last executing test programs: 2.046784082s ago: executing program 4 (id=383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000005c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 1.966438346s ago: executing program 4 (id=387): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="66669d"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1.918106657s ago: executing program 4 (id=391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x2, 0x810) close(r1) 1.879968389s ago: executing program 4 (id=395): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@numtail}, {@fat=@sys_immutable}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}]}, 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xf, 0x200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 1.445304008s ago: executing program 4 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 1.16963118s ago: executing program 1 (id=412): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.131727531s ago: executing program 1 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) 922.018391ms ago: executing program 1 (id=420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 796.132616ms ago: executing program 4 (id=423): mkdir(&(0x7f0000000400)='./file0\x00', 0x5c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 795.956126ms ago: executing program 32 (id=423): mkdir(&(0x7f0000000400)='./file0\x00', 0x5c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 713.34151ms ago: executing program 0 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x514, &(0x7f0000000300)="$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") 700.03727ms ago: executing program 1 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 603.627734ms ago: executing program 3 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 493.857118ms ago: executing program 0 (id=430): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") 482.968009ms ago: executing program 3 (id=431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f5, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffc}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 430.306752ms ago: executing program 3 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r2, 0x0, 0x40000000, 0x0) 371.434844ms ago: executing program 2 (id=434): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 310.574887ms ago: executing program 2 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[], 0xe, 0x2a9, &(0x7f0000006540)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) sendfile(r0, r0, 0x0, 0x1000200201005) 289.673177ms ago: executing program 1 (id=436): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) close(r0) 276.614848ms ago: executing program 2 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r2) 257.381709ms ago: executing program 2 (id=438): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000008c0)='asymmetric\x00', &(0x7f0000000800)=@chain={'key_or_keyring:', r0}) 254.701359ms ago: executing program 0 (id=439): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) 202.628031ms ago: executing program 0 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 196.367021ms ago: executing program 2 (id=441): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0xffffffffffffffff, 0x800, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a7, 0x4, @perf_config_ext={0x5}, 0x83105, 0x379, 0x0, 0x6, 0x1ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffefffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 183.501702ms ago: executing program 1 (id=442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) epoll_pwait(r0, 0x0, 0x0, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 180.886352ms ago: executing program 3 (id=443): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02139c090a0000002abd7000fcdbdf25080012"], 0x50}}, 0x80) 159.671073ms ago: executing program 0 (id=444): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) 124.353165ms ago: executing program 2 (id=445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x8004) 122.213675ms ago: executing program 0 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000100)='\x00\x00\x00', 0x3}, {&(0x7f0000000180)="38c8", 0x39}], 0x3) 91.379126ms ago: executing program 3 (id=447): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) 0s ago: executing program 3 (id=448): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 32.868805][ T29] audit: type=1400 audit(1764242557.328:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.892022][ T29] audit: type=1400 audit(1764242557.348:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.893001][ T3304] cgroup: Unknown subsys name 'net' [ 32.920337][ T29] audit: type=1400 audit(1764242557.378:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.036256][ T3304] cgroup: Unknown subsys name 'cpuset' [ 33.042621][ T3304] cgroup: Unknown subsys name 'rlimit' [ 33.153993][ T29] audit: type=1400 audit(1764242557.608:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.181764][ T29] audit: type=1400 audit(1764242557.608:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.202363][ T29] audit: type=1400 audit(1764242557.608:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.222999][ T29] audit: type=1400 audit(1764242557.608:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.243328][ T29] audit: type=1400 audit(1764242557.608:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.252577][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.268271][ T29] audit: type=1400 audit(1764242557.608:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.300215][ T29] audit: type=1400 audit(1764242557.738:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.336109][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.236232][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.288020][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.299385][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.325997][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.357554][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.442355][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.449621][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.456948][ T3320] bridge_slave_0: entered allmulticast mode [ 35.463263][ T3320] bridge_slave_0: entered promiscuous mode [ 35.481702][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.488827][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.496174][ T3314] bridge_slave_0: entered allmulticast mode [ 35.502771][ T3314] bridge_slave_0: entered promiscuous mode [ 35.509312][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.516573][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.523819][ T3320] bridge_slave_1: entered allmulticast mode [ 35.530358][ T3320] bridge_slave_1: entered promiscuous mode [ 35.536739][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.543828][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.551039][ T3321] bridge_slave_0: entered allmulticast mode [ 35.557481][ T3321] bridge_slave_0: entered promiscuous mode [ 35.571221][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.578404][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.585680][ T3314] bridge_slave_1: entered allmulticast mode [ 35.592227][ T3314] bridge_slave_1: entered promiscuous mode [ 35.604041][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.611144][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.618433][ T3321] bridge_slave_1: entered allmulticast mode [ 35.625071][ T3321] bridge_slave_1: entered promiscuous mode [ 35.631398][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.638495][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.645762][ T3324] bridge_slave_0: entered allmulticast mode [ 35.652277][ T3324] bridge_slave_0: entered promiscuous mode [ 35.678809][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.685953][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.693075][ T3324] bridge_slave_1: entered allmulticast mode [ 35.699532][ T3324] bridge_slave_1: entered promiscuous mode [ 35.716294][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.723368][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.730689][ T3316] bridge_slave_0: entered allmulticast mode [ 35.737181][ T3316] bridge_slave_0: entered promiscuous mode [ 35.749474][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.759677][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.770165][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.790131][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.799367][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.806493][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.813674][ T3316] bridge_slave_1: entered allmulticast mode [ 35.820348][ T3316] bridge_slave_1: entered promiscuous mode [ 35.827711][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.842827][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.853228][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.883914][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.909217][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.924372][ T3314] team0: Port device team_slave_0 added [ 35.930878][ T3320] team0: Port device team_slave_0 added [ 35.937630][ T3320] team0: Port device team_slave_1 added [ 35.949234][ T3324] team0: Port device team_slave_0 added [ 35.955709][ T3321] team0: Port device team_slave_0 added [ 35.963032][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.973037][ T3314] team0: Port device team_slave_1 added [ 35.985283][ T3321] team0: Port device team_slave_1 added [ 35.991683][ T3324] team0: Port device team_slave_1 added [ 36.033221][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.040319][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.066517][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.087785][ T3316] team0: Port device team_slave_0 added [ 36.093787][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.100825][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.127155][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.138234][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.145631][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.171622][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.182743][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.189753][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.215893][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.227227][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.234205][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.260554][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.272167][ T3316] team0: Port device team_slave_1 added [ 36.278355][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.285630][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.311791][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.323425][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.330555][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.356572][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.375697][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.382666][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.408821][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.439139][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.446164][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.472159][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.484037][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.491062][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.517144][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.546038][ T3324] hsr_slave_0: entered promiscuous mode [ 36.552232][ T3324] hsr_slave_1: entered promiscuous mode [ 36.568707][ T3320] hsr_slave_0: entered promiscuous mode [ 36.574815][ T3320] hsr_slave_1: entered promiscuous mode [ 36.580720][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.586514][ T3320] Cannot create hsr debugfs directory [ 36.606016][ T3314] hsr_slave_0: entered promiscuous mode [ 36.612099][ T3314] hsr_slave_1: entered promiscuous mode [ 36.618102][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.623940][ T3314] Cannot create hsr debugfs directory [ 36.659443][ T3321] hsr_slave_0: entered promiscuous mode [ 36.665844][ T3321] hsr_slave_1: entered promiscuous mode [ 36.671700][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.677511][ T3321] Cannot create hsr debugfs directory [ 36.708955][ T3316] hsr_slave_0: entered promiscuous mode [ 36.715045][ T3316] hsr_slave_1: entered promiscuous mode [ 36.720974][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.726848][ T3316] Cannot create hsr debugfs directory [ 36.915825][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.924601][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.935913][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.944941][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.967403][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.976519][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.985307][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.993958][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.028600][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.038152][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.047593][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.061085][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.094874][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.106027][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.121273][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.130867][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.168030][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.177812][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.201081][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.210176][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.229651][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.242299][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.264869][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.278844][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.285937][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.294708][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.301899][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.312373][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.323966][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.347292][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.354361][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.364090][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.371167][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.408416][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.419588][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.435002][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.442232][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.461499][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.472061][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.480541][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.487631][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.514822][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.521954][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.534835][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.558945][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.566137][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.608282][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.615558][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.635740][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.642946][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.656139][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.680180][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.700793][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.812765][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.858507][ T3324] veth0_vlan: entered promiscuous mode [ 37.880478][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.906922][ T3324] veth1_vlan: entered promiscuous mode [ 37.919786][ T3320] veth0_vlan: entered promiscuous mode [ 37.945835][ T3320] veth1_vlan: entered promiscuous mode [ 37.957309][ T3324] veth0_macvtap: entered promiscuous mode [ 37.976257][ T3324] veth1_macvtap: entered promiscuous mode [ 38.008680][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.025644][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.044220][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.057842][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.072854][ T3314] veth0_vlan: entered promiscuous mode [ 38.081130][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.091023][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.103055][ T3320] veth0_macvtap: entered promiscuous mode [ 38.110236][ T3321] veth0_vlan: entered promiscuous mode [ 38.120055][ T3320] veth1_macvtap: entered promiscuous mode [ 38.128903][ T3314] veth1_vlan: entered promiscuous mode [ 38.140538][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.140555][ T29] audit: type=1400 audit(1764242562.598:81): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.bYzCQb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.162995][ T3316] veth0_vlan: entered promiscuous mode [ 38.177122][ T29] audit: type=1400 audit(1764242562.618:82): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.182242][ T3321] veth1_vlan: entered promiscuous mode [ 38.199467][ T29] audit: type=1400 audit(1764242562.618:83): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.bYzCQb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.217453][ T3321] veth0_macvtap: entered promiscuous mode [ 38.230892][ T29] audit: type=1400 audit(1764242562.618:84): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.239842][ T3321] veth1_macvtap: entered promiscuous mode [ 38.258541][ T29] audit: type=1400 audit(1764242562.618:85): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.bYzCQb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.273596][ T3314] veth0_macvtap: entered promiscuous mode [ 38.290907][ T29] audit: type=1400 audit(1764242562.618:86): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.bYzCQb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.311922][ T3316] veth1_vlan: entered promiscuous mode [ 38.324210][ T29] audit: type=1400 audit(1764242562.618:87): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.344179][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.359343][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.360030][ T29] audit: type=1400 audit(1764242562.638:88): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.373664][ T3314] veth1_macvtap: entered promiscuous mode [ 38.389475][ T29] audit: type=1400 audit(1764242562.638:89): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="gadgetfs" ino=4680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.407654][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.427985][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.440603][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.443778][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.466960][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.488311][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.500088][ T3316] veth0_macvtap: entered promiscuous mode [ 38.510995][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.518393][ T29] audit: type=1400 audit(1764242562.968:90): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.528679][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.557520][ T3316] veth1_macvtap: entered promiscuous mode [ 38.581210][ T3484] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 38.599572][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.627085][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.637418][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.652628][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.664976][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.696662][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.721038][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.743457][ T3496] loop0: detected capacity change from 0 to 512 [ 38.748286][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.776256][ T3496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.789544][ T3496] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.805979][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814926][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.862232][ T3496] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.891527][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.900894][ T3496] EXT4-fs (loop0): 1 truncate cleaned up [ 38.906688][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.923085][ T3496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.960169][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.974563][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036088][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.089155][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.190276][ T3527] netlink: 340 bytes leftover after parsing attributes in process `syz.0.16'. [ 39.334726][ T3545] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 39.411066][ T3550] rdma_op ffff88811a0f6980 conn xmit_rdma 0000000000000000 [ 39.427578][ T3555] loop2: detected capacity change from 0 to 256 [ 39.434149][ T3555] ======================================================= [ 39.434149][ T3555] WARNING: The mand mount option has been deprecated and [ 39.434149][ T3555] and is ignored by this kernel. Remove the mand [ 39.434149][ T3555] option from the mount to silence this warning. [ 39.434149][ T3555] ======================================================= [ 39.469819][ T3556] loop1: detected capacity change from 0 to 512 [ 39.478829][ T3556] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.487955][ T3556] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 39.510758][ T3556] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 39.520526][ T3556] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 39.540921][ T3555] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 39.548844][ T3555] FAT-fs (loop2): Filesystem has been set read-only [ 39.555614][ T3556] System zones: 0-2, 18-18, 34-35 [ 39.594503][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.613796][ T3560] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 39.627346][ T3556] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.34: bg 0: block 353: padding at end of block bitmap is not set [ 39.642269][ T3556] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 39.690458][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.807308][ T3583] loop4: detected capacity change from 0 to 512 [ 39.833127][ T3585] random: crng reseeded on system resumption [ 39.853594][ T3583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.872484][ T3583] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.962609][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.020316][ T3602] loop4: detected capacity change from 0 to 512 [ 40.179208][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.226409][ T3619] sctp: [Deprecated]: syz.0.58 (pid 3619) Use of int in maxseg socket option. [ 40.226409][ T3619] Use struct sctp_assoc_value instead [ 40.243958][ T3602] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.350323][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.673489][ T3629] loop2: detected capacity change from 0 to 1024 [ 40.741065][ T3629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.753847][ T3641] netlink: 96 bytes leftover after parsing attributes in process `syz.0.68'. [ 40.795067][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.852465][ C0] hrtimer: interrupt took 57480 ns [ 40.859418][ T3649] loop3: detected capacity change from 0 to 2048 [ 40.910594][ T3649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.982448][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.484407][ T3715] loop4: detected capacity change from 0 to 4096 [ 41.490911][ T3720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3720 comm=syz.2.102 [ 41.507786][ T3715] ext4: Bad value for 'max_dir_size_kb' [ 41.527863][ T3724] syz.3.104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.654842][ T3739] netlink: 116 bytes leftover after parsing attributes in process `syz.0.110'. [ 41.675787][ T3739] Zero length message leads to an empty skb [ 41.684715][ T3748] netlink: 444 bytes leftover after parsing attributes in process `syz.3.114'. [ 41.698487][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 41.792308][ T3763] netlink: 332 bytes leftover after parsing attributes in process `syz.4.121'. [ 41.839319][ T3767] loop0: detected capacity change from 0 to 512 [ 41.908947][ T3767] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.946086][ T3780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3780 comm=syz.3.127 [ 42.015366][ T3767] EXT4-fs (loop0): mount failed [ 42.210661][ T3803] loop3: detected capacity change from 0 to 512 [ 42.237135][ T3803] EXT4-fs: inline encryption not supported [ 42.254597][ T3803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.296261][ T3803] EXT4-fs (loop3): 1 truncate cleaned up [ 42.302468][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.376632][ T3820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 42.383284][ T3820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.390878][ T3820] vhci_hcd vhci_hcd.0: Device attached [ 42.413657][ T3803] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm wg1: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=20, size=1024 fake=0 [ 42.453067][ T3830] loop0: detected capacity change from 0 to 512 [ 42.463255][ T3803] EXT4-fs error (device loop3) in ext4_delete_entry:2739: Corrupt filesystem [ 42.485122][ T3822] vhci_hcd: connection closed [ 42.485360][ T31] vhci_hcd: stop threads [ 42.492970][ T3803] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm wg1: Deleting old file: nlink 4, error=-117 [ 42.494418][ T31] vhci_hcd: release socket [ 42.511319][ T31] vhci_hcd: disconnect device [ 42.519973][ T3830] EXT4-fs (loop0): too many log groups per flexible block group [ 42.535046][ T3830] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 42.542422][ T3830] EXT4-fs (loop0): mount failed [ 42.562822][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.585658][ T2968] vhci_hcd: vhci_device speed not set [ 42.782759][ T3861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.861958][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 42.912260][ T3877] team0: Port device team_slave_0 removed [ 42.928783][ T3883] loop3: detected capacity change from 0 to 2048 [ 42.957714][ T3883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.989395][ T59] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.046965][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 43.059393][ T59] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.059393][ T59] [ 43.069074][ T59] EXT4-fs (loop3): Total free blocks count 0 [ 43.075093][ T59] EXT4-fs (loop3): Free/Dirty block details [ 43.081146][ T59] EXT4-fs (loop3): free_blocks=2415919504 [ 43.087457][ T59] EXT4-fs (loop3): dirty_blocks=32 [ 43.092655][ T59] EXT4-fs (loop3): Block reservation details [ 43.099214][ T59] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 43.114212][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.125711][ T3894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.134402][ T3894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.153850][ T3896] SELinux: Context : is not valid (left unmapped). [ 43.154126][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 43.154145][ T29] audit: type=1400 audit(1764242567.608:364): avc: denied { mac_admin } for pid=3895 comm="syz.4.168" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.208547][ T29] audit: type=1400 audit(1764242567.618:365): avc: denied { relabelto } for pid=3895 comm="syz.4.168" name="rdma.current" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 43.232993][ T29] audit: type=1400 audit(1764242567.618:366): avc: denied { associate } for pid=3895 comm="syz.4.168" name="rdma.current" dev="tmpfs" ino=146 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 43.276656][ T29] audit: type=1400 audit(1764242567.688:367): avc: denied { unlink } for pid=3321 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 43.322797][ T3908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 43.332002][ T3908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 43.587583][ T29] audit: type=1400 audit(1764242568.038:368): avc: denied { write } for pid=3918 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.607085][ T29] audit: type=1326 audit(1764242568.038:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3226d4f749 code=0x7ffc0000 [ 43.630345][ T29] audit: type=1326 audit(1764242568.038:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3226d4f749 code=0x7ffc0000 [ 43.654040][ T29] audit: type=1326 audit(1764242568.038:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f3226d4f749 code=0x7ffc0000 [ 43.677650][ T29] audit: type=1326 audit(1764242568.038:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3226d4f749 code=0x7ffc0000 [ 43.753923][ T3924] syz.1.181 uses obsolete (PF_INET,SOCK_PACKET) [ 43.755591][ T3910] Set syz1 is full, maxelem 65536 reached [ 43.774668][ T29] audit: type=1400 audit(1764242568.228:373): avc: denied { ioctl } for pid=3923 comm="syz.1.181" path="socket:[6433]" dev="sockfs" ino=6433 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.005811][ T3958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.081399][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 44.124744][ T3976] gretap0: entered promiscuous mode [ 44.131180][ T3976] macsec1: entered promiscuous mode [ 44.136752][ T3976] macsec1: entered allmulticast mode [ 44.142116][ T3976] gretap0: entered allmulticast mode [ 44.166061][ T3976] gretap0: left allmulticast mode [ 44.166171][ T3976] gretap0: left promiscuous mode [ 44.264796][ T3976] syz.3.206 (3976) used greatest stack depth: 10528 bytes left [ 44.478453][ T4048] __nla_validate_parse: 2 callbacks suppressed [ 44.478467][ T4048] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.233'. [ 44.501351][ T4048] netlink: zone id is out of range [ 44.506757][ T4048] netlink: zone id is out of range [ 44.531157][ T4048] netlink: set zone limit has 8 unknown bytes [ 44.628106][ T4063] SELinux: failed to load policy [ 44.992620][ T4112] loop1: detected capacity change from 0 to 128 [ 44.999811][ T4112] EXT4-fs: Ignoring removed nobh option [ 45.007930][ T4112] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.020534][ T4112] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.048381][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.354728][ T4152] loop4: detected capacity change from 0 to 256 [ 45.370579][ T4154] random: crng reseeded on system resumption [ 45.501946][ T4165] mmap: syz.4.287 (4165) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.675183][ T4193] loop4: detected capacity change from 0 to 128 [ 45.686508][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 45.693518][ T4193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.694336][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 45.710683][ T4193] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.735891][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 45.752080][ T3409] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 45.776630][ T4201] Illegal XDP return value 432316672 on prog (id 186) dev syz_tun, expect packet loss! [ 45.792074][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.847813][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.960261][ T4235] loop3: detected capacity change from 0 to 4096 [ 45.975498][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.992637][ T4237] syz.0.322 (4237) used greatest stack depth: 10224 bytes left [ 46.033777][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.091165][ T4255] loop1: detected capacity change from 0 to 2048 [ 46.120368][ T4261] netlink: 92 bytes leftover after parsing attributes in process `syz.3.332'. [ 46.126793][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.141617][ T4261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.332'. [ 46.150292][ T4255] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.194949][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.375978][ T4298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 46.385075][ T4298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 46.424427][ T4305] loop0: detected capacity change from 0 to 1024 [ 46.437425][ T4305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.467520][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.479833][ T4313] loop1: detected capacity change from 0 to 256 [ 46.494464][ T4313] FAT-fs (loop1): Directory bread(block 64) failed [ 46.501387][ T4313] FAT-fs (loop1): Directory bread(block 65) failed [ 46.508212][ T4313] FAT-fs (loop1): Directory bread(block 66) failed [ 46.514981][ T4313] FAT-fs (loop1): Directory bread(block 67) failed [ 46.522010][ T4313] FAT-fs (loop1): Directory bread(block 68) failed [ 46.529197][ T4313] FAT-fs (loop1): Directory bread(block 69) failed [ 46.536122][ T4313] FAT-fs (loop1): Directory bread(block 70) failed [ 46.542818][ T4313] FAT-fs (loop1): Directory bread(block 71) failed [ 46.549691][ T4313] FAT-fs (loop1): Directory bread(block 72) failed [ 46.556876][ T4313] FAT-fs (loop1): Directory bread(block 73) failed [ 46.625312][ T4321] loop1: detected capacity change from 0 to 1024 [ 46.632197][ T4321] EXT4-fs: Ignoring removed orlov option [ 46.637933][ T4321] EXT4-fs: inline encryption not supported [ 46.647691][ T4321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.679476][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.789253][ T4337] loop0: detected capacity change from 0 to 2048 [ 46.807495][ T4337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.834310][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.933989][ T4353] loop3: detected capacity change from 0 to 512 [ 46.940394][ T4352] loop0: detected capacity change from 0 to 1024 [ 46.947982][ T4352] EXT4-fs: Ignoring removed nobh option [ 46.953590][ T4352] EXT4-fs: Ignoring removed bh option [ 46.967810][ T4353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 46.976191][ T4352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.976535][ T4353] System zones: 0-2, 18-18, 34-34 [ 46.998366][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 46.998611][ T4353] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 47.033840][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.038569][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 47.043742][ T4353] EXT4-fs (loop3): Remounting filesystem read-only [ 47.059027][ T4353] EXT4-fs (loop3): 1 truncate cleaned up [ 47.065623][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.078693][ T1713] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.089475][ T1713] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.100642][ T4353] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.112303][ T1713] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.152644][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.213246][ T4371] loop3: detected capacity change from 0 to 1024 [ 47.227391][ T4371] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.236476][ T4374] loop4: detected capacity change from 0 to 128 [ 47.252248][ T4371] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.378: Invalid block bitmap block 0 in block_group 0 [ 47.255084][ T4374] EXT4-fs: Ignoring removed nobh option [ 47.272530][ T4371] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.378: Failed to acquire dquot type 0 [ 47.284646][ T4371] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.378: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.285071][ T4374] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.310575][ T4374] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.328018][ T4371] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.378: Invalid inode bitmap blk 0 in block_group 0 [ 47.346306][ T316] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 47.358364][ T4371] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 47.368310][ T4371] EXT4-fs (loop3): 1 orphan inode deleted [ 47.376260][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.395344][ T4371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.424542][ T4371] syz.3.378 (4371) used greatest stack depth: 9160 bytes left [ 47.433418][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.540198][ T4404] loop0: detected capacity change from 0 to 128 [ 47.544105][ T4406] loop4: detected capacity change from 0 to 256 [ 47.563580][ T4404] EXT4-fs: Ignoring removed nobh option [ 47.578660][ T4406] FAT-fs (loop4): Directory bread(block 64) failed [ 47.586628][ T4406] FAT-fs (loop4): Directory bread(block 65) failed [ 47.595703][ T4406] FAT-fs (loop4): Directory bread(block 66) failed [ 47.596334][ T4404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.615815][ T4406] FAT-fs (loop4): Directory bread(block 67) failed [ 47.632161][ T4406] FAT-fs (loop4): Directory bread(block 68) failed [ 47.639031][ T4404] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.656154][ T4406] FAT-fs (loop4): Directory bread(block 69) failed [ 47.691906][ T4413] loop1: detected capacity change from 0 to 512 [ 47.702505][ T4406] FAT-fs (loop4): Directory bread(block 70) failed [ 47.729577][ T4406] FAT-fs (loop4): Directory bread(block 71) failed [ 47.741640][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.756699][ T4406] FAT-fs (loop4): Directory bread(block 72) failed [ 47.766796][ T4413] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.773886][ T4406] FAT-fs (loop4): Directory bread(block 73) failed [ 47.798921][ T4413] EXT4-fs (loop1): mount failed [ 47.886118][ T4216] Bluetooth: hci0: command 0x1003 tx timeout [ 47.892185][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.925537][ T4428] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 47.933285][ T4428] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 47.947939][ T4422] loop1: detected capacity change from 0 to 8192 [ 47.951109][ T3321] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 47.962073][ T3321] FAT-fs (loop4): Filesystem has been set read-only [ 48.263041][ T4446] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 48.291144][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 48.291161][ T29] audit: type=1326 audit(1764242572.748:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8255f749 code=0x7ffc0000 [ 48.327074][ T316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.338848][ T29] audit: type=1326 audit(1764242572.778:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8255f749 code=0x7ffc0000 [ 48.362347][ T29] audit: type=1326 audit(1764242572.778:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fec8255f749 code=0x7ffc0000 [ 48.385619][ T29] audit: type=1326 audit(1764242572.778:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8255f749 code=0x7ffc0000 [ 48.408952][ T29] audit: type=1326 audit(1764242572.778:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8255f749 code=0x7ffc0000 [ 48.480672][ T316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.501610][ T29] audit: type=1326 audit(1764242572.958:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf8ef749 code=0x7ffc0000 [ 48.530269][ T4456] loop1: detected capacity change from 0 to 512 [ 48.538504][ T29] audit: type=1326 audit(1764242572.988:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4fdf8ef749 code=0x7ffc0000 [ 48.561830][ T29] audit: type=1326 audit(1764242572.988:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4fdf8ef783 code=0x7ffc0000 [ 48.585055][ T29] audit: type=1326 audit(1764242572.988:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4fdf8ee1ff code=0x7ffc0000 [ 48.608859][ T29] audit: type=1326 audit(1764242572.988:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4fdf8ef7d7 code=0x7ffc0000 [ 48.636548][ T4456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.649450][ T4456] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.669169][ T316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.716493][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.717810][ T4471] loop0: detected capacity change from 0 to 512 [ 48.747002][ T4471] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 48.755372][ T4471] System zones: 0-2, 18-18, 34-34 [ 48.778491][ T4471] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 48.779148][ T316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.793523][ T4471] EXT4-fs (loop0): Remounting filesystem read-only [ 48.818759][ T4471] EXT4-fs (loop0): 1 truncate cleaned up [ 48.824803][ T4471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.846924][ T59] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.857405][ T4471] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.857661][ T59] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.921822][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.956609][ T59] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.974002][ T316] bridge_slave_1: left allmulticast mode [ 48.979847][ T316] bridge_slave_1: left promiscuous mode [ 48.985733][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.995892][ T316] bridge_slave_0: left allmulticast mode [ 49.002069][ T316] bridge_slave_0: left promiscuous mode [ 49.007867][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.017877][ T4497] loop0: detected capacity change from 0 to 512 [ 49.065209][ T4497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.086640][ T4497] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.109312][ T4497] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.116433][ T4504] loop2: detected capacity change from 0 to 256 [ 49.148836][ T316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.167050][ T4506] vhci_hcd: invalid port number 96 [ 49.172414][ T4506] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 49.181794][ T316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.200497][ T316] bond0 (unregistering): Released all slaves [ 49.272079][ T316] hsr_slave_0: left promiscuous mode [ 49.290150][ T316] hsr_slave_1: left promiscuous mode [ 49.302298][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.309796][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.322200][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.329840][ T316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.338323][ T4529] loop3: detected capacity change from 0 to 128 [ 49.346584][ T4529] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.362070][ T316] veth1_macvtap: left promiscuous mode [ 49.368066][ T4529] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.378752][ T316] veth0_macvtap: left promiscuous mode [ 49.384468][ T316] veth1_vlan: left promiscuous mode [ 49.389912][ T316] veth0_vlan: left promiscuous mode [ 49.415515][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.435038][ T3316] ================================================================== [ 49.443180][ T3316] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 49.450754][ T3316] [ 49.453108][ T3316] read-write to 0xffff888237c25ee8 of 1 bytes by task 4518 on cpu 0: [ 49.461199][ T3316] folio_add_lru+0xa5/0x1f0 [ 49.465775][ T3316] shmem_get_folio_gfp+0x7ab/0xd60 [ 49.470928][ T3316] shmem_write_begin+0xa8/0x190 [ 49.476163][ T3316] generic_perform_write+0x184/0x490 [ 49.481552][ T3316] shmem_file_write_iter+0xc5/0xf0 [ 49.486712][ T3316] vfs_write+0x52a/0x960 [ 49.490992][ T3316] ksys_write+0xda/0x1a0 [ 49.495530][ T3316] __x64_sys_write+0x40/0x50 [ 49.500159][ T3316] x64_sys_call+0x2802/0x3000 [ 49.504871][ T3316] do_syscall_64+0xd2/0x200 [ 49.509497][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.515427][ T3316] [ 49.517860][ T3316] read to 0xffff888237c25ee8 of 1 bytes by task 3316 on cpu 1: [ 49.525497][ T3316] __lru_add_drain_all+0x17e/0x450 [ 49.530648][ T3316] lru_add_drain_all+0x10/0x20 [ 49.535428][ T3316] invalidate_bdev+0x47/0x70 [ 49.540031][ T3316] ext4_put_super+0x624/0x7d0 [ 49.544852][ T3316] generic_shutdown_super+0xe6/0x210 [ 49.550214][ T3316] kill_block_super+0x2a/0x70 [ 49.554909][ T3316] ext4_kill_sb+0x42/0x80 [ 49.559282][ T3316] deactivate_locked_super+0x75/0x1c0 [ 49.564756][ T3316] deactivate_super+0x97/0xa0 [ 49.569456][ T3316] cleanup_mnt+0x269/0x2e0 [ 49.573896][ T3316] __cleanup_mnt+0x19/0x20 [ 49.578416][ T3316] task_work_run+0x131/0x1a0 [ 49.583023][ T3316] exit_to_user_mode_loop+0xed/0x110 [ 49.588503][ T3316] do_syscall_64+0x1d6/0x200 [ 49.593132][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.599036][ T3316] [ 49.601455][ T3316] value changed: 0x0b -> 0x0d [ 49.606149][ T3316] [ 49.608476][ T3316] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 49.614814][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.624723][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.634876][ T3316] ================================================================== [ 49.759783][ T316] team0 (unregistering): Port device team_slave_1 removed [ 49.770345][ T316] team0 (unregistering): Port device team_slave_0 removed [ 49.827735][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.835036][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.870870][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.881413][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.953989][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.968790][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.978018][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.987470][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.471198][ T316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.559302][ T316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.629168][ T316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.690262][ T316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.792700][ T316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.849325][ T316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.939138][ T316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.979623][ T316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.063118][ T316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.099745][ T316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.140159][ T316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.189123][ T316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.270047][ T316] bridge_slave_1: left allmulticast mode [ 51.275766][ T316] bridge_slave_1: left promiscuous mode [ 51.281523][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.289323][ T316] bridge_slave_0: left allmulticast mode [ 51.294978][ T316] bridge_slave_0: left promiscuous mode [ 51.300711][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.309205][ T316] bridge_slave_1: left allmulticast mode [ 51.314861][ T316] bridge_slave_1: left promiscuous mode [ 51.320621][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.328407][ T316] bridge_slave_0: left allmulticast mode [ 51.334143][ T316] bridge_slave_0: left promiscuous mode [ 51.339923][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.348818][ T316] bridge_slave_1: left allmulticast mode [ 51.354585][ T316] bridge_slave_1: left promiscuous mode [ 51.360297][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.368229][ T316] bridge_slave_0: left allmulticast mode [ 51.373915][ T316] bridge_slave_0: left promiscuous mode [ 51.379611][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.498901][ T316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.508655][ T316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.518384][ T316] bond0 (unregistering): Released all slaves [ 51.569022][ T316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.578689][ T316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.588411][ T316] bond0 (unregistering): Released all slaves [ 51.708911][ T316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.718553][ T316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.728373][ T316] bond0 (unregistering): Released all slaves [ 51.785345][ T316] hsr_slave_0: left promiscuous mode [ 51.791430][ T316] hsr_slave_1: left promiscuous mode [ 51.797585][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.804976][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.812781][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.820229][ T316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.829460][ T316] hsr_slave_0: left promiscuous mode [ 51.835239][ T316] hsr_slave_1: left promiscuous mode [ 51.841180][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.848607][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.856182][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.863716][ T316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.873278][ T316] hsr_slave_0: left promiscuous mode [ 51.878982][ T316] hsr_slave_1: left promiscuous mode [ 51.884560][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.891998][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.899571][ T316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.907040][ T316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.921117][ T316] veth1_macvtap: left promiscuous mode [ 51.926669][ T316] veth0_macvtap: left promiscuous mode [ 51.932326][ T316] veth1_vlan: left promiscuous mode [ 51.937579][ T316] veth0_vlan: left promiscuous mode [ 51.943304][ T316] veth1_macvtap: left promiscuous mode [ 51.948847][ T316] veth0_macvtap: left promiscuous mode [ 51.954349][ T316] veth1_vlan: left promiscuous mode [ 51.959930][ T316] veth0_vlan: left promiscuous mode [ 51.965694][ T316] veth1_macvtap: left promiscuous mode [ 51.971243][ T316] veth0_macvtap: left promiscuous mode [ 51.976981][ T316] veth1_vlan: left promiscuous mode [ 51.982551][ T316] veth0_vlan: left promiscuous mode [ 52.106113][ T316] team0 (unregistering): Port device team_slave_1 removed [ 52.159892][ T316] team0 (unregistering): Port device team_slave_1 removed [ 52.169361][ T316] team0 (unregistering): Port device team_slave_0 removed [ 52.221782][ T316] team0 (unregistering): Port device team_slave_1 removed [ 52.231200][ T316] team0 (unregistering): Port device team_slave_0 removed [ 53.249684][ T316] bridge_slave_1: left allmulticast mode [ 53.255369][ T316] bridge_slave_1: left promiscuous mode [ 53.261088][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.268832][ T316] bridge_slave_0: left allmulticast mode [ 53.274650][ T316] bridge_slave_0: left promiscuous mode [ 53.280514][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.328968][ T316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.338275][ T316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.347309][ T316] bond0 (unregistering): Released all slaves [ 53.390550][ T316] hsr_slave_0: left promiscuous mode [ 53.396303][ T316] hsr_slave_1: left promiscuous mode [ 53.402018][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.409521][ T316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.439743][ T316] team0 (unregistering): Port device team_slave_1 removed [ 53.450013][ T316] team0 (unregistering): Port device team_slave_0 removed