last executing test programs: 3m42.967382472s ago: executing program 4 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) 3m42.888226424s ago: executing program 4 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000020064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m42.870459805s ago: executing program 4 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001d00010c00000000e2ff000007000000", @ANYRES32=r2, @ANYBLOB="80000200080001137f0000010a00"], 0x30}}, 0x0) 3m42.852455956s ago: executing program 4 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='keyA keyB 20000000', 0x12) write(r0, &(0x7f0000000300)='keyB keyA 2000000000 0 0', 0x18) 3m42.825417526s ago: executing program 4 (id=551): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3a, 0x4, 0x7fff3fff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m42.773053218s ago: executing program 4 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@desc={0x1, 0x0, @desc2}}) 3m36.860680275s ago: executing program 0 (id=682): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001600)=0x14) sendto$packet(r0, &(0x7f0000001700)='o', 0x5b4, 0x4, &(0x7f0000001740)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 3m36.782191657s ago: executing program 0 (id=685): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x23, 0x80805, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3m36.704478619s ago: executing program 0 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f00000002c0)='27', 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 3m36.6408792s ago: executing program 0 (id=691): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000001080)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}}}, 0x0) 3m36.499620534s ago: executing program 0 (id=692): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3a, 0x4, 0x7fff3fff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m36.444144416s ago: executing program 0 (id=693): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x0, 0x0) 3m27.656906929s ago: executing program 32 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@desc={0x1, 0x0, @desc2}}) 3m26.581295288s ago: executing program 2 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000001080)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}}}, 0x0) 3m26.560775068s ago: executing program 2 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, 0x0, 0x42, 0x4000}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3m26.248285517s ago: executing program 2 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) write$cgroup_pressure(r0, &(0x7f00000003c0)={'full', 0x20, 0x1, 0x20, 0x6}, 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 3m26.12032687s ago: executing program 2 (id=868): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f00000007c0), 0x800001d, 0x1c) 3m25.840193468s ago: executing program 2 (id=873): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3a, 0x4, 0x7fff3fff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m25.555678605s ago: executing program 2 (id=876): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000640), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97) 3m21.402883606s ago: executing program 33 (id=693): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x0, 0x0) 3m10.524554855s ago: executing program 34 (id=876): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000640), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97) 4.186847729s ago: executing program 5 (id=3410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000001c0), 0x4) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000200)=0xfc, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c, 0x80800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000240)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000280)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000300)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6cebf72e29071d4d38efe42b91ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x9, 0xff}, 0x3c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000480)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104a9ffffeefcdbdf2500000000", @ANYBLOB="20210000bd3f9f8024001280110001006272696467655f736c617665000000000c00058005001c0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) fcntl$dupfd(r1, 0x0, r1) 3.552239206s ago: executing program 5 (id=3413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r2, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 3.108310097s ago: executing program 1 (id=3419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}}, 0x0) 3.107852717s ago: executing program 1 (id=3420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r1, 0x1, 0xffbfffff, 0x400000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e25}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x50}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@mcast1, @loopback, @remote, 0x1, 0x2, 0x5, 0x400, 0xb8, 0xd30048}) 3.086393208s ago: executing program 1 (id=3422): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) 2.548196002s ago: executing program 5 (id=3427): r0 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffff5, &(0x7f0000000080)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.444706795s ago: executing program 7 (id=3429): r0 = gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008014) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000540)={0x0, 0x21, 0x2}, &(0x7f0000000580)=0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000680)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x7fff, 0x1, 0xa6, 0x3}}, &(0x7f0000000740), 0x700) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x0, 0x2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000840)='pagemap\x00') sendmsg$tipc(r4, &(0x7f0000019880)={0x0, 0x0, 0x0}, 0x10) 2.368363367s ago: executing program 5 (id=3430): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000001c0), 0x12) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 2.282661839s ago: executing program 5 (id=3433): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") gettid() keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x1, 0x5, 0x6b4) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.096316074s ago: executing program 6 (id=3435): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) write(0xffffffffffffffff, 0x0, 0x0) 1.675758355s ago: executing program 6 (id=3436): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/instances/foo\x00', 0x1ff) 1.647872866s ago: executing program 3 (id=3437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r2, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.636061556s ago: executing program 6 (id=3438): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xc, 0x1}, {0x1, 0xfff0}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.574821088s ago: executing program 7 (id=3439): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001d7000/0x13000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1.569092128s ago: executing program 6 (id=3440): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 1.464279621s ago: executing program 3 (id=3441): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) 1.255675846s ago: executing program 7 (id=3442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1.234970517s ago: executing program 7 (id=3443): r0 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffff5, &(0x7f0000000080)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.168123579s ago: executing program 7 (id=3444): prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000900)="cf", 0x1}, {&(0x7f0000000940)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000980)="8a", 0x1}, {&(0x7f00000009c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="ce90bfdb", 0x4}, {&(0x7f0000000b40)="f2e659", 0x3}, {&(0x7f0000000b80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="e1", 0x1}, {&(0x7f0000000c80)="fa", 0x1}, {&(0x7f0000000cc0)="d8", 0x1}, {&(0x7f0000000d00)="f2964dd1", 0x4}, {&(0x7f0000000d40)="b8a2f6", 0x3}, {&(0x7f0000000d80)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000e40)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="87", 0x1}, {&(0x7f0000000f00)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000f40)=0x7fffffff, 0x4) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.076334751s ago: executing program 1 (id=3445): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 1.058833722s ago: executing program 1 (id=3446): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) write(0xffffffffffffffff, 0x0, 0x0) 402.664879ms ago: executing program 1 (id=3447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40010) 396.813189ms ago: executing program 3 (id=3448): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/instances/foo\x00', 0x1ff) 278.684362ms ago: executing program 3 (id=3449): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xff2e) io_setup(0x4, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x8}, 0x0]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 168.032155ms ago: executing program 3 (id=3450): r0 = gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008014) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000540)={0x0, 0x21, 0x2}, &(0x7f0000000580)=0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000680)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x7fff, 0x1, 0xa6, 0x3}}, &(0x7f0000000740), 0x700) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) syz_open_procfs(0x0, &(0x7f0000000840)='pagemap\x00') sendmsg$tipc(r4, &(0x7f0000019880)={0x0, 0x0, 0x0}, 0x10) 124.950596ms ago: executing program 3 (id=3451): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 124.551506ms ago: executing program 7 (id=3452): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001d7000/0x13000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 82.304847ms ago: executing program 6 (id=3453): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 189.86µs ago: executing program 6 (id=3454): r0 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000040)={0x0, 0xfffffff5, &(0x7f0000000080)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 0s ago: executing program 5 (id=3455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x104, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x17, 0x8}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xc71713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x104}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfd6c) kernel console output (not intermixed with test programs): locks:832: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 114.034833][ T52] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 114.034864][ T52] EXT4-fs (loop6): This should not happen!! Data will be lost [ 114.034864][ T52] [ 114.035359][ T5993] EXT4-fs warning (device loop6): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 114.035955][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.132982][ T9273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.144611][ T9273] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.161957][ T29] audit: type=1400 audit(1791744092.014:641): avc: denied { write } for pid=9272 comm="syz.5.2088" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.203475][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.231366][ T9281] EXT4-fs: Ignoring removed i_version option [ 114.231414][ T9281] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.235395][ T9281] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2092: corrupted in-inode xattr: e_value size too large [ 114.235460][ T9281] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.235899][ T9281] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2092: couldn't read orphan inode 15 (err -117) [ 114.235926][ T9281] loop6: lost filesystem error report for type 5 error -117 [ 114.236654][ T9281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.321151][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.415983][ T9300] bridge0: port 3(syz_tun) entered blocking state [ 114.416028][ T9300] bridge0: port 3(syz_tun) entered disabled state [ 114.416627][ T9300] syz_tun: entered promiscuous mode [ 114.417004][ T9300] bridge0: port 3(syz_tun) entered blocking state [ 114.417043][ T9300] bridge0: port 3(syz_tun) entered listening state [ 114.449672][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 114.449800][ C1] bridge0: topology change detected, propagating [ 114.698459][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2098'. [ 115.166769][ T9347] EXT4-fs: Ignoring removed i_version option [ 115.166872][ T9347] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.185478][ T9347] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2105: corrupted in-inode xattr: e_value size too large [ 115.185513][ T9347] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.185683][ T9347] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2105: couldn't read orphan inode 15 (err -117) [ 115.185719][ T9347] loop6: lost filesystem error report for type 5 error -117 [ 115.186295][ T9347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.235302][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.283237][ T9356] bridge0: port 3(syz_tun) entered blocking state [ 115.283291][ T9356] bridge0: port 3(syz_tun) entered disabled state [ 115.283941][ T9356] syz_tun: entered promiscuous mode [ 115.284312][ T9356] bridge0: port 3(syz_tun) entered blocking state [ 115.284348][ T9356] bridge0: port 3(syz_tun) entered listening state [ 115.288339][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b8b1c00: rx timeout, send abort [ 115.299634][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 115.299784][ C1] bridge0: topology change detected, propagating [ 115.343169][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.343254][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.481063][ T9372] set_capacity_and_notify: 6 callbacks suppressed [ 115.481084][ T9372] loop5: detected capacity change from 0 to 512 [ 115.483093][ T9372] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 115.487841][ T9372] EXT4-fs (loop5): 1 truncate cleaned up [ 115.489164][ T9372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.576689][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.642892][ T9384] loop5: detected capacity change from 0 to 512 [ 115.644660][ T9384] EXT4-fs: Ignoring removed i_version option [ 115.644698][ T9384] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.666315][ T9384] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2119: corrupted in-inode xattr: e_value size too large [ 115.666432][ T9384] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.666817][ T9384] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2119: couldn't read orphan inode 15 (err -117) [ 115.666852][ T9384] loop5: lost filesystem error report for type 5 error -117 [ 115.667386][ T9384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.709766][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.748947][ T9387] loop5: detected capacity change from 0 to 512 [ 115.763919][ T9387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.764000][ T9387] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.790829][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b8b1c00: abort rx timeout. Force session deactivation [ 115.815919][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.825759][ T9391] loop7: detected capacity change from 0 to 512 [ 115.836702][ T9391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.845905][ T9391] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.868373][ T9391] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.879975][ T9391] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.910756][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.415179][ T9425] loop6: detected capacity change from 0 to 512 [ 116.417813][ T9425] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 116.491026][ T9425] EXT4-fs (loop6): 1 truncate cleaned up [ 116.491633][ T9425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.727133][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.858130][ T9431] loop7: detected capacity change from 0 to 512 [ 116.882449][ T9431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.882561][ T9431] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.980317][ T9437] FAULT_INJECTION: forcing a failure. [ 116.980317][ T9437] name fail_futex, interval 1, probability 0, space 0, times 0 [ 116.980357][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.3.2135 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.980383][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.980396][ T9437] Call Trace: [ 116.980404][ T9437] [ 116.980414][ T9437] __dump_stack+0x1d/0x30 [ 116.980495][ T9437] dump_stack_lvl+0x95/0xd0 [ 116.980528][ T9437] dump_stack+0x15/0x1b [ 116.980558][ T9437] should_fail_ex+0x262/0x280 [ 116.980593][ T9437] should_fail+0xb/0x20 [ 116.980657][ T9437] get_futex_key+0x12d/0xb10 [ 116.980701][ T9437] futex_wait_setup+0x49/0x3e0 [ 116.980732][ T9437] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 116.980811][ T9437] ? hrtimer_active+0xe4/0x110 [ 116.980921][ T9437] __futex_wait+0xa9/0x260 [ 116.980965][ T9437] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.980990][ T9437] futex_wait+0x98/0x1c0 [ 116.981049][ T9437] do_futex+0x391/0x460 [ 116.981110][ T9437] __se_sys_futex+0x2f6/0x370 [ 116.981145][ T9437] __x64_sys_futex+0x78/0x90 [ 116.981183][ T9437] x64_sys_call+0x22e2/0x2550 [ 116.981287][ T9437] do_syscall_64+0x112/0x360 [ 116.981377][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.981477][ T9437] RIP: 0033:0x7f704129e1d9 [ 116.981497][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.981521][ T9437] RSP: 002b:00007f703fcf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.981550][ T9437] RAX: ffffffffffffffda RBX: 00007f7041525fa8 RCX: 00007f704129e1d9 [ 116.981598][ T9437] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7041525fa8 [ 116.981617][ T9437] RBP: 00007f7041525fa0 R08: 0000000000000000 R09: 0000000000000000 [ 116.981636][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.981673][ T9437] R13: 00007f7041526038 R14: 00007fff938cb630 R15: 00007fff938cb718 [ 116.981705][ T9437] [ 116.985249][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.985396][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.019243][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.163707][ T9439] loop6: detected capacity change from 0 to 512 [ 117.172596][ T9439] EXT4-fs: Ignoring removed i_version option [ 117.172723][ T9439] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.199311][ T9439] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2130: corrupted in-inode xattr: e_value size too large [ 117.199422][ T9439] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.199647][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 117.199720][ C0] EXT4-fs (loop6): initial error at time 1791744095: ext4_iget_extra_inode:5210: inode 15 [ 117.199818][ C0] EXT4-fs (loop6): last error at time 1791744095: ext4_iget_extra_inode:5210: inode 15 [ 117.201464][ T9439] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2130: couldn't read orphan inode 15 (err -117) [ 117.201581][ T9439] loop6: lost filesystem error report for type 5 error -117 [ 117.205519][ T9439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.348010][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.542858][ T9462] loop5: detected capacity change from 0 to 1024 [ 117.766267][ T9462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.766403][ T9462] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.046353][ T12] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm kworker/u8:0: lblock 3 mapped to illegal pblock 3 (length 3) [ 118.069197][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 118.069233][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.069233][ T12] [ 118.093130][ T12] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 118.093825][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 118.093938][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.093938][ T12] [ 118.094421][ T5604] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 118.095375][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.421388][ T9478] loop7: detected capacity change from 0 to 512 [ 118.424344][ T9478] EXT4-fs: Ignoring removed i_version option [ 118.424845][ T9478] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.554576][ T9487] loop5: detected capacity change from 0 to 512 [ 118.581636][ T9478] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.2148: corrupted in-inode xattr: e_value size too large [ 118.581668][ T9478] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.582377][ T9478] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2148: couldn't read orphan inode 15 (err -117) [ 118.582413][ T9478] loop7: lost filesystem error report for type 5 error -117 [ 118.583141][ T9478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.583795][ T9487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.583866][ T9487] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.771096][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 118.771119][ T29] audit: type=1400 audit(1791744096.524:670): avc: denied { write } for pid=9477 comm="syz.7.2148" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.771153][ T29] audit: type=1400 audit(1791744096.534:671): avc: denied { write } for pid=9486 comm="syz.5.2145" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.771221][ T29] audit: type=1400 audit(1791744096.534:672): avc: denied { write } for pid=9477 comm="syz.7.2148" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.771253][ T29] audit: type=1400 audit(1791744096.534:673): avc: denied { write } for pid=9477 comm="syz.7.2148" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.771311][ T29] audit: type=1400 audit(1791744096.534:674): avc: denied { write } for pid=9477 comm="syz.7.2148" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.771338][ T29] audit: type=1400 audit(1791744096.534:675): avc: denied { write } for pid=9486 comm="syz.5.2145" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.099794][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.101904][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.174740][ T9509] syz.5.2153 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 119.174790][ T9509] CPU: 1 UID: 0 PID: 9509 Comm: syz.5.2153 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.174824][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.174841][ T9509] Call Trace: [ 119.174851][ T9509] [ 119.174861][ T9509] __dump_stack+0x1d/0x30 [ 119.174901][ T9509] dump_stack_lvl+0x95/0xd0 [ 119.174933][ T9509] dump_stack+0x15/0x1b [ 119.174958][ T9509] dump_header+0x80/0x240 [ 119.174986][ T9509] oom_kill_process+0x294/0x420 [ 119.175018][ T9509] out_of_memory+0x981/0xbc0 [ 119.175052][ T9509] try_charge_memcg+0x6ba/0xae0 [ 119.175102][ T9509] __memcg_kmem_charge_page+0x1af/0x3b0 [ 119.175141][ T9509] __alloc_frozen_pages_noprof+0x21d/0x400 [ 119.175175][ T9509] alloc_pages_mpol+0xaf/0x1d0 [ 119.175211][ T9509] alloc_pages_noprof+0x94/0x140 [ 119.175245][ T9509] pte_alloc_one+0x1c/0xc0 [ 119.175273][ T9509] __pte_alloc+0x32/0x2a0 [ 119.175307][ T9509] ? percpu_counter_add_batch+0x117/0x120 [ 119.175342][ T9509] copy_page_range+0x2cd0/0x33c0 [ 119.175404][ T9509] dup_mmap+0x874/0x10c0 [ 119.175437][ T9509] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 119.175474][ T9509] ? __list_add_valid_or_report+0x38/0xe0 [ 119.175508][ T9509] copy_mm+0xf5/0x350 [ 119.175539][ T9509] copy_process+0x108a/0x2360 [ 119.175589][ T9509] kernel_clone+0x1c0/0x5f0 [ 119.175623][ T9509] ? do_futex+0x391/0x460 [ 119.175667][ T9509] __x64_sys_clone+0x143/0x180 [ 119.175711][ T9509] x64_sys_call+0x2479/0x2550 [ 119.175748][ T9509] do_syscall_64+0x112/0x360 [ 119.175785][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.175816][ T9509] RIP: 0033:0x7ff30127e1d9 [ 119.175839][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.175865][ T9509] RSP: 002b:00007ff2ffcd6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 119.175894][ T9509] RAX: ffffffffffffffda RBX: 00007ff301505fa0 RCX: 00007ff30127e1d9 [ 119.175913][ T9509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.175931][ T9509] RBP: 00007ff301315888 R08: 0000000000000000 R09: 0000000000000000 [ 119.175949][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.175966][ T9509] R13: 00007ff301506038 R14: 00007ff301505fa0 R15: 00007fff962e2f28 [ 119.175992][ T9509] [ 119.428641][ T9509] memory: usage 96kB, limit 96kB, failcnt 41 [ 119.428664][ T9509] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 119.428681][ T9509] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 119.428695][ T9509] Memory cgroup stats for /syz5/test: [ 119.428857][ T9509] cache 0 [ 119.428868][ T9509] rss 0 [ 119.428877][ T9509] shmem 0 [ 119.428886][ T9509] mapped_file 0 [ 119.428900][ T9509] dirty 0 [ 119.428909][ T9509] writeback 0 [ 119.428919][ T9509] workingset_refault_anon 0 [ 119.428930][ T9509] workingset_refault_file 0 [ 119.428941][ T9509] swap 0 [ 119.428950][ T9509] swapcached 0 [ 119.428959][ T9509] pgpgin 0 [ 119.428967][ T9509] pgpgout 0 [ 119.428976][ T9509] pgfault 0 [ 119.428985][ T9509] pgmajfault 0 [ 119.428994][ T9509] inactive_anon 0 [ 119.429004][ T9509] active_anon 0 [ 119.429012][ T9509] inactive_file 0 [ 119.429019][ T9509] active_file 0 [ 119.429027][ T9509] unevictable 0 [ 119.429036][ T9509] hierarchical_memory_limit 98304 [ 119.429048][ T9509] hierarchical_memsw_limit 9223372036854771712 [ 119.429060][ T9509] total_cache 0 [ 119.429069][ T9509] total_rss 0 [ 119.429078][ T9509] total_shmem 0 [ 119.429087][ T9509] total_mapped_file 0 [ 119.429097][ T9509] total_dirty 0 [ 119.429106][ T9509] total_writeback 0 [ 119.429115][ T9509] total_workingset_refault_anon 0 [ 119.429126][ T9509] total_workingset_refault_file 0 [ 119.429137][ T9509] total_swap 0 [ 119.429153][ T9509] total_swapcached 0 [ 119.429160][ T9509] total_pgpgin 0 [ 119.429167][ T9509] total_pgpgout 0 [ 119.429174][ T9509] total_pgfault 0 [ 119.429181][ T9509] total_pgmajfault 0 [ 119.429189][ T9509] total_inactive_anon 0 [ 119.429196][ T9509] total_active_anon 0 [ 119.429203][ T9509] total_inactive_file 0 [ 119.429211][ T9509] total_active_file 0 [ 119.429218][ T9509] total_unevictable 0 [ 119.429227][ T9509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2153,pid=9508,uid=0 [ 119.429327][ T9509] Memory cgroup out of memory: Killed process 9508 (syz.5.2153) total-vm:96112kB, anon-rss:1428kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 119.651428][ T9524] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 119.657741][ T9524] EXT4-fs (loop1): 1 truncate cleaned up [ 119.658113][ T9524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.725564][ T9535] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2167'. [ 119.748821][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.766679][ T9535] syzkaller1: entered promiscuous mode [ 119.766703][ T9535] syzkaller1: entered allmulticast mode [ 120.296091][ T9544] FAULT_INJECTION: forcing a failure. [ 120.296091][ T9544] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.296174][ T9544] CPU: 1 UID: 0 PID: 9544 Comm: syz.3.2169 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.296210][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.296277][ T9544] Call Trace: [ 120.296285][ T9544] [ 120.296296][ T9544] __dump_stack+0x1d/0x30 [ 120.296331][ T9544] dump_stack_lvl+0x95/0xd0 [ 120.296363][ T9544] dump_stack+0x15/0x1b [ 120.296421][ T9544] should_fail_ex+0x262/0x280 [ 120.296467][ T9544] should_fail+0xb/0x20 [ 120.296501][ T9544] get_futex_key+0x12d/0xb10 [ 120.296596][ T9544] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 120.296639][ T9544] futex_wake+0x89/0x400 [ 120.296664][ T9544] do_futex+0x3f8/0x460 [ 120.296736][ T9544] ? _raw_spin_lock+0x53/0xa0 [ 120.296774][ T9544] __se_sys_futex+0x2f6/0x370 [ 120.296892][ T9544] __x64_sys_futex+0x78/0x90 [ 120.296937][ T9544] x64_sys_call+0x22e2/0x2550 [ 120.296975][ T9544] do_syscall_64+0x112/0x360 [ 120.297021][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.297102][ T9544] RIP: 0033:0x7f704129e1d9 [ 120.297125][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.297152][ T9544] RSP: 002b:00007f703fcf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.297178][ T9544] RAX: ffffffffffffffda RBX: 00007f7041525fa8 RCX: 00007f704129e1d9 [ 120.297273][ T9544] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7041525fac [ 120.297292][ T9544] RBP: 00007f7041525fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 120.297329][ T9544] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 120.297344][ T9544] R13: 00007f7041526038 R14: 00007fff938cb630 R15: 00007fff938cb718 [ 120.297407][ T9544] [ 120.593470][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.673307][ T9547] set_capacity_and_notify: 1 callbacks suppressed [ 120.673330][ T9547] loop1: detected capacity change from 0 to 512 [ 120.677119][ T9547] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 120.713178][ T9547] EXT4-fs (loop1): 1 truncate cleaned up [ 120.713741][ T9547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.979816][ T29] audit: type=1400 audit(1791744098.784:676): avc: denied { write } for pid=9545 comm="syz.1.2170" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.389773][ T9583] loop6: detected capacity change from 0 to 512 [ 121.390539][ T9583] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 121.392478][ T9583] EXT4-fs (loop6): 1 truncate cleaned up [ 121.393931][ T9583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.576336][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.108860][ T9596] loop1: detected capacity change from 0 to 512 [ 122.118320][ T9596] EXT4-fs: Ignoring removed i_version option [ 122.118378][ T9596] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.142413][ T9596] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2182: corrupted in-inode xattr: e_value size too large [ 122.142457][ T9596] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.142634][ T9596] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2182: couldn't read orphan inode 15 (err -117) [ 122.142665][ T9596] loop1: lost filesystem error report for type 5 error -117 [ 122.157962][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 122.157991][ C1] EXT4-fs (loop1): initial error at time 1791744099: ext4_iget_extra_inode:5210: inode 15 [ 122.158029][ C1] EXT4-fs (loop1): last error at time 1791744099: ext4_iget_extra_inode:5210: inode 15 [ 122.219412][ T9596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.292042][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.307628][ T29] audit: type=1400 audit(1791744100.154:677): avc: denied { write } for pid=9592 comm="syz.1.2182" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.314822][ T29] audit: type=1400 audit(1791744100.164:678): avc: denied { write } for pid=9592 comm="syz.1.2182" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.320787][ T29] audit: type=1400 audit(1791744100.174:679): avc: denied { write } for pid=9592 comm="syz.1.2182" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.389470][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.405397][ T9604] cpuidle: using governor haltpoll [ 122.438247][ T9612] ./dev/sda1: Can't lookup blockdev [ 122.596251][ T9627] loop1: detected capacity change from 0 to 512 [ 122.598644][ T9627] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.614671][ T9627] EXT4-fs (loop1): 1 truncate cleaned up [ 122.615189][ T9627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.376611][ T9635] loop6: detected capacity change from 0 to 512 [ 123.377356][ T9635] EXT4-fs: Ignoring removed i_version option [ 123.377398][ T9635] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.498342][ T9635] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2199: corrupted in-inode xattr: e_value size too large [ 123.498376][ T9635] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.499625][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 123.499649][ C0] EXT4-fs (loop6): initial error at time 1791744101: ext4_iget_extra_inode:5210: inode 15 [ 123.499695][ C0] EXT4-fs (loop6): last error at time 1791744101: ext4_iget_extra_inode:5210: inode 15 [ 123.552389][ T9635] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2199: couldn't read orphan inode 15 (err -117) [ 123.552443][ T9635] loop6: lost filesystem error report for type 5 error -117 [ 123.552852][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.553625][ T9635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.952825][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.069710][ C1] bridge0: port 3(syz_tun) entered learning state [ 124.227775][ T9663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2210'. [ 124.621629][ T9670] loop6: detected capacity change from 0 to 512 [ 124.706352][ T9658] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2209'. [ 124.709610][ C0] bridge0: port 3(syz_tun) entered learning state [ 124.729344][ T9670] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 124.738456][ T9664] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2209'. [ 124.749514][ T9668] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2209'. [ 124.760974][ T9670] EXT4-fs (loop6): 1 truncate cleaned up [ 124.761514][ T9670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.042608][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 125.042626][ T29] audit: type=1400 audit(1791744102.844:686): avc: denied { write } for pid=9669 comm="syz.6.2204" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.344124][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.346654][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.439051][ T29] audit: type=1326 audit(1791744103.284:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.5.2217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30127e1d9 code=0x7ffc0000 [ 125.439098][ T29] audit: type=1326 audit(1791744103.284:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.5.2217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30127e1d9 code=0x7ffc0000 [ 125.439228][ T29] audit: type=1326 audit(1791744103.284:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.5.2217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff30127e1d9 code=0x7ffc0000 [ 125.439327][ T29] audit: type=1326 audit(1791744103.284:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.5.2217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30127e1d9 code=0x7ffc0000 [ 126.097152][ T9655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.097349][ T9655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.127888][ T9702] loop7: detected capacity change from 0 to 512 [ 126.146846][ T9702] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 126.151606][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2222'. [ 126.168210][ T9702] EXT4-fs (loop7): 1 truncate cleaned up [ 126.335823][ T9709] team0: Device wg0 is of different type [ 126.720049][ T29] audit: type=1400 audit(1791744104.534:691): avc: denied { write } for pid=9701 comm="syz.7.2223" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.805534][ T9717] loop1: detected capacity change from 0 to 512 [ 126.807852][ T9717] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 126.825130][ T9717] EXT4-fs (loop1): 1 truncate cleaned up [ 126.856730][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2229'. [ 126.959570][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 126.959611][ C1] bridge0: topology change detected, propagating [ 126.977351][ T12] IPVS: starting estimator thread 0... [ 127.145514][ T29] audit: type=1400 audit(1791744104.894:692): avc: denied { write } for pid=9716 comm="syz.1.2228" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.299736][ T9731] IPVS: using max 2304 ests per chain, 115200 per kthread [ 128.099576][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 128.099630][ C0] bridge0: topology change detected, propagating [ 128.199802][ T9769] loop6: detected capacity change from 0 to 512 [ 128.200711][ T9769] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 128.260625][ T9769] EXT4-fs (loop6): 1 truncate cleaned up [ 128.915791][ T29] audit: type=1400 audit(1791744106.354:693): avc: denied { write } for pid=9768 comm="syz.6.2246" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.009630][ T29] audit: type=1400 audit(1791744106.854:694): avc: denied { mount } for pid=9778 comm="syz.7.2251" name="/" dev="gadgetfs" ino=4659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 129.013671][ T9779] loop3: detected capacity change from 0 to 512 [ 129.071064][ T29] audit: type=1400 audit(1791744106.914:695): avc: denied { unmount } for pid=6632 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 129.123019][ T9779] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 129.126362][ T9779] EXT4-fs (loop3): 1 truncate cleaned up [ 129.829622][ C1] bridge0: port 3(syz_tun) entered learning state [ 129.980144][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 130.375308][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 130.375329][ T29] audit: type=1400 audit(1791744108.194:698): avc: denied { create } for pid=9826 comm="syz.1.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.375356][ T29] audit: type=1400 audit(1791744108.194:699): avc: denied { bind } for pid=9826 comm="syz.1.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.375380][ T29] audit: type=1400 audit(1791744108.194:700): avc: denied { name_bind } for pid=9826 comm="syz.1.2268" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 130.375485][ T29] audit: type=1400 audit(1791744108.194:701): avc: denied { node_bind } for pid=9826 comm="syz.1.2268" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 130.470373][ C1] bridge0: port 3(syz_tun) entered learning state [ 130.481670][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.481802][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.506321][ T9810] random: crng reseeded on system resumption [ 130.596471][ T29] audit: type=1400 audit(1791744108.444:702): avc: denied { read } for pid=9840 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.058782][ T9850] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.199709][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 132.343368][ T9874] ªªªªªª: renamed from vlan0 (while UP) [ 132.653353][ T9886] loop7: detected capacity change from 0 to 512 [ 132.657564][ T9886] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 132.689926][ T9886] EXT4-fs (loop7): 1 truncate cleaned up [ 132.841658][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.232727][ T29] audit: type=1400 audit(1791744111.074:703): avc: denied { write } for pid=9884 comm="syz.7.2283" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.321016][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.321209][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.396628][ T9909] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.444232][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.444332][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.693142][ T9923] syzkaller0: entered promiscuous mode [ 134.693171][ T9923] syzkaller0: entered allmulticast mode [ 135.149635][ T29] audit: type=1400 audit(1791744112.934:704): avc: denied { write } for pid=9926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.235562][ T29] audit: type=1400 audit(1791744113.084:705): avc: denied { write } for pid=9951 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.432977][ T29] audit: type=1400 audit(1791744113.284:706): avc: denied { write } for pid=9955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.506408][ T29] audit: type=1400 audit(1791744113.354:707): avc: denied { write } for pid=9971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.117290][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 136.161149][ T9992] loop7: detected capacity change from 0 to 256 [ 136.235412][ T9994] syzkaller0: entered promiscuous mode [ 136.235452][ T9994] syzkaller0: entered allmulticast mode [ 136.360010][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'. [ 136.769144][T10035] syzkaller0: entered promiscuous mode [ 136.769178][T10035] syzkaller0: entered allmulticast mode [ 137.493149][T10043] syzkaller0: entered promiscuous mode [ 137.493176][T10043] syzkaller0: entered allmulticast mode [ 137.546943][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 137.871130][T10057] loop1: detected capacity change from 0 to 128 [ 137.876484][T10057] FAT-fs (loop1): bogus number of FAT structure [ 137.876564][T10057] FAT-fs (loop1): Can't find a valid FAT filesystem [ 139.428918][T10079] syzkaller0: entered promiscuous mode [ 139.428940][T10079] syzkaller0: entered allmulticast mode [ 139.429752][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 139.429776][ C1] bridge0: topology change detected, propagating [ 139.632891][T10086] FAULT_INJECTION: forcing a failure. [ 139.632891][T10086] name fail_futex, interval 1, probability 0, space 0, times 0 [ 139.632932][T10086] CPU: 0 UID: 0 PID: 10086 Comm: syz.3.2348 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.633038][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.633054][T10086] Call Trace: [ 139.633062][T10086] [ 139.633071][T10086] __dump_stack+0x1d/0x30 [ 139.633100][T10086] dump_stack_lvl+0x95/0xd0 [ 139.633126][T10086] dump_stack+0x15/0x1b [ 139.633188][T10086] should_fail_ex+0x262/0x280 [ 139.633227][T10086] should_fail+0xb/0x20 [ 139.633323][T10086] get_futex_key+0x12d/0xb10 [ 139.633366][T10086] futex_wake+0x89/0x400 [ 139.633397][T10086] do_futex+0x3f8/0x460 [ 139.633447][T10086] __se_sys_futex+0x2f6/0x370 [ 139.633535][T10086] ? fput+0x91/0xc0 [ 139.633565][T10086] __x64_sys_futex+0x78/0x90 [ 139.633713][T10086] x64_sys_call+0x22e2/0x2550 [ 139.633743][T10086] do_syscall_64+0x112/0x360 [ 139.633788][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.633821][T10086] RIP: 0033:0x7f704129e1d9 [ 139.633886][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.633915][T10086] RSP: 002b:00007f703fcf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.633945][T10086] RAX: ffffffffffffffda RBX: 00007f7041525fa8 RCX: 00007f704129e1d9 [ 139.633966][T10086] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7041525fac [ 139.634033][T10086] RBP: 00007f7041525fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 139.634055][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.634082][T10086] R13: 00007f7041526038 R14: 00007fff938cb630 R15: 00007fff938cb718 [ 139.634110][T10086] [ 140.069607][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 140.069636][ C0] bridge0: topology change detected, propagating [ 141.322399][T10121] loop1: detected capacity change from 0 to 512 [ 141.333960][T10121] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 141.339022][T10122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.345727][T10121] EXT4-fs (loop1): 1 truncate cleaned up [ 141.346657][T10121] EXT4-fs mount: 11 callbacks suppressed [ 141.346700][T10121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.629655][ T29] audit: type=1400 audit(1791744119.454:708): avc: denied { write } for pid=10120 comm="syz.1.2361" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.845590][ T29] audit: type=1400 audit(1791744119.694:709): avc: denied { bind } for pid=10136 comm="syz.7.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.846104][ T29] audit: type=1400 audit(1791744119.694:710): avc: denied { name_bind } for pid=10136 comm="syz.7.2366" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 141.846511][ T29] audit: type=1400 audit(1791744119.694:711): avc: denied { node_bind } for pid=10136 comm="syz.7.2366" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 142.222152][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.397632][ T29] audit: type=1400 audit(1791744120.244:712): avc: denied { write } for pid=10143 comm="syz.7.2369" name="usb_gadget" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.397917][ T29] audit: type=1400 audit(1791744120.244:713): avc: denied { add_name } for pid=10143 comm="syz.7.2369" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.398657][ T29] audit: type=1400 audit(1791744120.244:714): avc: denied { create } for pid=10143 comm="syz.7.2369" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 142.469041][ T29] audit: type=1400 audit(1791744120.314:715): avc: denied { write } for pid=10143 comm="syz.7.2369" name="configs" dev="configfs" ino=26850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.498525][ T29] audit: type=1400 audit(1791744120.344:716): avc: denied { write } for pid=10143 comm="syz.7.2369" name="functions" dev="configfs" ino=26849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.530433][ T29] audit: type=1400 audit(1791744120.384:717): avc: denied { write } for pid=10143 comm="syz.7.2369" name="header" dev="configfs" ino=26871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.695183][T10152] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2371'. [ 142.695206][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2371'. [ 142.950720][T10163] random: crng reseeded on system resumption [ 143.395664][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2377'. [ 143.415955][T10167] vlan2: entered allmulticast mode [ 143.415979][T10167] bridge2: entered allmulticast mode [ 143.419089][T10167] bridge2: port 1(erspan0) entered blocking state [ 143.419139][T10167] bridge2: port 1(erspan0) entered disabled state [ 143.419241][T10167] erspan0: entered allmulticast mode [ 143.453966][T10167] erspan0: entered promiscuous mode [ 143.455505][T10167] bridge2: port 1(erspan0) entered blocking state [ 143.455549][T10167] bridge2: port 1(erspan0) entered forwarding state [ 143.498563][T10167] bridge2: port 1(erspan0) entered disabled state [ 143.499463][T10167] erspan0: left allmulticast mode [ 143.499492][T10167] erspan0: left promiscuous mode [ 143.518500][T10167] bridge2: port 1(erspan0) entered disabled state [ 143.558031][T10167] bridge0: port 3(syz_tun) entered disabled state [ 143.558558][T10167] syz_tun: left promiscuous mode [ 143.558690][T10167] bridge0: port 3(syz_tun) entered disabled state [ 143.590943][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.627569][T10167] bridge_slave_0: left allmulticast mode [ 143.627597][T10167] bridge_slave_0: left promiscuous mode [ 143.627787][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.640005][T10178] loop3: detected capacity change from 0 to 256 [ 143.660302][T10167] bridge_slave_1: left allmulticast mode [ 143.660325][T10167] bridge_slave_1: left promiscuous mode [ 143.660433][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.683061][T10167] bond0: (slave bond_slave_0): Releasing backup interface [ 143.685995][T10167] bond0: (slave bond_slave_1): Releasing backup interface [ 143.705946][T10167] team0: Port device team_slave_0 removed [ 143.717669][T10167] team0: Port device team_slave_1 removed [ 143.719219][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.747775][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.762234][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.765376][T10178] FAT-fs (loop3): codepage cp932 not found [ 143.767239][T10167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.804036][T10167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.986969][T10183] syzkaller0: entered promiscuous mode [ 143.986996][T10183] syzkaller0: entered allmulticast mode [ 144.731536][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 144.731559][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.731664][T10239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.776266][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.776466][T10239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.189645][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 145.189667][ C1] bridge0: topology change detected, propagating [ 145.463803][T10249] syzkaller0: entered promiscuous mode [ 145.463968][T10249] syzkaller0: entered allmulticast mode [ 145.610952][T10256] loop7: detected capacity change from 0 to 512 [ 145.618649][T10256] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.644580][T10256] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.2408: bad orphan inode 13 [ 145.644610][T10256] loop7: lost filesystem error report for type 5 error -117 [ 145.658297][T10256] ext4_test_bit(bit=12, block=18) = 1 [ 145.658314][T10256] is_bad_inode(inode)=0 [ 145.658323][T10256] NEXT_ORPHAN(inode)=0 [ 145.658923][T10256] max_ino=32 [ 145.659070][T10256] i_nlink=1 [ 145.702046][T10256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 145.829634][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 145.829663][ C1] bridge0: topology change detected, propagating [ 146.777461][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 146.839667][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 146.839689][ T29] audit: type=1400 audit(1791744124.674:729): avc: denied { write } for pid=10266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.332995][ T29] audit: type=1400 audit(1791744125.184:730): avc: denied { write } for pid=10288 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.294091][T10312] loop7: detected capacity change from 0 to 512 [ 148.335238][T10312] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 148.338467][T10312] EXT4-fs (loop7): 1 truncate cleaned up [ 148.342391][T10312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.569564][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 148.569614][ C0] bridge0: topology change detected, propagating [ 148.600433][ T29] audit: type=1400 audit(1791744126.414:731): avc: denied { write } for pid=10311 comm="syz.7.2421" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.600546][ T29] audit: type=1400 audit(1791744126.414:732): avc: denied { read write } for pid=10311 comm="syz.7.2421" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.600649][ T29] audit: type=1400 audit(1791744126.414:733): avc: denied { open } for pid=10311 comm="syz.7.2421" path="/267/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.082249][T10333] smc: net device team0 applied user defined pnetid SYZ2 [ 149.220494][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2427'. [ 149.351110][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.005726][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.008341][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.260966][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.261241][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.376398][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.376524][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.380185][T10357] random: crng reseeded on system resumption [ 152.451851][T10401] ./dev/sda1: Can't lookup blockdev [ 153.972995][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 154.014575][T10439] bridge0: port 1(syz_tun) entered blocking state [ 154.014611][T10439] bridge0: port 1(syz_tun) entered disabled state [ 154.015353][T10439] syz_tun: entered promiscuous mode [ 154.176432][T10453] syzkaller0: entered promiscuous mode [ 154.176459][T10453] syzkaller0: entered allmulticast mode [ 154.502440][T10479] bridge0: port 3(syz_tun) entered blocking state [ 154.502475][T10479] bridge0: port 3(syz_tun) entered disabled state [ 154.503386][T10479] syz_tun: entered promiscuous mode [ 154.506706][T10479] bridge0: port 3(syz_tun) entered blocking state [ 154.506739][T10479] bridge0: port 3(syz_tun) entered forwarding state [ 155.057546][ T29] audit: type=1400 audit(1791744132.904:734): avc: denied { write } for pid=10432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.402976][ T29] audit: type=1400 audit(1791744133.254:735): avc: denied { write } for pid=10495 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.689237][ T29] audit: type=1400 audit(1791744133.534:736): avc: denied { write } for pid=10504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.820159][ T29] audit: type=1400 audit(1791744133.644:737): avc: denied { write } for pid=10534 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.960852][T10523] syzkaller0: entered promiscuous mode [ 155.960873][T10523] syzkaller0: entered allmulticast mode [ 156.067541][T10542] loop1: detected capacity change from 0 to 512 [ 156.087581][T10542] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 156.116140][T10542] EXT4-fs (loop1): 1 truncate cleaned up [ 156.131359][T10542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.373582][ T29] audit: type=1400 audit(1791744134.204:738): avc: denied { write } for pid=10539 comm="syz.1.2489" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.690259][T10580] loop6: detected capacity change from 0 to 512 [ 156.694285][T10580] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2500: corrupted in-inode xattr: overlapping e_value [ 156.694329][T10580] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.694590][T10580] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2500: couldn't read orphan inode 15 (err -117) [ 156.694691][T10580] loop6: lost filesystem error report for type 5 error -117 [ 156.696612][T10580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.948918][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.960263][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.986953][ T29] audit: type=1400 audit(1791744134.834:739): avc: denied { create } for pid=10581 comm="syz.5.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.087731][ T29] audit: type=1400 audit(1791744134.934:740): avc: denied { ioctl } for pid=10581 comm="syz.5.2501" path="socket:[27530]" dev="sockfs" ino=27530 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.118753][ T29] audit: type=1400 audit(1791744134.964:741): avc: denied { write } for pid=10581 comm="syz.5.2501" path="socket:[27530]" dev="sockfs" ino=27530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.205546][T10592] syzkaller0: entered promiscuous mode [ 157.205575][T10592] syzkaller0: entered allmulticast mode [ 157.390867][T10585] syz.3.2496 (10585) used greatest stack depth: 9560 bytes left [ 157.569937][ T29] audit: type=1400 audit(1791744135.414:742): avc: denied { bind } for pid=10621 comm="syz.1.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.570058][ T29] audit: type=1400 audit(1791744135.414:743): avc: denied { connect } for pid=10621 comm="syz.1.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.630562][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2518'. [ 157.674267][T10632] syzkaller0: entered promiscuous mode [ 157.674290][T10632] syzkaller0: entered allmulticast mode [ 158.578551][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2532'. [ 158.628517][T10669] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2533'. [ 158.646596][T10669] syzkaller1: entered promiscuous mode [ 158.646652][T10669] syzkaller1: entered allmulticast mode [ 158.959185][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.959393][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.015825][T10697] loop5: detected capacity change from 0 to 512 [ 159.036903][T10697] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 159.036923][T10697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.061947][T10697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 159.062063][T10697] System zones: 1-12 [ 159.062910][T10697] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2542: bad orphan inode 131072 [ 159.062937][T10697] loop5: lost filesystem error report for type 5 error -117 [ 159.063737][T10697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.140428][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.185284][T10715] loop7: detected capacity change from 0 to 512 [ 159.202720][T10715] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 159.204874][T10715] EXT4-fs (loop7): 1 truncate cleaned up [ 159.205388][T10715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.523958][T10746] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 160.090085][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.173048][T10760] syzkaller0: entered promiscuous mode [ 160.173077][T10760] syzkaller0: entered allmulticast mode [ 160.251639][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2559'. [ 160.321635][T10770] smc: net device team0 applied user defined pnetid SYZ2 [ 160.671606][T10784] loop3: detected capacity change from 0 to 512 [ 160.673508][T10784] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 160.685927][T10784] EXT4-fs (loop3): 1 truncate cleaned up [ 160.686965][T10784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.947582][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 160.947600][ T29] audit: type=1400 audit(1791744138.784:750): avc: denied { write } for pid=10783 comm="syz.3.2568" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.035003][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2570'. [ 161.397588][T10803] syzkaller0: entered promiscuous mode [ 161.397656][T10803] syzkaller0: entered allmulticast mode [ 161.568655][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.634140][T10807] syzkaller0: entered promiscuous mode [ 161.634159][T10807] syzkaller0: entered allmulticast mode [ 162.209082][T10825] loop5: detected capacity change from 0 to 512 [ 162.335882][T10825] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 162.653522][T10825] EXT4-fs (loop5): 1 truncate cleaned up [ 162.654027][T10825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.697861][T10841] syzkaller0: entered promiscuous mode [ 162.697890][T10841] syzkaller0: entered allmulticast mode [ 162.714804][T10836] No source specified [ 162.839555][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 162.839615][ C1] bridge0: topology change detected, propagating [ 162.868988][ T29] audit: type=1400 audit(1791744140.714:751): avc: denied { write } for pid=10824 comm="syz.5.2584" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.911742][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.913854][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.942347][T10856] loop6: detected capacity change from 0 to 512 [ 162.971893][T10856] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 163.059733][ T29] audit: type=1400 audit(1791744140.854:752): avc: denied { unmount } for pid=10859 comm="syz.7.2599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.069431][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.081260][T10856] EXT4-fs (loop6): 1 truncate cleaned up [ 163.082145][T10856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.949634][ T29] audit: type=1400 audit(1791744141.454:753): avc: denied { write } for pid=10855 comm="syz.6.2597" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.953548][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.064119][T10871] syzkaller0: entered promiscuous mode [ 164.064139][T10871] syzkaller0: entered allmulticast mode [ 164.678632][T10883] No source specified [ 164.990026][T10891] syz_tun: left promiscuous mode [ 164.990279][T10891] bridge0: port 3(syz_tun) entered disabled state [ 165.057648][T10897] loop1: detected capacity change from 0 to 512 [ 165.059903][T10897] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 165.075725][T10897] EXT4-fs (loop1): 1 truncate cleaned up [ 165.076156][T10897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.253781][ T29] audit: type=1400 audit(1791744143.094:754): avc: denied { write } for pid=10896 comm="syz.1.2610" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.726422][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.769953][T10922] syzkaller0: entered promiscuous mode [ 166.769973][T10922] syzkaller0: entered allmulticast mode [ 166.970415][T10929] No source specified [ 167.301592][T10951] syzkaller0: entered promiscuous mode [ 167.301620][T10951] syzkaller0: entered allmulticast mode [ 168.253950][ T29] audit: type=1400 audit(1791744146.104:755): avc: denied { create } for pid=10965 comm="syz.7.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.351117][ T29] audit: type=1400 audit(1791744146.204:756): avc: denied { write } for pid=10965 comm="syz.7.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.357028][T10967] lo speed is unknown, defaulting to 1000 [ 168.357761][T10967] lo speed is unknown, defaulting to 1000 [ 168.358059][T10967] lo speed is unknown, defaulting to 1000 [ 168.770800][T10967] infiniband sz1: set active [ 168.770819][T10967] infiniband sz1: added lo [ 168.771001][ T3406] lo speed is unknown, defaulting to 1000 [ 169.507673][T10967] RDS/IB: sz1: added [ 169.507698][T10967] smc: adding ib device sz1 with port count 1 [ 169.507717][T10967] smc: ib device sz1 port 1 has no pnetid [ 169.507913][ T3413] lo speed is unknown, defaulting to 1000 [ 169.532929][T10967] lo speed is unknown, defaulting to 1000 [ 169.651225][T10967] lo speed is unknown, defaulting to 1000 [ 169.689422][T10967] lo speed is unknown, defaulting to 1000 [ 169.733998][T10994] syzkaller0: entered promiscuous mode [ 169.734019][T10994] syzkaller0: entered allmulticast mode [ 169.848433][T10967] lo speed is unknown, defaulting to 1000 [ 169.976239][T10967] lo speed is unknown, defaulting to 1000 [ 170.010875][T10967] lo speed is unknown, defaulting to 1000 [ 170.163053][T11013] loop6: detected capacity change from 0 to 512 [ 170.163905][T11013] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 170.188263][T11013] EXT4-fs (loop6): 1 truncate cleaned up [ 170.201817][T11013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.501656][ T29] audit: type=1400 audit(1791744148.234:757): avc: denied { write } for pid=11011 comm="syz.6.2647" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.683066][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.840534][T11036] syzkaller0: entered promiscuous mode [ 171.840555][T11036] syzkaller0: entered allmulticast mode [ 172.048098][T11054] loop7: detected capacity change from 0 to 512 [ 172.056465][T11052] lo speed is unknown, defaulting to 1000 [ 172.060937][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2661'. [ 172.068023][T11054] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 172.074692][T11054] EXT4-fs (loop7): 1 truncate cleaned up [ 172.075884][T11054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.228235][T11034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.228338][T11034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.229237][T11034] random: crng reseeded on system resumption [ 172.266618][ T29] audit: type=1400 audit(1791744150.114:758): avc: denied { write } for pid=11053 comm="syz.7.2663" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.937930][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.035919][T11090] lo speed is unknown, defaulting to 1000 [ 174.453713][T11105] loop3: detected capacity change from 0 to 512 [ 174.461534][T11105] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 174.462917][T11105] EXT4-fs (loop3): 1 truncate cleaned up [ 174.463400][T11105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.000043][ T29] audit: type=1400 audit(1791744152.544:759): avc: denied { write } for pid=11104 comm="syz.3.2678" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.197203][T11115] loop6: detected capacity change from 0 to 512 [ 175.216046][T11115] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 175.244595][T11115] EXT4-fs (loop6): 1 truncate cleaned up [ 175.256995][T11115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.456216][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.524025][ T29] audit: type=1400 audit(1791744153.314:760): avc: denied { write } for pid=11114 comm="syz.6.2680" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.581923][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.626949][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 175.775832][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2687'. [ 175.776453][T11134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.776859][T11134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.777802][T11134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.778344][T11134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.175386][T11148] rdma_rxe: rxe_newlink: failed to add lo [ 176.196099][T11150] loop5: detected capacity change from 0 to 512 [ 176.197895][T11150] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 176.203139][T11150] EXT4-fs (loop5): 1 truncate cleaned up [ 176.203573][T11150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.338985][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'. [ 176.717091][T11161] smc: net device team0 applied user defined pnetid SYZ2 [ 176.717342][ T29] audit: type=1400 audit(1791744154.274:761): avc: denied { write } for pid=11149 comm="syz.5.2694" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.092189][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.124329][T11164] loop3: detected capacity change from 0 to 512 [ 177.138877][T11164] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 177.151735][T11164] EXT4-fs (loop3): 1 truncate cleaned up [ 177.152216][T11164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.158602][ T29] audit: type=1400 audit(1791744155.004:762): avc: denied { write } for pid=11163 comm="syz.3.2697" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.247200][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.269817][T11171] syzkaller0: entered promiscuous mode [ 177.269844][T11171] syzkaller0: entered allmulticast mode [ 177.289797][ T29] audit: type=1400 audit(1791744155.144:763): avc: denied { write } for pid=11172 comm="syz.5.2696" lport=34201 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.381041][T11186] loop1: detected capacity change from 0 to 512 [ 177.383522][T11186] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 177.451593][T11190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2705'. [ 177.489937][T11186] EXT4-fs (loop1): 1 truncate cleaned up [ 177.490305][T11186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.504008][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2702'. [ 177.918960][ T29] audit: type=1400 audit(1791744155.744:764): avc: denied { write } for pid=11185 comm="syz.1.2706" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.059107][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2709'. [ 178.267431][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.848929][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 178.861133][T11236] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2720'. [ 178.867647][T11236] syzkaller1: entered promiscuous mode [ 178.867672][T11236] syzkaller1: entered allmulticast mode [ 179.280410][T11259] loop3: detected capacity change from 0 to 1024 [ 179.283394][T11259] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 179.286538][T11259] JBD2: no valid journal superblock found [ 179.286562][T11259] EXT4-fs (loop3): Could not load journal inode [ 180.052227][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2732'. [ 181.069193][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.069288][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.822870][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2751'. [ 182.556409][T11369] rdma_rxe: rxe_newlink: failed to add lo [ 183.168883][T11385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2779'. [ 183.187758][T11388] loop6: detected capacity change from 0 to 512 [ 183.200314][T11388] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 183.207600][T11388] EXT4-fs (loop6): 1 truncate cleaned up [ 183.208027][T11388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.443308][T11406] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.464588][ T29] audit: type=1400 audit(1791744161.314:765): avc: denied { write } for pid=11387 comm="syz.6.2781" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.577925][T11406] md: could not open device unknown-block(1,0). [ 183.577963][T11406] md: error, md_import_device() returned -6 [ 183.642888][T11409] md: could not open device unknown-block(0,0). [ 183.642972][T11409] md: error, md_import_device() returned -6 [ 183.662288][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.665005][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.684993][T11393] random: crng reseeded on system resumption [ 183.757243][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 184.527731][ T29] audit: type=1400 audit(1791744162.374:766): avc: denied { write } for pid=11428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.875109][ T29] audit: type=1400 audit(1791744162.724:767): avc: denied { write } for pid=11451 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.080305][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2800'. [ 185.119828][T11471] loop3: detected capacity change from 0 to 512 [ 185.131375][T11471] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 185.137163][T11471] EXT4-fs (loop3): 1 truncate cleaned up [ 185.137646][T11471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.172930][ T29] audit: type=1400 audit(1791744163.024:768): avc: denied { write } for pid=11470 comm="syz.3.2801" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.185300][ T29] audit: type=1400 audit(1791744163.034:769): avc: denied { write } for pid=11454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.259953][ T29] audit: type=1400 audit(1791744163.094:770): avc: denied { write } for pid=11484 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.298119][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.447866][ T5993] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.449559][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 185.449601][ C1] bridge0: topology change detected, propagating [ 185.478743][ T29] audit: type=1400 audit(1791744163.334:771): avc: denied { write } for pid=11489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.637972][ T29] audit: type=1400 audit(1791744163.484:772): avc: denied { write } for pid=11510 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.722214][T11515] smc: net device team0 applied user defined pnetid SYZ2 [ 185.777323][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2808'. [ 186.517936][ T29] audit: type=1400 audit(1791744164.364:773): avc: denied { write } for pid=11514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.543008][ T29] audit: type=1400 audit(1791744164.394:774): avc: denied { write } for pid=11530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.727612][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 186.983215][T11551] loop3: detected capacity change from 0 to 512 [ 186.999043][T11551] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 187.023079][T11551] EXT4-fs (loop3): 1 truncate cleaned up [ 187.026979][T11551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.260361][T11546] loop5: detected capacity change from 0 to 512 [ 187.266386][T11546] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 187.291172][T11546] EXT4-fs (loop5): 1 truncate cleaned up [ 187.298080][T11546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.439097][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.549542][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 187.549582][ C1] bridge0: topology change detected, propagating [ 187.812303][T11574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 188.574364][T11586] loop1: detected capacity change from 0 to 512 [ 188.583628][T11586] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 188.597214][T11586] EXT4-fs (loop1): 1 truncate cleaned up [ 188.598091][T11586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.857770][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 188.857791][ T29] audit: type=1400 audit(1791744166.694:779): avc: denied { write } for pid=11585 comm="syz.1.2826" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.730463][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.576626][T11607] rdma_rxe: rxe_newlink: failed to add lo [ 190.634174][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.637364][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.016321][T11619] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 191.220046][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.248924][T11623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2840'. [ 191.389618][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 191.389680][ C1] bridge0: topology change detected, propagating [ 191.470651][ T29] audit: type=1400 audit(1791744169.324:780): avc: denied { bind } for pid=11631 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.470837][ T29] audit: type=1400 audit(1791744169.324:781): avc: denied { listen } for pid=11631 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.471349][ T29] audit: type=1400 audit(1791744169.324:782): avc: denied { read } for pid=11631 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.681752][ T3301] bridge0: port 3(syz_tun) entered disabled state [ 192.695610][ T3301] syz_tun (unregistering): left allmulticast mode [ 192.695683][ T3301] syz_tun (unregistering): left promiscuous mode [ 192.695786][ T3301] bridge0: port 3(syz_tun) entered disabled state [ 192.699245][T11656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.746135][T11656] md: array md0 already initialised! [ 192.838853][T11656] md: could not open device unknown-block(1,0). [ 192.838873][T11656] md: error, md_import_device() returned -6 [ 192.941315][T11655] lo speed is unknown, defaulting to 1000 [ 193.256519][ T6949] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 193.275135][ T6949] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input6 [ 193.301550][ T6949] sony 0005:054C:03D5.0002: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 193.321311][ T29] audit: type=1400 audit(1791744171.174:783): avc: denied { read } for pid=2969 comm="acpid" name="event4" dev="devtmpfs" ino=1115 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.321707][ T29] audit: type=1400 audit(1791744171.174:784): avc: denied { open } for pid=2969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1115 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.322185][ T29] audit: type=1400 audit(1791744171.174:785): avc: denied { ioctl } for pid=2969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1115 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.019319][ T29] audit: type=1400 audit(1791744171.864:786): avc: denied { write } for pid=11672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.098683][ T29] audit: type=1400 audit(1791744171.944:787): avc: denied { write } for pid=11702 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.266140][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.266174][T11655] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.266342][T11655] bridge_slave_0: entered allmulticast mode [ 194.266900][T11655] bridge_slave_0: entered promiscuous mode [ 194.298459][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.298504][T11655] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.298644][T11655] bridge_slave_1: entered allmulticast mode [ 194.324177][T11655] bridge_slave_1: entered promiscuous mode [ 194.352945][T11696] fido_id[11696]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.426572][T11655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.429394][T11655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.478553][T11655] team0: Port device team_slave_0 added [ 194.486971][T11655] team0: Port device team_slave_1 added [ 194.531726][T11655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.531754][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.531839][T11655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.533299][T11655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.533326][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.533374][T11655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.594551][T11725] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.648072][ T29] audit: type=1400 audit(1791744172.504:788): avc: denied { write } for pid=11708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.660151][T11725] md: array md0 already initialised! [ 194.703974][T11655] hsr_slave_0: entered promiscuous mode [ 194.704957][T11655] hsr_slave_1: entered promiscuous mode [ 194.705339][T11655] debugfs: 'hsr0' already exists in 'hsr' [ 194.705370][T11655] Cannot create hsr debugfs directory [ 194.832863][ T29] audit: type=1400 audit(1791744172.684:789): avc: denied { write } for pid=11733 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.942879][T11655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.942950][T11655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.955259][T11725] md: could not open device unknown-block(1,0). [ 194.955320][T11725] md: error, md_import_device() returned -6 [ 195.035287][T11655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.035420][T11655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.223604][T11655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.223642][T11655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.243659][ T29] audit: type=1400 audit(1791744173.094:790): avc: denied { write } for pid=11740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.373815][T11655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.373852][T11655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.412582][ T29] audit: type=1400 audit(1791744173.264:791): avc: denied { write } for pid=11756 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.499080][T11655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.510256][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.512483][T11655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.519045][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.542636][T11655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.556989][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.558940][T11655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.577800][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.659328][T11655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.683017][T11655] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.696471][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.696514][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.720004][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.720041][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.865778][ T29] audit: type=1400 audit(1791744173.714:792): avc: denied { write } for pid=11761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.031410][ T29] audit: type=1400 audit(1791744173.884:793): avc: denied { write } for pid=11790 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.131786][ T29] audit: type=1400 audit(1791744174.984:794): avc: denied { write } for pid=11818 comm="syz.6.2880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 197.871340][T11655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.998371][T11655] veth0_vlan: entered promiscuous mode [ 198.002277][T11655] veth1_vlan: entered promiscuous mode [ 198.028382][T11655] veth0_macvtap: entered promiscuous mode [ 198.038776][T11655] veth1_macvtap: entered promiscuous mode [ 198.053265][T11655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.068226][T11655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.099250][ T29] audit: type=1400 audit(1791744175.944:795): avc: denied { mounton } for pid=11655 comm="syz-executor" path="/root/syzkaller.FpE7Xv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 198.099682][ T288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.103205][ T288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.103460][ T288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.103568][ T288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.323063][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.323205][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.354002][T11858] syzkaller0: entered promiscuous mode [ 198.354030][T11858] syzkaller0: entered allmulticast mode [ 200.809047][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.810229][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.124978][T11909] random: crng reseeded on system resumption [ 201.201244][T11921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.343831][T11930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.405738][T11921] md: could not open device unknown-block(1,0). [ 201.405763][T11921] md: error, md_import_device() returned -6 [ 201.484391][T11927] md: could not open device unknown-block(0,0). [ 201.484417][T11927] md: error, md_import_device() returned -6 [ 201.520789][T11941] ip_tables: iptables: counters copy to user failed while replacing table [ 202.079229][T11950] bridge0: port 3(syz_tun) entered blocking state [ 202.079287][T11950] bridge0: port 3(syz_tun) entered disabled state [ 202.097887][T11950] syz_tun: entered promiscuous mode [ 202.098053][T11950] bridge0: port 3(syz_tun) entered blocking state [ 202.098103][T11950] bridge0: port 3(syz_tun) entered listening state [ 202.513522][T11956] loop3: detected capacity change from 0 to 512 [ 202.534121][T11956] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 202.538330][T11956] EXT4-fs (loop3): 1 truncate cleaned up [ 202.538879][T11956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.879601][ T29] audit: type=1400 audit(1791744180.634:796): avc: denied { write } for pid=11955 comm="syz.3.2924" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.598731][T11982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.652757][ T29] audit: type=1400 audit(1791744181.504:797): avc: denied { map } for pid=11983 comm="syz.7.2936" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.760151][T11988] netlink: 'syz.7.2939': attribute type 49 has an invalid length. [ 203.798161][ T29] audit: type=1400 audit(1791744181.644:798): avc: denied { ioctl } for pid=11989 comm="syz.1.2931" path="socket:[31150]" dev="sockfs" ino=31150 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 203.827939][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.880346][T11999] loop3: detected capacity change from 0 to 512 [ 203.891595][T11999] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 203.894991][T12000] loop7: detected capacity change from 0 to 512 [ 203.898369][T11999] EXT4-fs (loop3): 1 truncate cleaned up [ 203.898432][T12000] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 203.901390][T11999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.950360][T12000] EXT4-fs (loop7): 1 truncate cleaned up [ 203.950712][T12000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.196082][ T29] audit: type=1400 audit(1791744182.044:799): avc: denied { write } for pid=11996 comm="syz.3.2932" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.359342][ T29] audit: type=1400 audit(1791744182.194:800): avc: denied { write } for pid=11997 comm="syz.7.2942" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.855950][ T6632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.911142][T12024] md: could not open device unknown-block(1,0). [ 204.911168][T12024] md: error, md_import_device() returned -6 [ 204.958841][T12028] md: could not open device unknown-block(0,0). [ 204.958867][T12028] md: error, md_import_device() returned -6 [ 204.993684][T12032] syzkaller0: entered promiscuous mode [ 204.993712][T12032] syzkaller0: entered allmulticast mode [ 205.914717][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.642380][T12070] syzkaller0: entered promiscuous mode [ 206.642470][T12070] syzkaller0: entered allmulticast mode [ 206.731474][T12073] smc: net device team0 applied user defined pnetid SYZ2 [ 207.769605][T12087] loop1: detected capacity change from 0 to 512 [ 207.770266][T12087] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 207.791697][T12087] EXT4-fs (loop1): 1 truncate cleaned up [ 207.792249][T12087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.036142][ T29] audit: type=1400 audit(1791744186.874:801): avc: denied { write } for pid=12086 comm="syz.1.2969" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.064276][T12105] syzkaller0: entered promiscuous mode [ 209.064364][T12105] syzkaller0: entered allmulticast mode [ 209.124235][T12102] md: could not open device unknown-block(1,0). [ 209.124262][T12102] md: error, md_import_device() returned -6 [ 209.197646][T12104] md: could not open device unknown-block(0,0). [ 209.197668][T12104] md: error, md_import_device() returned -6 [ 209.197983][T12112] syz_tun: entered allmulticast mode [ 209.388856][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.947104][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2985'. [ 210.689087][T12148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.700601][T12148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.775625][T12151] loop1: detected capacity change from 0 to 512 [ 210.788973][T12151] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 210.869217][T12151] EXT4-fs (loop1): 1 truncate cleaned up [ 210.878124][T12151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.347527][ T29] audit: type=1400 audit(1791744189.194:802): avc: denied { write } for pid=12149 comm="syz.1.2990" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.561855][ T3378] asus 0005:0B05:8502.0003: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 212.717867][T12189] fido_id[12189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.880653][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.654970][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.655951][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.289778][T12249] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 215.659135][T12262] md: could not open device unknown-block(1,0). [ 215.659156][T12262] md: error, md_import_device() returned -6 [ 215.716690][T12264] md: could not open device unknown-block(0,0). [ 215.716716][T12264] md: error, md_import_device() returned -6 [ 215.834662][T12282] syzkaller0: entered promiscuous mode [ 215.834682][T12282] syzkaller0: entered allmulticast mode [ 216.835872][T12308] md: could not open device unknown-block(1,0). [ 216.835893][T12308] md: error, md_import_device() returned -6 [ 216.963745][T12308] md: could not open device unknown-block(0,0). [ 216.963763][T12308] md: error, md_import_device() returned -6 [ 217.041501][T12321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.089579][T12321] md: array md0 already initialised! [ 217.149399][T12321] md: could not open device unknown-block(1,0). [ 217.149426][T12321] md: error, md_import_device() returned -6 [ 217.179242][T12326] md: could not open device unknown-block(0,0). [ 217.179294][T12326] md: error, md_import_device() returned -6 [ 217.204751][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3043'. [ 217.509617][ C1] bridge0: port 3(syz_tun) entered learning state [ 218.047744][T12348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.047852][T12348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.313907][T12367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.318178][T12363] smc: net device team0 applied user defined pnetid SYZ2 [ 218.366106][T12369] loop5: detected capacity change from 0 to 512 [ 218.366871][T12369] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 218.389299][T12369] EXT4-fs (loop5): 1 truncate cleaned up [ 218.390737][T12369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.751823][ T29] audit: type=1400 audit(1791744196.604:803): avc: denied { write } for pid=12368 comm="syz.5.3055" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.296398][ T29] audit: type=1400 audit(1791744197.144:804): avc: denied { block_suspend } for pid=12379 comm="syz.1.3058" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.671419][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.101298][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.102803][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.929698][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3083'. [ 223.686492][T12477] loop3: detected capacity change from 0 to 512 [ 223.697816][T12477] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.728936][T12477] EXT4-fs (loop3): 1 truncate cleaned up [ 223.729402][T12477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.915921][T12484] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.012610][ T29] audit: type=1400 audit(1791744201.824:805): avc: denied { write } for pid=12476 comm="syz.3.3092" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.586049][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.720151][T12489] md: array md0 already initialised! [ 224.808030][T12489] md: could not open device unknown-block(1,0). [ 224.808058][T12489] md: error, md_import_device() returned -6 [ 224.854851][T12493] md: could not open device unknown-block(0,0). [ 224.854881][T12493] md: error, md_import_device() returned -6 [ 225.046887][ T29] audit: type=1400 audit(1791744202.894:806): avc: denied { read } for pid=12506 comm="syz.3.3099" path="socket:[32792]" dev="sockfs" ino=32792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.650945][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3101'. [ 226.639878][T12531] md: array md0 already initialised! [ 226.775110][T12531] md: could not open device unknown-block(1,0). [ 226.775132][T12531] md: error, md_import_device() returned -6 [ 226.858302][T12533] md: could not open device unknown-block(0,0). [ 226.858328][T12533] md: error, md_import_device() returned -6 [ 226.883155][T12539] bridge_slave_0: left allmulticast mode [ 226.883210][T12539] bridge_slave_0: left promiscuous mode [ 226.883372][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.911916][T12539] bridge_slave_1: left allmulticast mode [ 226.911947][T12539] bridge_slave_1: left promiscuous mode [ 226.912188][T12539] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.935931][T12539] bond0: (slave bond_slave_0): Releasing backup interface [ 226.939470][T12539] bond0: (slave bond_slave_1): Releasing backup interface [ 226.961165][T12539] team0: Port device team_slave_0 removed [ 226.964831][T12539] team0: Port device team_slave_1 removed [ 226.965911][T12539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.965932][T12539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.967348][T12539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.967365][T12539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.012887][T12539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.040674][T12541] team0: Mode changed to "loadbalance" [ 227.119035][ T29] audit: type=1400 audit(1791744204.964:807): avc: denied { append } for pid=12546 comm="syz.3.3110" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 227.364041][ T29] audit: type=1326 audit(1791744205.214:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 227.364087][ T29] audit: type=1326 audit(1791744205.214:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 227.364492][ T29] audit: type=1326 audit(1791744205.214:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 227.364656][ T29] audit: type=1326 audit(1791744205.214:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 227.365240][ T29] audit: type=1326 audit(1791744205.214:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 227.481298][ T29] audit: type=1326 audit(1791744205.334:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 227.481408][ T29] audit: type=1326 audit(1791744205.334:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.1.3117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b5de1d9 code=0x7ffc0000 [ 228.069109][T12576] md: array md0 already initialised! [ 228.159556][T12576] md: could not open device unknown-block(1,0). [ 228.159580][T12576] md: error, md_import_device() returned -6 [ 228.201587][T12583] md: could not open device unknown-block(0,0). [ 228.201607][T12583] md: error, md_import_device() returned -6 [ 229.002813][T12605] bridge_slave_0: left allmulticast mode [ 229.003465][T12605] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.274984][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 229.275003][ T29] audit: type=1400 audit(1791744207.124:816): avc: denied { create } for pid=12613 comm="syz.7.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.426252][ T29] audit: type=1400 audit(1791744207.274:817): avc: denied { setopt } for pid=12613 comm="syz.7.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.453464][ T29] audit: type=1400 audit(1791744207.304:818): avc: denied { write } for pid=12613 comm="syz.7.3131" name="functions" dev="configfs" ino=26849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.454401][ T29] audit: type=1400 audit(1791744207.304:819): avc: denied { write } for pid=12613 comm="syz.7.3131" name="c.1" dev="configfs" ino=26854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.454438][ T29] audit: type=1400 audit(1791744207.304:820): avc: denied { write } for pid=12613 comm="syz.7.3131" name="c.1" dev="configfs" ino=26854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.455127][ T29] audit: type=1400 audit(1791744207.304:821): avc: denied { write } for pid=12613 comm="syz.7.3131" name="UDC" dev="configfs" ino=32960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 229.455199][ T29] audit: type=1400 audit(1791744207.304:822): avc: denied { open } for pid=12613 comm="syz.7.3131" path="/410/config/usb_gadget/g1/UDC" dev="configfs" ino=32960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 229.455977][T12614] UDC core: g1: couldn't find an available UDC or it's busy [ 230.208960][ T29] audit: type=1400 audit(1791744208.054:823): avc: denied { sys_module } for pid=12627 comm="syz.5.3135" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.241223][T12628] md: array md0 already initialised! [ 230.247762][T12634] loop1: detected capacity change from 0 to 256 [ 230.333891][T12628] md: could not open device unknown-block(1,0). [ 230.333933][T12628] md: error, md_import_device() returned -6 [ 230.383344][T12635] md: could not open device unknown-block(0,0). [ 230.383402][T12635] md: error, md_import_device() returned -6 [ 230.388219][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.388308][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.869556][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 232.869596][ C1] bridge0: topology change detected, propagating [ 236.368081][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 236.388658][T12766] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 236.503652][ T29] audit: type=1400 audit(1791744214.354:824): avc: denied { setopt } for pid=12767 comm="syz.6.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.335395][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.338296][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.842250][T12786] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 239.052089][T12809] loop5: detected capacity change from 0 to 512 [ 239.066572][T12809] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 239.096650][T12809] EXT4-fs (loop5): 1 truncate cleaned up [ 239.097088][T12809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.246559][ T29] audit: type=1400 audit(1791744217.094:825): avc: denied { bind } for pid=12819 comm="syz.6.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.247077][T12820] mmap: syz.6.3194 (12820) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.247567][ T29] audit: type=1400 audit(1791744217.094:826): avc: denied { write } for pid=12819 comm="syz.6.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.373020][ T29] audit: type=1400 audit(1791744217.194:827): avc: denied { write } for pid=12808 comm="syz.5.3191" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.377300][T12817] md: could not open device unknown-block(0,0). [ 239.377319][T12817] md: error, md_import_device() returned -6 [ 239.834654][ T29] audit: type=1400 audit(1791744217.684:828): avc: denied { write } for pid=12831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.871834][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3196'. [ 239.950559][ T29] audit: type=1400 audit(1791744217.804:829): avc: denied { write } for pid=12844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.959581][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.086679][T12855] syz_tun: left promiscuous mode [ 240.086822][T12855] bridge0: port 1(syz_tun) entered disabled state [ 240.103035][T12855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.187853][ T29] audit: type=1400 audit(1791744218.034:830): avc: denied { write } for pid=12848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.215807][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.216027][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.265931][ T29] audit: type=1400 audit(1791744218.114:831): avc: denied { write } for pid=12869 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.445751][ T29] audit: type=1400 audit(1791744218.294:832): avc: denied { write } for pid=12873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.496555][T12876] md: could not open device unknown-block(0,0). [ 240.496579][T12876] md: error, md_import_device() returned -6 [ 240.523570][ T29] audit: type=1400 audit(1791744218.374:833): avc: denied { write } for pid=12889 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.564939][T12881] md: could not open device unknown-block(0,0). [ 240.564966][T12881] md: error, md_import_device() returned -6 [ 240.948846][ T3306] bridge0: port 3(syz_tun) entered disabled state [ 240.959135][ T3306] syz_tun (unregistering): left allmulticast mode [ 240.959310][ T3306] syz_tun (unregistering): left promiscuous mode [ 240.959343][ T3306] bridge0: port 3(syz_tun) entered disabled state [ 241.057219][T12911] lo speed is unknown, defaulting to 1000 [ 241.183282][T12911] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.183313][T12911] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.183455][T12911] bridge_slave_0: entered allmulticast mode [ 241.184004][T12911] bridge_slave_0: entered promiscuous mode [ 241.185201][T12911] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.185309][T12911] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.185741][T12911] bridge_slave_1: entered allmulticast mode [ 241.187230][T12911] bridge_slave_1: entered promiscuous mode [ 241.239896][T12911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.241269][T12911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.254774][T12911] team0: Port device team_slave_0 added [ 241.256670][T12911] team0: Port device team_slave_1 added [ 241.284699][T12911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.284714][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.284742][T12911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.285432][T12911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.285444][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.285476][T12911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.364528][T12911] hsr_slave_0: entered promiscuous mode [ 241.365617][T12911] hsr_slave_1: entered promiscuous mode [ 241.366249][T12911] debugfs: 'hsr0' already exists in 'hsr' [ 241.366294][T12911] Cannot create hsr debugfs directory [ 241.506708][T12932] loop3: detected capacity change from 0 to 512 [ 241.519184][T12932] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 241.551664][T12932] EXT4-fs (loop3): 1 truncate cleaned up [ 241.552723][T12932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.658254][T12911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.712181][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 241.712201][ T29] audit: type=1400 audit(1791744219.544:835): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 241.757557][T12911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.889613][ T29] audit: type=1400 audit(1791744219.704:836): avc: denied { write } for pid=12931 comm="syz.3.3213" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.436980][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.481823][T12911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.623329][T12950] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 242.627234][T12911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.798758][T12911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.800951][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.804721][T12911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.824691][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.825447][T12911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.827848][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.829290][T12911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.860237][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.910629][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.917874][T12911] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.935743][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.935783][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.956177][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.956217][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.119782][T12911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.211055][T12911] veth0_vlan: entered promiscuous mode [ 243.214465][T12911] veth1_vlan: entered promiscuous mode [ 243.245956][T12911] veth0_macvtap: entered promiscuous mode [ 243.248781][T12911] veth1_macvtap: entered promiscuous mode [ 243.269341][T12911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.293303][T12911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.349603][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.349651][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.349751][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.349849][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.341176][T13007] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 244.492392][T13011] syz_tun: left promiscuous mode [ 244.492504][T13011] bridge0: port 3(syz_tun) entered disabled state [ 244.559054][T13011] bridge_slave_0: left allmulticast mode [ 244.559227][T13011] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.579146][T13011] bridge_slave_1: left allmulticast mode [ 244.579201][T13011] bridge_slave_1: left promiscuous mode [ 244.579314][T13011] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.606726][T13011] bond0: (slave bond_slave_0): Releasing backup interface [ 244.699885][T13011] bond0: (slave bond_slave_1): Releasing backup interface [ 244.737968][T13011] team0: Port device team_slave_0 removed [ 244.762478][T13011] team0: Port device team_slave_1 removed [ 244.763736][T13011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.763755][T13011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.766234][T13011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.766259][T13011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.810261][T13011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 244.895057][T13017] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.921441][T13023] syz_tun: entered allmulticast mode [ 246.674185][T13062] loop7: detected capacity change from 0 to 512 [ 246.677780][T13062] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 246.828019][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.829353][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.744748][T13072] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 247.983168][T13067] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 249.847542][ T29] audit: type=1400 audit(1791744227.694:837): avc: denied { write } for pid=13126 comm="syz.6.3265" name="instances" dev="tracefs" ino=2395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 249.847584][ T29] audit: type=1400 audit(1791744227.694:838): avc: denied { remove_name } for pid=13126 comm="syz.6.3265" name="foo" dev="tracefs" ino=11050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 249.847611][ T29] audit: type=1400 audit(1791744227.694:839): avc: denied { rmdir } for pid=13126 comm="syz.6.3265" name="foo" dev="tracefs" ino=11050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 250.632088][T13147] bridge_slave_0: left allmulticast mode [ 250.632343][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.351721][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.351842][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.733156][T13163] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 252.948763][ T29] audit: type=1400 audit(1791744230.794:840): avc: denied { write } for pid=13220 comm="syz.1.3302" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.105551][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.105676][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.107448][T13212] random: crng reseeded on system resumption [ 253.686816][T13239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.687045][T13239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.883311][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.905736][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.781484][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3335'. [ 259.919110][ T29] audit: type=1400 audit(1791744237.764:841): avc: denied { create } for pid=13373 comm="syz.6.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.939844][ T29] audit: type=1400 audit(1791744237.794:842): avc: denied { bind } for pid=13373 comm="syz.6.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.940039][ T29] audit: type=1400 audit(1791744237.794:843): avc: denied { listen } for pid=13373 comm="syz.6.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.161428][ T29] audit: type=1400 audit(1791744238.014:844): avc: denied { write } for pid=13378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.331838][ T29] audit: type=1400 audit(1791744238.184:845): avc: denied { write } for pid=13398 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.128554][ T29] audit: type=1400 audit(1791744238.974:846): avc: denied { write } for pid=13406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.293954][ T29] audit: type=1400 audit(1791744239.134:847): avc: denied { write } for pid=13435 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.420409][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.421046][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.425532][T13412] random: crng reseeded on system resumption [ 261.891712][ T29] audit: type=1400 audit(1791744239.744:848): avc: denied { write } for pid=13448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.964556][ T29] audit: type=1400 audit(1791744239.794:849): avc: denied { write } for pid=13463 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.309933][T13493] loop3: detected capacity change from 0 to 512 [ 263.424752][T13493] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 263.454720][T13493] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 263.455026][T13493] EXT4-fs (loop3): Remounting filesystem read-only [ 263.455461][T13493] EXT4-fs (loop3): 1 truncate cleaned up [ 263.456004][T13493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.456089][T13493] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.480244][ T8912] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 263.480410][ T8912] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 263.480514][ T8912] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 263.480614][ T8912] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 263.928027][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.784089][T13526] team0: Mode changed to "loadbalance" [ 265.515001][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.515493][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.537668][T13539] random: crng reseeded on system resumption [ 265.912805][T13574] netlink: 'syz.5.3410': attribute type 5 has an invalid length. [ 265.912830][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3410'. [ 265.982554][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 265.982574][ T29] audit: type=1400 audit(1791744243.834:853): avc: denied { write } for pid=13559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.034593][ T29] audit: type=1400 audit(1791744243.884:854): avc: denied { write } for pid=13584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.166612][ T29] audit: type=1400 audit(1791744244.014:855): avc: denied { write } for pid=13586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.199885][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.200031][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.502422][T13600] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 266.567578][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3414'. [ 266.845592][ T29] audit: type=1400 audit(1791744244.694:856): avc: denied { write } for pid=13601 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.378096][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3426'. [ 267.828775][T13650] loop5: detected capacity change from 0 to 512 [ 267.844688][T13650] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 267.847430][T13650] EXT4-fs (loop5): 1 truncate cleaned up [ 267.847953][T13650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.475265][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3438'. [ 268.539289][ T29] audit: type=1400 audit(1791744246.384:857): avc: denied { write } for pid=13649 comm="syz.5.3433" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.063570][ T5604] ================================================================== [ 270.063616][ T5604] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 270.063668][ T5604] [ 270.063673][ T5604] read-write to 0xffff8881072d8230 of 8 bytes by interrupt on cpu 0: [ 270.063705][ T5604] __xa_clear_mark+0xf5/0x1e0 [ 270.063737][ T5604] __folio_end_writeback+0xe7/0x530 [ 270.063772][ T5604] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 270.063805][ T5604] folio_end_writeback+0x1c/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.063835][ T5604] ext4_finish_bio+0x454/0x770 [ 270.063867][ T5604] ext4_end_bio+0x281/0x3a0 [ 270.063891][ T5604] bio_endio+0x390/0x570 [ 270.063921][ T5604] blk_update_request+0x33a/0x710 [ 270.063957][ T5604] blk_mq_end_request+0x26/0x50 [ 270.063986][ T5604] lo_complete_rq+0x98/0x130 [ 270.064016][ T5604] blk_done_softirq+0x77/0xb0 [ 270.064047][ T5604] handle_softirqs+0xcc/0x2a0 [ 270.064074][ T5604] run_ksoftirqd+0x1c/0x30 [ 270.064104][ T5604] smpboot_thread_fn+0x32f/0x520 [ 270.064129][ T5604] kthread+0x223/0x270 [ 270.064150][ T5604] ret_from_fork+0x146/0x330 [ 270.064189][ T5604] ret_from_fork_asm+0x1a/0x30 [ 270.064223][ T5604] [ 270.064231][ T5604] read to 0xffff8881072d8230 of 8 bytes by task 5604 on cpu 1: [ 270.064250][ T5604] xas_find_marked+0x211/0x650 [ 270.064275][ T5604] filemap_get_folios_tag+0xf7/0x400 [ 270.064307][ T5604] filemap_fdatawait_keep_errors+0x6c/0x190 [ 270.064337][ T5604] sync_inodes_sb+0x424/0x4d0 [ 270.064372][ T5604] sync_filesystem+0x108/0x190 [ 270.064402][ T5604] generic_shutdown_super+0x4c/0x220 [ 270.064431][ T5604] kill_block_super+0x2d/0xb0 [ 270.064472][ T5604] ext4_kill_sb+0x42/0x80 [ 270.064512][ T5604] deactivate_locked_super+0x73/0x180 [ 270.064551][ T5604] deactivate_super+0x9a/0xb0 [ 270.064580][ T5604] cleanup_mnt+0x143/0x1c0 [ 270.064613][ T5604] __cleanup_mnt+0x19/0x20 [ 270.064644][ T5604] task_work_run+0x130/0x1a0 [ 270.064673][ T5604] exit_to_user_mode_loop+0x1e4/0x8c0 [ 270.064707][ T5604] do_syscall_64+0x212/0x360 [ 270.064735][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.064764][ T5604] [ 270.064769][ T5604] value changed: 0x003ffffffffffff0 -> 0x003fffffffffc000 [ 270.064785][ T5604] [ 270.064790][ T5604] Reported by Kernel Concurrency Sanitizer on: [ 270.064815][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 270.064842][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.064855][ T5604] ================================================================== [ 270.067443][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.481512][T13710] syz_tun (unregistering): left allmulticast mode [ 270.489218][T13708] syz_tun (unregistering): left allmulticast mode [ 270.507102][T12911] syz_tun (unregistering): left allmulticast mode [ 270.518045][T13706] bridge0: port 3(syz_tun) entered disabled state [ 270.526732][T13706] syz_tun (unregistering): left allmulticast mode [ 270.526763][T13706] syz_tun (unregistering): left promiscuous mode [ 270.526870][T13706] bridge0: port 3(syz_tun) entered disabled state [ 270.573109][T13700] syz_tun (unregistering): left allmulticast mode [ 270.740966][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.783915][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.831055][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.882497][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.945940][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.963450][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.003358][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.042133][ T29] audit: type=1400 audit(1791744248.894:858): avc: denied { write } for pid=13714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.043684][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.090699][ T29] audit: type=1400 audit(1791744248.944:859): avc: denied { write } for pid=13725 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.129770][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 271.153450][ T31] bridge_slave_1: left allmulticast mode [ 271.153482][ T31] bridge_slave_1: left promiscuous mode [ 271.153742][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.231399][ T31] bond0 (unregistering): Released all slaves [ 271.258549][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.270613][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.271873][ T31] bond0 (unregistering): Released all slaves [ 271.373718][ T31] hsr_slave_0: left promiscuous mode [ 271.374014][ T31] hsr_slave_1: left promiscuous mode [ 271.375911][ T31] hsr_slave_0: left promiscuous mode [ 271.376293][ T31] hsr_slave_1: left promiscuous mode [ 271.376688][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.376709][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.377102][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.377119][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.400840][ T31] veth1_macvtap: left promiscuous mode [ 271.400970][ T31] veth0_macvtap: left promiscuous mode [ 271.401106][ T31] veth1_vlan: left promiscuous mode [ 271.401147][ T31] veth0_vlan: left promiscuous mode [ 271.412085][ T29] audit: type=1400 audit(1791744249.264:860): avc: denied { write } for pid=13728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.417041][ T31] veth1_macvtap: left promiscuous mode [ 271.417114][ T31] veth0_macvtap: left promiscuous mode [ 271.417311][ T31] veth1_vlan: left promiscuous mode [ 271.417423][ T31] veth0_vlan: left promiscuous mode [ 271.502289][ T29] audit: type=1400 audit(1791744249.354:861): avc: denied { write } for pid=13739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.626074][ T31] smc: removing net device team0 with user defined pnetid SYZ2 [ 271.664638][ T31] team0 (unregistering): Port device team_slave_1 removed [ 271.667277][ T31] team0 (unregistering): Port device team_slave_0 removed [ 271.702102][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 271.785847][ T29] audit: type=1400 audit(1791744249.634:862): avc: denied { write } for pid=13742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.822988][ T29] audit: type=1400 audit(1791744249.674:863): avc: denied { write } for pid=13753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.856075][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 271.938272][ T29] audit: type=1400 audit(1791744249.784:864): avc: denied { write } for pid=13756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.972477][ T29] audit: type=1400 audit(1791744249.824:865): avc: denied { write } for pid=13767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.003775][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 272.086132][ T29] audit: type=1400 audit(1791744249.934:866): avc: denied { write } for pid=13770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.120074][ T29] audit: type=1400 audit(1791744249.974:867): avc: denied { write } for pid=13781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.155561][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 272.290439][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 272.401685][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 272.514705][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16