 [ 111.984197][ T9285] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 111.993556][ T9285] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.001155][ T9287] pim6reg: left allmulticast mode [ 112.143513][ T29] audit: type=1326 audit(112.111:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.167040][ T29] audit: type=1326 audit(112.111:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.199495][ T29] audit: type=1326 audit(112.131:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.222412][ T29] audit: type=1326 audit(112.131:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.245907][ T29] audit: type=1326 audit(112.131:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.268831][ T29] audit: type=1326 audit(112.131:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.292370][ T29] audit: type=1326 audit(112.131:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.315941][ T29] audit: type=1326 audit(112.131:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 112.354139][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.439788][ T9316] loop0: detected capacity change from 0 to 512 [ 112.447310][ T9316] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.465117][ T9316] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.473663][ T9316] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2441: Allocating blocks 41-42 which overlap fs metadata [ 112.493879][ T9316] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2441: Allocating blocks 41-42 which overlap fs metadata [ 112.514885][ T9316] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2441: Failed to acquire dquot type 1 [ 112.527427][ T9316] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 112.548437][ T9316] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2441: corrupted inode contents [ 112.561521][ T9316] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2441: mark_inode_dirty error [ 112.579554][ T9316] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2441: corrupted inode contents [ 112.601859][ T9316] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2441: mark_inode_dirty error [ 112.626997][ T9316] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2441: corrupted inode contents [ 112.639106][ T9316] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 112.650249][ T9316] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2441: corrupted inode contents [ 112.662599][ T9316] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2441: mark_inode_dirty error [ 112.674468][ T9316] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 112.683604][ T9316] EXT4-fs (loop0): 1 truncate cleaned up [ 112.690218][ T9316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.785227][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.946518][ T9343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9343 comm=syz.3.2453 [ 113.121863][ T9355] xt_hashlimit: size too large, truncated to 1048576 [ 113.244977][ T9361] xt_hashlimit: size too large, truncated to 1048576 [ 113.403852][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.494646][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.561588][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.599712][ T9386] netlink: 'syz.3.2470': attribute type 1 has an invalid length. [ 113.617643][ T9378] pim6reg: entered allmulticast mode [ 113.623068][ T9385] pim6reg: left allmulticast mode [ 113.662277][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.846718][ T9404] loop0: detected capacity change from 0 to 256 [ 113.864451][ T9404] FAT-fs (loop0): Directory bread(block 64) failed [ 113.871322][ T9404] FAT-fs (loop0): Directory bread(block 65) failed [ 113.878164][ T9404] FAT-fs (loop0): Directory bread(block 66) failed [ 113.885418][ T9404] FAT-fs (loop0): Directory bread(block 67) failed [ 113.891975][ T9404] FAT-fs (loop0): Directory bread(block 68) failed [ 113.904103][ T9404] FAT-fs (loop0): Directory bread(block 69) failed [ 113.910773][ T9404] FAT-fs (loop0): Directory bread(block 70) failed [ 113.921157][ T52] bridge_slave_1: left allmulticast mode [ 113.924248][ T9404] FAT-fs (loop0): Directory bread(block 71) failed [ 113.926875][ T52] bridge_slave_1: left promiscuous mode [ 113.935555][ T9404] FAT-fs (loop0): Directory bread(block 72) failed [ 113.939475][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.954618][ T9404] FAT-fs (loop0): Directory bread(block 73) failed [ 114.115962][ T9426] loop2: detected capacity change from 0 to 2048 [ 114.122781][ T9426] EXT4-fs: Invalid want_extra_isize 9 [ 114.300148][ T9442] pim6reg: entered allmulticast mode [ 114.325393][ T52] batadv0: left promiscuous mode [ 114.344147][ T52] hsr_slave_0: left promiscuous mode [ 114.350312][ T52] hsr_slave_1: left promiscuous mode [ 114.356756][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.364192][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.371800][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.379251][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.392864][ T52] veth1_macvtap: left promiscuous mode [ 114.398564][ T52] veth0_macvtap: left promiscuous mode [ 114.404470][ T52] veth1_vlan: left promiscuous mode [ 114.409841][ T52] veth0_vlan: left promiscuous mode [ 114.492670][ T52] team0 (unregistering): Port device team_slave_1 removed [ 114.503654][ T52] team0 (unregistering): Port device C removed [ 114.582018][ T9442] pim6reg: left allmulticast mode [ 114.619464][ T9380] chnl_net:caif_netlink_parms(): no params data found [ 114.639224][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.646770][ T9457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.655160][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.662560][ T9457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.723455][ T9457] batadv0 (unregistering): left promiscuous mode [ 114.756134][ T9478] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 114.870723][ T9493] sctp: [Deprecated]: syz.0.2501 (pid 9493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.870723][ T9493] Use struct sctp_sack_info instead [ 114.890398][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.897885][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.905908][ T9380] bridge_slave_0: entered allmulticast mode [ 114.912767][ T9380] bridge_slave_0: entered promiscuous mode [ 114.936708][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.943879][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.963889][ T9380] bridge_slave_1: entered allmulticast mode [ 114.974701][ T9380] bridge_slave_1: entered promiscuous mode [ 115.027045][ T9380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.072890][ T9380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.095981][ T9380] team0: Port device team_slave_0 added [ 115.120450][ T9380] team0: Port device team_slave_1 added [ 115.133449][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.166073][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 115.208207][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.215953][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.242213][ T9380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.288980][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.305142][ T9534] __nla_validate_parse: 8 callbacks suppressed [ 115.305174][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2512'. [ 115.327488][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.335175][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.361123][ T9380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.395146][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.422981][ T9380] hsr_slave_0: entered promiscuous mode [ 115.431611][ T9380] hsr_slave_1: entered promiscuous mode [ 115.438316][ T9380] debugfs: 'hsr0' already exists in 'hsr' [ 115.444088][ T9380] Cannot create hsr debugfs directory [ 115.505040][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.542744][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.549951][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.558590][ T9431] bridge_slave_0: entered allmulticast mode [ 115.566546][ T9431] bridge_slave_0: entered promiscuous mode [ 115.621134][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.628318][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.646831][ T9431] bridge_slave_1: entered allmulticast mode [ 115.653453][ T9431] bridge_slave_1: entered promiscuous mode [ 115.748376][ T52] bridge_slave_1: left allmulticast mode [ 115.754108][ T52] bridge_slave_1: left promiscuous mode [ 115.759826][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.771288][ T52] bridge_slave_0: left allmulticast mode [ 115.777034][ T52] bridge_slave_0: left promiscuous mode [ 115.782891][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.843204][ T52] team0: Port device geneve1 removed [ 115.910508][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.940607][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.951949][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2526'. [ 115.979971][ T9431] team0: Port device team_slave_0 added [ 115.992305][ T52] batadv0: left promiscuous mode [ 116.010335][ T52] hsr_slave_0: left promiscuous mode [ 116.024234][ T52] hsr_slave_1: left promiscuous mode [ 116.030123][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.037671][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.045664][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.053082][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.083543][ T52] veth1_macvtap: left promiscuous mode [ 116.089102][ T52] veth0_macvtap: left promiscuous mode [ 116.095080][ T52] veth1_vlan: left promiscuous mode [ 116.103788][ T52] veth0_vlan: left promiscuous mode [ 116.181277][ T9598] program syz.0.2533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.244267][ T52] team0 (unregistering): Port device team_slave_1 removed [ 116.262556][ T52] team0 (unregistering): Port device team_slave_0 removed [ 116.311660][ T9431] team0: Port device team_slave_1 added [ 116.319111][ T9380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.367176][ T9380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.377898][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.384998][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.410935][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.423593][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 116.423608][ T29] audit: type=1400 audit(116.401:1612): avc: denied { create } for pid=9607 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.446937][ T9380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.459877][ T9380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.482544][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.489638][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.512907][ T29] audit: type=1400 audit(116.431:1613): avc: denied { bind } for pid=9607 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.515898][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.586926][ T9431] hsr_slave_0: entered promiscuous mode [ 116.604319][ T9431] hsr_slave_1: entered promiscuous mode [ 116.614738][ T9431] debugfs: 'hsr0' already exists in 'hsr' [ 116.620500][ T9431] Cannot create hsr debugfs directory [ 116.751723][ T52] IPVS: stop unused estimator thread 0... [ 116.789798][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.837635][ T9380] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.856566][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.863648][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.907968][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.915167][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.018858][ T9431] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.036245][ T9431] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.051542][ T9431] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.060954][ T9431] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.112043][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.123291][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2543'. [ 117.148015][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.155541][ T9666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.168634][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.176149][ T9666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.221273][ T9666] batadv0 (unregistering): left promiscuous mode [ 117.257065][ T9671] macvtap1: entered promiscuous mode [ 117.262429][ T9671] macvtap1: entered allmulticast mode [ 117.269823][ T9671] dummy0: entered promiscuous mode [ 117.275442][ T9671] dummy0: entered allmulticast mode [ 117.289042][ T9671] team0: Device macvtap1 failed to register rx_handler [ 117.304408][ T9671] dummy0: left allmulticast mode [ 117.309647][ T9671] dummy0: left promiscuous mode [ 117.392220][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.413088][ T3456] Bluetooth: hci0: Frame reassembly failed (-84) [ 117.429694][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.436798][ T9678] Bluetooth: hci0: Frame reassembly failed (-84) [ 117.456181][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.463302][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.505443][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.512551][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.668021][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.686958][ T9717] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2553'. [ 117.704303][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'. [ 117.708098][ T9380] veth0_vlan: entered promiscuous mode [ 117.725410][ T9380] veth1_vlan: entered promiscuous mode [ 117.774447][ T9380] veth0_macvtap: entered promiscuous mode [ 117.797022][ T9380] veth1_macvtap: entered promiscuous mode [ 117.835038][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.844014][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.873878][ T3434] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.898869][ T3434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.912666][ T29] audit: type=1400 audit(117.891:1614): avc: denied { mounton } for pid=9380 comm="syz-executor" path="/root/syzkaller.tLXgPq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 117.919155][ T3434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.969530][ T29] audit: type=1400 audit(117.931:1615): avc: denied { mounton } for pid=9380 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 117.991969][ T29] audit: type=1400 audit(117.931:1616): avc: denied { mount } for pid=9380 comm="syz-executor" name="/" dev="gadgetfs" ino=3872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 118.000061][ T3434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.078690][ T9431] veth0_vlan: entered promiscuous mode [ 118.100287][ T9758] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2559'. [ 118.111240][ T9431] veth1_vlan: entered promiscuous mode [ 118.160403][ T9431] veth0_macvtap: entered promiscuous mode [ 118.178219][ T9431] veth1_macvtap: entered promiscuous mode [ 118.210250][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.245915][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.260519][ T3456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.309469][ T3456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.341240][ T3456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.363402][ T3456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.440026][ T9789] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2570'. [ 118.508646][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2573'. [ 118.523738][ T29] audit: type=1400 audit(118.501:1617): avc: denied { firmware_load } for pid=9797 comm="syz.5.2573" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 118.579199][ T29] audit: type=1400 audit(118.541:1618): avc: denied { create } for pid=9801 comm="syz.0.2575" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.704699][ T9817] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2581'. [ 118.713781][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2581'. [ 118.848787][ T9818] syz.0.2583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.983861][ T29] audit: type=1326 audit(118.951:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.0.2595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd651f7aeb9 code=0x0 [ 119.439943][ T29] audit: type=1400 audit(119.411:1620): avc: denied { write } for pid=9849 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 119.484169][ T3818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.490294][ T5744] Bluetooth: hci0: command 0x1003 tx timeout [ 119.552454][ T9860] loop2: detected capacity change from 0 to 1024 [ 119.561557][ T9860] EXT4-fs: Ignoring removed orlov option [ 119.580922][ T9860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.615379][ T29] audit: type=1400 audit(119.591:1621): avc: denied { read } for pid=9866 comm="syz.6.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.639202][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.876983][ T9896] loop2: detected capacity change from 0 to 512 [ 119.896905][ T9896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.916219][ T9900] loop0: detected capacity change from 0 to 128 [ 119.932091][ T9900] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.951177][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.961497][ T9900] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.118851][ T9918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.301890][ T9935] loop0: detected capacity change from 0 to 2048 [ 120.308929][ T9935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.325669][ T9935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.340948][ T9935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2630: bg 0: block 2: invalid block bitmap [ 120.362627][ T9935] EXT4-fs (loop0): Remounting filesystem read-only [ 120.390268][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.400478][ T9939] loop3: detected capacity change from 0 to 128 [ 120.427434][ T9939] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 120.435763][ T9939] FAT-fs (loop3): Filesystem has been set read-only [ 120.495599][ T3313] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 120.620521][ T9953] __nla_validate_parse: 3 callbacks suppressed [ 120.620539][ T9953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2638'. [ 120.947145][ T9986] loop5: detected capacity change from 0 to 2048 [ 120.963029][ T9986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.996996][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2656'. [ 121.006069][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 121.021384][ T9986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.041134][ T9992] bond1: option arp_validate: invalid value (609091586) [ 121.060183][ T9992] bond1 (unregistering): Released all slaves [ 121.067017][ T9986] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2653: bg 0: block 2: invalid block bitmap [ 121.080020][ T9986] EXT4-fs (loop5): Remounting filesystem read-only [ 121.097899][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.218968][T10011] loop5: detected capacity change from 0 to 128 [ 121.243399][T10017] loop0: detected capacity change from 0 to 512 [ 121.250710][T10011] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54) [ 121.258780][T10011] FAT-fs (loop5): Filesystem has been set read-only [ 121.281160][T10019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2669'. [ 121.305266][T10017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.318224][ T9380] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54) [ 121.418164][T10034] loop3: detected capacity change from 0 to 2048 [ 121.446874][T10034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.463934][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 121.463947][ T29] audit: type=1400 audit(121.431:1627): avc: denied { read write } for pid=10031 comm="syz.3.2675" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.492175][ T29] audit: type=1400 audit(121.431:1628): avc: denied { open } for pid=10031 comm="syz.3.2675" path="/512/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.525850][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.568712][T10045] pimreg0: tun_chr_ioctl cmd 1074025672 [ 121.574438][T10045] pimreg0: ignored: set checksum disabled [ 121.804281][ T29] audit: type=1326 audit(121.761:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.3.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 121.827275][ T29] audit: type=1326 audit(121.761:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.3.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0171ceaeb9 code=0x7ffc0000 [ 121.884553][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.900458][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'. [ 121.909415][T10069] netlink: 'syz.5.2690': attribute type 18 has an invalid length. [ 121.917359][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2690'. [ 121.968981][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2692'. [ 121.978009][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 122.004853][ T29] audit: type=1326 audit(121.971:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 122.027816][ T29] audit: type=1326 audit(121.971:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 122.050858][ T29] audit: type=1326 audit(121.971:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 122.073649][ T29] audit: type=1326 audit(121.971:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 122.097177][ T29] audit: type=1326 audit(121.971:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 122.120057][ T29] audit: type=1326 audit(121.971:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 122.144845][T10074] bond1: option arp_validate: invalid value (609091586) [ 122.153033][T10074] bond1 (unregistering): Released all slaves [ 122.207107][T10089] sctp: [Deprecated]: syz.3.2699 (pid 10089) Use of int in max_burst socket option deprecated. [ 122.207107][T10089] Use struct sctp_assoc_value instead [ 122.645215][T10141] loop5: detected capacity change from 0 to 2048 [ 122.683878][T10141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.785482][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 122.794437][T10153] netlink: 'syz.3.2725': attribute type 18 has an invalid length. [ 122.802248][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 122.833116][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.919942][T10167] sctp: [Deprecated]: syz.0.2733 (pid 10167) Use of int in max_burst socket option deprecated. [ 122.919942][T10167] Use struct sctp_assoc_value instead [ 122.942263][T10163] wireguard0: entered promiscuous mode [ 122.947903][T10163] wireguard0: entered allmulticast mode [ 122.992070][T10170] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.032651][T10170] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.223375][T10192] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 123.392028][T10204] vlan2: entered allmulticast mode [ 123.637096][T10229] vxcan0: tx address claim with dest, not broadcast [ 123.885202][T10254] wireguard0: entered promiscuous mode [ 123.890716][T10254] wireguard0: entered allmulticast mode [ 124.118332][T10267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.175029][ T9431] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.577028][T10316] set_capacity_and_notify: 3 callbacks suppressed [ 124.577050][T10316] loop6: detected capacity change from 0 to 512 [ 124.612059][T10316] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 124.662035][T10331] loop0: detected capacity change from 0 to 128 [ 124.684952][T10331] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 124.701908][T10331] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.744454][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.815167][T10347] loop6: detected capacity change from 0 to 2048 [ 124.847977][T10355] loop2: detected capacity change from 0 to 256 [ 125.522753][T10402] loop5: detected capacity change from 0 to 512 [ 125.541957][T10404] loop2: detected capacity change from 0 to 128 [ 125.558773][T10404] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 125.598929][T10404] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.663325][T10402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.714822][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.868101][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.931143][T10413] __nla_validate_parse: 6 callbacks suppressed [ 125.931226][T10413] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2835'. [ 125.933974][T10415] loop2: detected capacity change from 0 to 512 [ 125.973867][T10415] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 126.161614][T10423] netlink: 'syz.6.2841': attribute type 8 has an invalid length. [ 126.169572][T10423] sch_fq: defrate 0 ignored. [ 126.283635][T10437] loop0: detected capacity change from 0 to 512 [ 126.290579][T10437] EXT4-fs: Ignoring removed i_version option [ 126.296652][T10437] EXT4-fs: Ignoring removed i_version option [ 126.320301][T10437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.386364][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.425911][T10451] netlink: 'syz.3.2854': attribute type 8 has an invalid length. [ 126.433814][T10451] sch_fq: defrate 0 ignored. [ 126.579356][T10471] loop6: detected capacity change from 0 to 1024 [ 126.597680][T10471] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 126.643891][T10471] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2863: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.658301][T10471] __quota_error: 24 callbacks suppressed [ 126.658376][T10471] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 126.672576][T10471] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2863: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.687344][T10471] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 126.696168][T10471] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2863: Failed to acquire dquot type 0 [ 126.711416][T10471] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 126.728337][T10471] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2863: mark_inode_dirty error [ 126.739842][T10471] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 126.750270][T10471] EXT4-fs (loop6): 1 orphan inode deleted [ 126.756513][T10471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.777393][T10478] loop3: detected capacity change from 0 to 512 [ 126.786233][ T29] audit: type=1400 audit(126.761:1661): avc: denied { create } for pid=10470 comm="syz.6.2863" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 126.816176][T10478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.830626][ T9431] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.844223][ T3456] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.859950][ T3456] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 126.868443][ T3456] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 126.893570][ T9431] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.927366][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.936695][ T9431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 126.954110][ T9431] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 126.999457][T10495] EXT4-fs: Ignoring removed orlov option [ 127.019977][T10499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2876'. [ 127.029673][T10499] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2876'. [ 127.047696][T10495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.127068][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.142313][ T29] audit: type=1326 audit(127.111:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.2880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee800eaeb9 code=0x0 [ 127.166450][T10512] EXT4-fs: Ignoring removed bh option [ 127.193498][T10512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.292122][T10512] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 127.331616][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.366281][T10525] EXT4-fs: Ignoring removed i_version option [ 127.372373][T10525] EXT4-fs: Ignoring removed i_version option [ 127.389260][T10525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.437506][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.622076][T10553] netlink: 'syz.5.2896': attribute type 6 has an invalid length. [ 127.689111][T10559] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 127.690451][T10558] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.730795][T10559] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2901: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.748154][T10552] msdos: Bad value for 'gid' [ 127.753294][T10552] msdos: Bad value for 'gid' [ 127.769707][T10559] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 127.779454][T10559] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2901: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.801324][T10559] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 127.810260][T10559] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2901: Failed to acquire dquot type 0 [ 127.826949][T10559] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 127.837564][T10559] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2901: mark_inode_dirty error [ 127.845881][T10558] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.860248][T10559] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 127.870572][T10559] EXT4-fs (loop3): 1 orphan inode deleted [ 127.876850][T10559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.895238][ T3456] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.912148][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.971005][ T29] audit: type=1400 audit(127.931:1663): avc: denied { watch watch_reads } for pid=10573 comm="syz.0.2904" path="/proc/1460" dev="proc" ino=26413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 128.010814][ T3456] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 128.019495][ T3456] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 128.098797][ T1728] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.136113][ T1728] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 128.144789][ T1728] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 128.169352][ T3313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.233558][ T3313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 128.253047][ T3313] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 128.317713][T10613] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2920'. [ 128.325523][T10616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2909'. [ 128.336991][T10616] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2909'. [ 128.472099][T10635] netlink: 'syz.6.2924': attribute type 6 has an invalid length. [ 128.502677][T10630] EXT4-fs: Ignoring sb option on remount [ 128.512348][T10630] EXT4-fs (loop3): stripe (249) is not aligned with cluster size (16), stripe is disabled [ 128.531587][T10630] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 128.622109][T10654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.649307][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'. [ 128.658370][T10654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 128.693432][T10654] System zones: 0-1, 3-36 [ 128.744000][T10647] msdos: Bad value for 'gid' [ 128.749326][T10647] msdos: Bad value for 'gid' [ 128.867876][T10684] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.918843][T10684] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.956219][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.988064][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 128.997067][T10694] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.010644][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2943'. [ 129.248281][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2955'. [ 129.604040][T10793] set_capacity_and_notify: 11 callbacks suppressed [ 129.610675][T10793] loop2: detected capacity change from 0 to 1024 [ 129.624883][T10793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.663871][T10793] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 129.682216][T10793] System zones: 0-1, 3-36 [ 129.818696][T10816] pimreg: entered allmulticast mode [ 129.827144][T10816] pimreg: left allmulticast mode [ 129.982089][T10838] loop6: detected capacity change from 0 to 512 [ 130.042925][T10838] EXT4-fs mount: 7 callbacks suppressed [ 130.042945][T10838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.067825][T10845] loop3: detected capacity change from 0 to 256 [ 130.108067][T10845] FAT-fs (loop3): codepage cp932 not found [ 130.136129][T10845] xt_bpf: check failed: parse error [ 130.252890][ T9431] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.300362][T10863] team0: Device gtp0 is of different type [ 130.706235][T10883] loop5: detected capacity change from 0 to 1024 [ 130.727152][T10883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.766211][T10883] EXT4-fs: Ignoring sb option on remount [ 130.775717][T10883] EXT4-fs (loop5): stripe (249) is not aligned with cluster size (16), stripe is disabled [ 130.787109][T10883] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 130.827050][T10887] loop3: detected capacity change from 0 to 128 [ 130.861905][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.896015][T10892] loop3: detected capacity change from 0 to 128 [ 131.130076][T10918] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 131.171717][T10922] loop5: detected capacity change from 0 to 128 [ 131.292745][T10931] xt_l2tp: v2 tid > 0xffff: 37482740 [ 131.483196][T10950] loop5: detected capacity change from 0 to 2048 [ 131.495260][T10952] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 131.610867][T10961] loop0: detected capacity change from 0 to 256 [ 131.875400][T10985] loop0: detected capacity change from 0 to 256 [ 131.936294][T10985] FAT-fs (loop0): codepage cp932 not found [ 131.956032][T10985] xt_bpf: check failed: parse error [ 132.255688][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 132.255706][ T29] audit: type=1400 audit(132.231:1713): avc: denied { execute } for pid=11018 comm="syz.3.3057" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 132.318080][T11024] program syz.0.3059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.473413][T11037] bond1 (unregistering): Released all slaves [ 132.600667][T11057] EXT4-fs: Ignoring removed oldalloc option [ 132.640045][T11057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.678098][T11057] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.739057][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.100814][ T29] audit: type=1400 audit(133.071:1714): avc: denied { getopt } for pid=11118 comm="syz.0.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.186922][T11122] xt_l2tp: v2 tid > 0xffff: 37482740 [ 133.228155][T11124] program syz.2.3111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.614227][T11165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.673305][T11166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.717944][T11169] __nla_validate_parse: 3 callbacks suppressed [ 133.718026][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 133.921356][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3135'. [ 133.999098][T11192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.012214][T11192] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: comm syz.3.3130: directory missing '..' [ 134.034452][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.116223][ T29] audit: type=1400 audit(134.091:1715): avc: denied { mount } for pid=11206 comm="syz.5.3140" name="/" dev="hugetlbfs" ino=28851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 134.160543][T11207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.198509][T11207] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3140: iget: bad extended attribute block 262144 [ 134.213335][T11207] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3140: couldn't read orphan inode 15 (err -117) [ 134.228929][T11207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.252335][T11213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3142'. [ 134.277357][T11213] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 134.304133][ T29] audit: type=1400 audit(134.261:1716): avc: denied { unmount } for pid=9380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 134.324524][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.347349][T11217] 9p: Could not find request transport: 0x0000000000000004 [ 134.616393][ T10] kernel read not supported for file /1277 (pid: 10 comm: kworker/0:1) [ 134.751864][T11258] netlink: 'syz.2.3162': attribute type 11 has an invalid length. [ 134.768911][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3160'. [ 134.895432][T11279] set_capacity_and_notify: 6 callbacks suppressed [ 134.895449][T11279] loop3: detected capacity change from 0 to 512 [ 134.929208][T11279] EXT4-fs: inline encryption not supported [ 134.954256][T11279] EXT4-fs: Ignoring removed oldalloc option [ 134.986670][T11279] EXT4-fs (loop3): 1 truncate cleaned up [ 135.001155][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3178'. [ 135.017703][T11279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.104006][ T29] audit: type=1400 audit(135.071:1717): avc: denied { ioctl } for pid=11276 comm="syz.3.3172" path="/595/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.169185][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.326241][T11318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.495488][T11318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.607440][ T29] audit: type=1400 audit(135.581:1718): avc: denied { connect } for pid=11335 comm="syz.3.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.681107][ T29] audit: type=1326 audit(135.651:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1788d2aeb9 code=0x7ffc0000 [ 135.704288][ T29] audit: type=1326 audit(135.651:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1788d2aeb9 code=0x7ffc0000 [ 135.731234][ T29] audit: type=1326 audit(135.651:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f1788d2aeb9 code=0x7ffc0000 [ 135.754152][ T29] audit: type=1326 audit(135.651:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1788d2aeb9 code=0x7ffc0000 [ 135.852879][T11349] loop2: detected capacity change from 0 to 8192 [ 135.995469][T11380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3212'. [ 136.009455][T11378] netlink: 'syz.5.3214': attribute type 11 has an invalid length. [ 136.030726][T11380] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 136.073580][T11389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11389 comm=syz.0.3218 [ 136.227852][T11413] loop2: detected capacity change from 0 to 512 [ 136.235466][T11413] EXT4-fs: inline encryption not supported [ 136.241408][T11413] EXT4-fs: Ignoring removed oldalloc option [ 136.250706][T11413] EXT4-fs (loop2): 1 truncate cleaned up [ 136.262029][T11413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.303788][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.057930][ T3456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.109865][ T3456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.187699][ T3456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.255025][ T3456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.401721][ T3456] bridge_slave_1: left allmulticast mode [ 137.407444][ T3456] bridge_slave_1: left promiscuous mode [ 137.413104][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.609442][T11498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.672893][T11503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.721029][ T3456] hsr_slave_0: left promiscuous mode [ 137.739680][ T3456] hsr_slave_1: left promiscuous mode [ 137.751853][ T3456] veth1_macvtap: left promiscuous mode [ 137.758677][ T3456] veth0_macvtap: left promiscuous mode [ 137.768285][ T3456] veth1_vlan: left promiscuous mode [ 137.778495][ T3456] veth0_vlan: left promiscuous mode [ 137.797539][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 137.797591][ T29] audit: type=1400 audit(137.771:1732): avc: denied { name_bind } for pid=11531 comm="syz.0.3273" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.924279][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 137.936085][ T3456] team0 (unregistering): Port device C removed [ 138.147384][ T29] audit: type=1400 audit(138.111:1733): avc: denied { getopt } for pid=11529 comm="syz.5.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.197906][T11470] chnl_net:caif_netlink_parms(): no params data found [ 138.319136][T11536] chnl_net:caif_netlink_parms(): no params data found [ 138.404284][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.411387][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.418822][T11470] bridge_slave_0: entered allmulticast mode [ 138.431335][T11470] bridge_slave_0: entered promiscuous mode [ 138.439866][ T3456] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.466485][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.473789][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.481110][T11470] bridge_slave_1: entered allmulticast mode [ 138.487975][T11470] bridge_slave_1: entered promiscuous mode [ 138.505579][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.514979][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.522030][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.529328][T11536] bridge_slave_0: entered allmulticast mode [ 138.535920][T11536] bridge_slave_0: entered promiscuous mode [ 138.542803][T11536] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.549949][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.557135][T11536] bridge_slave_1: entered allmulticast mode [ 138.563716][T11536] bridge_slave_1: entered promiscuous mode [ 138.582383][T11536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.592762][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.605897][ T3456] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.631929][T11470] team0: Port device team_slave_0 added [ 138.638878][T11536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.665448][T11470] team0: Port device team_slave_1 added [ 138.692413][ T3456] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.716136][T11536] team0: Port device team_slave_0 added [ 138.731896][T11536] team0: Port device team_slave_1 added [ 138.738072][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.745067][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.771045][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.783152][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.790213][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.816175][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.839880][T11606] pim6reg: tun_chr_ioctl cmd 1074025677 [ 138.845982][T11606] pim6reg: linktype set to 776 [ 138.859458][ T3456] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.885854][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 138.897477][T11536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.904523][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.930616][T11536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.994408][T11470] hsr_slave_0: entered promiscuous mode [ 139.000523][T11470] hsr_slave_1: entered promiscuous mode [ 139.007566][T11536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.014557][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.040583][T11536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.115530][ T3456] bridge_slave_1: left allmulticast mode [ 139.121244][ T3456] bridge_slave_1: left promiscuous mode [ 139.126992][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.183245][ T3456] bridge_slave_0: left allmulticast mode [ 139.188974][ T3456] bridge_slave_0: left promiscuous mode [ 139.194706][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.283336][T11643] loop2: detected capacity change from 0 to 512 [ 139.305868][T11643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.355355][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.367628][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.386575][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.413977][ T3456] bond0 (unregistering): Released all slaves [ 139.420527][T11653] loop2: detected capacity change from 0 to 1024 [ 139.425131][ T3456] bond1 (unregistering): Released all slaves [ 139.447910][T11653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.468652][ T29] audit: type=1400 audit(139.441:1734): avc: denied { map } for pid=11652 comm="syz.2.3305" path="/629/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.491212][ T29] audit: type=1400 audit(139.441:1735): avc: denied { execute } for pid=11652 comm="syz.2.3305" path="/629/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.518796][T11536] hsr_slave_0: entered promiscuous mode [ 139.525086][T11536] hsr_slave_1: entered promiscuous mode [ 139.531357][T11536] debugfs: 'hsr0' already exists in 'hsr' [ 139.537197][T11536] Cannot create hsr debugfs directory [ 139.543449][ T1728] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.564003][ T1728] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.576388][ T1728] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.576388][ T1728] [ 139.586270][ T3456] hsr_slave_0: left promiscuous mode [ 139.588003][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.600591][ T3456] hsr_slave_1: left promiscuous mode [ 139.606836][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.614356][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.626054][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.633471][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.648198][ T3456] veth1_macvtap: left promiscuous mode [ 139.653713][ T3456] veth0_macvtap: left promiscuous mode [ 139.659588][ T3456] veth1_vlan: left promiscuous mode [ 139.665223][ T3456] veth0_vlan: left promiscuous mode [ 139.747610][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 139.757845][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 139.986029][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3314'. [ 140.115125][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 140.139008][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 140.231731][T11470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.270587][T11470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.296433][T11470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.316127][T11470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.408725][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3326'. [ 140.466599][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.503472][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.538952][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.546130][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.575740][T11763] loop0: detected capacity change from 0 to 512 [ 140.582719][T11763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.599305][T11536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.607894][T11763] EXT4-fs (loop0): 1 truncate cleaned up [ 140.614021][T11763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.653363][T11536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.690136][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.697292][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.721232][T11470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.731691][T11470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.753092][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.763606][T11536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.794264][T11536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.895088][T11797] loop0: detected capacity change from 0 to 2048 [ 140.901910][T11797] EXT4-fs: Ignoring removed oldalloc option [ 140.930378][T11536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.958667][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.959045][T11797] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 140.974916][T11797] System zones: 0-7 [ 140.982396][T11797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.986107][T11536] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.002895][T11797] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.3339: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 141.037797][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.039987][T11797] EXT4-fs (loop0): Remounting filesystem read-only [ 141.044923][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.068566][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.079145][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.086260][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.185143][T11830] loop5: detected capacity change from 0 to 164 [ 141.283133][T11536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.391955][T11470] veth0_vlan: entered promiscuous mode [ 141.413448][T11470] veth1_vlan: entered promiscuous mode [ 141.456325][T11470] veth0_macvtap: entered promiscuous mode [ 141.491421][T11470] veth1_macvtap: entered promiscuous mode [ 141.528203][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.548458][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.579057][ T3434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.601718][ T3434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.651217][ T3434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.662320][T11536] veth0_vlan: entered promiscuous mode [ 141.680300][T11536] veth1_vlan: entered promiscuous mode [ 141.695271][ T3434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.708554][T11899] sctp: [Deprecated]: syz.5.3360 (pid 11899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.708554][T11899] Use struct sctp_sack_info instead [ 141.723766][T11536] veth0_macvtap: entered promiscuous mode [ 141.733961][T11536] veth1_macvtap: entered promiscuous mode [ 141.754483][T11536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.766078][T11536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.796904][T11907] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3371'. [ 141.817459][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.868776][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.894408][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.905569][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 141.921527][T11921] loop5: detected capacity change from 0 to 512 [ 141.938073][T11920] netlink: 'syz.2.3365': attribute type 5 has an invalid length. [ 141.946662][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.959710][T11921] EXT4-fs: Ignoring removed orlov option [ 141.992869][T11921] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.3363: corrupted in-inode xattr: bad e_name length [ 142.066398][T11921] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3363: couldn't read orphan inode 15 (err -117) [ 142.080502][T11921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.132640][T11947] sctp: [Deprecated]: syz.0.3373 (pid 11947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.132640][T11947] Use struct sctp_sack_info instead [ 142.146933][T11952] loop2: detected capacity change from 0 to 128 [ 142.176092][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.177225][ T29] audit: type=1400 audit(142.151:1736): avc: denied { module_load } for pid=11951 comm="syz.2.3376" path="/655/file0/bus" dev="loop2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 142.207808][T11955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.319983][T11966] loop2: detected capacity change from 0 to 512 [ 142.344762][T11966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.391218][T11966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.452088][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.546774][T11995] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3384'. [ 142.624035][T12002] loop2: detected capacity change from 0 to 1024 [ 142.650967][T12002] EXT4-fs: Ignoring removed oldalloc option [ 142.657143][T12002] EXT4-fs: Ignoring removed bh option [ 142.675012][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3390'. [ 142.716484][T12002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.823342][ T29] audit: type=1400 audit(142.711:1737): avc: denied { append } for pid=12001 comm="syz.2.3391" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.845281][ T29] audit: type=1400 audit(142.751:1738): avc: denied { getopt } for pid=12003 comm="syz.5.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.876413][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.960925][T12038] loop0: detected capacity change from 0 to 128 [ 142.982446][T12038] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.006141][ T29] audit: type=1400 audit(142.981:1739): avc: denied { ioctl } for pid=12037 comm="syz.0.3401" path="/814/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=12 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.067597][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.112666][T12047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3402'. [ 143.187378][ T29] audit: type=1400 audit(143.161:1740): avc: denied { listen } for pid=12054 comm="syz.0.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.248469][T12061] loop0: detected capacity change from 0 to 1024 [ 143.258305][T12059] veth1_macvtap: left promiscuous mode [ 143.271292][T12061] EXT4-fs: Ignoring removed oldalloc option [ 143.277556][T12061] EXT4-fs: Ignoring removed bh option [ 143.300747][T12061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.342357][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.381692][T12076] wireguard: wg1: Could not create IPv4 socket [ 143.457210][T12085] loop5: detected capacity change from 0 to 4096 [ 143.466795][T12085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.499347][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.563218][T12090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.581336][T12090] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3416: corrupted xattr block 33: invalid header [ 143.595590][T12090] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 143.604938][T12090] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3416: corrupted xattr block 33: invalid header [ 143.626445][T12090] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 143.635892][T12090] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3416: corrupted xattr block 33: invalid header [ 143.650405][T12090] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 143.676054][ T9380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.681238][T12097] batadv_slave_1: entered promiscuous mode [ 143.726904][T12096] batadv_slave_1: left promiscuous mode [ 143.733153][ T29] audit: type=1326 audit(143.701:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 143.756140][ T29] audit: type=1326 audit(143.701:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 143.779110][ T29] audit: type=1326 audit(143.701:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 143.802012][ T29] audit: type=1326 audit(143.701:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 143.824931][ T29] audit: type=1326 audit(143.701:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 143.847933][ T29] audit: type=1326 audit(143.701:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.5.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d35aeb9 code=0x7ffc0000 [ 143.910619][T12105] __nla_validate_parse: 1 callbacks suppressed [ 143.910637][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3422'. [ 143.941571][T12105] veth1_macvtap: left promiscuous mode [ 143.990994][T12117] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 143.990994][T12117] The task syz.5.3423 (12117) triggered the difference, watch for misbehavior. [ 144.061766][T12128] pim6reg9: entered allmulticast mode [ 144.103118][T12133] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 144.110916][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'. [ 144.161166][T12145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.240662][T12151] wireguard: wg1: Could not create IPv4 socket [ 144.275951][T12154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.291174][T12154] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3444: corrupted xattr block 33: invalid header [ 144.306440][T12154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 144.315609][T12154] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3444: corrupted xattr block 33: invalid header [ 144.329331][T12154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 144.338429][T12154] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3444: corrupted xattr block 33: invalid header [ 144.352135][T12154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 144.371768][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.449208][T12171] program syz.3.3452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.480616][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 144.489556][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3453'. [ 144.498553][T12176] netlink: 'syz.3.3453': attribute type 19 has an invalid length. [ 144.506432][T12176] netlink: 'syz.3.3453': attribute type 20 has an invalid length. [ 144.547916][T12182] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.671707][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3460'. [ 144.779346][T12199] batadv_slave_1: entered promiscuous mode [ 144.795008][T12198] batadv_slave_1: left promiscuous mode [ 144.859137][T12207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.909048][T12207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.957800][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3472'. [ 144.976355][T12207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.010358][T12224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.026502][T12224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.042111][T12207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.064249][T11470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.088014][ T3001] ================================================================== [ 145.096150][ T3001] BUG: KCSAN: data-race in d_delete / lookup_fast [ 145.102606][ T3001] [ 145.104954][ T3001] read-write to 0xffff88811bde66c0 of 4 bytes by task 3303 on cpu 1: [ 145.113034][ T3001] d_delete+0xbe/0xe0 [ 145.117042][ T3001] d_delete_notify+0x32/0x100 [ 145.121746][ T3001] vfs_unlink+0x331/0x440 [ 145.126091][ T3001] do_unlinkat+0x1e2/0x4b0 [ 145.130525][ T3001] __x64_sys_unlink+0x2e/0x40 [ 145.135217][ T3001] x64_sys_call+0x2f48/0x3000 [ 145.139913][ T3001] do_syscall_64+0xc0/0x2a0 [ 145.144442][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.150347][ T3001] [ 145.152677][ T3001] read to 0xffff88811bde66c0 of 4 bytes by task 3001 on cpu 0: [ 145.160228][ T3001] lookup_fast+0xf0/0x320 [ 145.164609][ T3001] path_lookupat+0x15c/0x500 [ 145.169212][ T3001] filename_lookup+0x190/0x390 [ 145.174017][ T3001] do_readlinkat+0x7d/0x340 [ 145.178536][ T3001] __x64_sys_readlink+0x47/0x60 [ 145.183404][ T3001] x64_sys_call+0x2af1/0x3000 [ 145.188102][ T3001] do_syscall_64+0xc0/0x2a0 [ 145.192621][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.198530][ T3001] [ 145.200863][ T3001] value changed: 0x00300180 -> 0x00004080 [ 145.206596][ T3001] [ 145.208930][ T3001] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.215099][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.226011][ T3001] Tainted: [W]=WARN [ 145.229839][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.239940][ T3001] ================================================================== [ 145.418794][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.434767][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.449631][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.458044][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.519450][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.637392][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.687282][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.746971][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.826765][ T52] bridge_slave_1: left allmulticast mode [ 145.832587][ T52] bridge_slave_1: left promiscuous mode [ 145.838424][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.847655][ T52] bridge_slave_0: left allmulticast mode [ 145.853467][ T52] bridge_slave_0: left promiscuous mode [ 145.859212][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.946373][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.956507][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.966431][ T52] bond0 (unregistering): Released all slaves [ 146.029511][ T52] hsr_slave_0: left promiscuous mode [ 146.036882][ T52] hsr_slave_1: left promiscuous mode [ 146.042534][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.050094][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.059098][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.066588][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.078333][ T52] veth1_macvtap: left promiscuous mode [ 146.083844][ T52] veth0_macvtap: left promiscuous mode [ 146.089585][ T52] veth1_vlan: left promiscuous mode [ 146.094999][ T52] veth0_vlan: left promiscuous mode [ 146.170363][ T52] team0 (unregistering): Port device team_slave_1 removed [ 146.181646][ T52] team0 (unregistering): Port device team_slave_0 removed [ 146.568774][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.617606][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.667215][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.706834][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.766196][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.834762][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.887219][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.929178][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.009955][ T52] bridge_slave_1: left allmulticast mode [ 147.015679][ T52] bridge_slave_1: left promiscuous mode [ 147.021391][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.029290][ T52] bridge_slave_0: left allmulticast mode [ 147.035123][ T52] bridge_slave_0: left promiscuous mode [ 147.040841][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.049135][ T52] bridge_slave_1: left promiscuous mode [ 147.054821][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.062621][ T52] bridge_slave_0: left promiscuous mode [ 147.068380][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.166427][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.176400][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.185982][ T52] bond0 (unregistering): Released all slaves [ 147.247225][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.257881][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.267627][ T52] bond0 (unregistering): Released all slaves [ 147.332412][ T52] hsr_slave_0: left promiscuous mode [ 147.338423][ T52] hsr_slave_1: left promiscuous mode [ 147.344032][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.351552][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.360507][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.368118][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.378218][ T52] hsr_slave_0: left promiscuous mode [ 147.384002][ T52] hsr_slave_1: left promiscuous mode [ 147.389738][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.397248][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.405065][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.412450][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.426283][ T52] veth0_macvtap: left promiscuous mode [ 147.431915][ T52] veth1_vlan: left promiscuous mode [ 147.437263][ T52] veth0_vlan: left promiscuous mode [ 147.443084][ T52] veth1_macvtap: left promiscuous mode [ 147.448814][ T52] veth0_macvtap: left promiscuous mode [ 147.454394][ T52] veth1_vlan: left promiscuous mode [ 147.459669][ T52] veth0_vlan: left promiscuous mode [ 147.560477][ T52] team0 (unregistering): Port device team_slave_1 removed [ 147.570049][ T52] team0 (unregistering): Port device team_slave_0 removed [ 147.628237][ T52] team0 (unregistering): Port device team_slave_1 removed [ 147.637860][ T52] team0 (unregistering): Port device team_slave_0 removed [ 149.117468][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.175854][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.245697][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.295616][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.376446][ T12] bridge_slave_1: left allmulticast mode [ 149.382148][ T12] bridge_slave_1: left promiscuous mode [ 149.387900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.395989][ T12] bridge_slave_0: left allmulticast mode [ 149.401629][ T12] bridge_slave_0: left promiscuous mode [ 149.407332][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.453060][ T12] team0: Port device geneve1 removed [ 149.496631][ T12] bond0 (unregistering): left promiscuous mode [ 149.502816][ T12] bond_slave_0: left promiscuous mode [ 149.508321][ T12] bond_slave_1: left promiscuous mode [ 149.517359][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.527656][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.538051][ T12] bond0 (unregistering): Released all slaves [ 149.580069][ T12] hsr_slave_0: left promiscuous mode [ 149.586707][ T12] hsr_slave_1: left promiscuous mode [ 149.597269][ T12] veth0_macvtap: left promiscuous mode [ 149.602893][ T12] veth1_vlan: left promiscuous mode [ 149.608845][ T12] veth0_vlan: left promiscuous mode [ 149.679474][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.688930][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.897798][ T12] IPVS: stop unused estimator thread 0...