last executing test programs: 860.797139ms ago: executing program 2 (id=656): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 794.113728ms ago: executing program 2 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) 739.280525ms ago: executing program 2 (id=660): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@init_itable}]}, 0x0, 0x510, &(0x7f00000001c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 675.442883ms ago: executing program 1 (id=677): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) syz_read_part_table(0x5c7, &(0x7f0000000800)="$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") 524.603433ms ago: executing program 1 (id=666): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 523.405833ms ago: executing program 2 (id=668): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 494.054466ms ago: executing program 0 (id=671): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b6090600000000006d0000000000000018010000646c6c2500000000002020207b9af8ff000000002c9100000000000037010000f8ffffffb702000008000000b7030000000000001500000006000000cf93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 463.019621ms ago: executing program 2 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f00000000c0)='./file0\x00', 0x0) 432.536534ms ago: executing program 0 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 376.812681ms ago: executing program 2 (id=678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 375.747581ms ago: executing program 1 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f00000000c0)='./file0\x00', 0x0) 305.384871ms ago: executing program 3 (id=682): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 305.2573ms ago: executing program 4 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000203c7c33d00000500000000000000ff0f00010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 294.539642ms ago: executing program 1 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121b01, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0xffffffff, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116dddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0xa04c, 0x1, 0xfffffffd, 0xfff, 0x7, "53af070900"}) 261.228627ms ago: executing program 3 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x0) 241.018719ms ago: executing program 4 (id=687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 190.024376ms ago: executing program 3 (id=688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 189.874436ms ago: executing program 4 (id=689): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xffd2) 186.338606ms ago: executing program 1 (id=691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 172.740248ms ago: executing program 0 (id=692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x1) 147.808831ms ago: executing program 4 (id=693): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 142.931101ms ago: executing program 3 (id=694): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4627, 0xfdffdffd, @local, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c, 0x0}}], 0x1, 0x4001c00) 128.957354ms ago: executing program 0 (id=695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x2e7}}, {@shortname_lower}, {@uni_xlate}, {@fat=@check_strict}]}, 0xd, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) 128.886483ms ago: executing program 1 (id=696): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mlockall(0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 61.579622ms ago: executing program 0 (id=697): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 61.512153ms ago: executing program 3 (id=698): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24004000, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) 60.920642ms ago: executing program 4 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getrusage(0x1, &(0x7f00000004c0)) 32.097156ms ago: executing program 3 (id=699): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 13.308998ms ago: executing program 4 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) 0s ago: executing program 0 (id=701): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121b01, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0xffffffff, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116dddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0xa04c, 0x1, 0xfffffffd, 0xfff, 0x7, "53af070900"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 33.604429][ T29] audit: type=1400 audit(1768378699.300:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.627455][ T29] audit: type=1400 audit(1768378699.330:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.629546][ T3305] cgroup: Unknown subsys name 'net' [ 33.655244][ T29] audit: type=1400 audit(1768378699.360:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.795367][ T3305] cgroup: Unknown subsys name 'cpuset' [ 33.801668][ T3305] cgroup: Unknown subsys name 'rlimit' [ 33.952794][ T29] audit: type=1400 audit(1768378699.650:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.976432][ T29] audit: type=1400 audit(1768378699.660:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.996912][ T29] audit: type=1400 audit(1768378699.660:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.017272][ T29] audit: type=1400 audit(1768378699.660:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.037679][ T29] audit: type=1400 audit(1768378699.680:69): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.058664][ T29] audit: type=1400 audit(1768378699.680:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.076773][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.083528][ T29] audit: type=1400 audit(1768378699.680:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.134278][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.243473][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.290615][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.306895][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.361211][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.368353][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.375628][ T3317] bridge_slave_0: entered allmulticast mode [ 35.381998][ T3317] bridge_slave_0: entered promiscuous mode [ 35.390986][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.398119][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.405265][ T3317] bridge_slave_1: entered allmulticast mode [ 35.411824][ T3317] bridge_slave_1: entered promiscuous mode [ 35.429758][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 35.480767][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.499211][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.506338][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.516578][ T3318] bridge_slave_0: entered allmulticast mode [ 35.523060][ T3318] bridge_slave_0: entered promiscuous mode [ 35.530911][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.549744][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.557050][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.564274][ T3318] bridge_slave_1: entered allmulticast mode [ 35.570938][ T3318] bridge_slave_1: entered promiscuous mode [ 35.586647][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 35.609983][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.617089][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.624268][ T3315] bridge_slave_0: entered allmulticast mode [ 35.630763][ T3315] bridge_slave_0: entered promiscuous mode [ 35.641533][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.648650][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.655909][ T3315] bridge_slave_1: entered allmulticast mode [ 35.662320][ T3315] bridge_slave_1: entered promiscuous mode [ 35.676459][ T3317] team0: Port device team_slave_0 added [ 35.698122][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.708106][ T3317] team0: Port device team_slave_1 added [ 35.727649][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.745126][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.754256][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.761395][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.768792][ T3327] bridge_slave_0: entered allmulticast mode [ 35.775326][ T3327] bridge_slave_0: entered promiscuous mode [ 35.795023][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.804263][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.811485][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.818867][ T3327] bridge_slave_1: entered allmulticast mode [ 35.825477][ T3327] bridge_slave_1: entered promiscuous mode [ 35.837119][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.844123][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.870139][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.896819][ T3318] team0: Port device team_slave_0 added [ 35.902799][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.909780][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.935782][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.963633][ T3318] team0: Port device team_slave_1 added [ 35.971876][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.979101][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.986220][ T3326] bridge_slave_0: entered allmulticast mode [ 35.992603][ T3326] bridge_slave_0: entered promiscuous mode [ 35.999775][ T3315] team0: Port device team_slave_0 added [ 36.006742][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.026591][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.033564][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.059745][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.071006][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.078099][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.104323][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.115190][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.122256][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.129774][ T3326] bridge_slave_1: entered allmulticast mode [ 36.136268][ T3326] bridge_slave_1: entered promiscuous mode [ 36.143571][ T3315] team0: Port device team_slave_1 added [ 36.150298][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.182857][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.189867][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.215879][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.248596][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.255625][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.281735][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.299629][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.309730][ T3327] team0: Port device team_slave_0 added [ 36.318601][ T3327] team0: Port device team_slave_1 added [ 36.331664][ T3317] hsr_slave_0: entered promiscuous mode [ 36.337809][ T3317] hsr_slave_1: entered promiscuous mode [ 36.345266][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.380671][ T3318] hsr_slave_0: entered promiscuous mode [ 36.386722][ T3318] hsr_slave_1: entered promiscuous mode [ 36.392686][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.398482][ T3318] Cannot create hsr debugfs directory [ 36.414315][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.421308][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.447269][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.464575][ T3326] team0: Port device team_slave_0 added [ 36.488720][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.495714][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.521676][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.533413][ T3326] team0: Port device team_slave_1 added [ 36.541392][ T3315] hsr_slave_0: entered promiscuous mode [ 36.547585][ T3315] hsr_slave_1: entered promiscuous mode [ 36.553488][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.559276][ T3315] Cannot create hsr debugfs directory [ 36.603786][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.610815][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.636870][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.658657][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.665788][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.691862][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.722639][ T3327] hsr_slave_0: entered promiscuous mode [ 36.728624][ T3327] hsr_slave_1: entered promiscuous mode [ 36.734445][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 36.740256][ T3327] Cannot create hsr debugfs directory [ 36.800533][ T3326] hsr_slave_0: entered promiscuous mode [ 36.806632][ T3326] hsr_slave_1: entered promiscuous mode [ 36.812530][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 36.818370][ T3326] Cannot create hsr debugfs directory [ 36.935955][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.949802][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.962999][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.971483][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.994568][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.004394][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.014177][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.031757][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.050946][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.065413][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.074512][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.085255][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.116981][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.130110][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.139496][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.149207][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.190197][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.201365][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.211443][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.221239][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.231785][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.260467][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.288831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.295937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.310702][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.321853][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.328980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.349396][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.365705][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.379536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.386605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.408806][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.419374][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.433224][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.440466][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.451892][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.470680][ T3327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.481209][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.496545][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.534817][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.542007][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.553740][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.564156][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.571298][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.594107][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.602369][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.609481][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.618601][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.625793][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.665889][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.673980][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.683438][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.698862][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.705983][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.723673][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.730860][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.757063][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.807476][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.898945][ T3327] veth0_vlan: entered promiscuous mode [ 37.913187][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.933925][ T3317] veth0_vlan: entered promiscuous mode [ 37.940076][ T3327] veth1_vlan: entered promiscuous mode [ 37.959903][ T3317] veth1_vlan: entered promiscuous mode [ 37.968100][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.983633][ T3327] veth0_macvtap: entered promiscuous mode [ 37.991870][ T3327] veth1_macvtap: entered promiscuous mode [ 38.013312][ T3315] veth0_vlan: entered promiscuous mode [ 38.038126][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.046955][ T3315] veth1_vlan: entered promiscuous mode [ 38.063147][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.077012][ T3317] veth0_macvtap: entered promiscuous mode [ 38.088010][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.097088][ T3317] veth1_macvtap: entered promiscuous mode [ 38.120922][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.133293][ T3315] veth0_macvtap: entered promiscuous mode [ 38.143576][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.153222][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.168554][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.176213][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.187161][ T3315] veth1_macvtap: entered promiscuous mode [ 38.198946][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.207943][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.222781][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.232644][ T3318] veth0_vlan: entered promiscuous mode [ 38.246803][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.259460][ T3327] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.279307][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.288847][ T3318] veth1_vlan: entered promiscuous mode [ 38.300617][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.325293][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.342473][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.361555][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398255][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.417477][ T3318] veth0_macvtap: entered promiscuous mode [ 38.452319][ T3318] veth1_macvtap: entered promiscuous mode [ 38.472502][ T3326] veth0_vlan: entered promiscuous mode [ 38.507926][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.524049][ T3326] veth1_vlan: entered promiscuous mode [ 38.546004][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.571006][ T3326] veth0_macvtap: entered promiscuous mode [ 38.587401][ T177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.598130][ T3326] veth1_macvtap: entered promiscuous mode [ 38.609804][ T584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.618578][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 38.618589][ T29] audit: type=1400 audit(1768378704.310:114): avc: denied { allowed } for pid=3504 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.659429][ T584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.671031][ T29] audit: type=1400 audit(1768378704.350:115): avc: denied { create } for pid=3504 comm="syz.1.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.716179][ T584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.725092][ T29] audit: type=1400 audit(1768378704.370:116): avc: denied { create } for pid=3507 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.744879][ T29] audit: type=1400 audit(1768378704.400:117): avc: denied { bind } for pid=3507 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.764640][ T29] audit: type=1400 audit(1768378704.400:118): avc: denied { write } for pid=3507 comm="syz.2.12" path="socket:[4892]" dev="sockfs" ino=4892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.786572][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.790141][ T29] audit: type=1400 audit(1768378704.480:119): avc: denied { create } for pid=3511 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.801100][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.822200][ T29] audit: type=1400 audit(1768378704.520:120): avc: denied { read } for pid=3511 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.851561][ T177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.858765][ T29] audit: type=1326 audit(1768378704.550:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a15bf749 code=0x7ffc0000 [ 38.883545][ T29] audit: type=1326 audit(1768378704.550:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a15bf749 code=0x7ffc0000 [ 38.928822][ T29] audit: type=1326 audit(1768378704.610:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a15bf749 code=0x7ffc0000 [ 38.958912][ T177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.000284][ T3518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.113230][ T177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.122384][ T177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.170384][ T3531] loop4: detected capacity change from 0 to 1024 [ 39.187933][ T3531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.209571][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 39.227702][ T3531] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5: missing EA_INODE flag [ 39.250670][ T3531] EXT4-fs (loop4): Remounting filesystem read-only [ 39.257362][ T3531] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.288046][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.517180][ T3566] 9p: Bad value for 'source' [ 39.569670][ T3571] loop8: detected capacity change from 0 to 7 [ 39.576687][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.586301][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.595055][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.604691][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.614898][ T3571] loop8: unable to read partition table [ 39.623427][ T3571] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X ) failed (rc=-5) [ 39.645135][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.654791][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.674787][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.684533][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.692405][ T3573] loop8: unable to read partition table [ 39.705322][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.714960][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.724641][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.734255][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.742889][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.752537][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.761511][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.771131][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.779438][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 39.789062][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 39.849577][ T3518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.945982][ T3585] SELinux: failed to load policy [ 39.965942][ T3590] netlink: 'syz.1.45': attribute type 12 has an invalid length. [ 40.128347][ T3614] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 40.302724][ T3637] capability: warning: `syz.1.66' uses 32-bit capabilities (legacy support in use) [ 40.315340][ T3637] program syz.1.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.400018][ T3644] unsupported nla_type 52263 [ 40.503122][ T3656] hugetlbfs: syz.1.74 (3656): Using mlock ulimits for SHM_HUGETLB is obsolete [ 40.571791][ T3663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 40.637529][ T3672] loop1: detected capacity change from 0 to 256 [ 40.704514][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.715359][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.738094][ T3680] syz.1.86 (3680) used greatest stack depth: 9088 bytes left [ 40.927976][ T3518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.043525][ T3705] sctp: [Deprecated]: syz.4.97 (pid 3705) Use of int in max_burst socket option deprecated. [ 41.043525][ T3705] Use struct sctp_assoc_value instead [ 41.331616][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 41.390252][ T3752] loop2: detected capacity change from 0 to 512 [ 41.398254][ T3752] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.422639][ T3752] EXT4-fs (loop2): 1 orphan inode deleted [ 41.431988][ T3752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.444761][ T584] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 41.445567][ T3752] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.477694][ T3752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.557512][ T3518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.576049][ T3763] loop4: detected capacity change from 0 to 1024 [ 41.590637][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 41.622617][ T3763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 41.652966][ T584] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.664504][ T3763] System zones: 0-1, 3-12 [ 41.675836][ T3763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.688059][ T584] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.699597][ T3776] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 41.718392][ T584] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.728814][ T584] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.747383][ T3763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.123: bg 0: block 88: padding at end of block bitmap is not set [ 41.792104][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.805960][ T3785] SELinux: policydb version 688212935 does not match my version range 15-35 [ 41.822927][ T3787] loop1: detected capacity change from 0 to 512 [ 41.849004][ T3785] SELinux: failed to load policy [ 42.066432][ T3819] netlink: 'syz.1.150': attribute type 11 has an invalid length. [ 42.307100][ T3850] netlink: 'syz.1.164': attribute type 13 has an invalid length. [ 42.324785][ T3850] gretap0: refused to change device tx_queue_len [ 42.343097][ T3850] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.362455][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 42.371580][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 42.396368][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 42.528194][ T3875] loop0: detected capacity change from 0 to 164 [ 42.550172][ T3874] netlink: 68 bytes leftover after parsing attributes in process `syz.4.175'. [ 42.606076][ T3888] loop0: detected capacity change from 0 to 256 [ 42.777629][ T3913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 42.797624][ T3913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 42.886937][ T3909] loop2: detected capacity change from 0 to 2048 [ 42.930783][ T3309] loop2: p1 p3 p4 [ 42.963200][ T3309] loop2: p4 size 589824 extends beyond EOD, truncated [ 42.996552][ T3909] loop2: p1 p3 p4 [ 43.007396][ T3909] loop2: p4 size 589824 extends beyond EOD, truncated [ 43.064811][ T3924] udevd[3924]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 43.068223][ T3921] udevd[3921]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 43.086320][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.127100][ T3921] udevd[3921]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 43.137943][ T3792] udevd[3792]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 43.147998][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.198500][ T3942] loop2: detected capacity change from 0 to 1024 [ 43.226322][ T3942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.258353][ T3952] program syz.4.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.307433][ T3954] bridge0: entered promiscuous mode [ 43.307468][ T3942] EXT4-fs (loop2): shut down requested (1) [ 43.313356][ T3954] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 43.359264][ T3942] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 43.368228][ T3942] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 43.377534][ T3942] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 43.410901][ T3963] Zero length message leads to an empty skb [ 43.433055][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.537430][ T3977] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 43.575493][ T3977] EXT4-fs (loop1): mount failed [ 43.657876][ T3997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.666806][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 43.666823][ T29] audit: type=1400 audit(1768378709.370:327): avc: denied { read } for pid=3994 comm="syz.2.222" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.701666][ T29] audit: type=1400 audit(1768378709.370:328): avc: denied { open } for pid=3994 comm="syz.2.222" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.728358][ T3997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.741831][ T3997] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.761764][ T29] audit: type=1400 audit(1768378709.460:329): avc: denied { write open } for pid=3996 comm="syz.3.224" path="/15/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.784548][ T29] audit: type=1400 audit(1768378709.460:330): avc: denied { append } for pid=3996 comm="syz.3.224" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.806931][ T29] audit: type=1400 audit(1768378709.460:331): avc: denied { ioctl } for pid=3996 comm="syz.3.224" path="/15/bus/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.834263][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.905043][ T29] audit: type=1400 audit(1768378709.610:332): avc: denied { setopt } for pid=4012 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.962787][ T4023] Set syz1 is full, maxelem 0 reached [ 44.052620][ T29] audit: type=1400 audit(1768378709.750:333): avc: denied { write } for pid=4034 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.073875][ T4036] ======================================================= [ 44.073875][ T4036] WARNING: The mand mount option has been deprecated and [ 44.073875][ T4036] and is ignored by this kernel. Remove the mand [ 44.073875][ T4036] option from the mount to silence this warning. [ 44.073875][ T4036] ======================================================= [ 44.153651][ T4036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.181651][ T29] audit: type=1400 audit(1768378709.880:334): avc: denied { setattr } for pid=4035 comm="syz.0.242" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.212346][ T4036] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.242: inode #813183037: comm syz.0.242: iget: illegal inode # [ 44.237568][ T4036] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.242: error while reading EA inode 813183037 err=-117 [ 44.257439][ T4052] Driver unsupported XDP return value 0 on prog (id 115) dev N/A, expect packet loss! [ 44.304273][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.329859][ T29] audit: type=1400 audit(1768378710.030:335): avc: denied { ioctl } for pid=4063 comm="syz.1.255" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.418877][ T4076] option changes via remount are deprecated (pid=4073 comm=syz.0.252) [ 44.427154][ T4076] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 44.435226][ T29] audit: type=1400 audit(1768378710.120:336): avc: denied { remount } for pid=4073 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.479397][ T4078] netlink: 'syz.4.260': attribute type 21 has an invalid length. [ 44.543034][ T4078] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 44.550794][ T4078] __nla_validate_parse: 2 callbacks suppressed [ 44.550811][ T4078] netlink: 144 bytes leftover after parsing attributes in process `syz.4.260'. [ 44.600944][ T4092] binfmt_misc: register: failed to install interpreter file ./file2 [ 44.707028][ T4104] set_capacity_and_notify: 4 callbacks suppressed [ 44.707077][ T4104] loop0: detected capacity change from 0 to 512 [ 44.762115][ T4104] msdos: Bad value for 'uid' [ 44.766887][ T4104] msdos: Bad value for 'uid' [ 44.772064][ T4114] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 44.887653][ T4129] loop1: detected capacity change from 0 to 128 [ 44.897732][ T4126] loop2: detected capacity change from 0 to 512 [ 44.917977][ T4126] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.926758][ T4126] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.976340][ T4126] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.283: Allocating blocks 41-42 which overlap fs metadata [ 45.035787][ T4126] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.283: Failed to acquire dquot type 1 [ 45.051883][ T4126] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 45.071212][ T4126] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.283: corrupted inode contents [ 45.084038][ T4126] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.283: mark_inode_dirty error [ 45.122053][ T4126] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.283: corrupted inode contents [ 45.212103][ T4152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.224377][ T4126] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.283: mark_inode_dirty error [ 45.242871][ T4126] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.283: corrupted inode contents [ 45.256498][ T4152] netlink: 212 bytes leftover after parsing attributes in process `syz.0.294'. [ 45.269495][ T4126] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 45.299716][ T4126] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.283: corrupted inode contents [ 45.320330][ T4126] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.283: mark_inode_dirty error [ 45.331724][ T4126] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 45.340930][ T4126] EXT4-fs (loop2): 1 truncate cleaned up [ 45.348117][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.490570][ T4167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4167 comm=syz.1.302 [ 45.513288][ T4170] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 45.527190][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.857364][ T4199] loop1: detected capacity change from 0 to 512 [ 45.868667][ T4199] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.946823][ T4208] erspan0: entered promiscuous mode [ 45.962845][ T4212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.322'. [ 46.075367][ T4220] loop3: detected capacity change from 0 to 1024 [ 46.086481][ T4220] EXT4-fs: Ignoring removed orlov option [ 46.103084][ T4228] loop2: detected capacity change from 0 to 512 [ 46.110491][ T4228] ext4: Unknown parameter 'uid>00000000000000000000' [ 46.118478][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.146229][ T4230] loop1: detected capacity change from 0 to 1024 [ 46.156527][ T4230] EXT4-fs: Ignoring removed bh option [ 46.222108][ T4230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.258446][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.389356][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.496417][ T4272] loop0: detected capacity change from 0 to 128 [ 46.512069][ T4272] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.538707][ T4272] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.587408][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.599683][ T4280] netlink: 'syz.3.351': attribute type 21 has an invalid length. [ 46.631223][ T4280] netlink: 156 bytes leftover after parsing attributes in process `syz.3.351'. [ 46.641138][ T4280] netlink: 'syz.3.351': attribute type 21 has an invalid length. [ 46.649204][ T4280] netlink: 156 bytes leftover after parsing attributes in process `syz.3.351'. [ 46.712238][ T4298] xt_hashlimit: max too large, truncated to 1048576 [ 46.728122][ T4298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.729812][ T4297] netlink: 88 bytes leftover after parsing attributes in process `syz.4.360'. [ 46.764883][ T4297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.360'. [ 46.829261][ T4315] SELinux: failed to load policy [ 46.836561][ T10] kernel read not supported for file /vga_arbiter (pid: 10 comm: kworker/0:1) [ 46.925310][ T4327] ip6t_rpfilter: unknown options [ 46.953184][ T4335] netlink: 'syz.2.379': attribute type 4 has an invalid length. [ 47.040362][ T4347] netlink: 'syz.0.385': attribute type 21 has an invalid length. [ 47.057606][ T4351] loop1: detected capacity change from 0 to 128 [ 47.067748][ T4347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.385'. [ 47.080908][ T4347] netlink: 'syz.0.385': attribute type 21 has an invalid length. [ 47.089713][ T4347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.385'. [ 47.111833][ T4351] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.143069][ T4358] macvtap0: refused to change device tx_queue_len [ 47.152564][ T4351] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.187080][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.206657][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 47.343469][ T4386] macvtap0: refused to change device tx_queue_len [ 47.542620][ T4421] loop2: detected capacity change from 0 to 1024 [ 47.597572][ T4421] EXT4-fs: Ignoring removed orlov option [ 47.625989][ T4421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.706494][ T4443] erspan0: entered promiscuous mode [ 47.773176][ T4451] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.792085][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.012370][ T4484] EXT4-fs: Ignoring removed orlov option [ 48.015075][ T4482] erspan0: entered promiscuous mode [ 48.050160][ T4484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.120142][ T4494] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.237505][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.311315][ T4514] erspan0: entered promiscuous mode [ 48.377031][ T4524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4524 comm=syz.4.467 [ 48.421760][ T4530] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.501063][ T4535] EXT4-fs: Ignoring removed orlov option [ 48.536465][ T4535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.641039][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.702470][ T4562] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4562 comm=syz.3.483 [ 48.756287][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 48.756304][ T29] audit: type=1326 audit(1768378714.460:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 48.802501][ T29] audit: type=1326 audit(1768378714.460:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 48.825943][ T29] audit: type=1326 audit(1768378714.460:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 48.849885][ T29] audit: type=1326 audit(1768378714.550:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 48.885987][ T29] audit: type=1326 audit(1768378714.590:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 48.919249][ T29] audit: type=1326 audit(1768378714.590:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 48.942789][ T29] audit: type=1326 audit(1768378714.610:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecc2f749 code=0x7ffc0000 [ 49.033814][ T4583] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.082935][ T4589] EXT4-fs: Ignoring removed orlov option [ 49.117778][ T4589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.252847][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.373214][ T4629] EXT4-fs: Ignoring removed bh option [ 49.396485][ T4629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.442293][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.513515][ T4644] msdos: Bad value for 'uid' [ 49.518285][ T4644] msdos: Bad value for 'uid' [ 49.602332][ T4657] ext4: Unknown parameter 'uid>00000000000000000000' [ 49.611324][ T4658] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.665105][ T4664] __nla_validate_parse: 7 callbacks suppressed [ 49.665124][ T4664] netlink: 212 bytes leftover after parsing attributes in process `syz.2.529'. [ 49.785698][ T4682] netlink: 'syz.3.537': attribute type 21 has an invalid length. [ 49.805083][ T4682] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 49.812792][ T4682] netlink: 144 bytes leftover after parsing attributes in process `syz.3.537'. [ 49.834197][ T4685] set_capacity_and_notify: 10 callbacks suppressed [ 49.834228][ T4685] loop2: detected capacity change from 0 to 512 [ 49.875979][ T4685] msdos: Bad value for 'uid' [ 49.880640][ T4685] msdos: Bad value for 'uid' [ 49.943903][ T4694] netlink: 'syz.0.555': attribute type 21 has an invalid length. [ 49.960415][ T4696] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 49.978602][ T4698] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.978999][ T4694] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 49.994436][ T4694] netlink: 144 bytes leftover after parsing attributes in process `syz.0.555'. [ 50.130184][ T4717] option changes via remount are deprecated (pid=4715 comm=syz.4.558) [ 50.138646][ T4717] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 50.172069][ T4719] loop0: detected capacity change from 0 to 1024 [ 50.179022][ T4719] EXT4-fs: Ignoring removed bh option [ 50.199424][ T4719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.242244][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.351238][ T4740] loop1: detected capacity change from 0 to 512 [ 50.374448][ T4740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.383243][ T4740] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.405022][ T4740] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.567: Allocating blocks 41-42 which overlap fs metadata [ 50.438507][ T4740] Quota error (device loop1): write_blk: dquota write failed [ 50.446068][ T4740] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 50.448144][ T4754] option changes via remount are deprecated (pid=4753 comm=syz.2.571) [ 50.463379][ T4754] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 50.498437][ T4740] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 50.508830][ T4740] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.567: Failed to acquire dquot type 1 [ 50.520658][ T4740] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 50.555335][ T4740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.567: corrupted inode contents [ 50.578691][ T4740] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.567: mark_inode_dirty error [ 50.590328][ T4740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.567: corrupted inode contents [ 50.609821][ T4740] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.567: mark_inode_dirty error [ 50.621540][ T4740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.567: corrupted inode contents [ 50.633698][ T4740] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 50.642429][ T4740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.567: corrupted inode contents [ 50.654478][ T4740] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.567: mark_inode_dirty error [ 50.687157][ T4740] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 50.708935][ T4740] EXT4-fs (loop1): 1 truncate cleaned up [ 50.715199][ T4740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.767635][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.784971][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 50.816082][ T4782] loop0: detected capacity change from 0 to 512 [ 50.826529][ T4782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.864366][ T4782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.889631][ T4782] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.939916][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.041003][ T4809] loop3: detected capacity change from 0 to 512 [ 51.059165][ T4809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.068070][ T4809] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.085491][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 51.129048][ T4820] Set syz1 is full, maxelem 0 reached [ 51.139987][ T4809] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.596: Allocating blocks 41-42 which overlap fs metadata [ 51.184962][ T4828] loop2: detected capacity change from 0 to 1024 [ 51.191768][ T4809] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.596: Failed to acquire dquot type 1 [ 51.203426][ T4809] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.218251][ T4809] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.596: corrupted inode contents [ 51.230652][ T4809] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.596: mark_inode_dirty error [ 51.242607][ T4809] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.596: corrupted inode contents [ 51.257759][ T4809] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.596: mark_inode_dirty error [ 51.285068][ T4809] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.596: corrupted inode contents [ 51.296885][ T4828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.310589][ T4828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.604: inode #813183037: comm syz.2.604: iget: illegal inode # [ 51.324444][ T4828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.604: error while reading EA inode 813183037 err=-117 [ 51.348855][ T4809] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 51.357616][ T4809] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.596: corrupted inode contents [ 51.370602][ T4809] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.596: mark_inode_dirty error [ 51.383183][ T4809] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 51.393117][ T4809] EXT4-fs (loop3): 1 truncate cleaned up [ 51.394042][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.404406][ T4809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.420273][ T4839] loop1: detected capacity change from 0 to 128 [ 51.476923][ T4843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'. [ 51.501922][ T4846] loop4: detected capacity change from 0 to 1024 [ 51.509936][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.536766][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.578933][ T4854] program syz.1.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.608578][ T4846] EXT4-fs (loop4): shut down requested (1) [ 51.625778][ T4846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 51.637344][ T4846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 51.646385][ T4846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 51.668287][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.758149][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 51.796943][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 51.821149][ T4881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'. [ 51.841641][ T4883] loop3: detected capacity change from 0 to 512 [ 51.875451][ T4883] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 51.900996][ T4890] program syz.0.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.920594][ T4883] EXT4-fs (loop3): mount failed [ 52.019361][ T4904] loop4: detected capacity change from 0 to 512 [ 52.077704][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 52.090682][ T4904] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 52.152485][ T4904] EXT4-fs (loop4): mount failed [ 52.595292][ T4956] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 52.661962][ T4956] EXT4-fs (loop2): mount failed [ 52.705163][ T3309] loop1: p1 p3 p4 [ 52.717047][ T3309] loop1: p4 size 589824 extends beyond EOD, truncated [ 52.726927][ T4969] loop1: p1 p3 p4 [ 52.731824][ T4969] loop1: p4 size 589824 extends beyond EOD, truncated [ 52.857312][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.869565][ T3792] udevd[3792]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 52.878174][ T3921] udevd[3921]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.891186][ T4991] netlink: 'syz.3.675': attribute type 11 has an invalid length. [ 53.305172][ T148] ================================================================== [ 53.313310][ T148] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 53.321860][ T148] [ 53.324202][ T148] write to 0xffff88811b0dc908 of 44 bytes by task 5038 on cpu 1: [ 53.331948][ T148] tty_set_termios+0xc0/0x8c0 [ 53.336648][ T148] set_termios+0x35b/0x4d0 [ 53.341088][ T148] tty_mode_ioctl+0x379/0x5c0 [ 53.345796][ T148] n_tty_ioctl_helper+0x91/0x210 [ 53.350758][ T148] n_tty_ioctl+0x101/0x230 [ 53.355187][ T148] tty_ioctl+0x83f/0xb80 [ 53.359484][ T148] __se_sys_ioctl+0xce/0x140 [ 53.364104][ T148] __x64_sys_ioctl+0x43/0x50 [ 53.368724][ T148] x64_sys_call+0x14b0/0x3000 [ 53.373429][ T148] do_syscall_64+0xca/0x2b0 [ 53.377965][ T148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.383901][ T148] [ 53.386244][ T148] read to 0xffff88811b0dc921 of 1 bytes by task 148 on cpu 0: [ 53.393729][ T148] n_tty_receive_char_flow_ctrl+0x23/0x1d0 [ 53.399565][ T148] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 53.405148][ T148] tty_port_default_lookahead_buf+0x91/0xc0 [ 53.411072][ T148] flush_to_ldisc+0x288/0x340 [ 53.415795][ T148] process_scheduled_works+0x4ce/0x9d0 [ 53.421293][ T148] worker_thread+0x582/0x770 [ 53.425926][ T148] kthread+0x489/0x510 [ 53.430019][ T148] ret_from_fork+0x149/0x290 [ 53.434644][ T148] ret_from_fork_asm+0x1a/0x30 [ 53.439428][ T148] [ 53.441764][ T148] value changed: 0x58 -> 0x00 [ 53.446454][ T148] [ 53.448788][ T148] Reported by Kernel Concurrency Sanitizer on: [ 53.454951][ T148] CPU: 0 UID: 0 PID: 148 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.464778][ T148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.474866][ T148] Workqueue: events_unbound flush_to_ldisc [ 53.480690][ T148] ==================================================================