last executing test programs: 18.776879782s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) 18.65582911s ago: executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001}, 0x48) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 18.577392772s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r0 = getpgrp(0xffffffffffffffff) waitid(0x1, r0, &(0x7f0000000380), 0x20000000, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3f}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ff01000000007a6eb0d8000000000000000000fdea00002308"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 18.498993234s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="620000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028004001200050016000200000005001700ff000000"], 0x48}}, 0x0) 18.483706777s ago: executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = dup(r0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000845}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x1, 0x0, 0x101, 0xfffe, 0x10}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) 18.466272579s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="5baf8993c9faf9ecc869bdd07f08d2e1a29261fe9162121ab0e186edae84de1aa2eb9aed8777e0e9b3f2e034f8", 0x2d}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000080), 0x1}}], 0xcdcec210ed63cf2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000, 0x4000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48019504}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000ec0)='workqueue_queue_work\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000680)}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x15, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000060000000100000f02000000010000000100000002000000da2a000000010000000f02000000759f00000000"], 0x0, 0x48, 0x0, 0xa}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0072467f4db2893b6c696d697420"], 0xe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 1.072832405s ago: executing program 2: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') chmod(0x0, 0x0) setreuid(0x0, 0xee01) setfsuid(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(0x0, r4, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x6611, 0x0) writev(r1, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "004fba7d820000050000f7ffffff00040100"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x14, 0x10018, 0x0, 0x0, 0x0, 0x0, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x30}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r6, 0x20, &(0x7f00000007c0)={&(0x7f0000000700)=""/55, 0x37, 0x0, &(0x7f0000000740)=""/83, 0x53}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f84}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0xa, 0x2, 0x3, 0x0, 0x10}, @tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xce, 0x9f, &(0x7f0000000500)=""/159, 0x0, 0x24, '\x00', r13, 0x5, r5, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x5b, 0x6}, 0x10, r14, r0, 0x2, 0x0, &(0x7f0000000840)=[{0x0, 0x1, 0x2, 0x2}, {0x5, 0x5, 0x8, 0xb}], 0x10, 0x7}, 0x90) 1.032488032s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0xe, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009f809170500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0xf4240, &(0x7f0000003300)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r2, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) 973.649731ms ago: executing program 2: syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x80) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x800000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) 737.268057ms ago: executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="01000000000000200000020202000900030073797a31000000000900010073797a"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 653.880919ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, &(0x7f0000000040)=@usbdevfs_connect) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x6, 0x0, 0x7}, @alu={0x7, 0x0, 0xb}]}, &(0x7f0000000940)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f00000003c0)={0x816, "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"}) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @private}, 0x4}}, 0x26) syz_emit_ethernet(0x48, &(0x7f0000000340)={@empty, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x12, 0x11, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x0, 0x4e20, 0x12, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}, "fffbff693dcd"}}}}}}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) 431.727344ms ago: executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x30000, &(0x7f0000001700)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0xffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0xe000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x120, 0xc8, 0x8, 0x120, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}, {0x0, 0x4}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'veth0\x00', 'ip6gretap0\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007080800418e00000004fcff", 0x58}], 0x1) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)=@v3, 0x18, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) socket$inet(0x2, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$inet(0x10, 0x2000000002, 0x0) socketpair(0xf, 0x1, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @remote}, &(0x7f00000003c0)=0xc) sendmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="240000002e00074c8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e280000005e00ff03c81f8374b4a04181f2d0fdcad693d58d31d42c0b3ad0c1846e6db77c292ebf0a", 0x4c}], 0x1}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x501000, 0x0) 403.072698ms ago: executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x5, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000004dc0)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @rand_addr=0x64010101}, {0x2, 0x4e23, @empty}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0x100000000}) 363.710904ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000900000000000a"], 0xfffffffffffffc86}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) fcntl$dupfd(r1, 0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r4, r5, 0x0, 0x8000002b) 358.524545ms ago: executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2f38d19913a1588857e4d65a700a437b"}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) io_uring_setup(0x30d3, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='defcontext', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={r6, 0x20, 0x800, 0x80, 0x5, 0x0, 0x9, 0x4, {0x0, @in6={{0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x12}, 0x101}}, 0x7fffffff, 0x3f, 0x8001, 0xe3dd, 0x9}}, &(0x7f0000000280)=0xb0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0, 0x3}]) 316.614571ms ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) waitid(0x0, r0, 0x0, 0x20000000, &(0x7f0000000400)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3f}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ff01000000007a6eb0d8000000000000000000fdea00002308"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 299.148064ms ago: executing program 1: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x3030, 0xffffffffffffffff, 0x79f26000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="460000000000020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x3f) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr, 0x40000000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x2204c0d5, &(0x7f0000b63fe4)={0xa, 0x0, 0xffff7f80, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) r2 = dup(0xffffffffffffffff) listen(r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0x2, 0x5}, 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x1, &(0x7f0000000100)=ANY=[], 0x8, 0x30f, &(0x7f00000004c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/227, 0x14}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='dummy0\x00', 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 262.82348ms ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x7ce14c11}, {0x20}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) 243.271503ms ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) 239.641203ms ago: executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x90) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') chmod(0x0, 0x0) setreuid(0x0, 0xee01) setfsuid(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(0x0, r3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x6611, 0x0) writev(r0, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "004fba7d820000050000f7ffffff00040100"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x14, 0x10018, 0x0, 0x0, 0x0, 0x0, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x30}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r4, 0x20, &(0x7f00000007c0)={&(0x7f0000000700)=""/55, 0x37, 0x0, &(0x7f0000000740)=""/83, 0x53}}, 0x10) 223.725196ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@nombcache}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x0, r0}) ioperm(0x0, 0x7, 0x8) capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000300)={0x1, 0x8, 0x3, 0x7, 0x81, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0xffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9d09192bcaa63024"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000005780)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x3, r6, 0x6000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@initdev, @in6=@local}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) getgid() 177.552683ms ago: executing program 0: unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socket$kcm(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38) epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x779, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) 168.526954ms ago: executing program 3: unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socket$kcm(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38) epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x779, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) 123.859861ms ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x4) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000140), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r4], 0x40}}, 0x0) 85.223707ms ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r3, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) 39.375994ms ago: executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x5, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000004dc0)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @rand_addr=0x64010101}, {0x2, 0x4e23, @empty}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0x100000000}) 35.352895ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) waitid(0x0, r0, &(0x7f0000000380), 0x0, &(0x7f0000000400)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3f}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ff01000000007a6eb0d8000000000000000000fdea00002308"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14.647138ms ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x28, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x20}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000030c0), 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0, 0x0) syz_usbip_server_init(0x4) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[], [{@subj_role}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) readv(r9, &(0x7f0000000440)=[{&(0x7f00000024c0)=""/4082, 0xff2}], 0x1) 4.815589ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000900000000000a"], 0xfffffffffffffc86}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) fcntl$dupfd(r1, 0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r4, r5, 0x0, 0x8000002b) 0s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x7ce14c11}, {0x20}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}}, 0x0) kernel console output (not intermixed with test programs): p0: rw=0, sector=48, nr_sectors = 4 limit=0 [ 46.138507][ T4793] syz-executor.0: attempt to access beyond end of device [ 46.138507][ T4793] loop0: rw=0, sector=52, nr_sectors = 4 limit=0 [ 46.158994][ T4793] syz-executor.0: attempt to access beyond end of device [ 46.158994][ T4793] loop0: rw=0, sector=56, nr_sectors = 4 limit=0 [ 46.187889][ T4819] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 46.203139][ T4815] loop2: detected capacity change from 0 to 512 [ 46.231020][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.250028][ T4733] veth0_vlan: entered promiscuous mode [ 46.252451][ T4815] ext4 filesystem being mounted at /root/syzkaller-testdir1143723720/syzkaller.nCSx27/108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.290308][ T4733] veth1_vlan: entered promiscuous mode [ 46.310351][ T4733] veth0_macvtap: entered promiscuous mode [ 46.318624][ T4733] veth1_macvtap: entered promiscuous mode [ 46.330997][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.339447][ T3101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.341333][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.357103][ T3099] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 46.370487][ T4733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.379425][ T4733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.388208][ T4733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.396994][ T4733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.713089][ T4860] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 46.754942][ T4862] __nla_validate_parse: 5 callbacks suppressed [ 46.754956][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 46.919134][ T4865] loop1: detected capacity change from 0 to 512 [ 46.938029][ T4865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.950663][ T4865] ext4 filesystem being mounted at /root/syzkaller-testdir282926108/syzkaller.PDCLoV/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.987874][ T3098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.017880][ T4866] loop3: detected capacity change from 0 to 256 [ 47.030873][ T4866] FAT-fs (loop3): Directory bread(block 64) failed [ 47.034118][ T4872] loop1: detected capacity change from 0 to 512 [ 47.037718][ T4866] FAT-fs (loop3): Directory bread(block 65) failed [ 47.046537][ T4872] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 47.052522][ T4866] FAT-fs (loop3): Directory bread(block 66) failed [ 47.064773][ T4872] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 47.071367][ T4866] FAT-fs (loop3): Directory bread(block 67) failed [ 47.083954][ T4872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.090658][ T4866] FAT-fs (loop3): Directory bread(block 68) failed [ 47.109476][ T4866] FAT-fs (loop3): Directory bread(block 69) failed [ 47.116193][ T4866] FAT-fs (loop3): Directory bread(block 70) failed [ 47.116631][ T3098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.122733][ T4866] FAT-fs (loop3): Directory bread(block 71) failed [ 47.138897][ T4866] FAT-fs (loop3): Directory bread(block 72) failed [ 47.145441][ T4866] FAT-fs (loop3): Directory bread(block 73) failed [ 47.217969][ T4879] syz-executor.1[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.218011][ T4879] syz-executor.1[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.225694][ T4866] loop3: detected capacity change from 256 to 0 [ 47.349823][ T4733] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 47.359722][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 47.359737][ T29] audit: type=1400 audit(1719212058.255:544): avc: denied { ioctl } for pid=4882 comm="syz-executor.4" path="socket:[9202]" dev="sockfs" ino=9202 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.400264][ T4884] loop4: detected capacity change from 0 to 1024 [ 47.417996][ T4884] EXT4-fs: Ignoring removed nobh option [ 47.424614][ T4884] EXT4-fs: quotafile must be on filesystem root [ 47.509821][ T4884] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 47.566351][ T4904] loop1: detected capacity change from 0 to 512 [ 47.575406][ T4904] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 47.589828][ T4904] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 47.605520][ T4904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.651763][ T4889] chnl_net:caif_netlink_parms(): no params data found [ 47.651803][ T4902] loop4: detected capacity change from 0 to 512 [ 47.665360][ T3098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.676816][ T4902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.690487][ T4902] ext4 filesystem being mounted at /root/syzkaller-testdir3028166133/syzkaller.tMpSjB/120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.709057][ T3202] bridge_slave_1: left allmulticast mode [ 47.714801][ T3202] bridge_slave_1: left promiscuous mode [ 47.720601][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.729577][ T3202] bridge_slave_0: left allmulticast mode [ 47.735280][ T3202] bridge_slave_0: left promiscuous mode [ 47.741081][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.769998][ T3103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.848518][ T4922] loop2: detected capacity change from 0 to 128 [ 47.859273][ T4922] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 47.866915][ T4922] FAT-fs (loop2): Filesystem has been set read-only [ 47.887755][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.898388][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.045320][ T3202] bond0 (unregistering): Released all slaves [ 48.083998][ T4918] ip6gre1: entered allmulticast mode [ 48.095915][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.103037][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.114049][ T4889] bridge_slave_0: entered allmulticast mode [ 48.121049][ T4889] bridge_slave_0: entered promiscuous mode [ 48.150719][ T3202] hsr_slave_0: left promiscuous mode [ 48.163538][ T3202] hsr_slave_1: left promiscuous mode [ 48.201367][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.221316][ T29] audit: type=1400 audit(1719212059.095:545): avc: denied { setattr } for pid=4929 comm="syz-executor.1" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.250028][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.291451][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 48.302695][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 48.340831][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.348260][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.356995][ T4889] bridge_slave_1: entered allmulticast mode [ 48.363593][ T4889] bridge_slave_1: entered promiscuous mode [ 48.382012][ T4889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.403602][ T4889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.426566][ T4889] team0: Port device team_slave_0 added [ 48.433671][ T4889] team0: Port device team_slave_1 added [ 48.437034][ T4934] loop2: detected capacity change from 0 to 256 [ 48.452246][ T4934] FAT-fs (loop2): Directory bread(block 64) failed [ 48.459160][ T4934] FAT-fs (loop2): Directory bread(block 65) failed [ 48.465905][ T4934] FAT-fs (loop2): Directory bread(block 66) failed [ 48.466670][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.472435][ T4934] FAT-fs (loop2): Directory bread(block 67) failed [ 48.472515][ T4934] FAT-fs (loop2): Directory bread(block 68) failed [ 48.479607][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.495515][ T4934] FAT-fs (loop2): Directory bread(block 69) failed [ 48.519365][ T4889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.520221][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.535677][ T4934] FAT-fs (loop2): Directory bread(block 70) failed [ 48.536626][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.543613][ T4934] FAT-fs (loop2): Directory bread(block 71) failed [ 48.550086][ T4889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.593991][ T4934] FAT-fs (loop2): Directory bread(block 72) failed [ 48.600848][ T4934] FAT-fs (loop2): Directory bread(block 73) failed [ 48.619606][ T4889] hsr_slave_0: entered promiscuous mode [ 48.625789][ T4889] hsr_slave_1: entered promiscuous mode [ 48.684589][ T4940] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 48.685631][ T4934] loop2: detected capacity change from 256 to 0 [ 48.718390][ T4943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=4943 comm=syz-executor.4 [ 48.733027][ T4943] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 48.782771][ T3101] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 48.902824][ T29] audit: type=1400 audit(1719212059.795:546): avc: denied { setopt } for pid=4955 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.902841][ T4956] x_tables: duplicate underflow at hook 1 [ 49.031712][ T4973] ip6gre1: entered allmulticast mode [ 49.040614][ T4973] loop4: detected capacity change from 0 to 128 [ 49.050073][ T4973] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 49.057767][ T4973] FAT-fs (loop4): Filesystem has been set read-only [ 49.082331][ T4889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.090998][ T4959] chnl_net:caif_netlink_parms(): no params data found [ 49.101167][ T4889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.116656][ T4889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.135846][ T4889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.152122][ T4983] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 49.161777][ T4983] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 49.415008][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.437339][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.444487][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.487421][ T4959] bridge_slave_0: entered allmulticast mode [ 49.513250][ T4959] bridge_slave_0: entered promiscuous mode [ 49.541018][ T4889] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.569742][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.577133][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.584977][ T4959] bridge_slave_1: entered allmulticast mode [ 49.592913][ T4959] bridge_slave_1: entered promiscuous mode [ 49.599741][ T3202] bridge_slave_1: left allmulticast mode [ 49.605456][ T3202] bridge_slave_1: left promiscuous mode [ 49.611479][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.616426][ T4986] loop1: detected capacity change from 0 to 256 [ 49.626809][ T3202] bridge_slave_0: left allmulticast mode [ 49.631557][ T4986] FAT-fs (loop1): Directory bread(block 64) failed [ 49.632543][ T3202] bridge_slave_0: left promiscuous mode [ 49.639050][ T4986] FAT-fs (loop1): Directory bread(block 65) failed [ 49.644755][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.651464][ T4986] FAT-fs (loop1): Directory bread(block 66) failed [ 49.664943][ T4986] FAT-fs (loop1): Directory bread(block 67) failed [ 49.671655][ T4986] FAT-fs (loop1): Directory bread(block 68) failed [ 49.678249][ T4986] FAT-fs (loop1): Directory bread(block 69) failed [ 49.684775][ T4986] FAT-fs (loop1): Directory bread(block 70) failed [ 49.691479][ T4986] FAT-fs (loop1): Directory bread(block 71) failed [ 49.698252][ T4986] FAT-fs (loop1): Directory bread(block 72) failed [ 49.704995][ T4986] FAT-fs (loop1): Directory bread(block 73) failed [ 49.747555][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.757481][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.767860][ T3202] bond0 (unregistering): Released all slaves [ 49.775963][ T4986] loop1: detected capacity change from 256 to 0 [ 49.790876][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.798626][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.809941][ T4959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.821953][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.829146][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.852798][ T4959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.862708][ T3098] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 49.883875][ T4889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.899989][ T4959] team0: Port device team_slave_0 added [ 49.908213][ T3202] hsr_slave_0: left promiscuous mode [ 49.914065][ T3202] hsr_slave_1: left promiscuous mode [ 49.921167][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.929158][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.969521][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 49.981416][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 50.041822][ T4959] team0: Port device team_slave_1 added [ 50.093443][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.100539][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.126754][ T4959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.147422][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.154469][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.180529][ T4959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.196951][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.248946][ T4959] hsr_slave_0: entered promiscuous mode [ 50.257437][ T4959] hsr_slave_1: entered promiscuous mode [ 50.263715][ T4959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.271480][ T4959] Cannot create hsr debugfs directory [ 50.347915][ T5021] ip6gre1: left allmulticast mode [ 50.365692][ T4889] veth0_vlan: entered promiscuous mode [ 50.381362][ T4889] veth1_vlan: entered promiscuous mode [ 50.436171][ T4991] chnl_net:caif_netlink_parms(): no params data found [ 50.463172][ T4889] veth0_macvtap: entered promiscuous mode [ 50.487699][ T4889] veth1_macvtap: entered promiscuous mode [ 50.494414][ T4991] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.501507][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.508895][ T4991] bridge_slave_0: entered allmulticast mode [ 50.515600][ T4991] bridge_slave_0: entered promiscuous mode [ 50.522707][ T4991] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.529939][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.538821][ T4991] bridge_slave_1: entered allmulticast mode [ 50.545150][ T4991] bridge_slave_1: entered promiscuous mode [ 50.565800][ T4991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.576379][ T4991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.597381][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.607904][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.618453][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.626711][ T4991] team0: Port device team_slave_0 added [ 50.639241][ T4991] team0: Port device team_slave_1 added [ 50.650435][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.660949][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.672041][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.687836][ T4991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.694831][ T4991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.720842][ T4991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.734280][ T4889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.743037][ T4889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.751791][ T4889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.760588][ T4889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.771547][ T4991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.778570][ T4991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.804730][ T4991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.835728][ T4991] hsr_slave_0: entered promiscuous mode [ 50.841805][ T4991] hsr_slave_1: entered promiscuous mode [ 50.848206][ T4991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.855815][ T4991] Cannot create hsr debugfs directory [ 50.911499][ T3202] bridge_slave_1: left allmulticast mode [ 50.917261][ T3202] bridge_slave_1: left promiscuous mode [ 50.922848][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.931926][ T3202] bridge_slave_0: left allmulticast mode [ 50.937993][ T3202] bridge_slave_0: left promiscuous mode [ 50.943664][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.988466][ T29] audit: type=1326 audit(1719212061.885:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05064460a9 code=0x0 [ 51.014231][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.023949][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.033723][ T3202] bond0 (unregistering): Released all slaves [ 51.072762][ T4959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.081415][ T4959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.090497][ T4959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.099495][ T4959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.100358][ T5036] loop0: detected capacity change from 0 to 512 [ 51.114481][ T5036] EXT4-fs: Ignoring removed nobh option [ 51.120282][ T5036] ext4: Unknown parameter 'audit' [ 51.125363][ T3202] hsr_slave_0: left promiscuous mode [ 51.131481][ T3202] hsr_slave_1: left promiscuous mode [ 51.137328][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.145196][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.187528][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 51.208837][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 51.338497][ T29] audit: type=1326 audit(1719212062.235:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ea3e10a9 code=0x7ffc0000 [ 51.357112][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.367846][ T29] audit: type=1326 audit(1719212062.255:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ea3e10a9 code=0x7ffc0000 [ 51.395305][ T29] audit: type=1326 audit(1719212062.265:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03ea3e10a9 code=0x7ffc0000 [ 51.406241][ T4959] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.419355][ T29] audit: type=1326 audit(1719212062.265:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ea3e10a9 code=0x7ffc0000 [ 51.428395][ T5041] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 51.449880][ T29] audit: type=1326 audit(1719212062.265:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ea3e10a9 code=0x7ffc0000 [ 51.459251][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 51.483207][ T29] audit: type=1326 audit(1719212062.285:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03ea3e10a9 code=0x7ffc0000 [ 51.503219][ T5045] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 51.518139][ T5041] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 51.540499][ T5041] bond2: entered allmulticast mode [ 51.545849][ T5041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.560683][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.567853][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.582619][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.589871][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.672797][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.020901][ T4991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.043760][ T5071] IPVS: Unknown mcast interface: syzkaller1 [ 52.054840][ T5042] chnl_net:caif_netlink_parms(): no params data found [ 52.075036][ T4991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.101517][ T4991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.110765][ T4991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.120659][ T4959] veth0_vlan: entered promiscuous mode [ 52.146489][ T4959] veth1_vlan: entered promiscuous mode [ 52.158671][ T5042] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.165809][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.173226][ T5042] bridge_slave_0: entered allmulticast mode [ 52.180298][ T5042] bridge_slave_0: entered promiscuous mode [ 52.190330][ T5042] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.197523][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.205022][ T5042] bridge_slave_1: entered allmulticast mode [ 52.211562][ T5042] bridge_slave_1: entered promiscuous mode [ 52.226728][ T3202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.246219][ T5042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.256872][ T5042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.277227][ T5042] team0: Port device team_slave_0 added [ 52.284159][ T5042] team0: Port device team_slave_1 added [ 52.299713][ T5042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.306785][ T5042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.332895][ T5042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.346872][ T5042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.353818][ T5042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.379821][ T5042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.411374][ T4959] veth0_macvtap: entered promiscuous mode [ 52.419647][ T5042] hsr_slave_0: entered promiscuous mode [ 52.425866][ T5042] hsr_slave_1: entered promiscuous mode [ 52.431799][ T5042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.439459][ T5042] Cannot create hsr debugfs directory [ 52.454072][ T4959] veth1_macvtap: entered promiscuous mode [ 52.472303][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.482874][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.492848][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.503395][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.514704][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.527235][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.537861][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.547827][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.558409][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.570336][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.589942][ T4959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.598793][ T4959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607525][ T4959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.616333][ T4959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.667099][ T4991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.687154][ T4991] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.706508][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.713656][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.723042][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.730366][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.812155][ T4991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.822640][ T4991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.837444][ T5089] bond2: left allmulticast mode [ 52.873879][ T5096] loop0: detected capacity change from 0 to 1024 [ 52.894319][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 52.905075][ T5101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.041559][ T4991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.073011][ T5111] loop4: detected capacity change from 0 to 1024 [ 53.098199][ T5111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.109988][ T5119] loop0: detected capacity change from 0 to 512 [ 53.120809][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 53.120845][ T29] audit: type=1400 audit(1719212064.015:562): avc: denied { write } for pid=5110 comm="syz-executor.4" name="memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.141642][ T4991] veth0_vlan: entered promiscuous mode [ 53.160543][ T4991] veth1_vlan: entered promiscuous mode [ 53.161681][ T29] audit: type=1400 audit(1719212064.055:563): avc: denied { map } for pid=5110 comm="syz-executor.4" path="/root/syzkaller-testdir3028166133/syzkaller.tMpSjB/145/file1/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.167695][ T5111] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.211711][ T5119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.240852][ T5119] ext4 filesystem being mounted at /root/syzkaller-testdir1945601092/syzkaller.FPuRNt/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.245810][ T5111] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 53.267918][ T5111] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.267918][ T5111] [ 53.271527][ T4991] veth0_macvtap: entered promiscuous mode [ 53.277576][ T5111] EXT4-fs (loop4): Total free blocks count 0 [ 53.287356][ T4991] veth1_macvtap: entered promiscuous mode [ 53.289273][ T5111] EXT4-fs (loop4): Free/Dirty block details [ 53.301217][ T5111] EXT4-fs (loop4): free_blocks=68451041280 [ 53.304255][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.307204][ T5111] EXT4-fs (loop4): dirty_blocks=64 [ 53.317842][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.322888][ T5111] EXT4-fs (loop4): Block reservation details [ 53.332746][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.338701][ T5111] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 53.349101][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.349117][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.357107][ T5111] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.364916][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.402207][ T4991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.414118][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.424827][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.434811][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.445370][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.455579][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.466049][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.478295][ T4991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.489348][ T4991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.498377][ T4991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.507319][ T4991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.516163][ T4991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.573992][ T5128] loop4: detected capacity change from 0 to 512 [ 53.589541][ T5128] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 53.603880][ T5128] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 53.622074][ T5128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.648514][ T3103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.724329][ T29] audit: type=1400 audit(1719212064.615:564): avc: denied { mount } for pid=5143 comm="syz-executor.2" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.747886][ T5144] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.748273][ T29] audit: type=1400 audit(1719212064.635:565): avc: denied { search } for pid=5143 comm="syz-executor.2" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.749399][ T5145] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.797187][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.820240][ T29] audit: type=1400 audit(1719212064.715:566): avc: denied { bind } for pid=5150 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.839916][ T29] audit: type=1400 audit(1719212064.715:567): avc: denied { setopt } for pid=5150 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.903543][ T5157] loop0: detected capacity change from 0 to 512 [ 53.918843][ T3202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.970480][ T3202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.996103][ T5163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 54.022649][ T5163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.030089][ T5163] IPv6: NLM_F_CREATE should be set when creating new route [ 54.049647][ T3202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.147436][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 54.175967][ T29] audit: type=1400 audit(1719212065.075:568): avc: denied { connect } for pid=5164 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.204973][ T29] audit: type=1400 audit(1719212065.095:569): avc: denied { read } for pid=5164 comm="syz-executor.0" laddr=fe80::11 lport=3 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.237753][ T5174] loop2: detected capacity change from 0 to 512 [ 54.269332][ T3202] bridge_slave_1: left allmulticast mode [ 54.274993][ T3202] bridge_slave_1: left promiscuous mode [ 54.276992][ T5174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.280673][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.293255][ T5174] ext4 filesystem being mounted at /root/syzkaller-testdir1799842257/syzkaller.McWggr/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.317158][ T3202] bridge_slave_0: left allmulticast mode [ 54.322836][ T3202] bridge_slave_0: left promiscuous mode [ 54.328557][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.335734][ T29] audit: type=1326 audit(1719212065.225:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05064460a9 code=0x0 [ 54.360825][ T4959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.413357][ T5183] loop2: detected capacity change from 0 to 256 [ 54.434319][ T5184] loop0: detected capacity change from 0 to 512 [ 54.441465][ T5184] EXT4-fs: Ignoring removed nobh option [ 54.447343][ T5184] ext4: Unknown parameter 'audit' [ 54.484142][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.499473][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.510409][ T3202] bond0 (unregistering): Released all slaves [ 54.535588][ T5190] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 54.677583][ T3202] hsr_slave_0: left promiscuous mode [ 54.683247][ T3202] hsr_slave_1: left promiscuous mode [ 54.690314][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.697904][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.706192][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.713617][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.723504][ T3202] veth1_macvtap: left promiscuous mode [ 54.729295][ T3202] veth0_macvtap: left promiscuous mode [ 54.734811][ T3202] veth1_vlan: left promiscuous mode [ 54.740053][ T3202] veth0_vlan: left promiscuous mode [ 54.854353][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 54.866834][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 54.919402][ T5042] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.928611][ T5042] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.937969][ T5042] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.938675][ T29] audit: type=1326 audit(1719212065.835:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ea3e10a9 code=0x7fc00000 [ 54.972139][ T5042] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.006592][ T5042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.018753][ T5042] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.036929][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.044005][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.052924][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.060082][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.112194][ T5042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.152221][ T5219] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 55.158920][ T5219] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.166750][ T5219] vhci_hcd vhci_hcd.0: Device attached [ 55.176515][ T5219] loop0: detected capacity change from 0 to 512 [ 55.183955][ T5219] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 55.191487][ T5042] veth0_vlan: entered promiscuous mode [ 55.201163][ T5042] veth1_vlan: entered promiscuous mode [ 55.220112][ T5042] veth0_macvtap: entered promiscuous mode [ 55.228722][ T5042] veth1_macvtap: entered promiscuous mode [ 55.240046][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.250629][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.260551][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.271027][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.280960][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.291600][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.303448][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.314352][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.325040][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.334991][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.345428][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.355298][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.365875][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.377289][ T4443] vhci_hcd: vhci_device speed not set [ 55.383804][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.393893][ T5042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.402730][ T5042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.411608][ T5042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.420782][ T5042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.438153][ T5221] vhci_hcd: connection closed [ 55.441967][ T11] vhci_hcd: stop threads [ 55.445963][ T4443] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 55.446756][ T11] vhci_hcd: release socket [ 55.462872][ T11] vhci_hcd: disconnect device [ 55.663769][ T5244] syzkaller1: entered promiscuous mode [ 55.669552][ T5244] syzkaller1: entered allmulticast mode [ 55.861098][ T5255] loop3: detected capacity change from 0 to 512 [ 55.868988][ T5255] EXT4-fs: Ignoring removed nobh option [ 55.874722][ T5255] ext4: Unknown parameter 'audit' [ 55.891356][ T5260] loop4: detected capacity change from 0 to 512 [ 55.908096][ T5260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.920857][ T5260] ext4 filesystem being mounted at /root/syzkaller-testdir3028166133/syzkaller.tMpSjB/160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.960323][ T3103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.050895][ T5276] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 56.057613][ T5276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.065099][ T5276] vhci_hcd vhci_hcd.0: Device attached [ 56.072778][ T5282] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.087206][ T5276] loop0: detected capacity change from 0 to 512 [ 56.094740][ T5276] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 56.098297][ T5282] lo: Caught tx_queue_len zero misconfig [ 56.110585][ T5282] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.176458][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.234896][ T5308] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 56.241547][ T5308] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.249103][ T5308] vhci_hcd vhci_hcd.0: Device attached [ 56.259088][ T5308] loop4: detected capacity change from 0 to 512 [ 56.275176][ T5308] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 56.299503][ T5314] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.430342][ T5278] vhci_hcd: connection reset by peer [ 56.437091][ T3189] vhci_hcd: stop threads [ 56.441355][ T3189] vhci_hcd: release socket [ 56.445877][ T3189] vhci_hcd: disconnect device [ 56.450613][ T3181] vhci_hcd: vhci_device speed not set [ 56.474660][ T5327] loop1: detected capacity change from 0 to 512 [ 56.483880][ T5327] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 56.503914][ T5327] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 56.516704][ T5327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.529201][ T5309] vhci_hcd: connection closed [ 56.529438][ T11] vhci_hcd: stop threads [ 56.538543][ T11] vhci_hcd: release socket [ 56.543126][ T11] vhci_hcd: disconnect device [ 56.549359][ T3181] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 56.557325][ T3181] usb 9-1: enqueue for inactive port 0 [ 56.562807][ T3181] usb 9-1: enqueue for inactive port 0 [ 56.570775][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.571485][ T3181] usb 9-1: enqueue for inactive port 0 [ 56.641652][ T5337] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 56.661237][ T5337] bond1: entered allmulticast mode [ 56.666891][ T3181] vhci_hcd: vhci_device speed not set [ 56.672501][ T5337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.708212][ T5348] vxcan1: entered allmulticast mode [ 56.727055][ T5348] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 56.738450][ T5348] vxcan1: left allmulticast mode [ 56.768229][ T5357] Dead loop on virtual device ipvlan1, fix it urgently! [ 56.783221][ T5359] loop1: detected capacity change from 0 to 512 [ 56.792418][ T5359] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 56.806391][ T5359] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 56.820738][ T5359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.820927][ T5361] Process accounting resumed [ 56.845936][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.023443][ T5386] Process accounting resumed [ 57.030736][ T5388] loop0: detected capacity change from 0 to 512 [ 57.039850][ T5388] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 57.054641][ T5388] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 57.067738][ T5388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.089868][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.176683][ T5406] loop0: detected capacity change from 0 to 256 [ 57.261364][ T5411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 57.268080][ T5411] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.275663][ T5411] vhci_hcd vhci_hcd.0: Device attached [ 57.284405][ T5411] loop0: detected capacity change from 0 to 512 [ 57.292223][ T5411] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 57.543484][ T5412] vhci_hcd: connection closed [ 57.543754][ T3189] vhci_hcd: stop threads [ 57.552889][ T3189] vhci_hcd: release socket [ 57.557428][ T3189] vhci_hcd: disconnect device [ 57.618336][ T5427] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 57.625034][ T5427] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.632582][ T5427] vhci_hcd vhci_hcd.0: Device attached [ 57.640604][ T5427] loop4: detected capacity change from 0 to 512 [ 57.648152][ T5427] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 57.835545][ T3181] vhci_hcd: vhci_device speed not set [ 57.882029][ T5428] vhci_hcd: connection closed [ 57.882307][ T28] vhci_hcd: stop threads [ 57.891436][ T28] vhci_hcd: release socket [ 57.896083][ T28] vhci_hcd: disconnect device [ 57.905662][ T3181] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 57.913157][ T3181] usb 9-1: enqueue for inactive port 0 [ 57.918708][ T3181] usb 9-1: enqueue for inactive port 0 [ 57.924278][ T3181] usb 9-1: enqueue for inactive port 0 [ 58.005722][ T3181] vhci_hcd: vhci_device speed not set [ 58.175527][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 58.175613][ T29] audit: type=1400 audit(1719212069.065:635): avc: denied { map } for pid=5439 comm="syz-executor.0" path="socket:[14367]" dev="sockfs" ino=14367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.205891][ T29] audit: type=1400 audit(1719212069.075:636): avc: denied { read } for pid=5439 comm="syz-executor.0" path="socket:[14367]" dev="sockfs" ino=14367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.551201][ T29] audit: type=1400 audit(1719212069.445:637): avc: denied { listen } for pid=5452 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.574104][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 58.970480][ T5456] bond0: entered promiscuous mode [ 58.975789][ T5456] bond_slave_0: entered promiscuous mode [ 58.981506][ T5456] bond_slave_1: entered promiscuous mode [ 58.988996][ T5456] bond0: left promiscuous mode [ 58.993988][ T5456] bond_slave_0: left promiscuous mode [ 58.999798][ T5456] bond_slave_1: left promiscuous mode [ 59.089537][ T5462] tipc: Failed to remove unknown binding: 66,1,1/0:8744873/8744875 [ 59.097521][ T5462] tipc: Failed to remove unknown binding: 66,1,1/0:8744873/8744875 [ 59.165952][ T5468] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 59.172728][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.180274][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 59.187961][ T5468] loop0: detected capacity change from 0 to 512 [ 59.195392][ T5468] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 59.469851][ T5469] vhci_hcd: connection closed [ 59.470080][ T3189] vhci_hcd: stop threads [ 59.479178][ T3189] vhci_hcd: release socket [ 59.483759][ T3189] vhci_hcd: disconnect device [ 59.523451][ T29] audit: type=1326 audit(1719212070.415:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03ea3e10a9 code=0x0 [ 59.626550][ T5485] loop4: detected capacity change from 0 to 512 [ 59.634293][ T5485] EXT4-fs: Ignoring removed nobh option [ 59.639943][ T5485] ext4: Unknown parameter 'audit' [ 59.766605][ T5357] syz-executor.2 (5357) used greatest stack depth: 3672 bytes left [ 60.074266][ T29] audit: type=1326 audit(1719212070.965:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05064460a9 code=0x0 [ 60.214256][ T5514] Process accounting resumed [ 60.289892][ T5519] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 60.298912][ T5519] __nla_validate_parse: 8 callbacks suppressed [ 60.298926][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 60.320928][ T29] audit: type=1400 audit(1719212071.215:640): avc: denied { setopt } for pid=5521 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.324915][ T5519] xt_CT: No such helper "syz0" [ 60.485662][ T4443] usb 1-1: enqueue for inactive port 0 [ 60.491359][ T4443] usb 1-1: enqueue for inactive port 0 [ 60.575551][ T4443] vhci_hcd: vhci_device speed not set [ 60.841138][ T5542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.264533][ T5547] loop4: detected capacity change from 0 to 512 [ 61.284500][ T5547] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 61.300140][ T29] audit: type=1400 audit(1719212072.175:641): avc: denied { getopt } for pid=5550 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.306943][ T5547] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 61.344125][ T5547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.396671][ T3103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.452749][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.503273][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.513039][ T5578] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.524224][ T5580] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 61.541771][ T5584] loop2: detected capacity change from 0 to 512 [ 61.558789][ T5584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.575320][ T29] audit: type=1400 audit(1719212072.465:642): avc: denied { connect } for pid=5592 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.580783][ T5584] ext4 filesystem being mounted at /root/syzkaller-testdir1799842257/syzkaller.McWggr/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.625954][ T29] audit: type=1400 audit(1719212072.525:643): avc: denied { read } for pid=5592 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.647167][ T4959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.829570][ T5600] loop2: detected capacity change from 0 to 128 [ 61.839105][ T29] audit: type=1400 audit(1719212072.725:644): avc: denied { nlmsg_read } for pid=5592 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.450228][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.512603][ T5627] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.522044][ T5627] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.563823][ T5635] loop1: detected capacity change from 0 to 128 [ 62.572917][ T5637] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.733664][ T5650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.976033][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 62.985260][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 62.995567][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.003149][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.012049][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.019660][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.028794][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.037316][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.045194][ T5659] Dead loop on virtual device ipvlan1, fix it urgently! [ 63.317035][ T3189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.409328][ T3189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.479862][ T3189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.525058][ T3189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.585142][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 63.588231][ T5686] loop1: detected capacity change from 0 to 512 [ 63.614041][ T5688] loop4: detected capacity change from 0 to 128 [ 63.626339][ T5693] loop2: detected capacity change from 0 to 256 [ 63.627618][ T5686] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.645890][ T5686] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.654192][ T3189] bridge_slave_1: left allmulticast mode [ 63.655321][ T5686] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.660088][ T3189] bridge_slave_1: left promiscuous mode [ 63.680247][ T3189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.689559][ T5686] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 63.696992][ T3189] bridge_slave_0: left allmulticast mode [ 63.702641][ T3189] bridge_slave_0: left promiscuous mode [ 63.708433][ T3189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.718914][ T5686] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 63.735027][ T5686] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 63.743984][ T5686] EXT4-fs (loop1): 1 truncate cleaned up [ 63.758746][ T5686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.782240][ T5686] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz-executor.1: corrupted xattr block 31: invalid header [ 63.806595][ T5686] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 63.815727][ T5686] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz-executor.1: corrupted xattr block 31: invalid header [ 63.831150][ T5686] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 63.841022][ T5686] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz-executor.1: bad symlink. [ 63.841062][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 63.841104][ T29] audit: type=1400 audit(1719212074.735:647): avc: denied { read } for pid=5685 comm="syz-executor.1" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.890323][ T3189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.901640][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.916779][ T3189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.927855][ T3189] bond0 (unregistering): Released all slaves [ 63.979704][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.986984][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.005932][ T5664] bridge_slave_0: entered allmulticast mode [ 64.013921][ T5664] bridge_slave_0: entered promiscuous mode [ 64.023614][ T5711] bond0: entered promiscuous mode [ 64.028734][ T5711] bond_slave_0: entered promiscuous mode [ 64.034775][ T5711] bond_slave_1: entered promiscuous mode [ 64.047166][ T5711] bond0: left promiscuous mode [ 64.052084][ T5711] bond_slave_0: left promiscuous mode [ 64.052165][ T5711] bond_slave_1: left promiscuous mode [ 64.067315][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.074565][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.087069][ T5664] bridge_slave_1: entered allmulticast mode [ 64.093999][ T5664] bridge_slave_1: entered promiscuous mode [ 64.113571][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.125331][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.348846][ T5664] team0: Port device team_slave_0 added [ 64.392571][ T29] audit: type=1400 audit(1719212075.275:648): avc: denied { create } for pid=5730 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.423437][ T5735] 9pnet_fd: Insufficient options for proto=fd [ 64.435661][ T5664] team0: Port device team_slave_1 added [ 64.484685][ T29] audit: type=1400 audit(1719212075.305:649): avc: denied { setopt } for pid=5730 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.498478][ T5734] loop2: detected capacity change from 0 to 1024 [ 64.504773][ T29] audit: type=1400 audit(1719212075.315:650): avc: denied { read write } for pid=5730 comm="syz-executor.2" dev="sockfs" ino=14942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.527761][ T5734] ext4: Unknown parameter '„w' [ 64.557621][ T3189] hsr_slave_0: left promiscuous mode [ 64.564417][ T3189] hsr_slave_1: left promiscuous mode [ 64.572484][ T3189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.579934][ T3189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.599669][ T3189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.607355][ T3189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.621011][ T3189] veth1_macvtap: left promiscuous mode [ 64.626611][ T3189] veth0_macvtap: left promiscuous mode [ 64.632131][ T3189] veth1_vlan: left promiscuous mode [ 64.637417][ T3189] veth0_vlan: left promiscuous mode [ 64.720663][ T5745] loop0: detected capacity change from 0 to 512 [ 64.732077][ T3189] team0 (unregistering): Port device team_slave_1 removed [ 64.739759][ T5745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.739822][ T5745] ext4 filesystem being mounted at /root/syzkaller-testdir1945601092/syzkaller.FPuRNt/42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.770428][ T3189] team0 (unregistering): Port device team_slave_0 removed [ 64.783155][ T29] audit: type=1400 audit(1719212075.675:651): avc: denied { ioctl } for pid=5744 comm="syz-executor.0" path="/root/syzkaller-testdir1945601092/syzkaller.FPuRNt/42/file1/cgroup.controllers" dev="loop0" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.832320][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.839400][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.865751][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.883915][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.889522][ T5752] loop1: detected capacity change from 0 to 512 [ 64.891001][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.923338][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.927092][ T5752] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 64.934631][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.949188][ T5752] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 64.969573][ T5752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.986176][ T5664] hsr_slave_0: entered promiscuous mode [ 64.993840][ T5664] hsr_slave_1: entered promiscuous mode [ 65.003910][ T5664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.011696][ T5664] Cannot create hsr debugfs directory [ 65.012122][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.103361][ T5768] loop0: detected capacity change from 0 to 256 [ 65.145215][ T5774] loop1: detected capacity change from 0 to 512 [ 65.153359][ T5774] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.162528][ T5774] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 65.171508][ T5774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 65.182193][ T5774] System zones: 0-2, 18-18, 34-34 [ 65.187921][ T5774] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 65.203961][ T5774] EXT4-fs (loop1): 1 truncate cleaned up [ 65.210283][ T5774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.367567][ T5783] __nla_validate_parse: 6 callbacks suppressed [ 65.367582][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.384738][ T29] audit: type=1400 audit(1719212076.275:652): avc: denied { setattr } for pid=5773 comm="syz-executor.1" path="/root/syzkaller-testdir2455587165/syzkaller.ytkxSe/45/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.415160][ T5783] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.427339][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.468547][ T5664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.474388][ T5790] loop2: detected capacity change from 0 to 512 [ 65.492464][ T5664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.503196][ T5790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.505299][ T5664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.525071][ T5664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.532273][ T5790] ext4 filesystem being mounted at /root/syzkaller-testdir1799842257/syzkaller.McWggr/56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.576983][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.597294][ T4959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.611816][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.629385][ T5803] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 65.631638][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.635989][ T5803] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.636093][ T5803] vhci_hcd vhci_hcd.0: Device attached [ 65.643172][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.661541][ T5803] loop0: detected capacity change from 0 to 512 [ 65.672110][ T5803] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 65.675637][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.687624][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.761467][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.841502][ T5664] veth0_vlan: entered promiscuous mode [ 65.851554][ T5664] veth1_vlan: entered promiscuous mode [ 65.865538][ T4557] vhci_hcd: vhci_device speed not set [ 65.870606][ T5664] veth0_macvtap: entered promiscuous mode [ 65.878990][ T5664] veth1_macvtap: entered promiscuous mode [ 65.890818][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.901413][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.911434][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.922033][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.931972][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.942514][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.945551][ T4557] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 65.955944][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.971831][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.982553][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.992798][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.003376][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013224][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.023765][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.029129][ T5805] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 66.034935][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.048049][ T3189] vhci_hcd: stop threads [ 66.052322][ T3189] vhci_hcd: release socket [ 66.053191][ T5664] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.056821][ T3189] vhci_hcd: disconnect device [ 66.065468][ T5664] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.079040][ T5664] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.086211][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.087762][ T5664] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.144831][ T5825] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.221104][ T5841] loop2: detected capacity change from 0 to 512 [ 66.238105][ T5841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.251359][ T5841] ext4 filesystem being mounted at /root/syzkaller-testdir1799842257/syzkaller.McWggr/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.282914][ T4959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.486758][ T5859] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.681801][ T5891] loop4: detected capacity change from 0 to 512 [ 66.697467][ T5891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.712974][ T5891] ext4 filesystem being mounted at /root/syzkaller-testdir3028166133/syzkaller.tMpSjB/213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.784487][ T3103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.791150][ T5901] loop0: detected capacity change from 0 to 256 [ 66.830224][ T29] audit: type=1400 audit(1719212077.725:653): avc: denied { bind } for pid=5900 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.854621][ T5910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 66.861256][ T5910] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.868830][ T5910] vhci_hcd vhci_hcd.0: Device attached [ 66.876669][ T5914] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 66.877820][ T5910] loop0: detected capacity change from 0 to 512 [ 66.883282][ T5914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.883330][ T5914] vhci_hcd vhci_hcd.0: Device attached [ 66.891565][ T5910] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 66.927306][ T5914] loop2: detected capacity change from 0 to 512 [ 66.934671][ T5914] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 67.059149][ T29] audit: type=1326 audit(1719212077.955:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a057c0a9 code=0x0 [ 67.115548][ T3178] vhci_hcd: vhci_device speed not set [ 67.125085][ T5932] loop1: detected capacity change from 0 to 512 [ 67.158396][ T5932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.184291][ T5932] ext4 filesystem being mounted at /root/syzkaller-testdir2455587165/syzkaller.ytkxSe/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.199863][ T3178] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 67.227842][ T5913] vhci_hcd: connection closed [ 67.228043][ T3202] vhci_hcd: stop threads [ 67.237124][ T3202] vhci_hcd: release socket [ 67.241548][ T3202] vhci_hcd: disconnect device [ 67.248459][ T5918] vhci_hcd: connection reset by peer [ 67.254091][ T3202] vhci_hcd: stop threads [ 67.255424][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.258426][ T3202] vhci_hcd: release socket [ 67.271807][ T3202] vhci_hcd: disconnect device [ 67.417932][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.425296][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.511635][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.524505][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.587778][ T5944] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.596759][ T5944] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.606217][ T5944] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.615128][ T5944] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.714113][ T5950] loop1: detected capacity change from 0 to 1024 [ 67.723135][ T5950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.732434][ T5950] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.747975][ T5950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 67.756359][ T5950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.763113][ T5950] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.777251][ T5950] EXT4-fs (loop1): Remounting filesystem read-only [ 67.777295][ T5950] EXT4-fs (loop1): 1 orphan inode deleted [ 67.777696][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.777729][ T5950] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 67.777985][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.810904][ T5959] loop2: detected capacity change from 0 to 2048 [ 67.831217][ T29] audit: type=1326 audit(1719212078.725:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16785590a9 code=0x0 [ 67.858638][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.884450][ T5965] loop0: detected capacity change from 0 to 512 [ 67.912639][ T5968] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.924358][ T5965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.938287][ T5965] ext4 filesystem being mounted at /root/syzkaller-testdir1945601092/syzkaller.FPuRNt/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.021748][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.065666][ T5959] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.080529][ T5959] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4095 with max blocks 33 with error 28 [ 68.093313][ T5959] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.093313][ T5959] [ 68.102979][ T5959] EXT4-fs (loop2): Total free blocks count 0 [ 68.109111][ T5959] EXT4-fs (loop2): Free/Dirty block details [ 68.109203][ T5959] EXT4-fs (loop2): free_blocks=2415919104 [ 68.109215][ T5959] EXT4-fs (loop2): dirty_blocks=48 [ 68.109226][ T5959] EXT4-fs (loop2): Block reservation details [ 68.109236][ T5959] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 68.129937][ T29] audit: type=1400 audit(1719212079.025:656): avc: denied { bind } for pid=5958 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.178365][ T5986] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 68.185058][ T5986] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.192492][ T5986] vhci_hcd vhci_hcd.0: Device attached [ 68.201199][ T5986] loop0: detected capacity change from 0 to 512 [ 68.208600][ T5986] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 68.332579][ T4959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.409270][ T5993] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.450523][ T5987] vhci_hcd: connection closed [ 68.450754][ T50] vhci_hcd: stop threads [ 68.459869][ T50] vhci_hcd: release socket [ 68.464447][ T50] vhci_hcd: disconnect device [ 68.497572][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.571938][ T6009] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.613257][ T6019] loop2: detected capacity change from 0 to 512 [ 68.637973][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.651624][ T6019] ext4 filesystem being mounted at /root/syzkaller-testdir1799842257/syzkaller.McWggr/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.676222][ T4959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.832497][ T6041] loop2: detected capacity change from 0 to 1024 [ 68.841288][ T6041] ext4: Unknown parameter 'uid<00000000000000000000' [ 68.903537][ T6041] loop2: detected capacity change from 0 to 8192 [ 68.929666][ T6054] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.040342][ T5423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.099995][ T5423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.119072][ T29] audit: type=1400 audit(1719212080.015:657): avc: denied { mount } for pid=6072 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.161045][ T5423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.196626][ T29] audit: type=1400 audit(1719212080.095:658): avc: denied { unmount } for pid=4991 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.220453][ T6094] loop1: detected capacity change from 0 to 512 [ 69.228985][ T6094] ext4: Unknown parameter 'uid<00000000000000000000' [ 69.238828][ T5423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.254099][ T6097] gretap0: entered promiscuous mode [ 69.264311][ T6097] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 69.272574][ T6097] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.285959][ T6099] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.340388][ T6066] chnl_net:caif_netlink_parms(): no params data found [ 69.357868][ T5423] bridge_slave_1: left allmulticast mode [ 69.363527][ T5423] bridge_slave_1: left promiscuous mode [ 69.369313][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.383703][ T5423] bridge_slave_0: left allmulticast mode [ 69.389390][ T5423] bridge_slave_0: left promiscuous mode [ 69.395055][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.528090][ T5423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.537976][ T5423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.548121][ T5423] bond0 (unregistering): Released all slaves [ 69.556748][ T5423] bond1 (unregistering): Released all slaves [ 69.567293][ T6118] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.587934][ T29] audit: type=1400 audit(1719212080.485:659): avc: denied { create } for pid=6122 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=decnet_socket permissive=1 [ 69.610931][ T29] audit: type=1400 audit(1719212080.505:660): avc: denied { create } for pid=6122 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 69.632434][ T29] audit: type=1400 audit(1719212080.505:661): avc: denied { create } for pid=6122 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 69.688265][ T6129] bond0: entered promiscuous mode [ 69.693406][ T6129] bond_slave_0: entered promiscuous mode [ 69.699264][ T6129] bond_slave_1: entered promiscuous mode [ 69.707602][ T6129] bond0: left promiscuous mode [ 69.712397][ T6129] bond_slave_0: left promiscuous mode [ 69.718143][ T6129] bond_slave_1: left promiscuous mode [ 69.738952][ T5423] hsr_slave_0: left promiscuous mode [ 69.744803][ T5423] hsr_slave_1: left promiscuous mode [ 69.750523][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.758084][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.766222][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.773607][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.787040][ T5423] veth1_macvtap: left promiscuous mode [ 69.792679][ T5423] veth0_macvtap: left promiscuous mode [ 69.794635][ T6137] loop3: detected capacity change from 0 to 512 [ 69.798258][ T5423] veth1_vlan: left promiscuous mode [ 69.808257][ T6137] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 69.810073][ T5423] veth0_vlan: left promiscuous mode [ 69.824904][ T6137] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 69.843248][ T6137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.878148][ T5664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.935192][ T5423] team0 (unregistering): Port device team_slave_1 removed [ 69.948979][ T5423] team0 (unregistering): Port device team_slave_0 removed [ 69.984225][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.991394][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.998601][ T6066] bridge_slave_0: entered allmulticast mode [ 70.005162][ T6066] bridge_slave_0: entered promiscuous mode [ 70.013399][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.020802][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.041535][ T6066] bridge_slave_1: entered allmulticast mode [ 70.048799][ T6066] bridge_slave_1: entered promiscuous mode [ 70.057863][ T6154] loop1: detected capacity change from 0 to 128 [ 70.069431][ T6154] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.069967][ T29] audit: type=1400 audit(1719212080.965:662): avc: denied { mount } for pid=6155 comm="syz-executor.0" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.079739][ T6156] devpts: called with bogus options [ 70.102622][ T29] audit: type=1400 audit(1719212080.975:663): avc: denied { remount } for pid=6155 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.133045][ T29] audit: type=1400 audit(1719212081.025:664): avc: denied { ioctl } for pid=6155 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.162290][ T6154] hsr0: entered promiscuous mode [ 70.168092][ T6154] hsr0: left promiscuous mode [ 70.180153][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.185624][ T29] audit: type=1400 audit(1719212081.075:665): avc: denied { unmount } for pid=4889 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.190598][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.233744][ T6066] team0: Port device team_slave_0 added [ 70.240254][ T6066] team0: Port device team_slave_1 added [ 70.254975][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.261976][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.288162][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.300036][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.307223][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.334973][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.347001][ T50] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.363977][ T6066] hsr_slave_0: entered promiscuous mode [ 70.370110][ T6066] hsr_slave_1: entered promiscuous mode [ 70.375992][ T6066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.383584][ T6066] Cannot create hsr debugfs directory [ 70.438020][ T6167] loop1: detected capacity change from 0 to 256 [ 70.488927][ T6172] loop0: detected capacity change from 0 to 512 [ 70.497458][ T6172] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 70.511529][ T6172] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 70.524564][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.540282][ T6175] __nla_validate_parse: 3 callbacks suppressed [ 70.540298][ T6175] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.556354][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.624510][ T6179] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.658487][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.669352][ T6185] lo: Caught tx_queue_len zero misconfig [ 70.675076][ T6185] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.701324][ T6066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.710335][ T6066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.719351][ T6066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.735095][ T6066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.775567][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.789082][ T6066] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.799083][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.806208][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.815297][ T6205] loop1: detected capacity change from 0 to 512 [ 70.825034][ T6066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.827210][ T6205] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 70.835709][ T6066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.856636][ T6205] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 70.873800][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.878702][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.893226][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.905129][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.937136][ T6210] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.024114][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.032643][ T6219] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.045743][ T4557] usb 1-1: enqueue for inactive port 0 [ 71.058947][ T4557] usb 1-1: enqueue for inactive port 0 [ 71.116847][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.126388][ T6230] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.145773][ T4557] vhci_hcd: vhci_device speed not set [ 71.157946][ T29] audit: type=1400 audit(1719212082.055:666): avc: denied { map } for pid=6233 comm="syz-executor.1" path="socket:[17093]" dev="sockfs" ino=17093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.170122][ T6066] veth0_vlan: entered promiscuous mode [ 71.192582][ T6066] veth1_vlan: entered promiscuous mode [ 71.196640][ T6236] loop1: detected capacity change from 0 to 512 [ 71.207083][ T6236] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 71.208971][ T6066] veth0_macvtap: entered promiscuous mode [ 71.225835][ T6236] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 71.230016][ T6066] veth1_macvtap: entered promiscuous mode [ 71.240378][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.250136][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.267337][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.277240][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.287903][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.298441][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.299086][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.319563][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.330041][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.340092][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.350563][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.361223][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.371517][ T6066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.380253][ T6066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.389044][ T6066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.397850][ T6066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.426174][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.438797][ T6244] loop1: detected capacity change from 0 to 128 [ 71.439035][ T6246] loop2: detected capacity change from 0 to 512 [ 71.458178][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.471153][ T6246] ext4 filesystem being mounted at /root/syzkaller-testdir1497553608/syzkaller.DnA2wa/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.492076][ T6066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.531435][ T6251] loop0: detected capacity change from 0 to 512 [ 71.540454][ T6251] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 71.554616][ T6251] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 71.568443][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.593216][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.646378][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.700301][ T6270] loop0: detected capacity change from 0 to 512 [ 71.854325][ T6270] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.877313][ T6270] EXT4-fs: Mount option(s) incompatible with ext2 [ 72.255854][ T3178] usb 5-1: enqueue for inactive port 0 [ 72.261422][ T3178] usb 5-1: enqueue for inactive port 0 [ 72.286414][ T6281] loop1: detected capacity change from 0 to 512 [ 72.309277][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.326056][ T6281] ext4 filesystem being mounted at /root/syzkaller-testdir2455587165/syzkaller.ytkxSe/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.355514][ T3178] vhci_hcd: vhci_device speed not set [ 72.378787][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.565259][ T6318] loop0: detected capacity change from 0 to 512 [ 72.589384][ T6318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.607731][ T6318] ext4 filesystem being mounted at /root/syzkaller-testdir1945601092/syzkaller.FPuRNt/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.628501][ T6319] loop2: detected capacity change from 0 to 2048 [ 72.663522][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.675945][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.689928][ T6319] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 72.704003][ T6066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.144033][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.151365][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.217802][ T6340] loop3: detected capacity change from 0 to 256 [ 73.348001][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.367581][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.460513][ T6336] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.469676][ T6336] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.478602][ T6336] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.487539][ T6336] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.606283][ T6357] loop0: detected capacity change from 0 to 512 [ 73.626582][ T6357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.643528][ T6357] ext4 filesystem being mounted at /root/syzkaller-testdir1945601092/syzkaller.FPuRNt/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.682831][ T6359] loop3: detected capacity change from 0 to 2048 [ 73.703508][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.719384][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.759566][ T5664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.294756][ T6399] loop1: detected capacity change from 0 to 512 [ 74.317665][ T6399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.322490][ T6400] loop0: detected capacity change from 0 to 2048 [ 74.330382][ T6399] ext4 filesystem being mounted at /root/syzkaller-testdir2455587165/syzkaller.ytkxSe/109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.356743][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.369840][ T4991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.379634][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.513673][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 74.513687][ T29] audit: type=1400 audit(1719212085.405:671): avc: denied { shutdown } for pid=6415 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.724685][ T6430] loop0: detected capacity change from 0 to 512 [ 74.737347][ T6430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.749925][ T6430] ext4 filesystem being mounted at /root/syzkaller-testdir1945601092/syzkaller.FPuRNt/100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.914242][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.178975][ T6440] loop0: detected capacity change from 0 to 2048 [ 75.207306][ T6440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.224306][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.286145][ T6446] bond0: entered promiscuous mode [ 75.291235][ T6446] bond_slave_0: entered promiscuous mode [ 75.297052][ T6446] bond_slave_1: entered promiscuous mode [ 75.303756][ T6446] bond0: left promiscuous mode [ 75.308553][ T6446] bond_slave_0: left promiscuous mode [ 75.314191][ T6446] bond_slave_1: left promiscuous mode [ 75.561324][ T29] audit: type=1400 audit(1719212086.455:672): avc: denied { block_suspend } for pid=6452 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.223849][ T6471] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 76.483791][ T6488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 76.490570][ T6488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.498340][ T6488] vhci_hcd vhci_hcd.0: Device attached [ 76.506898][ T6488] loop1: detected capacity change from 0 to 512 [ 76.515875][ T6488] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 76.918232][ T6490] vhci_hcd: connection closed [ 76.927184][ T3240] vhci_hcd: vhci_device speed not set [ 76.937752][ T5423] vhci_hcd: stop threads [ 76.942011][ T5423] vhci_hcd: release socket [ 76.946840][ T5423] vhci_hcd: disconnect device [ 77.005535][ T3240] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 77.013111][ T3240] usb 3-1: enqueue for inactive port 0 [ 77.020918][ T3240] usb 3-1: enqueue for inactive port 0 [ 77.026580][ T3240] usb 3-1: enqueue for inactive port 0 [ 77.107679][ T3240] vhci_hcd: vhci_device speed not set [ 77.327635][ T6504] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 77.413467][ T6510] loop0: detected capacity change from 0 to 1024 [ 77.424795][ T6510] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.436875][ T6510] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 77.448126][ T6510] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.459063][ T6510] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 77.479335][ T6513] loop1: detected capacity change from 0 to 128 [ 77.485874][ T6510] EXT4-fs (loop0): Remounting filesystem read-only [ 77.492589][ T6510] Quota error (device loop0): write_blk: dquota write failed [ 77.500049][ T6510] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 77.541862][ T6510] EXT4-fs (loop0): 1 truncate cleaned up [ 77.549893][ T6510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.562541][ T6510] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 77.573796][ T6510] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.593798][ T6515] loop1: detected capacity change from 0 to 512 [ 77.638551][ T29] audit: type=1400 audit(1719212088.535:673): avc: denied { remount } for pid=6514 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.752298][ T6532] __nla_validate_parse: 10 callbacks suppressed [ 77.752310][ T6532] netlink: 340 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.781264][ T6532] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.004203][ T6535] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.126709][ T6539] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.204396][ T6551] loop1: detected capacity change from 0 to 1024 [ 78.212735][ T6551] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.224262][ T6551] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.232679][ T6551] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.239820][ T6551] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 78.253372][ T6551] EXT4-fs (loop1): Remounting filesystem read-only [ 78.260044][ T6551] Quota error (device loop1): write_blk: dquota write failed [ 78.267463][ T6551] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 78.277583][ T6551] EXT4-fs (loop1): 1 truncate cleaned up [ 78.283934][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.298088][ T6551] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 78.305263][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.336860][ T6551] loop1: detected capacity change from 0 to 1024 [ 78.348105][ T6551] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 78.373174][ T6551] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.391553][ T6551] jbd2_journal_init_inode: Cannot locate journal superblock [ 78.399005][ T6551] EXT4-fs (loop1): Could not load journal inode [ 78.520518][ T6561] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.633518][ T6574] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.666466][ T29] audit: type=1400 audit(1719212089.565:674): avc: denied { create } for pid=6576 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 78.710713][ T29] audit: type=1400 audit(1719212089.605:675): avc: denied { create } for pid=6576 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 78.731485][ T29] audit: type=1400 audit(1719212089.605:676): avc: denied { setopt } for pid=6576 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 78.784739][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.904426][ T6597] loop0: detected capacity change from 0 to 512 [ 78.917731][ T6597] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 78.934963][ T6597] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 78.948625][ T6597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.983069][ T4889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.109732][ T6604] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.170337][ T6607] loop3: detected capacity change from 0 to 2048 [ 79.186613][ T6613] SELinux: Context Ž is not valid (left unmapped). [ 79.188028][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.210697][ T6607] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 79.224859][ T5664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.292600][ T6622] loop3: detected capacity change from 0 to 1024 [ 79.300767][ T6622] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.311722][ T6622] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.320023][ T6622] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.326864][ T6622] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 79.340115][ T6622] EXT4-fs (loop3): Remounting filesystem read-only [ 79.346722][ T6622] EXT4-fs (loop3): 1 truncate cleaned up [ 79.352975][ T6622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.365372][ T6622] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 79.372395][ T6622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.476059][ T6630] loop3: detected capacity change from 0 to 1024 [ 79.483737][ T6630] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.494893][ T6630] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.502990][ T6630] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.509784][ T6630] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 79.523160][ T6630] EXT4-fs (loop3): Remounting filesystem read-only [ 79.529730][ T6630] __quota_error: 63 callbacks suppressed [ 79.529800][ T6630] Quota error (device loop3): write_blk: dquota write failed [ 79.542872][ T6630] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 79.552945][ T6630] EXT4-fs (loop3): 1 truncate cleaned up [ 79.560344][ T6630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.573134][ T6630] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 79.581196][ T6630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.624086][ T6630] loop3: detected capacity change from 0 to 1024 [ 79.636191][ T6630] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 79.651439][ T6630] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.651628][ T6639] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.663200][ T6630] jbd2_journal_init_inode: Cannot locate journal superblock [ 79.678426][ T6630] EXT4-fs (loop3): Could not load journal inode [ 79.706944][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.716820][ T6647] lo: Caught tx_queue_len zero misconfig [ 79.865753][ T6674] 9pnet_fd: Insufficient options for proto=fd [ 79.888220][ T6674] loop2: detected capacity change from 0 to 2048 [ 79.936057][ T6674] loop2: p2 < > p3 p4 < > [ 79.940749][ T6674] loop2: partition table partially beyond EOD, truncated [ 79.951468][ T6674] loop2: p2 start 4294902784 is beyond EOD, truncated [ 79.958574][ T6674] loop2: p3 start 4278191616 is beyond EOD, truncated [ 79.972293][ T6686] loop3: detected capacity change from 0 to 1024 [ 79.981040][ T6686] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.993478][ T6686] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 80.001757][ T6686] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.009969][ T6686] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 80.023290][ T6686] EXT4-fs (loop3): Remounting filesystem read-only [ 80.029964][ T6686] Quota error (device loop3): write_blk: dquota write failed [ 80.037379][ T6686] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 80.047371][ T6686] EXT4-fs (loop3): 1 truncate cleaned up [ 80.053593][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.066414][ T6686] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 80.073744][ T6686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.103769][ T6686] loop3: detected capacity change from 0 to 1024 [ 80.114002][ T6686] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 80.124306][ T6686] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.137192][ T6686] jbd2_journal_init_inode: Cannot locate journal superblock [ 80.144517][ T6686] EXT4-fs (loop3): Could not load journal inode [ 80.220123][ T6707] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 80.282161][ T6720] netlink: 'syz-executor.1': attribute type 37 has an invalid length. [ 80.727948][ T29] audit: type=1400 audit(1719212091.625:738): avc: denied { getopt } for pid=6762 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.801854][ T6769] loop0: detected capacity change from 0 to 1024 [ 80.817644][ T6769] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.830969][ T6769] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.848269][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.851926][ T6769] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.855562][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.863096][ T6769] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 80.891667][ T6769] EXT4-fs (loop0): Remounting filesystem read-only [ 80.898565][ T6769] Quota error (device loop0): write_blk: dquota write failed [ 80.907741][ T6769] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.926420][ T6769] EXT4-fs (loop0): 1 truncate cleaned up [ 80.945816][ T6769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.969185][ T6769] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 80.997940][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.012390][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.055377][ T6771] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.064548][ T6771] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.074468][ T6771] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.077095][ T6769] loop0: detected capacity change from 0 to 1024 [ 81.083723][ T6771] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.091817][ T6769] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 81.110205][ T6769] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.125158][ T6769] jbd2_journal_init_inode: Cannot locate journal superblock [ 81.133115][ T6769] EXT4-fs (loop0): Could not load journal inode [ 81.240238][ T6784] loop1: detected capacity change from 0 to 1024 [ 81.270043][ T6784] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.295292][ T6789] loop0: detected capacity change from 0 to 256 [ 81.302051][ T29] audit: type=1326 audit(1719212092.195:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a057c0a9 code=0x0 [ 81.307259][ T6784] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 81.338086][ T6784] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.338086][ T6784] [ 81.339490][ T6789] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 81.347934][ T6784] EXT4-fs (loop1): Total free blocks count 0 [ 81.361949][ T6784] EXT4-fs (loop1): Free/Dirty block details [ 81.363352][ T6799] loop2: detected capacity change from 0 to 256 [ 81.368151][ T6784] EXT4-fs (loop1): free_blocks=68451041280 [ 81.380412][ T6784] EXT4-fs (loop1): dirty_blocks=64 [ 81.385761][ T6784] EXT4-fs (loop1): Block reservation details [ 81.391777][ T6784] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 81.392024][ T6784] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 81.410240][ T6784] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.410240][ T6784] [ 81.419846][ T6804] loop3: detected capacity change from 0 to 512 [ 81.428049][ T6804] EXT4-fs: Ignoring removed nobh option [ 81.433945][ T6804] ext4: Unknown parameter 'audit' [ 81.560392][ T6818] loop1: detected capacity change from 0 to 1024 [ 81.576861][ T6818] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.587989][ T6818] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.596398][ T6818] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.606553][ T29] audit: type=1400 audit(1719212092.505:740): avc: denied { write } for pid=6832 comm="syz-executor.2" path="socket:[19392]" dev="sockfs" ino=19392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 81.607370][ T6830] loop0: detected capacity change from 0 to 1024 [ 81.638832][ T6818] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 81.652723][ T29] audit: type=1326 audit(1719212092.545:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1c2510a9 code=0x0 [ 81.654138][ T6830] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.676788][ T6818] EXT4-fs (loop1): Remounting filesystem read-only [ 81.688394][ T6830] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 81.693235][ T6818] EXT4-fs (loop1): 1 truncate cleaned up [ 81.701546][ T6830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.714179][ T6818] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 81.714819][ T6830] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 81.734374][ T6830] EXT4-fs (loop0): Remounting filesystem read-only [ 81.741370][ T6830] EXT4-fs (loop0): 1 truncate cleaned up [ 81.747633][ T6830] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 81.762472][ T6836] loop3: detected capacity change from 0 to 512 [ 81.771376][ T6836] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 81.789335][ T6836] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 81.795673][ T6818] loop1: detected capacity change from 0 to 1024 [ 81.809517][ T6818] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 81.810287][ T6830] loop0: detected capacity change from 0 to 1024 [ 81.819487][ T6818] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.828023][ T6830] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 81.845699][ T6830] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.846691][ T6818] jbd2_journal_init_inode: Cannot locate journal superblock [ 81.856640][ T6830] jbd2_journal_init_inode: Cannot locate journal superblock [ 81.863178][ T6818] EXT4-fs (loop1): Could not load journal inode [ 81.870652][ T6830] EXT4-fs (loop0): Could not load journal inode [ 82.029793][ T6862] loop1: detected capacity change from 0 to 512 [ 82.039276][ T6862] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 82.063354][ T6862] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 82.343753][ T6880] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 82.523142][ T6895] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 82.535453][ T6901] loop3: detected capacity change from 0 to 512 [ 82.558361][ T6901] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 82.573019][ T6901] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 82.630329][ T6910] loop2: detected capacity change from 0 to 2048 [ 82.668435][ T6910] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 82.817769][ T6928] __nla_validate_parse: 15 callbacks suppressed [ 82.817850][ T6928] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.832577][ T6934] loop3: detected capacity change from 0 to 512 [ 82.841794][ T6934] EXT4-fs: dax option not supported [ 82.892708][ T6944] loop3: detected capacity change from 0 to 512 [ 82.902787][ T6944] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 82.918686][ T6944] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 82.927749][ T6946] loop0: detected capacity change from 0 to 2048 [ 82.950642][ T6951] loop1: detected capacity change from 0 to 512 [ 82.958064][ T6946] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 82.992992][ T6957] loop3: detected capacity change from 0 to 1024 [ 83.002163][ T6957] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.016053][ T6957] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 83.034424][ T6957] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.042481][ T6957] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.057038][ T6957] EXT4-fs (loop3): 1 orphan inode deleted [ 83.089249][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 83.114956][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.125769][ T6968] netlink: 'syz-executor.1': attribute type 37 has an invalid length. [ 83.143180][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 18: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.149534][ T6969] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.174618][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.205201][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.243910][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 21: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.262469][ T6974] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.301316][ T6957] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 22: comm syz-executor.3: path /root/syzkaller-testdir3576541829/syzkaller.RVXzUs/88/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.368031][ T6985] loop1: detected capacity change from 0 to 2048 [ 84.388728][ T6996] loop0: detected capacity change from 0 to 512 [ 84.389099][ T6985] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 84.407115][ T6996] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 84.428544][ T6996] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 84.467164][ T7006] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.477823][ T7006] tipc: Started in network mode [ 84.482670][ T7006] tipc: Node identity , cluster identity 4711 [ 84.488920][ T7006] tipc: Failed to set node id, please configure manually [ 84.495974][ T7006] tipc: Enabling of bearer rejected, failed to enable media [ 84.510015][ T7010] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.524011][ T7014] netlink: 'syz-executor.0': attribute type 37 has an invalid length. [ 84.867809][ T7032] loop1: detected capacity change from 0 to 1024 [ 84.917241][ T7032] EXT4-fs: Ignoring removed orlov option [ 84.923003][ T7032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.951022][ T7040] loop3: detected capacity change from 0 to 512 [ 84.955577][ T7033] loop0: detected capacity change from 0 to 2048 [ 84.959953][ T7040] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 84.978561][ T7040] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 84.989844][ T7033] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 85.062653][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.089322][ T7057] netlink: 'syz-executor.0': attribute type 37 has an invalid length. [ 85.146406][ T7061] loop1: detected capacity change from 0 to 128 [ 85.154229][ T7061] FAT-fs (loop1): bogus number of directory entries (1) [ 85.161232][ T7061] FAT-fs (loop1): Can't find a valid FAT filesystem [ 85.222048][ T7071] loop3: detected capacity change from 0 to 512 [ 85.231140][ T7071] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 85.245277][ T7071] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 85.294411][ T7074] loop0: detected capacity change from 0 to 2048 [ 85.334119][ T7074] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 85.379550][ T7081] loop3: detected capacity change from 0 to 2048 [ 85.407661][ T7081] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 85.435195][ T5664] ================================================================== [ 85.443484][ T5664] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru_vma [ 85.451390][ T5664] [ 85.453706][ T5664] read-write to 0xffff888237c2ac08 of 1 bytes by task 3097 on cpu 0: [ 85.461757][ T5664] folio_add_lru_vma+0x74/0x170 [ 85.466603][ T5664] handle_mm_fault+0x2411/0x2a80 [ 85.471536][ T5664] exc_page_fault+0x3b9/0x650 [ 85.476202][ T5664] asm_exc_page_fault+0x26/0x30 [ 85.481040][ T5664] [ 85.483346][ T5664] read to 0xffff888237c2ac08 of 1 bytes by task 5664 on cpu 1: [ 85.490874][ T5664] __lru_add_drain_all+0x12c/0x410 [ 85.495983][ T5664] lru_add_drain_all+0x10/0x20 [ 85.500740][ T5664] invalidate_bdev+0x47/0x70 [ 85.505336][ T5664] ext4_put_super+0x51b/0x7e0 [ 85.510107][ T5664] generic_shutdown_super+0xde/0x210 [ 85.515388][ T5664] kill_block_super+0x2a/0x70 [ 85.520061][ T5664] ext4_kill_sb+0x44/0x80 [ 85.524385][ T5664] deactivate_locked_super+0x7d/0x1c0 [ 85.529748][ T5664] deactivate_super+0x9f/0xb0 [ 85.534415][ T5664] cleanup_mnt+0x268/0x2e0 [ 85.538915][ T5664] __cleanup_mnt+0x19/0x20 [ 85.543328][ T5664] task_work_run+0x13a/0x1a0 [ 85.548010][ T5664] syscall_exit_to_user_mode+0xbe/0x130 [ 85.553546][ T5664] do_syscall_64+0xd6/0x1c0 [ 85.558127][ T5664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.564016][ T5664] [ 85.566325][ T5664] value changed: 0x00 -> 0x01 [ 85.570990][ T5664] [ 85.573303][ T5664] Reported by Kernel Concurrency Sanitizer on: 2024/06/24 06:54:56 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 85.579446][ T5664] CPU: 1 PID: 5664 Comm: syz-executor.3 Not tainted 6.10.0-rc5-syzkaller #0 [ 85.588201][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.598254][ T5664] ================================================================== [ 85.611831][ T29] kauditd_printk_skb: 1174 callbacks suppressed [ 85.611845][ T29] audit: type=1400 audit(1719212096.505:1912): avc: denied { write } for pid=3070 comm="syz-fuzzer" path="pipe:[535]" dev="pipefs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 85.707223][ T5423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [