last executing test programs: 48.525642876s ago: executing program 2 (id=352): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 48.233546829s ago: executing program 2 (id=359): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 47.573600171s ago: executing program 2 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 47.512381914s ago: executing program 2 (id=364): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x6, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) stat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000500)='./file1\x00', r0, 0x0) 47.364066901s ago: executing program 2 (id=365): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 47.317727484s ago: executing program 2 (id=366): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) 43.067577017s ago: executing program 1 (id=413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x28031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 41.594718877s ago: executing program 1 (id=434): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000580)={0xc5, 0x7d, 0xa, {{0x0, 0xa9, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0x1, '\x85', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x7, '\x97\xfe\xef\x85z\x03\x86'}}, 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 41.519438001s ago: executing program 1 (id=436): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000e80)=ANY=[], 0x835, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 40.91041975s ago: executing program 1 (id=442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) flock(r2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 40.871093712s ago: executing program 1 (id=444): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 40.321061918s ago: executing program 1 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 40.27226556s ago: executing program 32 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 32.112352062s ago: executing program 33 (id=366): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) 28.856346038s ago: executing program 6 (id=563): setregid(0x0, 0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x82008200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 28.827156149s ago: executing program 6 (id=623): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 28.79625843s ago: executing program 6 (id=625): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) timer_create(0x0, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x2}, {0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x1) 26.962396798s ago: executing program 6 (id=652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 26.961965428s ago: executing program 34 (id=652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 3.158795138s ago: executing program 3 (id=1050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x16, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 3.009025755s ago: executing program 3 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.922525239s ago: executing program 0 (id=1066): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 2.921802009s ago: executing program 3 (id=1067): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 2.806512465s ago: executing program 0 (id=1057): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x606d, &(0x7f0000000180)={0x0, 0x8eab, 0x2, 0x3, 0x20a}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000000)) io_uring_enter(r0, 0x88b, 0x4a57, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0x7, 0x8], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$kcm(0x2, 0x200000000000001, 0x106) 2.806366074s ago: executing program 3 (id=1058): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) 2.748402708s ago: executing program 0 (id=1059): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.48915123s ago: executing program 0 (id=1063): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001bd00000000000000000a0300004e234e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050000000300000008000000000000000800030011"], 0x54}}, 0x20004010) 2.469820551s ago: executing program 3 (id=1064): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0xa}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 2.429390913s ago: executing program 4 (id=1065): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="610306f7001d02070002"], 0xa) unshare(0x20400) 2.307104599s ago: executing program 0 (id=1068): r0 = socket(0x28, 0x801, 0x0) r1 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 2.26938233s ago: executing program 0 (id=1069): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r2}, 0x18) sendfile(r1, r0, 0x0, 0x10000000000008) 2.121982508s ago: executing program 7 (id=1071): r0 = socket$inet(0x2, 0xa, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x3b, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x10000, 0x0) 1.510356567s ago: executing program 3 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7, 0x7fff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.505458197s ago: executing program 4 (id=1074): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0xc65b, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xc190, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1) 1.468365649s ago: executing program 35 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7, 0x7fff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.420798011s ago: executing program 4 (id=1076): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000541000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000064e000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x3ff0, &(0x7f0000000140)={0x0, 0xfaf8, 0x8000, 0x2, 0x11a}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.298506467s ago: executing program 4 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.24019125s ago: executing program 7 (id=1078): getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 1.127797375s ago: executing program 4 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r2, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 728.983104ms ago: executing program 4 (id=1081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 728.364904ms ago: executing program 5 (id=1090): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 708.057546ms ago: executing program 5 (id=1082): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) close(0x3) 610.46322ms ago: executing program 5 (id=1083): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/25, 0x19}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 353.453513ms ago: executing program 7 (id=1084): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 291.326175ms ago: executing program 5 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x82c1, 0x0) unshare(0x20040600) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 273.267256ms ago: executing program 7 (id=1086): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000002000008000400010000", 0x23) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 174.489521ms ago: executing program 5 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) pselect6(0x40, &(0x7f0000000100)={0x1, 0x400000000000, 0x100000000, 0xffffffffffffffff, 0x20000000000800, 0x0, 0x4}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0x200, 0x0, 0x0, 0x4, 0x6a9}, 0x0, 0x0) 169.546101ms ago: executing program 7 (id=1088): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$LOOP_CONFIGURE(r2, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) 250.239µs ago: executing program 5 (id=1089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x80}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80001008, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 7 (id=1091): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) kernel console output (not intermixed with test programs): e0: port 2(bridge_slave_1) entered blocking state [ 27.109454][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.123344][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.134825][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.150279][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.162941][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.170106][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.178682][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.185829][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.203274][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.346917][ T3319] veth0_vlan: entered promiscuous mode [ 27.363447][ T3312] veth0_vlan: entered promiscuous mode [ 27.378394][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.393593][ T3312] veth1_vlan: entered promiscuous mode [ 27.401714][ T3310] veth0_vlan: entered promiscuous mode [ 27.408945][ T3319] veth1_vlan: entered promiscuous mode [ 27.428502][ T3310] veth1_vlan: entered promiscuous mode [ 27.441134][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.464733][ T3312] veth0_macvtap: entered promiscuous mode [ 27.493644][ T3312] veth1_macvtap: entered promiscuous mode [ 27.502229][ T3319] veth0_macvtap: entered promiscuous mode [ 27.513622][ T3319] veth1_macvtap: entered promiscuous mode [ 27.524761][ T3310] veth0_macvtap: entered promiscuous mode [ 27.536972][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.553087][ T3310] veth1_macvtap: entered promiscuous mode [ 27.570248][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.583534][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.591797][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.600776][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.613300][ T3314] veth0_vlan: entered promiscuous mode [ 27.624234][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.634875][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.646607][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.655374][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.671614][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.690131][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.699893][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 27.699906][ T28] audit: type=1400 audit(1775265697.873:90): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.145rjC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.707771][ T3314] veth1_vlan: entered promiscuous mode [ 27.733864][ T28] audit: type=1400 audit(1775265697.873:91): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.741916][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.758801][ T28] audit: type=1400 audit(1775265697.873:92): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.145rjC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.771574][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.801947][ T28] audit: type=1400 audit(1775265697.873:93): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.812171][ T3314] veth0_macvtap: entered promiscuous mode [ 27.832438][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.833650][ T28] audit: type=1400 audit(1775265697.873:94): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.145rjC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.874287][ T28] audit: type=1400 audit(1775265697.873:95): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.145rjC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.879535][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.904122][ T28] audit: type=1400 audit(1775265697.873:96): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.952011][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.956052][ T28] audit: type=1400 audit(1775265697.943:97): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.003296][ T3314] veth1_macvtap: entered promiscuous mode [ 28.014430][ T28] audit: type=1400 audit(1775265697.943:98): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=4747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.023092][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.036916][ T28] audit: type=1400 audit(1775265698.103:99): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.059228][ T3311] veth0_vlan: entered promiscuous mode [ 28.100403][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.113140][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.130337][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.172128][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.183153][ T3311] veth1_vlan: entered promiscuous mode [ 28.220105][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.230580][ T3495] loop1: detected capacity change from 0 to 1024 [ 28.231624][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.250974][ T3495] EXT4-fs: Ignoring removed bh option [ 28.259585][ T3499] loop0: detected capacity change from 0 to 128 [ 28.261864][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.275273][ T3495] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 28.290191][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.307621][ T3311] veth0_macvtap: entered promiscuous mode [ 28.318600][ T3311] veth1_macvtap: entered promiscuous mode [ 28.349554][ T3499] syz.0.12: attempt to access beyond end of device [ 28.349554][ T3499] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 28.398628][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.431774][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.458629][ T3512] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 28.493536][ T1703] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.526630][ T1703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.546325][ T1703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.561154][ T1703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.578358][ T3521] loop0: detected capacity change from 0 to 256 [ 28.653616][ T3532] loop2: detected capacity change from 0 to 512 [ 28.663724][ C0] hrtimer: interrupt took 58347 ns [ 28.681331][ T3532] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.726375][ T3533] loop1: detected capacity change from 0 to 128 [ 28.728209][ T3532] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 28.780674][ T3532] EXT4-fs (loop2): 1 truncate cleaned up [ 28.794439][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.872940][ T3551] Zero length message leads to an empty skb [ 28.969247][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 28.978192][ T3558] netlink: 'syz.3.33': attribute type 25 has an invalid length. [ 28.980444][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.986947][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 29.009079][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 29.018419][ T3558] netlink: 'syz.3.33': attribute type 25 has an invalid length. [ 29.028358][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 29.120383][ T3571] loop3: detected capacity change from 0 to 4096 [ 29.152087][ T3571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.211553][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.397796][ T3593] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 29.405793][ T3593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.48'. [ 29.722749][ T3630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.854432][ T3645] loop0: detected capacity change from 0 to 512 [ 29.862673][ T3645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.877915][ T3645] EXT4-fs (loop0): 1 truncate cleaned up [ 29.884245][ T3645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.988501][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.018970][ T3654] loop0: detected capacity change from 0 to 256 [ 30.026129][ T3654] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.057465][ T3654] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.103811][ T3657] loop0: detected capacity change from 0 to 256 [ 30.339401][ T3662] loop0: detected capacity change from 0 to 1764 [ 30.353620][ T3662] ISOFS: Unable to identify CD-ROM format. [ 30.582951][ T3672] ======================================================= [ 30.582951][ T3672] WARNING: The mand mount option has been deprecated and [ 30.582951][ T3672] and is ignored by this kernel. Remove the mand [ 30.582951][ T3672] option from the mount to silence this warning. [ 30.582951][ T3672] ======================================================= [ 30.651337][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.693463][ T3672] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.748115][ T3687] dvmrp0: entered allmulticast mode [ 30.754522][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.800558][ T3690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.827739][ T3690] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.90: iget: bad i_size value: 38620345925642 [ 30.844337][ T3690] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 30.844486][ T3690] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.90: couldn't read orphan inode 15 (err -117) [ 30.853694][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 30.853709][ C1] EXT4-fs (loop3): initial error at time 1775265701: ext4_orphan_get:1397: inode 15 [ 30.853748][ C1] EXT4-fs (loop3): last error at time 1775265701: ext4_orphan_get:1397: inode 15 [ 30.890667][ T3690] loop3: lost filesystem error report for type 5 error -117 [ 30.903229][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.083382][ T3705] EXT4-fs: Ignoring removed bh option [ 31.134358][ T3705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.134454][ T3705] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.210588][ T3714] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.96: Freeing blocks not in datazone - block = 0, count = 16 [ 31.226077][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 31.247512][ T55] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 31.247615][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1216 with error 28 [ 31.278600][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 31.282637][ T3717] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 31.300091][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.300091][ T30] [ 31.300554][ T55] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.300554][ T55] [ 31.309768][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 31.309783][ T30] EXT4-fs (loop3): Free/Dirty block details [ 31.309794][ T30] EXT4-fs (loop3): free_blocks=0 [ 31.320208][ T55] EXT4-fs (loop0): Total free blocks count 0 [ 31.326164][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 31.331496][ T55] EXT4-fs (loop0): Free/Dirty block details [ 31.351247][ T30] EXT4-fs (loop3): dirty_blocks=1220 [ 31.351263][ T30] EXT4-fs (loop3): Block reservation details [ 31.351273][ T30] EXT4-fs (loop3): i_reserved_data_blocks=1220 [ 31.374959][ T55] EXT4-fs (loop0): free_blocks=16 [ 31.376316][ T3314] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 31.380215][ T55] EXT4-fs (loop0): dirty_blocks=16 [ 31.380227][ T55] EXT4-fs (loop0): Block reservation details [ 31.380237][ T55] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 31.398520][ T3717] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 31.403007][ T30] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.413716][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 31.417843][ T3312] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 31.445617][ T30] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.454797][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.456373][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.464489][ T30] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.482788][ T30] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.741833][ T3742] netlink: 64 bytes leftover after parsing attributes in process `syz.0.110'. [ 31.823799][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.378338][ T3767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.438946][ T3767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.503221][ T3767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.538807][ T1703] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.556640][ T3767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.618764][ T55] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.632980][ T261] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.646382][ T261] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.658804][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.742672][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 32.742688][ T28] audit: type=1400 audit(1775265702.913:242): avc: denied { execute } for pid=3783 comm="syz.4.129" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.808836][ T3787] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.832502][ T28] audit: type=1400 audit(1775265703.003:243): avc: denied { ioctl } for pid=3786 comm="syz.1.130" path="socket:[5414]" dev="sockfs" ino=5414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.870078][ T3789] netlink: 'syz.4.131': attribute type 9 has an invalid length. [ 32.878487][ T3789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.131'. [ 32.920019][ T28] audit: type=1400 audit(1775265703.093:244): avc: denied { create } for pid=3794 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.977444][ T28] audit: type=1400 audit(1775265703.113:245): avc: denied { bind } for pid=3794 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.997062][ T28] audit: type=1400 audit(1775265703.113:246): avc: denied { write } for pid=3794 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.016935][ T28] audit: type=1400 audit(1775265703.153:247): avc: denied { create } for pid=3799 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.037614][ T28] audit: type=1400 audit(1775265703.153:248): avc: denied { write } for pid=3799 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.064464][ T28] audit: type=1400 audit(1775265703.153:249): avc: denied { read } for pid=3799 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.084196][ T28] audit: type=1400 audit(1775265703.213:250): avc: denied { ioctl } for pid=3799 comm="syz.4.135" path="socket:[6553]" dev="sockfs" ino=6553 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.204689][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 33.213639][ T3808] netlink: 'syz.4.137': attribute type 2 has an invalid length. [ 33.239684][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.248730][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.258620][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.267686][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.391730][ T3812] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 33.422320][ T3812] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 33.458937][ T28] audit: type=1400 audit(1775265703.623:251): avc: denied { bpf } for pid=3813 comm="syz.2.140" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.516912][ T3780] syz.3.127 (3780) used greatest stack depth: 10184 bytes left [ 33.810219][ T3840] set_capacity_and_notify: 4 callbacks suppressed [ 33.810234][ T3840] loop4: detected capacity change from 0 to 512 [ 33.850909][ T3840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.863759][ T3840] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.079824][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.319802][ T3871] loop3: detected capacity change from 0 to 512 [ 34.359268][ T3871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.377956][ T3871] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.416663][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.543726][ T3635] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.543791][ T3600] Bluetooth: hci0: command 0x1003 tx timeout [ 34.593165][ T3888] ieee802154 phy0 wpan0: encryption failed: -22 [ 34.661982][ T3893] netlink: 184 bytes leftover after parsing attributes in process `syz.2.172'. [ 34.773813][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 34.788662][ T3902] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET) [ 34.826356][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 34.838530][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 34.848826][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 34.865163][ T3906] netlink: 'syz.1.178': attribute type 6 has an invalid length. [ 34.876898][ T3904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'. [ 34.877981][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 34.897822][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 34.919847][ T3906] netlink: 'syz.1.178': attribute type 6 has an invalid length. [ 35.240448][ T3940] process 'syz.1.195' launched './file1' with NULL argv: empty string added [ 35.563359][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 35.989320][ T3988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 36.021140][ T1703] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.041501][ T1703] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.078445][ T1703] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.090735][ T1703] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.160471][ T3999] loop3: detected capacity change from 0 to 256 [ 36.181751][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.188958][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.214488][ T3999] FAT-fs (loop3): Directory bread(block 64) failed [ 36.221231][ T3999] FAT-fs (loop3): Directory bread(block 65) failed [ 36.236342][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.243514][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.243768][ T3999] FAT-fs (loop3): Directory bread(block 66) failed [ 36.250930][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.264672][ T4001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.275436][ T3999] FAT-fs (loop3): Directory bread(block 67) failed [ 36.275471][ T4001] bridge0: entered promiscuous mode [ 36.287851][ T4001] bridge0: entered allmulticast mode [ 36.289794][ T3999] FAT-fs (loop3): Directory bread(block 68) failed [ 36.309611][ T3999] FAT-fs (loop3): Directory bread(block 69) failed [ 36.322760][ T3999] FAT-fs (loop3): Directory bread(block 70) failed [ 36.336508][ T3999] FAT-fs (loop3): Directory bread(block 71) failed [ 36.350462][ T3999] FAT-fs (loop3): Directory bread(block 72) failed [ 36.362208][ T3999] FAT-fs (loop3): Directory bread(block 73) failed [ 36.411627][ T3999] syz.3.220: attempt to access beyond end of device [ 36.411627][ T3999] loop3: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 36.426262][ T3999] syz.3.220: attempt to access beyond end of device [ 36.426262][ T3999] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 36.452142][ T3999] syz.3.220: attempt to access beyond end of device [ 36.452142][ T3999] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 36.504368][ T4013] loop0: detected capacity change from 0 to 128 [ 36.611824][ T4023] syz.0.225: attempt to access beyond end of device [ 36.611824][ T4023] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 36.644218][ T4023] syz.0.225: attempt to access beyond end of device [ 36.644218][ T4023] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 36.665409][ T4027] veth1_to_team: entered promiscuous mode [ 36.679905][ T4027] team0: Port device team_slave_1 removed [ 36.704214][ T4023] syz.0.225: attempt to access beyond end of device [ 36.704214][ T4023] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 36.729824][ T4023] syz.0.225: attempt to access beyond end of device [ 36.729824][ T4023] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 36.744099][ T4023] syz.0.225: attempt to access beyond end of device [ 36.744099][ T4023] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 36.785034][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.793175][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.794811][ T4030] loop1: detected capacity change from 0 to 764 [ 36.833719][ T4030] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.882028][ T4023] syz.0.225: attempt to access beyond end of device [ 36.882028][ T4023] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 36.942550][ T4023] syz.0.225: attempt to access beyond end of device [ 36.942550][ T4023] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 37.049473][ T4039] bridge0: left allmulticast mode [ 37.075126][ T4039] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 37.246278][ T4065] loop4: detected capacity change from 0 to 256 [ 37.733616][ T4095] loop2: detected capacity change from 0 to 512 [ 37.747483][ T4095] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.759481][ T4095] EXT4-fs (loop2): 1 truncate cleaned up [ 37.766008][ T4095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.793587][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.865122][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 37.865136][ T28] audit: type=1400 audit(1775265708.043:320): avc: denied { connect } for pid=4102 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.891522][ T28] audit: type=1400 audit(1775265708.043:321): avc: denied { read } for pid=4102 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.027089][ T4115] netlink: 'syz.2.270': attribute type 9 has an invalid length. [ 38.038992][ T4115] netlink: 'syz.2.270': attribute type 9 has an invalid length. [ 38.050046][ T28] audit: type=1400 audit(1775265708.223:322): avc: denied { read write } for pid=4118 comm="syz.0.272" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.113736][ T28] audit: type=1400 audit(1775265708.223:323): avc: denied { open } for pid=4118 comm="syz.0.272" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.139180][ T28] audit: type=1400 audit(1775265708.293:324): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 38.217488][ T4129] tipc: Started in network mode [ 38.246105][ T4131] loop2: detected capacity change from 0 to 512 [ 38.253160][ T4129] tipc: Node identity ac14140f, cluster identity 4711 [ 38.270454][ T4129] tipc: New replicast peer: 255.255.255.255 [ 38.277130][ T4129] tipc: Enabled bearer , priority 10 [ 38.287417][ T4131] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.296757][ T28] audit: type=1400 audit(1775265708.463:325): avc: denied { kexec_image_load } for pid=4132 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 38.403538][ T4131] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 38.418640][ T4131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.278: bg 0: block 248: padding at end of block bitmap is not set [ 38.462482][ T4131] loop2: lost filesystem error report for type 5 error -117 [ 38.463725][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 38.478186][ C1] EXT4-fs (loop2): last error at time 1775265708: ext4_validate_block_bitmap:441 [ 38.490323][ T4131] Quota error (device loop2): write_blk: dquota write failed [ 38.499274][ T4131] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 38.509184][ T4131] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.278: Failed to acquire dquot type 1 [ 38.520773][ T4131] loop2: lost filesystem error report for type 5 error -28 [ 38.521502][ T4131] EXT4-fs (loop2): 1 truncate cleaned up [ 38.545475][ T4131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 38.607263][ T4131] syz.2.278 (4131) used greatest stack depth: 9160 bytes left [ 38.658410][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 38.685722][ T28] audit: type=1400 audit(1775265708.833:326): avc: denied { getopt } for pid=4153 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.759997][ T28] audit: type=1400 audit(1775265708.933:327): avc: denied { listen } for pid=4166 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.899743][ T4182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.945226][ T4182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.270720][ T4197] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 39.283834][ T1507] tipc: Node number set to 2886997007 [ 39.303150][ T4190] netlink: 'syz.0.303': attribute type 4 has an invalid length. [ 39.577655][ T4212] syzkaller1: entered promiscuous mode [ 39.583603][ T4212] syzkaller1: entered allmulticast mode [ 39.617433][ T4219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.630396][ T4219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.661272][ T4218] loop0: detected capacity change from 0 to 1764 [ 39.674045][ T4218] ISOFS: Unable to identify CD-ROM format. [ 39.741054][ T4224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.775951][ T4226] ipip0: entered promiscuous mode [ 39.781177][ T4226] ipip0: entered allmulticast mode [ 39.811132][ T4224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.835852][ T4229] loop3: detected capacity change from 0 to 1024 [ 39.855033][ T4229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.870386][ T4229] EXT4-fs (loop3): shut down requested (0) [ 39.889053][ T4224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.910150][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.936294][ T4224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.999581][ T47] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.012392][ T47] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.028495][ T4233] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 40.030819][ T47] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.048966][ T47] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.290700][ T4247] __nla_validate_parse: 15 callbacks suppressed [ 40.290717][ T4247] netlink: 7 bytes leftover after parsing attributes in process `syz.1.326'. [ 40.314534][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 40.323514][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 40.332966][ T4251] netlink: 'syz.2.328': attribute type 7 has an invalid length. [ 40.342123][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 40.351466][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 40.360805][ T4251] netlink: 'syz.2.328': attribute type 7 has an invalid length. [ 40.367089][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 40.448989][ T4263] loop0: detected capacity change from 0 to 512 [ 40.474510][ T4263] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.532883][ T4263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.581407][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.627688][ T4263] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.660438][ T4273] netlink: 27 bytes leftover after parsing attributes in process `syz.4.337'. [ 40.681162][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.490026][ T4305] loop2: detected capacity change from 0 to 128 [ 41.535092][ T4307] loop2: detected capacity change from 0 to 1024 [ 41.545799][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.686893][ T4320] syzkaller1: entered promiscuous mode [ 41.692490][ T4320] syzkaller1: entered allmulticast mode [ 41.821332][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.429308][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 42.556074][ T4337] loop2: detected capacity change from 0 to 512 [ 42.626501][ T4337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.639498][ T4337] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.683166][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.423763][ T3635] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.423775][ T3600] Bluetooth: hci0: command 0x1003 tx timeout [ 43.460216][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 43.460231][ T28] audit: type=1400 audit(1775265713.633:357): avc: denied { write } for pid=4354 comm="syz.4.370" path="socket:[7697]" dev="sockfs" ino=7697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.505658][ T4359] capability: warning: `syz.3.371' uses deprecated v2 capabilities in a way that may be insecure [ 43.616872][ T28] audit: type=1401 audit(1775265713.723:358): op=setxattr invalid_context=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 [ 43.633824][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 43.887770][ T3385] kernel read not supported for file /vcs (pid: 3385 comm: kworker/1:3) [ 44.121430][ T4380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 44.273170][ T28] audit: type=1400 audit(1775265714.443:359): avc: denied { mounton } for pid=4381 comm="syz.0.378" path="/proc/160/task" dev="proc" ino=7747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.698896][ T4398] loop3: detected capacity change from 0 to 128 [ 44.769442][ T4400] loop0: detected capacity change from 0 to 1024 [ 44.794882][ T4404] syzkaller1: entered promiscuous mode [ 44.811279][ T4400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.823519][ T4404] syzkaller1: entered allmulticast mode [ 45.084183][ T28] audit: type=1326 audit(1775265715.263:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 45.123927][ T4411] loop1: detected capacity change from 0 to 8192 [ 45.133837][ T28] audit: type=1326 audit(1775265715.283:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 45.168325][ T4411] bio_check_eod: 105 callbacks suppressed [ 45.168340][ T4411] syz.1.388: attempt to access beyond end of device [ 45.168340][ T4411] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 45.229381][ T28] audit: type=1326 audit(1775265715.283:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 45.314435][ T28] audit: type=1326 audit(1775265715.283:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 45.339200][ T28] audit: type=1326 audit(1775265715.283:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 45.396997][ T28] audit: type=1326 audit(1775265715.283:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 45.445645][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.467827][ T28] audit: type=1326 audit(1775265715.283:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 46.383230][ T4433] loop4: detected capacity change from 0 to 128 [ 46.396710][ T4438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.564185][ T4452] loop1: detected capacity change from 0 to 512 [ 46.660203][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 46.713749][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 46.833913][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 46.844886][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 47.180256][ T4477] loop0: detected capacity change from 0 to 128 [ 48.034777][ T4502] loop0: detected capacity change from 0 to 256 [ 48.432232][ T4511] loop3: detected capacity change from 0 to 512 [ 48.508553][ T4511] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 65601571)! [ 48.519751][ T4511] EXT4-fs (loop3): group descriptors corrupted! [ 48.556130][ T4520] loop1: detected capacity change from 0 to 512 [ 48.587660][ T4520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.643130][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 48.643147][ T28] audit: type=1400 audit(1775265718.813:393): avc: denied { create } for pid=4525 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.648424][ T4520] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.649494][ T28] audit: type=1400 audit(1775265718.813:394): avc: denied { bind } for pid=4525 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.705289][ T28] audit: type=1400 audit(1775265718.813:395): avc: denied { listen } for pid=4525 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.724882][ T28] audit: type=1400 audit(1775265718.813:396): avc: denied { connect } for pid=4525 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.744456][ T28] audit: type=1400 audit(1775265718.813:397): avc: denied { write } for pid=4525 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.767600][ T4527] loop4: detected capacity change from 0 to 2048 [ 48.778308][ T4520] EXT4-fs (loop1): shut down requested (2) [ 48.796116][ T4527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.809532][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.825946][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.835243][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.844360][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.853317][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.862140][ T28] audit: type=1400 audit(1775265719.023:398): avc: denied { add_name } for pid=4519 comm="syz.1.436" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.885779][ T4531] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 48.898619][ T4531] FAT-fs (loop3): Filesystem has been set read-only [ 48.912659][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 48.931355][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 48.941162][ T4527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.964509][ T28] audit: type=1400 audit(1775265719.083:399): avc: denied { create } for pid=4519 comm="syz.1.436" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 48.983740][ T4520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 49.023752][ T28] audit: type=1400 audit(1775265719.143:400): avc: denied { add_name } for pid=4524 comm="syz.4.437" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.047678][ T28] audit: type=1400 audit(1775265719.223:401): avc: denied { setattr } for pid=4519 comm="syz.1.436" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.094880][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.236928][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.322618][ T28] audit: type=1401 audit(1775265719.383:402): op=setxattr invalid_context=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 [ 49.487450][ T4557] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.736323][ T261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.753925][ T261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.777304][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 49.809265][ T4557] FAT-fs (loop4): Filesystem has been set read-only [ 49.828680][ T261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.839156][ T261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.840345][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.863750][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.871897][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.880298][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.893821][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.913762][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.922066][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.943764][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.951798][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 49.962883][ T261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.983798][ T261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.994429][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.013932][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.033775][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.044091][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.063351][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.084138][ T261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.094883][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.102810][ T261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.113419][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.123088][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.131406][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.139712][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.149172][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.157423][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.168306][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.229586][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.243936][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.367789][ T261] bridge_slave_1: left allmulticast mode [ 50.373456][ T261] bridge_slave_1: left promiscuous mode [ 50.389730][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.398439][ T261] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.416682][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.434374][ T261] bridge_slave_0: left allmulticast mode [ 50.440197][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.448374][ T261] bridge_slave_0: left promiscuous mode [ 50.454737][ T261] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.461963][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.471714][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.480447][ T4557] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 50.624916][ T4595] set_capacity_and_notify: 2 callbacks suppressed [ 50.624930][ T4595] loop2: detected capacity change from 0 to 7 [ 50.645849][ T261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.657332][ T261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.677358][ T261] bond0 (unregistering): Released all slaves [ 50.692440][ T4597] loop3: detected capacity change from 0 to 128 [ 50.699326][ T4564] chnl_net:caif_netlink_parms(): no params data found [ 50.710455][ T4597] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.734467][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 50.744733][ T261] tipc: Disabling bearer [ 50.750339][ T261] tipc: Left network mode [ 50.755005][ T4597] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.854521][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.862892][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.880819][ T4564] bridge_slave_0: entered allmulticast mode [ 50.890763][ T4564] bridge_slave_0: entered promiscuous mode [ 50.913950][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.923110][ T261] hsr_slave_0: left promiscuous mode [ 50.953835][ T261] hsr_slave_1: left promiscuous mode [ 50.959702][ T261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.976821][ T261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.985118][ T261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.992642][ T261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.003371][ T261] veth1_macvtap: left promiscuous mode [ 51.009008][ T261] veth0_macvtap: left promiscuous mode [ 51.014926][ T261] veth1_vlan: left promiscuous mode [ 51.020144][ T261] veth0_vlan: left promiscuous mode [ 51.101174][ T261] team0 (unregistering): Port device team_slave_1 removed [ 51.115103][ T261] team0 (unregistering): Port device team_slave_0 removed [ 51.155960][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.163179][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.171445][ T4564] bridge_slave_1: entered allmulticast mode [ 51.178282][ T4564] bridge_slave_1: entered promiscuous mode [ 51.234659][ T4564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.249706][ T4564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.296888][ T4564] team0: Port device team_slave_0 added [ 51.309347][ T4564] team0: Port device team_slave_1 added [ 51.375063][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.382042][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.408808][ T4564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.423617][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.441763][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.468064][ T4564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.523926][ T4564] hsr_slave_0: entered promiscuous mode [ 51.529958][ T4564] hsr_slave_1: entered promiscuous mode [ 51.689710][ T4564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.715957][ T4564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.735587][ T4564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.744391][ T4564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.805368][ T4564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.823122][ T4564] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.834095][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.841557][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.862721][ T4564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.874944][ T4564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.889245][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.896394][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.980757][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.111978][ T4564] veth0_vlan: entered promiscuous mode [ 52.122757][ T4564] veth1_vlan: entered promiscuous mode [ 52.140487][ T4564] veth0_macvtap: entered promiscuous mode [ 52.149073][ T4564] veth1_macvtap: entered promiscuous mode [ 52.161475][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.173917][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.185187][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.203731][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.215478][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.230971][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.290693][ T4693] loop4: detected capacity change from 0 to 512 [ 52.307489][ T4693] EXT4-fs: Ignoring removed orlov option [ 52.313214][ T4693] EXT4-fs: test_dummy_encryption option not supported [ 52.349753][ T4693] loop4: detected capacity change from 0 to 128 [ 52.367782][ T4693] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 52.411934][ T4697] loop5: detected capacity change from 0 to 128 [ 52.546156][ T4715] loop3: detected capacity change from 0 to 256 [ 52.640750][ T4720] loop4: detected capacity change from 0 to 2048 [ 52.866137][ T4720] FAT-fs (loop4): FAT read failed (blocknr 1056) [ 53.395451][ T4745] Illegal XDP return value 4294967294 on prog (id 86) dev syz_tun, expect packet loss! [ 53.518087][ T4749] loop3: detected capacity change from 0 to 512 [ 53.524942][ T4749] EXT4-fs: Ignoring removed orlov option [ 53.531232][ T4749] EXT4-fs: test_dummy_encryption option not supported [ 53.582845][ T4749] loop3: detected capacity change from 0 to 128 [ 53.610687][ T4749] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 53.650205][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 53.650220][ T28] audit: type=1400 audit(1775265723.823:415): avc: denied { create } for pid=4756 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.708754][ T28] audit: type=1400 audit(1775265723.853:416): avc: denied { sys_admin } for pid=4756 comm="syz.0.490" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.778127][ T4766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.494'. [ 53.794294][ T4766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.494'. [ 54.107901][ T28] audit: type=1400 audit(1775265724.283:417): avc: denied { wake_alarm } for pid=4796 comm="syz.5.507" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.218466][ T28] audit: type=1400 audit(1775265724.393:418): avc: denied { mount } for pid=4794 comm="syz.0.506" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 54.285204][ T28] audit: type=1400 audit(1775265724.423:419): avc: denied { search } for pid=4794 comm="syz.0.506" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.323055][ T28] audit: type=1400 audit(1775265724.423:420): avc: denied { search } for pid=4794 comm="syz.0.506" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.362021][ T28] audit: type=1400 audit(1775265724.423:421): avc: denied { read open } for pid=4794 comm="syz.0.506" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.793767][ T28] audit: type=1400 audit(1775265724.963:422): avc: denied { allowed } for pid=4801 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.159744][ T4818] loop5: detected capacity change from 0 to 512 [ 55.201354][ T4818] EXT4-fs: Ignoring removed orlov option [ 55.218727][ T4818] EXT4-fs: test_dummy_encryption option not supported [ 55.238669][ T28] audit: type=1400 audit(1775265725.413:423): avc: denied { remount } for pid=4819 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.275821][ T4818] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 55.566019][ T28] audit: type=1400 audit(1775265725.743:424): avc: denied { execute } for pid=4836 comm="syz.3.520" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 55.724670][ T4846] set_capacity_and_notify: 1 callbacks suppressed [ 55.724687][ T4846] loop3: detected capacity change from 0 to 128 [ 55.786249][ T4846] netlink: 'syz.3.523': attribute type 12 has an invalid length. [ 55.806480][ T4846] netlink: 'syz.3.523': attribute type 29 has an invalid length. [ 55.829880][ T4846] netlink: 148 bytes leftover after parsing attributes in process `syz.3.523'. [ 55.858763][ T4846] netlink: 'syz.3.523': attribute type 2 has an invalid length. [ 55.882000][ T4852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.894361][ T4852] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.901917][ T4853] netlink: 14 bytes leftover after parsing attributes in process `syz.4.525'. [ 55.967389][ T4853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.010564][ T4853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.058519][ T4853] bond0 (unregistering): Released all slaves [ 56.111326][ T4852] loop4: detected capacity change from 0 to 8192 [ 56.769258][ T4870] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 56.820633][ T4884] loop5: detected capacity change from 0 to 512 [ 56.873472][ T4894] netlink: 'syz.4.543': attribute type 10 has an invalid length. [ 56.931078][ T4884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.998857][ T4904] loop0: detected capacity change from 0 to 512 [ 57.012594][ T4904] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 57.023445][ T4905] loop4: detected capacity change from 0 to 128 [ 57.054884][ T4905] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.087966][ T4911] loop3: detected capacity change from 0 to 512 [ 57.106842][ T4911] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.107106][ T4905] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.141534][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.142693][ T4911] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 57.165124][ T4905] ext2 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.186980][ T4911] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.551: bg 0: block 248: padding at end of block bitmap is not set [ 57.201803][ T4911] loop3: lost filesystem error report for type 5 error -117 [ 57.203712][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 57.217474][ C1] EXT4-fs (loop3): last error at time 1775265727: ext4_validate_block_bitmap:441 [ 57.228386][ T4911] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.551: Failed to acquire dquot type 1 [ 57.240107][ T4911] loop3: lost filesystem error report for type 5 error -28 [ 57.240628][ T4911] EXT4-fs (loop3): 1 truncate cleaned up [ 57.254024][ T4911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 57.283918][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.312653][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 57.395359][ T4929] syz_tun: entered allmulticast mode [ 57.411934][ T4928] syz_tun: left allmulticast mode [ 57.476439][ T4931] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 57.495861][ T4931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.539234][ T4931] bond0: (slave gretap1): making interface the new active one [ 57.547829][ T4931] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 57.962468][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 57.973801][ T4944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.016001][ T4944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.210854][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.234544][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.247683][ T4973] loop0: detected capacity change from 0 to 256 [ 58.332823][ T4973] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 58.436769][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.458290][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.499492][ T4951] chnl_net:caif_netlink_parms(): no params data found [ 58.558873][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.586279][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.643101][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.650282][ T4951] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.659409][ T4951] bridge_slave_0: entered allmulticast mode [ 58.666202][ T4951] bridge_slave_0: entered promiscuous mode [ 58.675515][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.680396][ T4991] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 58.686073][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.704939][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.712217][ T4951] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.720472][ T4951] bridge_slave_1: entered allmulticast mode [ 58.726954][ T4951] bridge_slave_1: entered promiscuous mode [ 58.755280][ T4991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.790683][ T4951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.816164][ T4991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.825416][ T4991] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 58.845114][ T4951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.864446][ T1703] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 58.908261][ T5005] loop4: detected capacity change from 0 to 1024 [ 58.916441][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 58.916454][ T28] audit: type=1400 audit(1775265729.093:457): avc: denied { read } for pid=5006 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.959464][ T5005] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 58.982384][ T5005] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.994122][ T1703] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 59.005608][ T5005] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: inode #32: comm syz.4.582: iget: special inode unallocated [ 59.027490][ T5005] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 59.027584][ T5005] EXT4-fs (loop4): Remounting filesystem read-only [ 59.036836][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.036857][ C1] EXT4-fs (loop4): initial error at time 1775265729: ext4_get_journal_inode:5888: inode 32 [ 59.036896][ C1] EXT4-fs (loop4): last error at time 1775265729: ext4_get_journal_inode:5888: inode 32 [ 59.047211][ T4951] team0: Port device team_slave_0 added [ 59.076047][ T5005] EXT4-fs (loop4): no journal found [ 59.114251][ T5005] EXT4-fs (loop4): can't get journal size [ 59.132083][ T5005] EXT4-fs (loop4): failed to initialize system zone (-117) [ 59.143704][ T5005] EXT4-fs (loop4): mount failed [ 59.191033][ T4951] team0: Port device team_slave_1 added [ 59.209696][ T75] bridge_slave_1: left allmulticast mode [ 59.215786][ T75] bridge_slave_1: left promiscuous mode [ 59.221658][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.256150][ T75] bridge_slave_0: left allmulticast mode [ 59.276673][ T28] audit: type=1326 audit(1775265729.453:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.278055][ T75] bridge_slave_0: left promiscuous mode [ 59.301015][ T28] audit: type=1326 audit(1775265729.453:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.329479][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.334814][ T28] audit: type=1326 audit(1775265729.473:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.366819][ T28] audit: type=1326 audit(1775265729.473:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.391355][ T28] audit: type=1326 audit(1775265729.503:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.416609][ T28] audit: type=1326 audit(1775265729.503:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.442395][ T28] audit: type=1326 audit(1775265729.503:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.472387][ T28] audit: type=1326 audit(1775265729.503:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.496790][ T28] audit: type=1326 audit(1775265729.503:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6ff2c819 code=0x7ffc0000 [ 59.583228][ T5060] loop4: detected capacity change from 0 to 1024 [ 59.604937][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.599'. [ 59.607233][ T5060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.626666][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.642011][ T5060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.658163][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.668668][ T5060] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.668897][ T75] bond0 (unregistering): Released all slaves [ 59.690747][ T5060] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 59.698697][ T4951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.706580][ T4951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.733313][ T4951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.734659][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.766861][ T4951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.779374][ T5072] sock: sock_timestamping_bind_phc: sock not bind to device [ 59.781653][ T4951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.813034][ T4951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.828888][ T75] hsr_slave_0: left promiscuous mode [ 59.835484][ T75] hsr_slave_1: left promiscuous mode [ 59.844331][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.851835][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.859621][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.867083][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.877470][ T75] veth1_macvtap: left promiscuous mode [ 59.883025][ T75] veth0_macvtap: left promiscuous mode [ 59.888754][ T75] veth1_vlan: left promiscuous mode [ 59.894493][ T75] veth0_vlan: left promiscuous mode [ 59.958839][ T75] team0 (unregistering): Port device team_slave_1 removed [ 59.968849][ T75] team0 (unregistering): Port device team_slave_0 removed [ 60.000899][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'. [ 60.021248][ T5077] syzkaller1: entered promiscuous mode [ 60.027270][ T5077] syzkaller1: entered allmulticast mode [ 60.076469][ T4951] hsr_slave_0: entered promiscuous mode [ 60.091302][ T4951] hsr_slave_1: entered promiscuous mode [ 60.100322][ T4951] debugfs: 'hsr0' already exists in 'hsr' [ 60.107051][ T4951] Cannot create hsr debugfs directory [ 60.166269][ T5101] loop3: detected capacity change from 0 to 512 [ 60.207104][ T5101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.226409][ T5101] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.262630][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.324837][ T4951] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 60.334521][ T4951] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.353374][ T4951] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.371548][ T4951] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.474469][ T4951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.494420][ T4951] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.523325][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.530481][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.551216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.558308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.633487][ T4951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.712622][ T4951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.925926][ T4951] veth0_vlan: entered promiscuous mode [ 60.959300][ T4951] veth1_vlan: entered promiscuous mode [ 60.976707][ T4951] veth0_macvtap: entered promiscuous mode [ 60.994979][ T4951] veth1_macvtap: entered promiscuous mode [ 61.006351][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.018351][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.031909][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.038488][ T5191] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 61.058706][ T5191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.067552][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.077092][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.095669][ T5191] bond2: (slave gretap1): making interface the new active one [ 61.104547][ T5191] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 61.113416][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.191190][ T5203] netlink: 172 bytes leftover after parsing attributes in process `syz.3.622'. [ 61.223781][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 61.232804][ T5203] netlink: 172 bytes leftover after parsing attributes in process `syz.3.622'. [ 61.241997][ T5203] netlink: 100 bytes leftover after parsing attributes in process `syz.3.622'. [ 61.263063][ T5203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.622'. [ 61.701234][ T5224] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 61.714950][ T5224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.742343][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.752619][ T5224] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 61.823960][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.834823][ T5231] loop0: detected capacity change from 0 to 2048 [ 61.842944][ T5231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.856783][ T5231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.944772][ T55] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.002704][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.419878][ T5268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.643'. [ 62.707291][ T5290] loop3: detected capacity change from 0 to 2048 [ 62.715960][ T5290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.738094][ T5290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.894686][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.949859][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 63.050197][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.079288][ T5319] netlink: 7 bytes leftover after parsing attributes in process `syz.3.653'. [ 63.228782][ T5344] loop4: detected capacity change from 0 to 256 [ 63.236507][ T5344] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.402214][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 63.508607][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.516338][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.558080][ T5327] bridge_slave_0: entered allmulticast mode [ 63.613870][ T5327] bridge_slave_0: entered promiscuous mode [ 63.641459][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.677618][ T5361] loop5: detected capacity change from 0 to 136 [ 63.687457][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.707239][ T5327] bridge_slave_1: entered allmulticast mode [ 63.726462][ T5327] bridge_slave_1: entered promiscuous mode [ 63.735354][ T5361] Attempt to read inode for relocated directory [ 63.812016][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.842324][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.919855][ T5327] team0: Port device team_slave_0 added [ 63.944184][ T5327] team0: Port device team_slave_1 added [ 63.985311][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.000441][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.091904][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.124647][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.131630][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.243708][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.322413][ T5327] hsr_slave_0: entered promiscuous mode [ 64.367549][ T5327] hsr_slave_1: entered promiscuous mode [ 64.378737][ T5327] debugfs: 'hsr0' already exists in 'hsr' [ 64.396974][ T5327] Cannot create hsr debugfs directory [ 64.549247][ T5327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.721103][ T5327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.780259][ T5327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.797778][ T5327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.852418][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.864604][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.874343][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.881451][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.892498][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.899641][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.988875][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 64.988965][ T28] audit: type=1400 audit(1775265735.163:487): avc: denied { sqpoll } for pid=5420 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.996169][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.046898][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.074390][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 65.092178][ T5428] batman_adv: batadv0: Adding interface: ip6gretap1 [ 65.099472][ T5428] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.126916][ T5428] batman_adv: batadv0: Interface activated: ip6gretap1 [ 65.137998][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.168713][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.191579][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.273062][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.301190][ T5440] loop4: detected capacity change from 0 to 512 [ 65.331584][ T5446] loop5: detected capacity change from 0 to 2048 [ 65.345183][ T5440] EXT4-fs (loop4): 1 truncate cleaned up [ 65.348445][ T5446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.351393][ T5440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.414767][ T5446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.458829][ T5327] veth0_vlan: entered promiscuous mode [ 65.487615][ T5327] veth1_vlan: entered promiscuous mode [ 65.501430][ T5327] veth0_macvtap: entered promiscuous mode [ 65.534572][ T5327] veth1_macvtap: entered promiscuous mode [ 65.555561][ T12] bridge_slave_1: left allmulticast mode [ 65.562215][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.577152][ T5465] loop0: detected capacity change from 0 to 512 [ 65.581664][ T12] bridge_slave_1: left promiscuous mode [ 65.595048][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.618594][ T5465] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.634023][ T12] bridge_slave_0: left allmulticast mode [ 65.644380][ T12] bridge_slave_0: left promiscuous mode [ 65.650165][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.665826][ T5465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.747456][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.757744][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.777938][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.788070][ T12] bond0 (unregistering): Released all slaves [ 65.812450][ T5477] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 65.820988][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.852160][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.863134][ T5478] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 65.863348][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.906047][ T12] hsr_slave_0: left promiscuous mode [ 65.921887][ T12] hsr_slave_1: left promiscuous mode [ 65.936749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.944685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.954825][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.962350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.976921][ T12] veth1_macvtap: left promiscuous mode [ 65.995726][ T12] veth0_macvtap: left promiscuous mode [ 66.010756][ T12] veth1_vlan: left promiscuous mode [ 66.042735][ T12] veth0_vlan: left promiscuous mode [ 66.189082][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.202027][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.244716][ T5454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.275920][ T55] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.297025][ T55] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.317506][ T55] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.343654][ T55] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.460758][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 66.473386][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.508325][ T5505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.635296][ T5556] netlink: 7 bytes leftover after parsing attributes in process `syz.5.701'. [ 67.781419][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 67.805481][ T5573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.838037][ T5573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.135218][ T5612] loop5: detected capacity change from 0 to 2048 [ 68.161949][ T5612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.254454][ T1703] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 68.274835][ T1703] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 68.294485][ T1703] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.294485][ T1703] [ 68.304666][ T1703] EXT4-fs (loop5): Total free blocks count 0 [ 68.310712][ T1703] EXT4-fs (loop5): Free/Dirty block details [ 68.316871][ T1703] EXT4-fs (loop5): free_blocks=4096 [ 68.322186][ T1703] EXT4-fs (loop5): dirty_blocks=208 [ 68.327744][ T1703] EXT4-fs (loop5): Block reservation details [ 68.335799][ T1703] EXT4-fs (loop5): i_reserved_data_blocks=13 [ 68.349764][ T4564] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.367263][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.461201][ T5634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.720'. [ 68.508000][ T5634] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 68.579548][ T5644] netlink: 104 bytes leftover after parsing attributes in process `syz.0.723'. [ 68.824212][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.726'. [ 68.833323][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.853013][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.868899][ T5660] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 68.879518][ T5662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.728'. [ 68.888942][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.896110][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.911479][ T5662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.728'. [ 68.912941][ T5660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.935148][ T5665] bond2: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 68.991863][ T5669] loop0: detected capacity change from 0 to 128 [ 69.083478][ T5669] syz.0.730: attempt to access beyond end of device [ 69.083478][ T5669] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 69.097070][ T5669] syz.0.730: attempt to access beyond end of device [ 69.097070][ T5669] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 69.115062][ T5669] syz.0.730: attempt to access beyond end of device [ 69.115062][ T5669] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 69.133901][ T5669] syz.0.730: attempt to access beyond end of device [ 69.133901][ T5669] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 69.149871][ T5669] syz.0.730: attempt to access beyond end of device [ 69.149871][ T5669] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 69.163445][ T5669] syz.0.730: attempt to access beyond end of device [ 69.163445][ T5669] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 69.177112][ T5669] syz.0.730: attempt to access beyond end of device [ 69.177112][ T5669] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 69.205070][ T5669] syz.0.730: attempt to access beyond end of device [ 69.205070][ T5669] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 69.235988][ T5669] syz.0.730: attempt to access beyond end of device [ 69.235988][ T5669] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 69.249678][ T5669] syz.0.730: attempt to access beyond end of device [ 69.249678][ T5669] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 69.656204][ T5708] netlink: 'syz.5.745': attribute type 83 has an invalid length. [ 69.833361][ T28] audit: type=1400 audit(1775265740.003:488): avc: denied { create } for pid=5714 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.877901][ T5715] bridge_slave_0: left allmulticast mode [ 69.883664][ T5715] bridge_slave_0: left promiscuous mode [ 69.891589][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.901850][ T5715] bridge_slave_1: left allmulticast mode [ 69.908167][ T5715] bridge_slave_1: left promiscuous mode [ 69.915083][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.928057][ T5715] team0: Port device team_slave_0 removed [ 69.936756][ T5715] team0: Port device team_slave_1 removed [ 69.944982][ T5715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.952374][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.972414][ T5715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.074729][ T5727] syzkaller0: entered promiscuous mode [ 70.080503][ T5727] syzkaller0: entered allmulticast mode [ 70.113723][ T28] audit: type=1400 audit(1775265996.275:489): avc: denied { cpu } for pid=5731 comm="syz.7.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 70.201621][ T5737] xt_hashlimit: size too large, truncated to 1048576 [ 70.638692][ T5774] loop5: detected capacity change from 0 to 512 [ 70.649542][ T5775] netlink: 76 bytes leftover after parsing attributes in process `syz.0.769'. [ 70.666908][ T5774] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 70.687617][ T5739] loop7: detected capacity change from 0 to 32768 [ 70.697624][ T5774] EXT4-fs (loop5): 1 truncate cleaned up [ 70.706652][ T5774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.744105][ T3303] loop7: p1 p3 < > [ 70.752482][ T5739] loop7: p1 p3 < > [ 70.765485][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.810226][ T5778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.001341][ T4587] udevd[4587]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 71.005002][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 71.056639][ T5802] loop7: detected capacity change from 0 to 1024 [ 71.087898][ T5802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.134752][ T4587] udevd[4587]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 71.139447][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 71.167924][ T5802] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.303653][ T5819] bond1: (slave batadv0): Removing an active aggregator [ 71.315858][ T5819] bond1: (slave batadv0): Releasing backup interface [ 71.366898][ T5819] bridge_slave_0: left allmulticast mode [ 71.372642][ T5819] bridge_slave_0: left promiscuous mode [ 71.378628][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.406158][ T5828] netlink: 20 bytes leftover after parsing attributes in process `syz.5.791'. [ 71.414591][ T5327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.422428][ T5828] netlink: 20 bytes leftover after parsing attributes in process `syz.5.791'. [ 71.434995][ T5819] bridge_slave_1: left allmulticast mode [ 71.441072][ T5819] bridge_slave_1: left promiscuous mode [ 71.454152][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.471672][ T5819] bond0: (slave bond_slave_0): Releasing backup interface [ 71.488546][ T28] audit: type=1400 audit(1775265997.645:490): avc: denied { mounton } for pid=5831 comm="syz.5.794" path="/83/file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.512383][ T28] audit: type=1400 audit(1775265997.665:491): avc: denied { ioctl } for pid=5836 comm="syz.4.795" path="socket:[14455]" dev="sockfs" ino=14455 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 71.542127][ T5819] bond0: (slave bond_slave_1): Releasing backup interface [ 71.559181][ T5819] team0: Port device team_slave_0 removed [ 71.566399][ T5819] bond2: (slave veth1_to_team): Removing an active aggregator [ 71.574723][ T5819] bond2: (slave veth1_to_team): Releasing backup interface [ 71.589843][ T5819] team0: Port device team_slave_1 removed [ 71.598739][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.606657][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.616281][ T5819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.642406][ T5838] tipc: Started in network mode [ 71.647775][ T5838] tipc: Node identity e234a8baa7e6, cluster identity 4711 [ 71.655360][ T5838] tipc: Enabled bearer , priority 0 [ 71.663557][ T5834] tipc: Disabling bearer [ 71.790533][ T3399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.816221][ T3399] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.350115][ T28] audit: type=1400 audit(1775265999.515:492): avc: denied { mounton } for pid=5928 comm="syz.4.808" path="/137/file0" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 73.382698][ T5926] bridge_slave_0: left allmulticast mode [ 73.395714][ T5926] bridge_slave_0: left promiscuous mode [ 73.410218][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.438866][ T28] audit: type=1400 audit(1775265999.565:493): avc: denied { override_creds } for pid=5931 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.444195][ T5926] bridge_slave_1: left allmulticast mode [ 73.499544][ T5941] loop5: detected capacity change from 0 to 512 [ 73.510515][ T5926] bridge_slave_1: left promiscuous mode [ 73.528903][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.552906][ T5926] bond0: (slave bond_slave_0): Releasing backup interface [ 73.577559][ T5926] bond0: (slave bond_slave_1): Releasing backup interface [ 73.616882][ T5926] team0: Port device team_slave_0 removed [ 73.637035][ T5926] team0: Port device team_slave_1 removed [ 73.650248][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.670275][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.692094][ T5926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.090908][ T28] audit: type=1400 audit(1775266000.255:494): avc: denied { write } for pid=5960 comm="syz.5.820" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 74.771843][ T5975] netlink: 148 bytes leftover after parsing attributes in process `syz.7.826'. [ 75.103327][ T5988] netlink: 'syz.5.830': attribute type 39 has an invalid length. [ 75.190357][ T5991] netlink: 'syz.7.832': attribute type 3 has an invalid length. [ 75.223457][ T5991] netlink: 'syz.7.832': attribute type 1 has an invalid length. [ 75.306843][ T5991] netlink: 198116 bytes leftover after parsing attributes in process `syz.7.832'. [ 75.536289][ T6026] loop7: detected capacity change from 0 to 512 [ 75.548856][ T6026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.572567][ T6029] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 75.590459][ T6026] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.848: iget: bad i_size value: 38620345925642 [ 75.614014][ T6026] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.614327][ T6026] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.848: couldn't read orphan inode 15 (err -117) [ 75.635298][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 75.635322][ C1] EXT4-fs (loop7): initial error at time 1775266001: ext4_orphan_get:1397: inode 15 [ 75.635349][ C1] EXT4-fs (loop7): last error at time 1775266001: ext4_orphan_get:1397: inode 15 [ 75.660577][ T6026] loop7: lost filesystem error report for type 5 error -117 [ 75.661293][ T6026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.729064][ T6041] loop3: detected capacity change from 0 to 512 [ 75.744578][ T28] audit: type=1400 audit(1775266001.915:495): avc: denied { read } for pid=6038 comm="syz.0.852" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.801736][ T6041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.821885][ T6046] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.848: bg 0: block 5: invalid block bitmap [ 75.835566][ T28] audit: type=1400 audit(1775266001.945:496): avc: denied { mounton } for pid=6042 comm="syz.4.853" path="/file0" dev="ramfs" ino=17648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 75.845151][ T6041] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.898497][ T6046] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 964 with error 28 [ 75.963659][ T6046] EXT4-fs (loop7): This should not happen!! Data will be lost [ 75.963659][ T6046] [ 75.991730][ T6041] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #12: comm syz.3.851: Directory hole found for htree leaf block 0 [ 76.002458][ T6046] EXT4-fs (loop7): Total free blocks count 0 [ 76.012784][ T6041] EXT4-fs (loop3): Remounting filesystem read-only [ 76.029705][ T6046] EXT4-fs (loop7): Free/Dirty block details [ 76.046547][ T6046] EXT4-fs (loop7): free_blocks=0 [ 76.063299][ T6046] EXT4-fs (loop7): dirty_blocks=967 [ 76.074834][ T6046] EXT4-fs (loop7): Block reservation details [ 76.080993][ T6046] EXT4-fs (loop7): i_reserved_data_blocks=967 [ 76.115872][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.125086][ T55] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.136531][ T55] Quota error (device loop3): write_blk: dquota write failed [ 76.161197][ T55] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 76.215018][ T5327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.364882][ T6074] loop3: detected capacity change from 0 to 128 [ 76.376157][ T6072] loop5: detected capacity change from 0 to 512 [ 76.383328][ T6074] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.403482][ T6071] SELinux: failed to load policy [ 76.404314][ T28] audit: type=1400 audit(1775266002.575:497): avc: denied { load_policy } for pid=6070 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.439650][ T6072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.481959][ T6074] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.545321][ T6072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.561799][ T28] audit: type=1400 audit(1775266002.735:498): avc: denied { create } for pid=6073 comm="syz.3.865" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.564583][ T6072] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.686867][ T28] audit: type=1400 audit(1775266002.855:499): avc: denied { write } for pid=6069 comm="syz.5.864" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.740194][ T28] audit: type=1400 audit(1775266002.855:500): avc: denied { open } for pid=6069 comm="syz.5.864" path="/101/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.812121][ T28] audit: type=1400 audit(1775266002.965:501): avc: denied { remove_name } for pid=6073 comm="syz.3.865" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.941502][ T28] audit: type=1400 audit(1775266002.975:502): avc: denied { rename } for pid=6073 comm="syz.3.865" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.033286][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.878'. [ 77.048801][ T1703] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.048835][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.878'. [ 77.060388][ T1703] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.083051][ T1703] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.102668][ T1703] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.223029][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.423920][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 77.447171][ T6072] syz.5.864 (6072) used greatest stack depth: 5880 bytes left [ 77.455388][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.478403][ T6130] loop3: detected capacity change from 0 to 128 [ 77.500471][ T6130] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.523630][ T6130] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.674317][ T6143] syzkaller0: entered allmulticast mode [ 77.684584][ T6143] syzkaller0: entered promiscuous mode [ 77.709987][ T6150] loop4: detected capacity change from 0 to 1024 [ 77.739320][ T6143] syzkaller0 (unregistering): left allmulticast mode [ 77.741326][ T6150] EXT4-fs: Ignoring removed orlov option [ 77.748380][ T6143] syzkaller0 (unregistering): left promiscuous mode [ 77.785315][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.880591][ T6165] tipc: Started in network mode [ 77.886918][ T6165] tipc: Node identity 92860106c4d4, cluster identity 4711 [ 77.894982][ T6165] tipc: Enabled bearer , priority 0 [ 77.898333][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.912500][ T6165] tipc: Disabling bearer [ 77.929005][ T6168] loop4: detected capacity change from 0 to 256 [ 77.940872][ T6168] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.057710][ T6173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.222299][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.913'. [ 78.515454][ T6211] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.980781][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 79.185674][ T6269] loop5: detected capacity change from 0 to 256 [ 79.192728][ T6269] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.221263][ T6269] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.238017][ T6272] loop0: detected capacity change from 0 to 512 [ 79.277495][ T6272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.309543][ T6272] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.934: corrupted inode contents [ 79.325164][ T6233] loop7: detected capacity change from 0 to 32768 [ 79.332438][ T6272] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.332562][ T6272] EXT4-fs (loop0): Remounting filesystem read-only [ 79.342689][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 79.342709][ C0] EXT4-fs (loop0): initial error at time 1775266005: ext4_do_update_inode:5602: inode 15 [ 79.342733][ C0] EXT4-fs (loop0): last error at time 1775266005: ext4_do_update_inode:5602: inode 15 [ 79.388982][ T6233] loop7: p1 p3 < > [ 79.405787][ T3001] loop7: p1 p3 < > [ 79.457698][ T6272] EXT4-fs (loop0): 1 orphan inode deleted [ 79.465214][ T4587] udevd[4587]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 79.476609][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 79.494920][ T6272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.526991][ T4587] udevd[4587]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 79.544089][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 79.629412][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.621662][ T6399] only policy match revision 0 supported [ 80.621676][ T6399] unable to load match [ 80.977153][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 80.977180][ T28] audit: type=1400 audit(1775266007.145:513): avc: denied { connect } for pid=6471 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.081028][ T28] audit: type=1400 audit(1775266007.245:514): avc: denied { read } for pid=6485 comm="syz.4.953" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.213703][ T28] audit: type=1400 audit(1775266007.245:515): avc: denied { open } for pid=6485 comm="syz.4.953" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.262257][ T6490] geneve2: entered promiscuous mode [ 81.289056][ T6490] geneve2: entered allmulticast mode [ 81.316054][ T6387] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.328200][ T6387] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.351514][ T6387] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.366024][ T6495] loop3: detected capacity change from 0 to 4096 [ 81.383293][ T6387] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.398636][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.428746][ T28] audit: type=1326 audit(1775266007.595:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.456631][ T28] audit: type=1326 audit(1775266007.625:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.480784][ T28] audit: type=1326 audit(1775266007.625:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.505325][ T28] audit: type=1326 audit(1775266007.625:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.529533][ T28] audit: type=1326 audit(1775266007.625:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.553887][ T28] audit: type=1326 audit(1775266007.625:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.580466][ T28] audit: type=1326 audit(1775266007.625:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3426cbc819 code=0x7ffc0000 [ 81.620940][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.933576][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 81.966288][ T6521] bridge_slave_1 (unregistering): left allmulticast mode [ 81.973574][ T6521] bridge_slave_1 (unregistering): left promiscuous mode [ 81.991495][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.387244][ T6551] loop3: detected capacity change from 0 to 512 [ 82.444821][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.465181][ T6551] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.612613][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.903463][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 83.258152][ T6605] loop7: detected capacity change from 0 to 512 [ 83.324917][ T6605] EXT4-fs (loop7): 1 orphan inode deleted [ 83.334028][ T6605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.360739][ T1703] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 83.372414][ T6618] loop5: detected capacity change from 0 to 512 [ 83.379591][ T1703] loop7: lost filesystem error report for type 5 error -117 [ 83.381281][ T6605] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.403250][ T6623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.990'. [ 83.445822][ T6618] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.488741][ T6618] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.542630][ T5327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.552035][ T6618] EXT4-fs (loop5): 1 truncate cleaned up [ 83.565843][ T6618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.455730][ T6707] loop7: detected capacity change from 0 to 512 [ 84.464477][ T6707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.527713][ T6707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.546340][ T6707] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.745365][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.967058][ T6729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6729 comm=syz.4.1015 [ 85.057368][ T6735] loop5: detected capacity change from 0 to 1024 [ 85.080762][ T6735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.094799][ T6739] program syz.4.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.140719][ T6735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.280860][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.517895][ T5327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.859442][ T6781] loop4: detected capacity change from 0 to 128 [ 86.672602][ T6867] loop0: detected capacity change from 0 to 512 [ 86.730727][ T6867] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 86.770160][ T6867] EXT4-fs (loop0): 1 truncate cleaned up [ 86.777070][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.803612][ T6867] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.840335][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.983418][ T1507] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.991545][ T1507] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0 [ 87.004682][ T1507] hid-generic 0080:0005:FFFFFFFE.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 87.037564][ T6934] fido_id[6934]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.071389][ T1507] kernel write not supported for file bpf-prog (pid: 1507 comm: kworker/0:2) [ 87.308258][ T6958] loop3: detected capacity change from 0 to 8192 [ 87.381894][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 87.381909][ T28] audit: type=1400 audit(1775266013.545:527): avc: denied { mounton } for pid=6957 comm="syz.3.1058" path="/228/file2/bus" dev="loop3" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 87.434837][ T6971] loop3: detected capacity change from 8192 to 0 [ 87.441319][ T6958] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 87.454088][ T6958] FAT-fs (loop3): FAT read failed (blocknr 1) [ 87.470948][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.478233][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.490953][ T6958] FAT-fs (loop3): unable to read inode block for updating (i_pos 1051) [ 87.499540][ T6981] bridge0: entered allmulticast mode [ 87.568384][ T3314] FAT-fs (loop3): Directory bread(block 65) failed [ 87.584062][ T7013] bridge_slave_1: left allmulticast mode [ 87.596296][ T7013] bridge_slave_1: left promiscuous mode [ 87.604467][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.615621][ T3314] FAT-fs (loop3): Directory bread(block 66) failed [ 87.656691][ T3314] FAT-fs (loop3): Directory bread(block 67) failed [ 87.677008][ T3314] FAT-fs (loop3): Directory bread(block 68) failed [ 87.683734][ T3314] FAT-fs (loop3): Directory bread(block 69) failed [ 87.690433][ T3314] FAT-fs (loop3): Directory bread(block 70) failed [ 87.697074][ T3314] FAT-fs (loop3): Directory bread(block 71) failed [ 87.711478][ T7013] bridge_slave_0: left allmulticast mode [ 87.719018][ T7013] bridge_slave_0: left promiscuous mode [ 87.719230][ T6381] FAT-fs (loop3): unable to read inode block for updating (i_pos 1051) [ 87.725408][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.742148][ T6398] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x1d [ 87.750556][ T3314] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 87.784645][ T7023] loop7: detected capacity change from 0 to 1024 [ 87.791404][ T28] audit: type=1400 audit(1775266013.955:528): avc: denied { append } for pid=7024 comm="syz.0.1069" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 87.800347][ T7023] EXT4-fs: Ignoring removed bh option [ 87.827619][ T7023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.846217][ T28] audit: type=1400 audit(1775266014.015:529): avc: denied { append } for pid=7022 comm="syz.7.1070" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.888633][ T5327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.027205][ T6381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.086937][ T6381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.157335][ T6381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.216483][ T6381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.338634][ T6381] bridge_slave_0: left allmulticast mode [ 88.346633][ T6381] bridge_slave_0: left promiscuous mode [ 88.357927][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.451607][ T6381] bond2 (unregistering): (slave gretap1): Releasing active interface [ 88.482307][ T6381] dvmrp0 (unregistering): left allmulticast mode [ 88.493510][ T7015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.655969][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.665843][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.705181][ T6381] bond0 (unregistering): Released all slaves [ 88.715421][ T6381] bond1 (unregistering): (slave batadv0): Removing an active aggregator [ 88.734752][ T6381] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 88.750509][ T6381] bond1 (unregistering): Released all slaves [ 88.766878][ T6381] bond2 (unregistering): Released all slaves [ 88.855070][ T28] audit: type=1400 audit(1775266015.025:530): avc: denied { accept } for pid=7050 comm="syz.7.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.933749][ T6381] hsr_slave_0: left promiscuous mode [ 88.946530][ T6381] hsr_slave_1: left promiscuous mode [ 88.952858][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.968246][ T7059] loop5: detected capacity change from 0 to 128 [ 88.974603][ T28] audit: type=1400 audit(1775266015.075:531): avc: denied { setopt } for pid=7050 comm="syz.7.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.008068][ T7059] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.024868][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.043793][ T28] audit: type=1400 audit(1775266015.115:532): avc: denied { open } for pid=7060 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.045541][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810681a400: rx timeout, send abort [ 89.082962][ T6381] veth1_macvtap: left promiscuous mode [ 89.089114][ T28] audit: type=1400 audit(1775266015.115:533): avc: denied { kernel } for pid=7060 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.104186][ T6381] veth0_macvtap: left promiscuous mode [ 89.120270][ T6381] veth1_vlan: left promiscuous mode [ 89.125702][ T6381] veth0_vlan: left promiscuous mode [ 89.131432][ T28] audit: type=1400 audit(1775266015.115:534): avc: denied { write } for pid=7060 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.184841][ T6405] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.241216][ T6381] team0 (unregistering): Port device team_slave_0 removed [ 89.361214][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 89.378831][ T7083] loop4: detected capacity change from 0 to 512 [ 89.404149][ T7083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.464537][ T7083] EXT4-fs (loop4): 1 truncate cleaned up [ 89.470706][ T7083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.502876][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.514719][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.522028][ T7038] bridge_slave_0: entered allmulticast mode [ 89.553037][ T7038] bridge_slave_0: entered promiscuous mode [ 89.571334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810681a400: abort rx timeout. Force session deactivation [ 89.604392][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.611508][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.634408][ T7038] bridge_slave_1: entered allmulticast mode [ 89.652279][ T7038] bridge_slave_1: entered promiscuous mode [ 89.695162][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.715857][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.736301][ T7038] team0: Port device team_slave_0 added [ 89.742967][ T7038] team0: Port device team_slave_1 added [ 89.779638][ T28] audit: type=1400 audit(1775266015.945:535): avc: denied { mount } for pid=7117 comm="syz.5.1085" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.818214][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.828927][ T28] audit: type=1400 audit(1775266015.985:536): avc: denied { unmount } for pid=4564 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.849997][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.887896][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.899215][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.907453][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.942131][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.973157][ T7038] hsr_slave_0: entered promiscuous mode [ 89.979625][ T7038] hsr_slave_1: entered promiscuous mode [ 89.985802][ T7038] debugfs: 'hsr0' already exists in 'hsr' [ 89.992172][ T7038] Cannot create hsr debugfs directory [ 90.089992][ T1703] ================================================================== [ 90.098123][ T1703] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 90.107778][ T1703] [ 90.110101][ T1703] write to 0xffff888107d5049f of 2 bytes by task 7083 on cpu 1: [ 90.117748][ T1703] copy_folio_from_iter_atomic+0x75f/0x1170 [ 90.123657][ T1703] generic_perform_write+0x2c1/0x490 [ 90.127549][ T7038] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 90.128953][ T1703] ext4_buffered_write_iter+0x1ee/0x3c0 [ 90.128977][ T1703] ext4_file_write_iter+0x380/0xfa0 [ 90.128993][ T1703] iter_file_splice_write+0x6c4/0xa80 [ 90.151794][ T1703] direct_splice_actor+0x156/0x2a0 [ 90.156899][ T1703] splice_direct_to_actor+0x311/0x670 [ 90.162259][ T1703] do_splice_direct+0x119/0x1a0 [ 90.167102][ T1703] do_sendfile+0x382/0x650 [ 90.171507][ T1703] __x64_sys_sendfile64+0x105/0x150 [ 90.176703][ T1703] x64_sys_call+0x2dc4/0x3020 [ 90.181377][ T1703] do_syscall_64+0x12c/0x370 [ 90.185966][ T1703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.191861][ T1703] [ 90.194444][ T1703] read to 0xffff888107d50400 of 1024 bytes by task 1703 on cpu 0: [ 90.202257][ T1703] copy_folio_from_iter_atomic+0x75f/0x1170 [ 90.208252][ T1703] generic_perform_write+0x2c1/0x490 [ 90.213539][ T1703] shmem_file_write_iter+0xc5/0xf0 [ 90.218757][ T1703] lo_rw_aio+0x67d/0x730 [ 90.223181][ T1703] loop_process_work+0x56c/0xac0 [ 90.228227][ T1703] loop_workfn+0x31/0x40 [ 90.232476][ T1703] process_scheduled_works+0x513/0xa10 [ 90.237928][ T1703] worker_thread+0x58a/0x780 [ 90.242509][ T1703] kthread+0x22a/0x280 [ 90.246562][ T1703] ret_from_fork+0x150/0x360 [ 90.251146][ T1703] ret_from_fork_asm+0x1a/0x30 [ 90.255915][ T1703] [ 90.258237][ T1703] Reported by Kernel Concurrency Sanitizer on: [ 90.264392][ T1703] CPU: 0 UID: 0 PID: 1703 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 90.273927][ T1703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.283976][ T1703] Workqueue: loop4 loop_workfn SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.288830][ T1703] ================================================================== [ 90.477130][ T6405] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.585352][ T6405] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.636612][ T6405] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.685210][ T6405] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.774100][ T6405] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 90.809408][ T6405] batman_adv: batadv0: Removing interface: ip6gretap1 [ 90.925142][ T6405] bond0 (unregistering): Released all slaves [ 90.932354][ T6405] bond1 (unregistering): Released all slaves [ 90.940664][ T6405] bond2 (unregistering): Released all slaves [ 90.979907][ T6405] tipc: Left network mode [ 90.987002][ T6405] hsr_slave_0: left promiscuous mode [ 90.992597][ T6405] hsr_slave_1: left promiscuous mode [ 91.001164][ T6405] veth1_macvtap: left promiscuous mode [ 91.006838][ T6405] veth0_macvtap: left promiscuous mode [ 91.012376][ T6405] veth1_vlan: left promiscuous mode [ 91.017682][ T6405] veth0_vlan: left promiscuous mode [ 91.189404][ T7080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.389764][ T6405] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435852][ T6405] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.465595][ T6405] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.525090][ T6405] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.604364][ T6405] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.646571][ T6405] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.697185][ T6405] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.739089][ T6405] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.036306][ T6405] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.047490][ T6405] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.057825][ T6405] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.107394][ T6405] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.117831][ T6405] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.128476][ T6405] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.178961][ T6405] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.189631][ T6405] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.200288][ T6405] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.248023][ T6405] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.259257][ T6405] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.269756][ T6405] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.339942][ T6405] bridge_slave_1: left allmulticast mode [ 92.345924][ T6405] bridge_slave_1: left promiscuous mode [ 92.351669][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.359969][ T6405] bridge_slave_0: left allmulticast mode [ 92.366352][ T6405] bridge_slave_0: left promiscuous mode [ 92.372122][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.452513][ T6405] bond0 (unregistering): (slave gretap1): Releasing active interface [ 92.535870][ T6405] bond0 (unregistering): Released all slaves [ 92.559169][ T6405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.568904][ T6405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.578313][ T6405] bond0 (unregistering): Released all slaves [ 92.616000][ T6405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.625413][ T6405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.634869][ T6405] bond0 (unregistering): Released all slaves [ 92.715549][ T6405] bond0 (unregistering): Released all slaves [ 92.771463][ T6405] tipc: Left network mode [ 92.778607][ T6405] IPVS: stopping master sync thread 4197 ... [ 92.789141][ T6405] hsr_slave_0: left promiscuous mode [ 92.794897][ T6405] hsr_slave_1: left promiscuous mode [ 92.802404][ T6405] hsr_slave_0: left promiscuous mode [ 92.809566][ T6405] hsr_slave_1: left promiscuous mode [ 92.815437][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.822828][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.832528][ T6405] hsr_slave_0: left promiscuous mode [ 92.838452][ T6405] hsr_slave_1: left promiscuous mode [ 92.844146][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.851836][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.860982][ T6405] hsr_slave_0: left promiscuous mode [ 92.867035][ T6405] hsr_slave_1: left promiscuous mode [ 92.879327][ T6405] veth1_macvtap: left promiscuous mode [ 92.885382][ T6405] veth0_macvtap: left promiscuous mode [ 92.890852][ T6405] veth1_vlan: left promiscuous mode [ 92.896296][ T6405] veth0_vlan: left promiscuous mode [ 92.902008][ T6405] veth1_macvtap: left promiscuous mode [ 92.907515][ T6405] veth0_macvtap: left promiscuous mode [ 92.913547][ T6405] veth1_vlan: left promiscuous mode [ 92.918801][ T6405] veth0_vlan: left promiscuous mode [ 92.924560][ T6405] veth1_macvtap: left promiscuous mode [ 92.930095][ T6405] veth0_macvtap: left promiscuous mode [ 92.935706][ T6405] veth1_vlan: left promiscuous mode [ 92.941029][ T6405] veth0_vlan: left promiscuous mode [ 93.088905][ T6405] team0 (unregistering): Port device team_slave_1 removed [ 93.097938][ T6405] team0 (unregistering): Port device team_slave_0 removed [ 93.147055][ T6405] team0 (unregistering): Port device team_slave_1 removed [ 93.156408][ T6405] team0 (unregistering): Port device team_slave_0 removed