last executing test programs: 11.290471738s ago: executing program 4 (id=84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 11.194327993s ago: executing program 4 (id=87): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 11.122294737s ago: executing program 4 (id=89): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 10.979273115s ago: executing program 4 (id=106): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0) sync_file_range(r0, 0x9, 0x40000fe, 0x7) 10.824962825s ago: executing program 4 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/17, 0x11}, 0x1}], 0x1, 0x40002002, 0x0) 10.483304695s ago: executing program 4 (id=103): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5, 0x1f4, 0x0, 0x0, 0xfffffffe, 0x3d6, 0x40, 0x0, 0x0, 0x82, 0x38, 0x0, 0x4, 0x3}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x640) 10.483114165s ago: executing program 32 (id=103): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5, 0x1f4, 0x0, 0x0, 0xfffffffe, 0x3d6, 0x40, 0x0, 0x0, 0x82, 0x38, 0x0, 0x4, 0x3}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x640) 2.025657601s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x5, 0x9, 0x0, 0x0, 0x11, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r1, 0x1fce}, 0x8) 1.934355836s ago: executing program 2 (id=295): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xc, 0x2) getdents64(r0, &(0x7f0000000300)=""/175, 0xaf) 1.770839976s ago: executing program 2 (id=299): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/19, 0x13}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)}, 0xafab}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.69771346s ago: executing program 5 (id=301): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.671385122s ago: executing program 0 (id=303): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 1.609587196s ago: executing program 0 (id=304): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioprio_set$uid(0x3, 0x0, 0x0) 1.551744479s ago: executing program 2 (id=306): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.507444492s ago: executing program 0 (id=308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 1.468508654s ago: executing program 0 (id=310): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b4fb9b81300b11a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1.367746259s ago: executing program 5 (id=312): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1.201690499s ago: executing program 0 (id=314): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) close(r1) close(r2) 1.102767705s ago: executing program 1 (id=315): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 1.060740538s ago: executing program 5 (id=316): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000280)=0x1fffb, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 1.032853029s ago: executing program 5 (id=317): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000009, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000162000/0x2000)=nil, 0x2000, 0x1) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() 1.03034116s ago: executing program 1 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 909.479347ms ago: executing program 1 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5922f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28) 850.17804ms ago: executing program 0 (id=321): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x727, 0x70bd26, 0x1fc}, 0x14}, 0x1, 0x0, 0x0, 0x40815}, 0x8094) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 849.84223ms ago: executing program 33 (id=321): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x727, 0x70bd26, 0x1fc}, 0x14}, 0x1, 0x0, 0x0, 0x40815}, 0x8094) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 849.5562ms ago: executing program 1 (id=323): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 796.489993ms ago: executing program 1 (id=324): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x6e2a, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x5a}) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 740.940646ms ago: executing program 5 (id=325): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x18, 0x0, 0x0, 0x0) 701.344079ms ago: executing program 5 (id=326): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 675.69894ms ago: executing program 2 (id=327): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 669.936101ms ago: executing program 1 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0xa00) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) 626.704173ms ago: executing program 2 (id=329): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f00000000c0)='./file1\x00', 0x1a0) 578.453006ms ago: executing program 3 (id=330): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80001) fstatfs(r0, 0x0) close(r0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) 475.901912ms ago: executing program 3 (id=331): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@quota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x57d, &(0x7f0000000c80)="$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") sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) sendfile(r0, r0, 0x0, 0x800000009) 374.980558ms ago: executing program 3 (id=332): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fstatfs(r1, 0x0) fstatfs(r0, &(0x7f0000000100)=""/95) 256.840305ms ago: executing program 3 (id=333): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) 178.432559ms ago: executing program 3 (id=334): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x610bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3fff8000}, 0x2090, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0xfffffff9, 0x5}}) 0s ago: executing program 3 (id=335): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x176) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8) kernel console output (not intermixed with test programs): { siginh } for pid=3185 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.279336][ T28] audit: type=1400 audit(1770772150.284:62): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.301632][ T28] audit: type=1400 audit(1770772150.284:63): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.324337][ T28] audit: type=1400 audit(1770772150.284:64): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.347317][ T28] audit: type=1400 audit(1770772150.284:65): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.370395][ T28] audit: type=1400 audit(1770772150.284:66): avc: denied { read open } for pid=3192 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 30.020532][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 30.020550][ T28] audit: type=1400 audit(1770772158.024:70): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.050441][ T28] audit: type=1400 audit(1770772158.054:71): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.052741][ T3297] cgroup: Unknown subsys name 'net' [ 30.078224][ T28] audit: type=1400 audit(1770772158.084:72): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.217169][ T3297] cgroup: Unknown subsys name 'cpuset' [ 30.223475][ T3297] cgroup: Unknown subsys name 'rlimit' [ 30.334929][ T28] audit: type=1400 audit(1770772158.334:73): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.358354][ T28] audit: type=1400 audit(1770772158.344:74): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.385381][ T28] audit: type=1400 audit(1770772158.344:75): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.406093][ T28] audit: type=1400 audit(1770772158.344:76): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.426589][ T28] audit: type=1400 audit(1770772158.354:77): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.428292][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.447909][ T28] audit: type=1400 audit(1770772158.364:78): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.481267][ T28] audit: type=1400 audit(1770772158.364:79): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.513278][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.364074][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 32.394742][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 32.406720][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 32.420761][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 32.437942][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 32.494338][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.501499][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.508739][ T3316] bridge_slave_0: entered allmulticast mode [ 32.515253][ T3316] bridge_slave_0: entered promiscuous mode [ 32.537736][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.544849][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.552096][ T3316] bridge_slave_1: entered allmulticast mode [ 32.558545][ T3316] bridge_slave_1: entered promiscuous mode [ 32.599659][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.606841][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.614019][ T3310] bridge_slave_0: entered allmulticast mode [ 32.620632][ T3310] bridge_slave_0: entered promiscuous mode [ 32.638244][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.647565][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.654847][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.662049][ T3310] bridge_slave_1: entered allmulticast mode [ 32.668577][ T3310] bridge_slave_1: entered promiscuous mode [ 32.694027][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.717408][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.724507][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.731932][ T3309] bridge_slave_0: entered allmulticast mode [ 32.738571][ T3309] bridge_slave_0: entered promiscuous mode [ 32.749439][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.756722][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.763831][ T3317] bridge_slave_0: entered allmulticast mode [ 32.770357][ T3317] bridge_slave_0: entered promiscuous mode [ 32.777779][ T3316] team0: Port device team_slave_0 added [ 32.783397][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.790544][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.797865][ T3317] bridge_slave_1: entered allmulticast mode [ 32.804460][ T3317] bridge_slave_1: entered promiscuous mode [ 32.815770][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.822887][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.830173][ T3309] bridge_slave_1: entered allmulticast mode [ 32.836563][ T3309] bridge_slave_1: entered promiscuous mode [ 32.842837][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.850207][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.857464][ T3312] bridge_slave_0: entered allmulticast mode [ 32.863903][ T3312] bridge_slave_0: entered promiscuous mode [ 32.871039][ T3316] team0: Port device team_slave_1 added [ 32.883232][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.898119][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.905321][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.912685][ T3312] bridge_slave_1: entered allmulticast mode [ 32.919131][ T3312] bridge_slave_1: entered promiscuous mode [ 32.940557][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.960292][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.969723][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.976881][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.002905][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.019846][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.030430][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.045490][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.055137][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.062158][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.088448][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.112776][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.127987][ T3310] team0: Port device team_slave_0 added [ 33.139897][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.164280][ T3310] team0: Port device team_slave_1 added [ 33.179893][ T3309] team0: Port device team_slave_0 added [ 33.185730][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.192909][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.219173][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.235657][ T3317] team0: Port device team_slave_0 added [ 33.249189][ T3316] hsr_slave_0: entered promiscuous mode [ 33.255323][ T3316] hsr_slave_1: entered promiscuous mode [ 33.262203][ T3309] team0: Port device team_slave_1 added [ 33.273330][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.280430][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.306440][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.317972][ T3317] team0: Port device team_slave_1 added [ 33.324382][ T3312] team0: Port device team_slave_0 added [ 33.331243][ T3312] team0: Port device team_slave_1 added [ 33.366154][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.373270][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.399512][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.411006][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.418059][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.444036][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.469268][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.476315][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.502604][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.513657][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.520693][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.546935][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.558821][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.566045][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.592116][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.608986][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.615963][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.642255][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.686452][ T3310] hsr_slave_0: entered promiscuous mode [ 33.692563][ T3310] hsr_slave_1: entered promiscuous mode [ 33.698586][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 33.704320][ T3310] Cannot create hsr debugfs directory [ 33.714275][ T3309] hsr_slave_0: entered promiscuous mode [ 33.720715][ T3309] hsr_slave_1: entered promiscuous mode [ 33.726794][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 33.732529][ T3309] Cannot create hsr debugfs directory [ 33.759483][ T3317] hsr_slave_0: entered promiscuous mode [ 33.765546][ T3317] hsr_slave_1: entered promiscuous mode [ 33.771801][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 33.777571][ T3317] Cannot create hsr debugfs directory [ 33.793251][ T3312] hsr_slave_0: entered promiscuous mode [ 33.799429][ T3312] hsr_slave_1: entered promiscuous mode [ 33.805294][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 33.811128][ T3312] Cannot create hsr debugfs directory [ 34.001704][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.018570][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.033034][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.044557][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.072840][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.081887][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.098207][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.111315][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.138230][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.150724][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.159963][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.169783][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.203685][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.220501][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.237423][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.253065][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.264344][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.284684][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.303671][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.312400][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.321322][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.331332][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.341697][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.353722][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.363881][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.370955][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.384681][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.391783][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.421810][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.428975][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.438054][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.445170][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.517853][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.530798][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.555292][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.570089][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.594988][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.602140][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.612690][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.620523][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.631313][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.638553][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.647963][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.655031][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.672105][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.695469][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.709047][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.728572][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.752020][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.779560][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.786692][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.823442][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.853741][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.860951][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.944332][ T3310] veth0_vlan: entered promiscuous mode [ 34.964868][ T3310] veth1_vlan: entered promiscuous mode [ 34.982960][ T3316] veth0_vlan: entered promiscuous mode [ 35.000884][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.014393][ T3316] veth1_vlan: entered promiscuous mode [ 35.033823][ T3310] veth0_macvtap: entered promiscuous mode [ 35.054915][ T3316] veth0_macvtap: entered promiscuous mode [ 35.080458][ T3316] veth1_macvtap: entered promiscuous mode [ 35.092728][ T3310] veth1_macvtap: entered promiscuous mode [ 35.113889][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.133869][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.165698][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.183200][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.203367][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.214330][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.225395][ T3317] veth0_vlan: entered promiscuous mode [ 35.234445][ T3309] veth0_vlan: entered promiscuous mode [ 35.240663][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.255470][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.284551][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.294538][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.309321][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318568][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.330846][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.340916][ T3317] veth1_vlan: entered promiscuous mode [ 35.347857][ T3309] veth1_vlan: entered promiscuous mode [ 35.372715][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 35.372811][ T28] audit: type=1400 audit(1770772163.374:90): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.rw36f3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.376993][ T3312] veth0_vlan: entered promiscuous mode [ 35.379429][ T28] audit: type=1400 audit(1770772163.374:91): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.415435][ T3312] veth1_vlan: entered promiscuous mode [ 35.437027][ T28] audit: type=1400 audit(1770772163.374:92): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.rw36f3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.463235][ T28] audit: type=1400 audit(1770772163.374:93): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.468468][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.523221][ T3309] veth0_macvtap: entered promiscuous mode [ 35.542930][ T28] audit: type=1400 audit(1770772163.414:94): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.rw36f3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.556079][ T3317] veth0_macvtap: entered promiscuous mode [ 35.587904][ T3309] veth1_macvtap: entered promiscuous mode [ 35.602991][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.620845][ T3312] veth0_macvtap: entered promiscuous mode [ 35.626423][ T28] audit: type=1400 audit(1770772163.414:95): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.rw36f3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.633060][ T3317] veth1_macvtap: entered promiscuous mode [ 35.665876][ T3312] veth1_macvtap: entered promiscuous mode [ 35.679536][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.693478][ T28] audit: type=1400 audit(1770772163.414:96): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.717757][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.723751][ T28] audit: type=1400 audit(1770772163.444:97): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.750569][ T28] audit: type=1400 audit(1770772163.444:98): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.785166][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.793418][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.796797][ T28] audit: type=1400 audit(1770772163.524:99): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.826460][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.835549][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.876874][ T3487] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7'. [ 35.895747][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.930330][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.945055][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.976957][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.992318][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.032724][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.050037][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.078622][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.104615][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.116885][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.125732][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.205313][ T3506] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 36.254793][ T3506] syzkaller1: entered promiscuous mode [ 36.274718][ T3506] syzkaller1: entered allmulticast mode [ 36.299203][ T3514] macvlan2: entered promiscuous mode [ 36.325440][ T3514] macvlan3: entered promiscuous mode [ 36.396466][ T3514] Zero length message leads to an empty skb [ 36.445228][ T3530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.490972][ T3538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3538 comm=syz.2.27 [ 36.493648][ T3537] loop4: detected capacity change from 0 to 1024 [ 36.551555][ T3540] loop2: detected capacity change from 0 to 128 [ 36.557331][ T3537] ======================================================= [ 36.557331][ T3537] WARNING: The mand mount option has been deprecated and [ 36.557331][ T3537] and is ignored by this kernel. Remove the mand [ 36.557331][ T3537] option from the mount to silence this warning. [ 36.557331][ T3537] ======================================================= [ 36.618563][ T3537] EXT4-fs: inline encryption not supported [ 36.624778][ T3540] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.654902][ T3548] loop3: detected capacity change from 0 to 1024 [ 36.663837][ T3540] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.718923][ T3537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.745637][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.762439][ T3548] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.790553][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.831781][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.857174][ T3548] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.30: lblock 3 mapped to illegal pblock 3 (length 3) [ 36.923287][ T3568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.30: bg 0: block 112: padding at end of block bitmap is not set [ 36.945592][ T3548] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 36.958489][ T3417] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.964176][ T3548] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.964176][ T3548] [ 36.981555][ T3568] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 3 with error 117 [ 37.020718][ T3417] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.029000][ T3568] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.029000][ T3568] [ 37.089582][ T3568] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.30: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.133231][ T3568] syz.3.30 (3568) used greatest stack depth: 9256 bytes left [ 37.230319][ T51] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 37.245001][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 37.276503][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.276503][ T51] [ 37.299077][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.641290][ C1] hrtimer: interrupt took 27508 ns [ 37.764762][ T3620] team_slave_0: entered promiscuous mode [ 37.770580][ T3620] team_slave_1: entered promiscuous mode [ 37.779175][ T3620] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 37.796967][ T3620] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 37.859240][ T3626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.60'. [ 38.010734][ T3636] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 38.117581][ T3648] Illegal XDP return value 4294967274 on prog (id 13) dev syz_tun, expect packet loss! [ 38.180025][ T3657] loop4: detected capacity change from 0 to 512 [ 38.186869][ T3655] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 38.200188][ T3657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.221639][ T3657] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 38.243224][ T3657] EXT4-fs (loop4): Remounting filesystem read-only [ 38.256480][ T3657] EXT4-fs (loop4): 1 truncate cleaned up [ 38.268560][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.290607][ T3662] loop3: detected capacity change from 0 to 4096 [ 38.315407][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.351056][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.424992][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.559494][ T3673] loop2: detected capacity change from 0 to 512 [ 38.569422][ T3673] EXT4-fs: Ignoring removed nobh option [ 38.576608][ T3673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.592827][ T3673] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.606631][ T3673] EXT4-fs (loop2): 1 truncate cleaned up [ 38.612705][ T3673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.681024][ T3680] sock: sock_set_timeout: `syz.4.84' (pid 3680) tries to set negative timeout [ 38.712518][ T3682] loop3: detected capacity change from 0 to 256 [ 38.747241][ T3682] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.763979][ T3682] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.764930][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.806954][ T3686] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.917004][ T3698] macvlan2: entered promiscuous mode [ 38.928991][ T3698] macvlan3: entered promiscuous mode [ 39.003593][ T3705] loop4: detected capacity change from 0 to 4096 [ 39.016531][ T3705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.108979][ T3317] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 39.137385][ T3317] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 39.154442][ T3714] loop0: detected capacity change from 0 to 512 [ 39.193200][ T3714] EXT4-fs: Ignoring removed nobh option [ 39.209540][ T3714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.221449][ T3714] EXT4-fs (loop0): 1 truncate cleaned up [ 39.227808][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.326713][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811cb6b400: rx timeout, send abort [ 39.329372][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.335360][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811cb6b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 39.388859][ T3719] loop0: detected capacity change from 0 to 128 [ 39.398570][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.413536][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.459394][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.530314][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.580436][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.638651][ T3738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.657730][ T3738] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.689067][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.710895][ T12] bridge_slave_1: left allmulticast mode [ 39.730734][ T12] bridge_slave_1: left promiscuous mode [ 39.753751][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.772673][ T12] bridge_slave_0: left allmulticast mode [ 39.783501][ T12] bridge_slave_0: left promiscuous mode [ 39.790388][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.111848][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.130174][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.148579][ T12] bond0 (unregistering): Released all slaves [ 40.219646][ T12] hsr_slave_0: left promiscuous mode [ 40.255060][ T12] hsr_slave_1: left promiscuous mode [ 40.277303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.293015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.322799][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.341918][ T3800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.361402][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.379770][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 40.379785][ T28] audit: type=1400 audit(1770772424.386:253): avc: denied { watch } for pid=3806 comm="syz.2.129" path="/32/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.387803][ T3800] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.425306][ T12] team_slave_0: left promiscuous mode [ 40.430836][ T12] team_slave_1: left promiscuous mode [ 40.436648][ T12] veth1_macvtap: left promiscuous mode [ 40.442268][ T12] veth0_macvtap: left promiscuous mode [ 40.448515][ T12] veth1_vlan: left promiscuous mode [ 40.453871][ T12] veth0_vlan: left promiscuous mode [ 40.475236][ T3800] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 1 with error 28 [ 40.488561][ T3800] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.488561][ T3800] [ 40.527306][ T3800] EXT4-fs (loop1): Total free blocks count 0 [ 40.568713][ T3800] EXT4-fs (loop1): Free/Dirty block details [ 40.580993][ T3800] EXT4-fs (loop1): free_blocks=2415919504 [ 40.605668][ T3800] EXT4-fs (loop1): dirty_blocks=32 [ 40.626826][ T3800] EXT4-fs (loop1): Block reservation details [ 40.641980][ T3800] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 40.771099][ T12] team0 (unregistering): Port device team_slave_1 removed [ 40.787424][ T2115] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.801424][ T12] team0 (unregistering): Port device team_slave_0 removed [ 40.899500][ T28] audit: type=1400 audit(1770772424.906:254): avc: denied { read } for pid=3827 comm="syz.3.133" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.976388][ T28] audit: type=1400 audit(1770772424.906:255): avc: denied { open } for pid=3827 comm="syz.3.133" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.992817][ T3727] chnl_net:caif_netlink_parms(): no params data found [ 41.092994][ T3844] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.101295][ T3842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 41.114763][ T28] audit: type=1400 audit(1770772424.926:256): avc: denied { ioctl } for pid=3827 comm="syz.3.133" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.142327][ T3844] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.174586][ T28] audit: type=1400 audit(1770772424.956:257): avc: denied { module_request } for pid=3727 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.216443][ T28] audit: type=1400 audit(1770772425.216:258): avc: denied { create } for pid=3843 comm="syz.0.138" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.252837][ T28] audit: type=1400 audit(1770772425.236:259): avc: denied { rename } for pid=3843 comm="syz.0.138" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.298007][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.312541][ T28] audit: type=1400 audit(1770772425.236:260): avc: denied { rmdir } for pid=3843 comm="syz.0.138" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.327996][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.368935][ T3727] bridge_slave_0: entered allmulticast mode [ 41.376791][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.387879][ T3727] bridge_slave_0: entered promiscuous mode [ 41.405240][ T28] audit: type=1400 audit(1770772425.336:261): avc: denied { write } for pid=3858 comm="syz.2.141" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.424312][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.433532][ T28] audit: type=1400 audit(1770772425.366:262): avc: denied { name_bind } for pid=3863 comm="syz.2.142" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 41.490910][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.510225][ T3727] bridge_slave_1: entered allmulticast mode [ 41.524160][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 41.530404][ T3727] bridge_slave_1: entered promiscuous mode [ 41.553990][ T3878] team0: entered promiscuous mode [ 41.559456][ T3878] team_slave_0: entered promiscuous mode [ 41.565854][ T3878] team_slave_1: entered promiscuous mode [ 41.582004][ T3868] team0: left promiscuous mode [ 41.596049][ T3868] team_slave_0: left promiscuous mode [ 41.606500][ T3868] team_slave_1: left promiscuous mode [ 41.614227][ T3727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.627475][ T3884] set_capacity_and_notify: 3 callbacks suppressed [ 41.627493][ T3884] loop1: detected capacity change from 0 to 512 [ 41.639164][ T3727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.665260][ T3884] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.693369][ T3727] team0: Port device team_slave_0 added [ 41.695977][ T3884] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 41.705468][ T3727] team0: Port device team_slave_1 added [ 41.779435][ T3727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.798566][ T3727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.865164][ T3727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.903658][ T3727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.911751][ T3727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.938672][ T3727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.007658][ T3727] hsr_slave_0: entered promiscuous mode [ 42.014913][ T3727] hsr_slave_1: entered promiscuous mode [ 42.024899][ T3727] debugfs: 'hsr0' already exists in 'hsr' [ 42.046088][ T3727] Cannot create hsr debugfs directory [ 42.134964][ T3924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.200487][ T3727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.224856][ T3727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.236645][ T3727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.248251][ T3930] loop1: detected capacity change from 0 to 2048 [ 42.255962][ T3930] EXT4-fs: Ignoring removed bh option [ 42.261019][ T3727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.280538][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.320254][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.380436][ T3727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.397184][ T3727] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.415289][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.422442][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.451082][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.458324][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.468961][ T3949] loop1: detected capacity change from 0 to 512 [ 42.575143][ T3727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.646268][ T3967] loop0: detected capacity change from 0 to 4096 [ 42.676298][ T3967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.746708][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.812633][ T3727] veth0_vlan: entered promiscuous mode [ 42.829181][ T3727] veth1_vlan: entered promiscuous mode [ 42.854991][ T3727] veth0_macvtap: entered promiscuous mode [ 42.872762][ T3727] veth1_macvtap: entered promiscuous mode [ 42.919783][ T3727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.938657][ T3992] netlink: 796 bytes leftover after parsing attributes in process `syz.3.176'. [ 42.958199][ T3727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.981252][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.992727][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.024819][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.034879][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.051385][ T4001] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 43.059716][ T4001] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 43.282579][ T4021] loop0: detected capacity change from 0 to 512 [ 43.296213][ T4021] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 43.342099][ T4026] netlink: 'syz.5.188': attribute type 10 has an invalid length. [ 43.350614][ T4026] netlink: 40 bytes leftover after parsing attributes in process `syz.5.188'. [ 43.360787][ T4026] dummy0: entered promiscuous mode [ 43.367237][ T4026] bridge0: port 3(dummy0) entered blocking state [ 43.373927][ T4026] bridge0: port 3(dummy0) entered disabled state [ 43.381029][ T4026] dummy0: entered allmulticast mode [ 43.397137][ T4026] bridge0: port 3(dummy0) entered blocking state [ 43.403618][ T4026] bridge0: port 3(dummy0) entered forwarding state [ 43.432613][ T4029] loop2: detected capacity change from 0 to 512 [ 43.449968][ T4029] EXT4-fs: Ignoring removed orlov option [ 43.473595][ T4029] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.499175][ T4029] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.190: corrupted in-inode xattr: e_value size too large [ 43.513364][ T4029] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.533925][ T4029] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.190: couldn't read orphan inode 15 (err -117) [ 43.555260][ T4029] loop2: lost filesystem error report for type 5 error -117 [ 43.561289][ T4029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.632607][ T4042] loop0: detected capacity change from 0 to 1024 [ 43.639520][ T4042] EXT4-fs: Ignoring removed oldalloc option [ 43.645522][ T4042] EXT4-fs: inline encryption not supported [ 43.656994][ T4042] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.672216][ T4042] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.196: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.695435][ T4042] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.696790][ T4042] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.196: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.750962][ T4042] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.752989][ T4042] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.196: Failed to acquire dquot type 0 [ 43.773802][ T4042] loop0: lost filesystem error report for type 5 error -117 [ 43.774048][ T4042] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 43.787772][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.795922][ T4042] loop0: lost filesystem error report for type 5 error -117 [ 43.805785][ T4042] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.196: mark_inode_dirty error [ 43.825256][ T4042] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.826512][ T4042] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 43.835979][ T4049] loop3: detected capacity change from 0 to 128 [ 43.846973][ T4042] EXT4-fs (loop0): 1 orphan inode deleted [ 43.859034][ T4042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.871669][ T30] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.882763][ T4049] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.915581][ T30] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.915745][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7027: comm kworker/u8:1: Failed to release dquot type 0 [ 43.941341][ T4049] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.990364][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.023251][ T3312] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 44.077610][ T3312] loop0: lost filesystem error report for type 5 error -117 [ 44.077746][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 44.121434][ T3312] loop0: lost filesystem error report for type 5 error -117 [ 44.125353][ T3312] EXT4-fs error (device loop0): ext4_quota_off:7275: inode #3: comm syz-executor: mark_inode_dirty error [ 44.172797][ T3312] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.185755][ T4066] loop2: detected capacity change from 0 to 512 [ 44.201817][ T10] IPVS: starting estimator thread 0... [ 44.222619][ T4054] loop1: detected capacity change from 0 to 512 [ 44.252128][ T4072] FAT-fs (loop3): bogus number of FAT sectors [ 44.261635][ T4054] EXT4-fs: Ignoring removed nobh option [ 44.268445][ T4072] FAT-fs (loop3): Can't find a valid FAT filesystem [ 44.301483][ T4066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.306805][ T4069] IPVS: using max 1920 ests per chain, 96000 per kthread [ 44.357280][ T4054] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.375819][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.401889][ T4077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.431747][ T4054] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.203: EA inode hash validation failed [ 44.463634][ T4066] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.475414][ T4077] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.497459][ T4054] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.514620][ T4054] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.203: corrupted inode contents [ 44.528621][ T4054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.529700][ T4054] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.203: mark_inode_dirty error [ 44.552082][ T4054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.556397][ T4054] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.203: corrupted inode contents [ 44.559368][ T4077] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.211: lblock 3 mapped to illegal pblock 3 (length 3) [ 44.566638][ T4054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.594293][ T4054] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.203: mark_inode_dirty error [ 44.604218][ T4077] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 44.604246][ T4077] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.604246][ T4077] [ 44.652248][ T4077] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm syz.0.211: lblock 8 mapped to illegal pblock 8 (length 8) [ 44.652353][ T4054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.667372][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.685916][ T4077] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 44.698741][ T4077] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.698741][ T4077] [ 44.703415][ T4054] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.203: mark inode dirty (error -117) [ 44.727634][ T4087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.737823][ T4054] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 44.750007][ T4054] EXT4-fs (loop1): 1 orphan inode deleted [ 44.750641][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.761945][ T4054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.856952][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.858391][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.567844][ T4133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.589492][ T4133] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.629174][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 45.629206][ T28] audit: type=1400 audit(1770772429.636:330): avc: denied { write } for pid=4132 comm="syz.1.233" path="/37/file1/.log" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.997716][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.030654][ T28] audit: type=1400 audit(1770772430.036:331): avc: denied { read } for pid=4137 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.179266][ T4156] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 46.325022][ T4165] process 'syz.2.247' launched '/dev/fd/5' with NULL argv: empty string added [ 46.341873][ T28] audit: type=1400 audit(1770772430.346:332): avc: denied { execute_no_trans } for pid=4164 comm="syz.2.247" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.508349][ T4185] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 46.533830][ T28] audit: type=1400 audit(1770772430.536:333): avc: denied { kexec_image_load } for pid=4186 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 46.557070][ T4185] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.563906][ T4185] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.251: bg 0: block 16: invalid block bitmap [ 46.594622][ T4185] loop2: lost filesystem error report for type 5 error -117 [ 46.596417][ T4185] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 46.629014][ T4185] loop2: lost filesystem error report for type 5 error -117 [ 46.634716][ T4185] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.251: attempt to clear invalid blocks 1669132790 len 1 [ 46.659685][ T4185] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.251: invalid indirect mapped block 4294967295 (level 1) [ 46.675964][ T4185] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.251: invalid indirect mapped block 4294967295 (level 2) [ 46.691439][ T4185] EXT4-fs (loop2): 1 truncate cleaned up [ 46.701506][ T4185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.739535][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.748745][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.757909][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.767010][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.776176][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.785317][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.787249][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.794494][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.812511][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.821620][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.830752][ T4199] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 46.844334][ T4203] set_capacity_and_notify: 8 callbacks suppressed [ 46.844353][ T4203] loop3: detected capacity change from 0 to 128 [ 46.870668][ T4203] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.981504][ T4210] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 47.179186][ T4222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'. [ 47.192844][ T4222] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 47.203608][ T4222] bridge1: entered promiscuous mode [ 47.208860][ T4222] bridge1: entered allmulticast mode [ 47.225923][ T28] audit: type=1400 audit(1770772431.226:334): avc: denied { bind } for pid=4226 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.397424][ T4242] loop5: detected capacity change from 0 to 512 [ 47.424002][ T4242] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.278: invalid indirect mapped block 256 (level 2) [ 47.439051][ T28] audit: type=1326 audit(1770772431.446:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.1.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe56e9fbf79 code=0x0 [ 47.463472][ T4242] EXT4-fs (loop5): 2 truncates cleaned up [ 47.475497][ T4242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.511481][ T28] audit: type=1400 audit(1770772431.516:336): avc: denied { append } for pid=4240 comm="syz.5.278" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.525988][ T4252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.281'. [ 47.552446][ T28] audit: type=1400 audit(1770772431.516:337): avc: denied { nlmsg_read } for pid=4251 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.573583][ T28] audit: type=1400 audit(1770772431.536:338): avc: denied { ioctl } for pid=4240 comm="syz.5.278" path="/14/file1/file1" dev="loop5" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.575128][ T3727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.698015][ T28] audit: type=1400 audit(1770772431.696:339): avc: denied { ioctl } for pid=4259 comm="syz.2.285" path="socket:[7561]" dev="sockfs" ino=7561 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.043120][ T4285] loop2: detected capacity change from 0 to 512 [ 48.082025][ T4285] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.099661][ T4285] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 48.112749][ T4285] EXT4-fs (loop2): 1 truncate cleaned up [ 48.121679][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.139866][ T4285] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.295: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 48.160700][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 48.186040][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.228598][ T4294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.300'. [ 48.238298][ T4294] netlink: 9 bytes leftover after parsing attributes in process `syz.5.300'. [ 48.275113][ T4298] loop1: detected capacity change from 0 to 512 [ 48.315850][ T4298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.345153][ T4298] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.355951][ T4296] loop5: detected capacity change from 0 to 4096 [ 48.368745][ T4298] capability: warning: `syz.1.302' uses deprecated v2 capabilities in a way that may be insecure [ 48.435978][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.450410][ T4296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.522027][ T4320] loop0: detected capacity change from 0 to 256 [ 48.530937][ T4296] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.538312][ T4321] netlink: 68 bytes leftover after parsing attributes in process `syz.1.307'. [ 48.594724][ T4320] FAT-fs (loop0): Directory bread(block 64) failed [ 48.601481][ T4320] FAT-fs (loop0): Directory bread(block 65) failed [ 48.613727][ T4320] FAT-fs (loop0): Directory bread(block 66) failed [ 48.620533][ T4320] FAT-fs (loop0): Directory bread(block 67) failed [ 48.627246][ T4320] FAT-fs (loop0): Directory bread(block 68) failed [ 48.633866][ T4320] FAT-fs (loop0): Directory bread(block 69) failed [ 48.634633][ T3727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.641066][ T4320] FAT-fs (loop0): Directory bread(block 70) failed [ 48.656170][ T4320] FAT-fs (loop0): Directory bread(block 71) failed [ 48.675133][ T4320] FAT-fs (loop0): Directory bread(block 72) failed [ 48.694389][ T4320] FAT-fs (loop0): Directory bread(block 73) failed [ 48.748843][ T4330] loop3: detected capacity change from 0 to 1024 [ 48.755730][ T4330] EXT4-fs: Ignoring removed bh option [ 48.762125][ T4330] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 48.769650][ T3312] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 48.780197][ T3312] FAT-fs (loop0): Filesystem has been set read-only [ 48.785628][ T4330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.843071][ T4330] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.313: Allocating blocks 497-513 which overlap fs metadata [ 48.870207][ T4330] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.313: Allocating blocks 497-513 which overlap fs metadata [ 48.942777][ T4329] EXT4-fs (loop3): pa ffff88810635b1c0: logic 48, phys. 177, len 21 [ 48.950891][ T4329] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 48.978244][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.062325][ T1607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.120884][ T1607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.182086][ T1607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.230284][ T1607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.355841][ T1607] bridge_slave_1: left allmulticast mode [ 49.363225][ T1607] bridge_slave_1: left promiscuous mode [ 49.370910][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.384345][ T4376] loop3: detected capacity change from 0 to 512 [ 49.401399][ T1607] bridge_slave_0: left allmulticast mode [ 49.423289][ T1607] bridge_slave_0: left promiscuous mode [ 49.431290][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.450805][ T4376] FAT-fs (loop3): FAT read failed (blocknr 128) [ 49.503979][ T4381] loop3: detected capacity change from 0 to 1024 [ 49.511747][ T4381] EXT4-fs: Ignoring removed orlov option [ 49.521917][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.532950][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.533875][ T4381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.557255][ T1607] bond0 (unregistering): Released all slaves [ 49.582634][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.619840][ T4386] loop3: detected capacity change from 0 to 256 [ 49.627148][ T4386] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.641082][ T1607] hsr_slave_0: left promiscuous mode [ 49.647041][ T1607] hsr_slave_1: left promiscuous mode [ 49.652856][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.660861][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.678890][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.691667][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.724575][ T1607] veth1_macvtap: left promiscuous mode [ 49.734750][ T1607] veth0_macvtap: left promiscuous mode [ 49.740672][ T1607] veth1_vlan: left promiscuous mode [ 49.746316][ T1607] veth0_vlan: left promiscuous mode [ 49.864260][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 49.876883][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 49.949004][ T4351] chnl_net:caif_netlink_parms(): no params data found [ 49.979709][ T4410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 49.997823][ T4410] System zones: 1-3, 19-19, 35-36 [ 50.003844][ T4410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.019604][ T4410] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.047117][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.054310][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.061871][ T4351] bridge_slave_0: entered allmulticast mode [ 50.068798][ T4351] bridge_slave_0: entered promiscuous mode [ 50.077541][ T4420] ================================================================== [ 50.085757][ T4420] BUG: KCSAN: data-race in copy_process / free_pid [ 50.092294][ T4420] [ 50.094638][ T4420] read-write to 0xffffffff86a61ee8 of 4 bytes by task 3412 on cpu 1: [ 50.102718][ T4420] free_pid+0xb9/0x1d0 [ 50.106819][ T4420] free_pids+0x7a/0xb0 [ 50.110921][ T4420] release_task+0x9a7/0xb60 [ 50.115490][ T4420] do_exit+0xd56/0x1590 [ 50.119691][ T4420] kthread_exit+0x156/0x190 [ 50.124322][ T4420] kthread+0x232/0x280 [ 50.128445][ T4420] ret_from_fork+0x150/0x360 [ 50.133073][ T4420] ret_from_fork_asm+0x1a/0x30 [ 50.137876][ T4420] [ 50.140233][ T4420] read to 0xffffffff86a61ee8 of 4 bytes by task 4420 on cpu 0: [ 50.147889][ T4420] copy_process+0x1895/0x20c0 [ 50.152609][ T4420] kernel_clone+0x16b/0x5b0 [ 50.157140][ T4420] __x64_sys_clone+0x143/0x180 [ 50.161940][ T4420] x64_sys_call+0x1222/0x3020 [ 50.166642][ T4420] do_syscall_64+0x12c/0x370 [ 50.171265][ T4420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.177185][ T4420] [ 50.179522][ T4420] value changed: 0x800000e4 -> 0x800000e3 [ 50.185258][ T4420] [ 50.187600][ T4420] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 50.193790][ T4420] CPU: 0 UID: 0 PID: 4420 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 50.203542][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 50.213620][ T4420] ================================================================== [ 50.222120][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.233961][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.276614][ T4351] bridge_slave_1: entered allmulticast mode [ 50.288751][ T4351] bridge_slave_1: entered promiscuous mode [ 50.380593][ T4003] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.500252][ T1607] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.569665][ T1607] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.610287][ T1607] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.659521][ T1607] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.735392][ T1607] dummy0: left allmulticast mode [ 50.740620][ T1607] bridge0: port 3(dummy0) entered disabled state [ 50.747716][ T1607] bridge_slave_1: left allmulticast mode [ 50.753444][ T1607] bridge_slave_1: left promiscuous mode [ 50.759220][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.767040][ T1607] bridge_slave_0: left allmulticast mode [ 50.772691][ T1607] bridge_slave_0: left promiscuous mode [ 50.778480][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.838432][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.848673][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.858321][ T1607] bond0 (unregistering): Released all slaves [ 50.890369][ T1607] hsr_slave_0: left promiscuous mode [ 50.896179][ T1607] hsr_slave_1: left promiscuous mode [ 50.901908][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.909372][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.917360][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.924862][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.936103][ T1607] veth1_macvtap: left promiscuous mode [ 50.941723][ T1607] veth0_macvtap: left promiscuous mode [ 50.947501][ T1607] veth1_vlan: left promiscuous mode [ 50.952798][ T1607] veth0_vlan: left promiscuous mode [ 51.033683][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 51.043917][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 51.367030][ T1607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.409796][ T1607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.480023][ T1607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.539235][ T1607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.621925][ T1607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.671448][ T1607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.719443][ T1607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.759696][ T1607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.848682][ T1607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.880301][ T1607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.939800][ T1607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.971753][ T1607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.058162][ T1607] bridge_slave_1: left allmulticast mode [ 52.063945][ T1607] bridge_slave_1: left promiscuous mode [ 52.070149][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.078425][ T1607] bridge_slave_0: left allmulticast mode [ 52.084159][ T1607] bridge_slave_0: left promiscuous mode [ 52.090237][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.098916][ T1607] bridge_slave_1: left allmulticast mode [ 52.104606][ T1607] bridge_slave_1: left promiscuous mode [ 52.110547][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.118710][ T1607] bridge_slave_0: left allmulticast mode [ 52.124397][ T1607] bridge_slave_0: left promiscuous mode [ 52.130552][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.139541][ T1607] bridge_slave_1: left allmulticast mode [ 52.145325][ T1607] bridge_slave_1: left promiscuous mode [ 52.151340][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.159789][ T1607] bridge_slave_0: left allmulticast mode [ 52.165434][ T1607] bridge_slave_0: left promiscuous mode [ 52.171645][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.180300][ T1607] bridge_slave_1: left allmulticast mode [ 52.186022][ T1607] bridge_slave_1: left promiscuous mode [ 52.192125][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.200149][ T1607] bridge_slave_0: left allmulticast mode [ 52.205823][ T1607] bridge_slave_0: left promiscuous mode [ 52.211831][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.338644][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.348601][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.358259][ T1607] bond0 (unregistering): Released all slaves [ 52.429632][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.439459][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.449190][ T1607] bond0 (unregistering): Released all slaves [ 52.519367][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.530495][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.540028][ T1607] bond0 (unregistering): Released all slaves [ 52.558256][ T1607] bond0 (unregistering): Released all slaves [ 52.608850][ T1607] hsr_slave_0: left promiscuous mode [ 52.614537][ T1607] hsr_slave_1: left promiscuous mode [ 52.620496][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.628162][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.637491][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.644910][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.657629][ T1607] hsr_slave_0: left promiscuous mode [ 52.663468][ T1607] hsr_slave_1: left promiscuous mode [ 52.669356][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.677042][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.684696][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.693444][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.703202][ T1607] hsr_slave_0: left promiscuous mode [ 52.709222][ T1607] hsr_slave_1: left promiscuous mode [ 52.714842][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.723470][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.731275][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.738856][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.755338][ T1607] veth1_macvtap: left promiscuous mode [ 52.761366][ T1607] veth0_macvtap: left promiscuous mode [ 52.767226][ T1607] veth1_vlan: left promiscuous mode [ 52.772542][ T1607] veth0_vlan: left promiscuous mode [ 52.778587][ T1607] veth1_macvtap: left promiscuous mode [ 52.784098][ T1607] veth0_macvtap: left promiscuous mode [ 52.789968][ T1607] veth1_vlan: left promiscuous mode [ 52.795461][ T1607] veth0_vlan: left promiscuous mode [ 52.801618][ T1607] veth1_macvtap: left promiscuous mode [ 52.807197][ T1607] veth0_macvtap: left promiscuous mode [ 52.812798][ T1607] veth1_vlan: left promiscuous mode [ 52.818096][ T1607] veth0_vlan: left promiscuous mode [ 52.955618][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 52.965921][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 53.025872][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 53.035508][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 53.096091][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 53.106823][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 54.102306][ T1607] IPVS: stop unused estimator thread 0...