last executing test programs: 1.766961572s ago: executing program 2 (id=389): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x1000080, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00'], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 1.559157819s ago: executing program 1 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240408d6}, 0x40044) 1.54040279s ago: executing program 2 (id=396): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, &(0x7f00000001c0)={0x1f, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0x0) 1.484857241s ago: executing program 1 (id=398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x1ff}, 0x8) 1.425500363s ago: executing program 2 (id=401): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) 1.411849474s ago: executing program 1 (id=402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.337557846s ago: executing program 2 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 1.328108176s ago: executing program 0 (id=406): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003a40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000009c0)="1c", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003480)=[{&(0x7f00000010c0)=']', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) 1.247268229s ago: executing program 2 (id=408): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) 1.245562269s ago: executing program 3 (id=409): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3}, 0x3286, 0x3, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) symlink(0x0, &(0x7f00000002c0)='.\x02\x00') 1.24109375s ago: executing program 0 (id=410): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 1.193473151s ago: executing program 1 (id=412): sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250400000008000800dfffffff080002000700000008000c0002000000080007"], 0x48}, 0x1, 0x0, 0x0, 0x24004091}, 0x400c054) 1.162683932s ago: executing program 0 (id=414): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d40cb1bb2a268f2a8d772f533aea2b34553e9f72db9c5511f08bcecdcaa2e8e6002ac0b"], 0x288}}, 0x20050800) 1.150901353s ago: executing program 3 (id=415): perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x100820, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') 1.112371384s ago: executing program 1 (id=416): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000800, &(0x7f0000000300)={[{@auto_da_alloc}, {@bh}]}, 0x0, 0x4c4, &(0x7f00000009c0)="$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") r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x42, 0x115) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 1.090990634s ago: executing program 3 (id=418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.009392437s ago: executing program 0 (id=420): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x550, &(0x7f0000000800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x3a8) 974.002558ms ago: executing program 3 (id=421): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffefff, 0x0, 0xfffffffffffffffc, 0x80000ff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 926.94191ms ago: executing program 4 (id=422): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x824, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 773.263365ms ago: executing program 4 (id=423): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000300)='\x92n\xff\xb5\xe1\x1f/\xbc\x04\x00\x00\x00\x00', 0x3) fallocate(r0, 0x0, 0x3, 0xffff) copy_file_range(r0, &(0x7f0000000040)=0x369, r0, &(0x7f0000000100)=0x6, 0x80, 0x0) 691.715667ms ago: executing program 3 (id=424): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000740)={0x2, 0x11, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 674.383868ms ago: executing program 4 (id=425): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8001, 0x3a, 'bridge\x00', 0x3a, 'bridge\x00', 0x3a, './file0'}, 0x35) 627.774569ms ago: executing program 4 (id=426): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 603.92268ms ago: executing program 3 (id=427): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) membarrier(0x40, 0x0) 602.55729ms ago: executing program 0 (id=428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 582.927731ms ago: executing program 1 (id=429): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="61cd314bd051", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 453.549105ms ago: executing program 0 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r0, 0x5}) 311.25378ms ago: executing program 2 (id=431): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1043, 0x0) 20.04426ms ago: executing program 4 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xf1, &(0x7f0000000140)={&(0x7f0000001400)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x1b, 0xa, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x80, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x8}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 0s ago: executing program 4 (id=433): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x7, 0x6000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 29.586393][ T28] audit: type=1400 audit(1780443699.875:117): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.609450][ T28] audit: type=1400 audit(1780443699.895:118): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.610066][ T3285] cgroup: Unknown subsys name 'net' [ 29.637315][ T28] audit: type=1400 audit(1780443699.925:119): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.774458][ T3285] cgroup: Unknown subsys name 'cpuset' [ 29.780748][ T3285] cgroup: Unknown subsys name 'rlimit' [ 29.910080][ T28] audit: type=1400 audit(1780443700.195:120): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.939474][ T28] audit: type=1400 audit(1780443700.195:121): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.946365][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.960102][ T28] audit: type=1400 audit(1780443700.195:122): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.989134][ T28] audit: type=1400 audit(1780443700.195:123): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.009539][ T28] audit: type=1400 audit(1780443700.205:124): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.034513][ T28] audit: type=1400 audit(1780443700.205:125): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.057990][ T28] audit: type=1400 audit(1780443700.215:126): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.081373][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.296060][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.303263][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.310523][ T3304] bridge_slave_0: entered allmulticast mode [ 31.316910][ T3304] bridge_slave_0: entered promiscuous mode [ 31.327690][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.334790][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.341904][ T3296] bridge_slave_0: entered allmulticast mode [ 31.348345][ T3296] bridge_slave_0: entered promiscuous mode [ 31.368765][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.375968][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.383106][ T3304] bridge_slave_1: entered allmulticast mode [ 31.389493][ T3304] bridge_slave_1: entered promiscuous mode [ 31.399971][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.407035][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.414154][ T3296] bridge_slave_1: entered allmulticast mode [ 31.420535][ T3296] bridge_slave_1: entered promiscuous mode [ 31.463699][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.475723][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.492605][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.511139][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.549969][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.557100][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.564407][ T3301] bridge_slave_0: entered allmulticast mode [ 31.570943][ T3301] bridge_slave_0: entered promiscuous mode [ 31.578225][ T3304] team0: Port device team_slave_0 added [ 31.583983][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.591028][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.598269][ T3302] bridge_slave_0: entered allmulticast mode [ 31.604780][ T3302] bridge_slave_0: entered promiscuous mode [ 31.611784][ T3296] team0: Port device team_slave_0 added [ 31.617499][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.624626][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.631762][ T3297] bridge_slave_0: entered allmulticast mode [ 31.638141][ T3297] bridge_slave_0: entered promiscuous mode [ 31.644626][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.651835][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.658952][ T3301] bridge_slave_1: entered allmulticast mode [ 31.665363][ T3301] bridge_slave_1: entered promiscuous mode [ 31.672541][ T3304] team0: Port device team_slave_1 added [ 31.678278][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.685426][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.692482][ T3302] bridge_slave_1: entered allmulticast mode [ 31.698827][ T3302] bridge_slave_1: entered promiscuous mode [ 31.705912][ T3296] team0: Port device team_slave_1 added [ 31.711566][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.718641][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.725804][ T3297] bridge_slave_1: entered allmulticast mode [ 31.732182][ T3297] bridge_slave_1: entered promiscuous mode [ 31.779456][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.789019][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.795985][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.821975][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.833690][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.843063][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.850043][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.876044][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.887880][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.897921][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.907270][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.914270][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.940261][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.951681][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.966591][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.973533][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.999492][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.011136][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.038513][ T3302] team0: Port device team_slave_0 added [ 32.053462][ T3301] team0: Port device team_slave_0 added [ 32.060394][ T3301] team0: Port device team_slave_1 added [ 32.071128][ T3302] team0: Port device team_slave_1 added [ 32.077370][ T3297] team0: Port device team_slave_0 added [ 32.084163][ T3297] team0: Port device team_slave_1 added [ 32.115354][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.122422][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.148388][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.171301][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.178298][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.204255][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.215134][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.222182][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.248122][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.261474][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.268466][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.294414][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.314426][ T3304] hsr_slave_0: entered promiscuous mode [ 32.320379][ T3304] hsr_slave_1: entered promiscuous mode [ 32.328363][ T3296] hsr_slave_0: entered promiscuous mode [ 32.334446][ T3296] hsr_slave_1: entered promiscuous mode [ 32.340178][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.345929][ T3296] Cannot create hsr debugfs directory [ 32.351702][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.358695][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.384606][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.400759][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.407748][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.433710][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.489501][ T3297] hsr_slave_0: entered promiscuous mode [ 32.495698][ T3297] hsr_slave_1: entered promiscuous mode [ 32.501490][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 32.507306][ T3297] Cannot create hsr debugfs directory [ 32.525554][ T3302] hsr_slave_0: entered promiscuous mode [ 32.531412][ T3302] hsr_slave_1: entered promiscuous mode [ 32.537325][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 32.543057][ T3302] Cannot create hsr debugfs directory [ 32.559347][ T3301] hsr_slave_0: entered promiscuous mode [ 32.565426][ T3301] hsr_slave_1: entered promiscuous mode [ 32.571176][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.576946][ T3301] Cannot create hsr debugfs directory [ 32.759522][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.767702][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.775378][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.784041][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.793609][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.802207][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.809782][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.819479][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.827128][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.835730][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.843170][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.851343][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.861662][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.870166][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.881676][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.890032][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.914359][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.922773][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.930435][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.938602][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.946228][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.955003][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.963007][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.971758][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.998783][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.007457][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.015195][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.023604][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.032186][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.040924][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.048666][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.057329][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.099806][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.108834][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.116525][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.125285][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.133026][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.141539][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.149952][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.158366][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.194460][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.211348][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.222914][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.237254][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.244330][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.267479][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.277548][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.284689][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.311305][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.318381][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.331003][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.339752][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.349348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.356506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.370247][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.389253][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.396850][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.411755][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.418861][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.436337][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.443427][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.451935][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.459048][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.468531][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.475700][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.494864][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.509251][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.516385][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.541025][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.548201][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.648921][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.762415][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.820182][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.831305][ T3296] veth0_vlan: entered promiscuous mode [ 33.856021][ T3296] veth1_vlan: entered promiscuous mode [ 33.876592][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.888117][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.918932][ T3296] veth0_macvtap: entered promiscuous mode [ 33.941062][ T3296] veth1_macvtap: entered promiscuous mode [ 33.953764][ T3301] veth0_vlan: entered promiscuous mode [ 33.970362][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.979937][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.990558][ T3301] veth1_vlan: entered promiscuous mode [ 34.005236][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.014776][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.030797][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.046717][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.066189][ T3301] veth0_macvtap: entered promiscuous mode [ 34.086218][ T3301] veth1_macvtap: entered promiscuous mode [ 34.103456][ T3297] veth0_vlan: entered promiscuous mode [ 34.112038][ T3297] veth1_vlan: entered promiscuous mode [ 34.123654][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.132788][ T3302] veth0_vlan: entered promiscuous mode [ 34.149259][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.172481][ T3302] veth1_vlan: entered promiscuous mode [ 34.185522][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.209911][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.218802][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.239701][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.252774][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.269419][ T3302] veth0_macvtap: entered promiscuous mode [ 34.276951][ T3302] veth1_macvtap: entered promiscuous mode [ 34.292683][ T3297] veth0_macvtap: entered promiscuous mode [ 34.302853][ T3304] veth0_vlan: entered promiscuous mode [ 34.320416][ T3506] capability: warning: `syz.2.7' uses deprecated v2 capabilities in a way that may be insecure [ 34.330005][ T3297] veth1_macvtap: entered promiscuous mode [ 34.339792][ T3304] veth1_vlan: entered promiscuous mode [ 34.351016][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.367894][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.390037][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.400261][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.414297][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.421901][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.431064][ T361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.440546][ T3509] Zero length message leads to an empty skb [ 34.443331][ T3304] veth0_macvtap: entered promiscuous mode [ 34.456298][ T3304] veth1_macvtap: entered promiscuous mode [ 34.464135][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.483298][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.502723][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.519234][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.544954][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.573520][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.625557][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.656165][ T3439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.669471][ T3439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.688416][ T3439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.704330][ T3439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.753501][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 34.753517][ T28] audit: type=1400 audit(1780443705.035:170): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.851570][ T3534] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 34.881285][ T28] audit: type=1400 audit(1780443705.165:171): avc: denied { ioctl } for pid=3535 comm="syz.1.2" path="socket:[4884]" dev="sockfs" ino=4884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.948393][ T28] audit: type=1400 audit(1780443705.215:172): avc: denied { create } for pid=3539 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.996405][ T28] audit: type=1400 audit(1780443705.215:173): avc: denied { connect } for pid=3539 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.052140][ T28] audit: type=1400 audit(1780443705.215:174): avc: denied { create } for pid=3541 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.067050][ T3557] loop1: detected capacity change from 0 to 512 [ 35.094072][ T28] audit: type=1400 audit(1780443705.215:175): avc: denied { setopt } for pid=3541 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.131352][ T28] audit: type=1400 audit(1780443705.265:176): avc: denied { open } for pid=3548 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.150898][ T3557] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.160859][ T28] audit: type=1400 audit(1780443705.265:177): avc: denied { kernel } for pid=3548 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.186825][ T28] audit: type=1400 audit(1780443705.275:178): avc: denied { tracepoint } for pid=3548 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.205810][ T3557] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.221561][ T28] audit: type=1400 audit(1780443705.285:179): avc: denied { create } for pid=3548 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.245328][ T3557] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24: bg 0: block 248: padding at end of block bitmap is not set [ 35.260875][ T3557] loop1: lost filesystem error report for type 5 error -117 [ 35.261206][ T3557] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.24: Failed to acquire dquot type 1 [ 35.273819][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 35.279977][ T3557] loop1: lost filesystem error report for type 5 error -28 [ 35.286130][ C0] EXT4-fs (loop1): last error at time 1780443705: ext4_validate_block_bitmap:441 [ 35.314441][ T3557] EXT4-fs (loop1): 1 truncate cleaned up [ 35.320766][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 35.392559][ T3576] loop0: detected capacity change from 0 to 512 [ 35.427470][ T3576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.458527][ T3557] syz.1.24 (3557) used greatest stack depth: 9128 bytes left [ 35.468351][ T3576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.485359][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 35.493968][ T3439] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 35.506881][ T3576] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.526434][ T3439] loop1: lost filesystem error report for type 5 error -117 [ 35.533919][ T3576] EXT4-fs (loop0): 1 truncate cleaned up [ 35.547728][ T3576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.591779][ T3576] EXT4-fs (loop0): Online defrag not supported for non-extent files [ 35.619643][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.703061][ T3607] loop3: detected capacity change from 0 to 764 [ 35.732334][ T3609] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.47'. [ 35.764033][ T3611] loop2: detected capacity change from 0 to 1024 [ 35.770545][ T3607] Symlink component flag not implemented [ 35.789543][ T3611] ======================================================= [ 35.789543][ T3611] WARNING: The mand mount option has been deprecated and [ 35.789543][ T3611] and is ignored by this kernel. Remove the mand [ 35.789543][ T3611] option from the mount to silence this warning. [ 35.789543][ T3611] ======================================================= [ 35.796463][ T3607] Symlink component flag not implemented (116) [ 35.879758][ T3611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.959185][ T3611] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.026875][ T3611] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.48: bg 0: block 112: padding at end of block bitmap is not set [ 36.030962][ T3603] loop0: detected capacity change from 0 to 128 [ 36.062942][ T3625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53'. [ 36.123456][ T12] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 36.178356][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 36.206475][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.206475][ T12] [ 36.222186][ T3603] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.226773][ T3296] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 36.259510][ T3603] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.261364][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.388168][ T3634] ieee802154 phy0 wpan0: encryption failed: -22 [ 36.510528][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.921110][ T3680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 36.995324][ T3687] loop4: detected capacity change from 0 to 512 [ 37.027659][ T3690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.80'. [ 37.029160][ T3693] loop2: detected capacity change from 0 to 256 [ 37.232059][ T3718] loop5: detected capacity change from 0 to 7 [ 37.255718][ T3720] loop3: detected capacity change from 0 to 512 [ 37.260015][ T3722] netlink: 'syz.4.95': attribute type 12 has an invalid length. [ 37.271697][ T3720] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.287689][ T3722] netlink: 'syz.4.95': attribute type 29 has an invalid length. [ 37.314964][ T3722] netlink: 148 bytes leftover after parsing attributes in process `syz.4.95'. [ 37.333131][ T3729] capability: warning: `syz.0.98' uses 32-bit capabilities (legacy support in use) [ 37.341277][ T3722] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 37.345091][ T3720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 37.351322][ T3729] program syz.0.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.358201][ T3720] System zones: 1-12 [ 37.377478][ T3722] netlink: 47 bytes leftover after parsing attributes in process `syz.4.95'. [ 37.400592][ T3720] EXT4-fs (loop3): 1 truncate cleaned up [ 37.414229][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.447121][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 37.456927][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 37.635174][ T3750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.678651][ T3750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.729571][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.904503][ T3768] loop0: detected capacity change from 0 to 512 [ 37.928223][ T3768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.942292][ T3768] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.956268][ T3768] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.115: corrupted xattr block 13: invalid checksum [ 37.969843][ T3768] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 37.979228][ T3768] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.115: corrupted xattr block 13: invalid checksum [ 37.993016][ T3768] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 38.003773][ T3768] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.115: corrupted xattr block 13: invalid checksum [ 38.023935][ T3768] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 38.065245][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.129880][ T3779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.164722][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.332810][ T3804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.364464][ T3804] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.130: iget: bad i_size value: 38620345925642 [ 38.404112][ T3804] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.410226][ T3804] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.130: couldn't read orphan inode 15 (err -117) [ 38.419450][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 38.419471][ C1] EXT4-fs (loop0): initial error at time 1780443708: ext4_orphan_get:1397: inode 15 [ 38.419504][ C1] EXT4-fs (loop0): last error at time 1780443708: ext4_orphan_get:1397: inode 15 [ 38.464088][ T3804] loop0: lost filesystem error report for type 5 error -117 [ 38.464813][ T3804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.521199][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.548670][ T3815] PID 3815 killed due to inadequate hugepage pool [ 38.601982][ T3824] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 38.660964][ T3822] loop1: p2 p3 p7 [ 38.773578][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 38.784803][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.797739][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.913110][ T3838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 39.057230][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.146536][ T3840] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.276087][ T3796] loop4: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 39.276862][ T3796] loop4: p1 size 393216 extends beyond EOD, truncated [ 39.484378][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.553396][ T3796] loop4: p5 size 393216 extends beyond EOD, truncated [ 39.618265][ T3796] loop4: p7 size 393216 extends beyond EOD, truncated [ 39.686965][ T3796] loop4: p9 size 393216 extends beyond EOD, truncated [ 39.748716][ T3796] loop4: p11 size 393216 extends beyond EOD, truncated [ 39.803096][ T3796] loop4: p13 size 393216 extends beyond EOD, truncated [ 39.854398][ T3439] kworker/u8:7: attempt to access beyond end of device [ 39.854398][ T3439] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 39.875381][ T3796] loop4: p15 size 393216 extends beyond EOD, truncated [ 39.882795][ T3439] kworker/u8:7: attempt to access beyond end of device [ 39.882795][ T3439] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 39.915845][ T3439] kworker/u8:7: attempt to access beyond end of device [ 39.915845][ T3439] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 39.947674][ T3796] loop4: p17 size 393216 extends beyond EOD, truncated [ 39.963729][ T3439] kworker/u8:7: attempt to access beyond end of device [ 39.963729][ T3439] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 39.991381][ T3439] kworker/u8:7: attempt to access beyond end of device [ 39.991381][ T3439] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 40.012218][ T3796] loop4: p19 size 393216 extends beyond EOD, truncated [ 40.031414][ T3439] kworker/u8:7: attempt to access beyond end of device [ 40.031414][ T3439] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 40.065465][ T3439] kworker/u8:7: attempt to access beyond end of device [ 40.065465][ T3439] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 40.071934][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 40.071949][ T28] audit: type=1400 audit(1780443710.355:279): avc: denied { ioctl } for pid=3870 comm="syz.2.160" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.085691][ T3439] kworker/u8:7: attempt to access beyond end of device [ 40.085691][ T3439] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 40.139306][ T3796] loop4: p21 size 393216 extends beyond EOD, truncated [ 40.192679][ T3439] kworker/u8:7: attempt to access beyond end of device [ 40.192679][ T3439] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 40.207333][ T3796] loop4: p23 size 393216 extends beyond EOD, truncated [ 40.208931][ T3875] set_capacity_and_notify: 6 callbacks suppressed [ 40.208944][ T3875] loop2: detected capacity change from 0 to 164 [ 40.223838][ T3439] kworker/u8:7: attempt to access beyond end of device [ 40.223838][ T3439] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 40.243378][ T3875] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 40.268152][ T3796] loop4: p25 size 393216 extends beyond EOD, truncated [ 40.278575][ T3875] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 40.299584][ T3875] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.319237][ T3796] loop4: p27 size 393216 extends beyond EOD, truncated [ 40.331999][ T3878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 40.377125][ T3796] loop4: p29 size 393216 extends beyond EOD, truncated [ 40.416865][ T3882] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 40.445358][ T3796] loop4: p31 size 393216 extends beyond EOD, truncated [ 40.505977][ T3796] loop4: p33 size 393216 extends beyond EOD, truncated [ 40.531513][ T3888] IPv6: NLM_F_REPLACE set, but no existing node found! [ 40.575344][ T28] audit: type=1400 audit(1780443710.865:280): avc: denied { watch } for pid=3889 comm="syz.3.168" path="/40/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.620659][ T3796] loop4: p35 size 393216 extends beyond EOD, truncated [ 40.661120][ T28] audit: type=1400 audit(1780443710.895:281): avc: denied { bind } for pid=3893 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.706278][ T3900] netlink: 758 bytes leftover after parsing attributes in process `syz.2.173'. [ 40.718347][ T3796] loop4: p37 size 393216 extends beyond EOD, truncated [ 40.725332][ T28] audit: type=1400 audit(1780443710.905:282): avc: denied { node_bind } for pid=3893 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.786505][ T3796] loop4: p39 size 393216 extends beyond EOD, truncated [ 40.865734][ T3796] loop4: p41 size 393216 extends beyond EOD, truncated [ 40.936857][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 40.941084][ T3796] loop4: p43 size 393216 extends beyond EOD, truncated [ 40.968868][ T3916] netlink: 'syz.3.181': attribute type 30 has an invalid length. [ 40.993960][ T28] audit: type=1400 audit(1780443711.275:283): avc: denied { read write } for pid=3918 comm="syz.0.183" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.009574][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 41.061737][ T28] audit: type=1400 audit(1780443711.275:284): avc: denied { open } for pid=3918 comm="syz.0.183" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.087507][ T3796] loop4: p45 size 393216 extends beyond EOD, truncated [ 41.110215][ T3921] netlink: 'syz.3.181': attribute type 30 has an invalid length. [ 41.142787][ T310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.145492][ T28] audit: type=1400 audit(1780443711.385:285): avc: denied { setopt } for pid=3924 comm="syz.0.185" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.164012][ T310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.227943][ T28] audit: type=1400 audit(1780443711.385:286): avc: denied { mount } for pid=3922 comm="syz.2.184" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.239953][ T310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.265330][ T3796] loop4: p47 size 393216 extends beyond EOD, truncated [ 41.313617][ T3796] loop4: p49 size 393216 extends beyond EOD, truncated [ 41.325484][ T28] audit: type=1400 audit(1780443711.515:287): avc: denied { watch } for pid=3929 comm="syz.0.187" path="/40" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.352365][ T310] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.382410][ T3796] loop4: p51 size 393216 extends beyond EOD, truncated [ 41.413399][ T3796] loop4: p53 size 393216 extends beyond EOD, truncated [ 41.466614][ T3796] loop4: p55 size 393216 extends beyond EOD, truncated [ 41.497872][ T3796] loop4: p57 size 393216 extends beyond EOD, truncated [ 41.538293][ T3796] loop4: p59 size 393216 extends beyond EOD, truncated [ 41.567176][ T3796] loop4: p61 size 393216 extends beyond EOD, truncated [ 41.586131][ T3796] loop4: p63 size 393216 extends beyond EOD, truncated [ 41.622690][ T3796] loop4: p65 size 393216 extends beyond EOD, truncated [ 41.653543][ T3796] loop4: p67 size 393216 extends beyond EOD, truncated [ 41.682432][ T3796] loop4: p69 size 393216 extends beyond EOD, truncated [ 41.712759][ T3796] loop4: p71 size 393216 extends beyond EOD, truncated [ 41.742817][ T3796] loop4: p73 size 393216 extends beyond EOD, truncated [ 41.763613][ T3942] loop1: detected capacity change from 0 to 512 [ 41.789981][ T3942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.802315][ T28] audit: type=1400 audit(1780443712.045:288): avc: denied { read } for pid=3939 comm="syz.2.192" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.803976][ T3796] loop4: p75 size 393216 extends beyond EOD, truncated [ 41.857422][ T3796] loop4: p77 size 393216 extends beyond EOD, truncated [ 41.881559][ T3796] loop4: p79 size 393216 extends beyond EOD, truncated [ 41.898211][ T3796] loop4: p81 size 393216 extends beyond EOD, truncated [ 41.916331][ T3796] loop4: p83 size 393216 extends beyond EOD, truncated [ 41.934157][ T3796] loop4: p85 size 393216 extends beyond EOD, truncated [ 41.950777][ T3796] loop4: p87 size 393216 extends beyond EOD, truncated [ 41.970217][ T3796] loop4: p89 size 393216 extends beyond EOD, truncated [ 41.986490][ T3796] loop4: p91 size 393216 extends beyond EOD, truncated [ 42.007373][ T3796] loop4: p93 size 393216 extends beyond EOD, truncated [ 42.023673][ T3796] loop4: p95 size 393216 extends beyond EOD, truncated [ 42.054020][ T3796] loop4: p97 size 393216 extends beyond EOD, truncated [ 42.072570][ T3796] loop4: p99 size 393216 extends beyond EOD, truncated [ 42.089118][ T3796] loop4: p101 size 393216 extends beyond EOD, truncated [ 42.121348][ T3796] loop4: p103 size 393216 extends beyond EOD, truncated [ 42.134584][ T3796] loop4: p105 size 393216 extends beyond EOD, truncated [ 42.150623][ T3796] loop4: p107 size 393216 extends beyond EOD, truncated [ 42.168387][ T3796] loop4: p109 size 393216 extends beyond EOD, truncated [ 42.210659][ T3796] loop4: p111 size 393216 extends beyond EOD, truncated [ 42.239944][ T3796] loop4: p113 size 393216 extends beyond EOD, truncated [ 42.263627][ T3796] loop4: p115 size 393216 extends beyond EOD, truncated [ 42.306394][ T3796] loop4: p117 size 393216 extends beyond EOD, truncated [ 42.341263][ T3796] loop4: p119 size 393216 extends beyond EOD, truncated [ 42.403306][ T3796] loop4: p121 size 393216 extends beyond EOD, truncated [ 42.448512][ T3796] loop4: p123 size 393216 extends beyond EOD, truncated [ 42.476855][ T3796] loop4: p125 size 393216 extends beyond EOD, truncated [ 42.477254][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.498996][ T3796] loop4: p127 size 393216 extends beyond EOD, truncated [ 42.535715][ T3796] loop4: p129 size 393216 extends beyond EOD, truncated [ 42.541588][ T3960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3960 comm=syz.3.200 [ 42.579568][ T3796] loop4: p131 size 393216 extends beyond EOD, truncated [ 42.593999][ T3960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3960 comm=syz.3.200 [ 42.611918][ T3796] loop4: p133 size 393216 extends beyond EOD, truncated [ 42.632566][ T3796] loop4: p135 size 393216 extends beyond EOD, truncated [ 42.662754][ T3796] loop4: p137 size 393216 extends beyond EOD, truncated [ 42.697823][ T3796] loop4: p139 size 393216 extends beyond EOD, truncated [ 42.732270][ T3796] loop4: p141 size 393216 extends beyond EOD, truncated [ 42.763570][ T3796] loop4: p143 size 393216 extends beyond EOD, truncated [ 42.764628][ T3377] IPVS: starting estimator thread 0... [ 42.764994][ T3970] IPVS: dh: FWM 3 0x00000003 - no destination available [ 42.792932][ T3796] loop4: p145 size 393216 extends beyond EOD, truncated [ 42.806935][ T3796] loop4: p147 size 393216 extends beyond EOD, truncated [ 42.824173][ T3973] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 42.824173][ T3973] The task syz.0.201 (3973) triggered the difference, watch for misbehavior. [ 42.864055][ T3796] loop4: p149 size 393216 extends beyond EOD, truncated [ 42.884183][ T3971] IPVS: using max 2304 ests per chain, 115200 per kthread [ 42.905171][ T3796] loop4: p151 size 393216 extends beyond EOD, truncated [ 42.925733][ T3796] loop4: p153 size 393216 extends beyond EOD, truncated [ 42.977056][ T3796] loop4: p155 size 393216 extends beyond EOD, truncated [ 43.027132][ T3796] loop4: p157 size 393216 extends beyond EOD, truncated [ 43.043010][ T3796] loop4: p159 size 393216 extends beyond EOD, truncated [ 43.061348][ T3796] loop4: p161 size 393216 extends beyond EOD, truncated [ 43.088548][ T3796] loop4: p163 size 393216 extends beyond EOD, truncated [ 43.109270][ T3796] loop4: p165 size 393216 extends beyond EOD, truncated [ 43.158093][ T3796] loop4: p167 size 393216 extends beyond EOD, truncated [ 43.173374][ T3796] loop4: p169 size 393216 extends beyond EOD, truncated [ 43.197233][ T3796] loop4: p171 size 393216 extends beyond EOD, truncated [ 43.219516][ T3796] loop4: p173 size 393216 extends beyond EOD, truncated [ 43.231384][ T3988] loop2: detected capacity change from 0 to 512 [ 43.266169][ T3796] loop4: p175 size 393216 extends beyond EOD, truncated [ 43.307900][ T3796] loop4: p177 size 393216 extends beyond EOD, truncated [ 43.326778][ T3994] rdma_op ffff888104f7e580 conn xmit_rdma 0000000000000000 [ 43.342113][ T3796] loop4: p179 size 393216 extends beyond EOD, truncated [ 43.357666][ T3796] loop4: p181 size 393216 extends beyond EOD, truncated [ 43.372994][ T3796] loop4: p183 size 393216 extends beyond EOD, truncated [ 43.390637][ T3796] loop4: p185 size 393216 extends beyond EOD, truncated [ 43.425202][ T3796] loop4: p187 size 393216 extends beyond EOD, truncated [ 43.488368][ T4000] program syz.1.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.491178][ T3796] loop4: p189 size 393216 extends beyond EOD, truncated [ 43.556945][ T3796] loop4: p191 size 393216 extends beyond EOD, truncated [ 43.579396][ T3796] loop4: p193 size 393216 extends beyond EOD, truncated [ 43.592066][ T3796] loop4: p195 size 393216 extends beyond EOD, truncated [ 43.616989][ T3796] loop4: p197 size 393216 extends beyond EOD, truncated [ 43.637583][ T3796] loop4: p199 size 393216 extends beyond EOD, truncated [ 43.647869][ T4011] loop0: detected capacity change from 0 to 512 [ 43.658316][ T4011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.679508][ T3796] loop4: p201 size 393216 extends beyond EOD, truncated [ 43.688854][ T4011] EXT4-fs (loop0): 1 truncate cleaned up [ 43.695101][ T4011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.712607][ T3796] loop4: p203 size 393216 extends beyond EOD, truncated [ 43.724915][ T3796] loop4: p205 size 393216 extends beyond EOD, truncated [ 43.736020][ T3796] loop4: p207 size 393216 extends beyond EOD, truncated [ 43.757596][ T3796] loop4: p209 size 393216 extends beyond EOD, truncated [ 43.773027][ T3796] loop4: p211 size 393216 extends beyond EOD, truncated [ 43.782499][ T4011] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.221: corrupted xattr block 33: invalid header [ 43.801036][ T3796] loop4: p213 size 393216 extends beyond EOD, truncated [ 43.804902][ T4011] EXT4-fs (loop0): Remounting filesystem read-only [ 43.812543][ T3796] loop4: p215 size 393216 extends beyond EOD, truncated [ 43.827079][ T3796] loop4: p217 size 393216 extends beyond EOD, truncated [ 43.841028][ T3796] loop4: p219 size 393216 extends beyond EOD, truncated [ 43.854465][ T3796] loop4: p221 size 393216 extends beyond EOD, truncated [ 43.867018][ T3796] loop4: p223 size 393216 extends beyond EOD, truncated [ 43.880849][ T3796] loop4: p225 size 393216 extends beyond EOD, truncated [ 43.895046][ T3796] loop4: p227 size 393216 extends beyond EOD, truncated [ 43.908347][ T3796] loop4: p229 size 393216 extends beyond EOD, truncated [ 43.922386][ T3796] loop4: p231 size 393216 extends beyond EOD, truncated [ 43.935161][ T3796] loop4: p233 size 393216 extends beyond EOD, truncated [ 43.948013][ T3796] loop4: p235 size 393216 extends beyond EOD, truncated [ 43.961629][ T3796] loop4: p237 size 393216 extends beyond EOD, truncated [ 43.975332][ T3796] loop4: p239 size 393216 extends beyond EOD, truncated [ 43.988528][ T3796] loop4: p241 size 393216 extends beyond EOD, truncated [ 44.002370][ T3796] loop4: p243 size 393216 extends beyond EOD, truncated [ 44.015792][ T3796] loop4: p245 size 393216 extends beyond EOD, truncated [ 44.028899][ T3796] loop4: p247 size 393216 extends beyond EOD, truncated [ 44.042041][ T3796] loop4: p249 size 393216 extends beyond EOD, truncated [ 44.055035][ T3796] loop4: p251 size 393216 extends beyond EOD, truncated [ 44.068483][ T3796] loop4: p253 size 393216 extends beyond EOD, truncated [ 44.082412][ T3796] loop4: p255 size 393216 extends beyond EOD, truncated [ 44.522546][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.551330][ T4020] udevd[4020]: inotify_add_watch(7, /dev/loop4p29, 10) failed: No such file or directory [ 44.561740][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p27, 10) failed: No such file or directory [ 44.565128][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 44.573302][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 44.574511][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 44.583345][ T4019] udevd[4019]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 44.592493][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 44.602305][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p26, 10) failed: No such file or directory [ 44.612172][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop4p30, 10) failed: No such file or directory [ 44.622068][ T3744] udevd[3744]: inotify_add_watch(7, /dev/loop4p28, 10) failed: No such file or directory [ 44.797167][ T4041] loop0: detected capacity change from 0 to 1024 [ 44.814805][ T4041] EXT4-fs: Ignoring removed bh option [ 44.977530][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.032702][ T4041] netlink: 80 bytes leftover after parsing attributes in process `syz.0.232'. [ 45.098323][ T4064] netlink: 'syz.4.241': attribute type 3 has an invalid length. [ 45.128016][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.175312][ T4068] loop1: detected capacity change from 0 to 512 [ 45.228413][ T4068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.242041][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 45.242056][ T28] audit: type=1400 audit(1780443715.525:324): avc: denied { block_suspend } for pid=4069 comm="syz.4.246" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.314392][ T28] audit: type=1400 audit(1780443715.565:325): avc: denied { write } for pid=4065 comm="syz.1.244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.336156][ T28] audit: type=1400 audit(1780443715.575:326): avc: denied { write } for pid=4052 comm="syz.3.237" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.345164][ T4075] loop2: detected capacity change from 0 to 1024 [ 45.385694][ T28] audit: type=1400 audit(1780443715.575:327): avc: denied { open } for pid=4052 comm="syz.3.237" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.421584][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.472901][ T4078] loop0: detected capacity change from 0 to 4096 [ 45.492474][ T4075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.509018][ T28] audit: type=1400 audit(1780443715.795:328): avc: denied { read } for pid=4052 comm="syz.3.237" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.545293][ T4075] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.612513][ T4078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.629099][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.668267][ T28] audit: type=1400 audit(1780443715.955:329): avc: denied { name_bind } for pid=4092 comm="syz.4.255" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 45.783542][ T4105] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 45.795807][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.108457][ T28] audit: type=1400 audit(1780443716.395:330): avc: denied { create } for pid=4118 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.140206][ T28] audit: type=1400 audit(1780443716.415:331): avc: denied { getopt } for pid=4118 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.732072][ T4128] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 46.848870][ T4140] xt_hashlimit: size too large, truncated to 1048576 [ 46.991064][ T28] audit: type=1400 audit(1780443717.275:332): avc: denied { module_request } for pid=4139 comm="syz.2.276" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.206538][ T28] audit: type=1400 audit(1780443717.465:333): avc: denied { setopt } for pid=4158 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.559227][ T4177] sctp: [Deprecated]: syz.0.290 (pid 4177) Use of int in max_burst socket option. [ 47.559227][ T4177] Use struct sctp_assoc_value instead [ 47.621124][ T4179] loop3: detected capacity change from 0 to 512 [ 47.674662][ T4179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.837491][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.874052][ T4187] random: crng reseeded on system resumption [ 48.276860][ T4209] loop3: detected capacity change from 0 to 256 [ 48.301197][ T4209] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.538107][ T4216] program syz.1.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.155055][ T4246] loop4: detected capacity change from 0 to 512 [ 49.184975][ T4250] loop3: detected capacity change from 0 to 1024 [ 49.192207][ T4246] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.319: corrupted in-inode xattr: invalid ea_ino [ 49.231916][ T4250] EXT4-fs: Ignoring removed orlov option [ 49.279847][ T4246] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.280031][ T4246] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.319: couldn't read orphan inode 15 (err -117) [ 49.289247][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.289270][ C0] EXT4-fs (loop4): initial error at time 1780443719: ext4_iget_extra_inode:5128: inode 15 [ 49.289308][ C0] EXT4-fs (loop4): last error at time 1780443719: ext4_iget_extra_inode:5128: inode 15 [ 49.352438][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.355027][ T4246] loop4: lost filesystem error report for type 5 error -117 [ 49.368568][ T4246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.391122][ T4250] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.456271][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.503836][ T4250] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.323: bg 0: block 3: invalid block bitmap [ 49.551610][ T4250] EXT4-fs (loop3): Remounting filesystem read-only [ 49.615241][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.751567][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 50.111325][ T4298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4298 comm=syz.4.342 [ 50.351432][ T4311] loop4: detected capacity change from 0 to 512 [ 50.359401][ T4311] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 50.386062][ T4311] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.348: invalid indirect mapped block 1025 (level 0) [ 50.414687][ T4311] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.414920][ T4311] EXT4-fs (loop4): 1 truncate cleaned up [ 50.419176][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 50.419189][ T28] audit: type=1400 audit(1780443720.705:349): avc: denied { name_connect } for pid=4313 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 50.424100][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 50.462294][ C0] EXT4-fs (loop4): initial error at time 1780443720: ext4_free_branches:1023: inode 11 [ 50.472009][ C0] EXT4-fs (loop4): last error at time 1780443720: ext4_free_branches:1023: inode 11 [ 50.541195][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.563223][ T28] audit: type=1400 audit(1780443720.845:350): avc: denied { create } for pid=4321 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.630965][ T28] audit: type=1400 audit(1780443720.865:351): avc: denied { read } for pid=4321 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.682577][ T28] audit: type=1400 audit(1780443720.885:352): avc: denied { write } for pid=4310 comm="syz.4.348" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.692610][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.762161][ T28] audit: type=1400 audit(1780443720.995:353): avc: denied { create } for pid=4327 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.794341][ T4335] loop1: detected capacity change from 0 to 512 [ 50.801448][ T4335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.844472][ T28] audit: type=1400 audit(1780443721.005:354): avc: denied { read } for pid=4327 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.893398][ T4335] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.900912][ T28] audit: type=1400 audit(1780443721.045:355): avc: denied { write } for pid=4327 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.935181][ T4335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.358: invalid indirect mapped block 4294967295 (level 1) [ 50.973912][ T4335] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.983854][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.999480][ C1] EXT4-fs (loop1): initial error at time 1780443721: ext4_free_branches:1023: inode 11 [ 51.000282][ T4335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.358: invalid indirect mapped block 4294967295 (level 1) [ 51.009197][ C1] EXT4-fs (loop1): last error at time 1780443721: ext4_free_branches:1023: inode 11 [ 51.094927][ T4335] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.096653][ T4335] EXT4-fs (loop1): 2 truncates cleaned up [ 51.117313][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.187534][ T4335] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 51.198321][ T28] audit: type=1400 audit(1780443721.475:356): avc: denied { remount } for pid=4334 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.216730][ T4331] loop4: detected capacity change from 0 to 512 [ 51.244644][ T4335] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 51.270121][ T4335] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.302793][ T4331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.345685][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.356905][ T28] audit: type=1400 audit(1780443721.635:357): avc: denied { setattr } for pid=4330 comm="syz.4.357" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.435123][ T4342] loop3: detected capacity change from 0 to 8192 [ 51.523206][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.563631][ T4349] loop1: detected capacity change from 0 to 512 [ 51.608660][ T4349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.608733][ T4349] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.611876][ T28] audit: type=1400 audit(1780443721.895:358): avc: denied { write } for pid=4347 comm="syz.1.365" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.700154][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.890196][ T4371] tun0: tun_chr_ioctl cmd 1074025677 [ 51.890289][ T4371] tun0: linktype set to 778 [ 52.168845][ T4385] loop0: detected capacity change from 0 to 8192 [ 52.344892][ T4396] loop2: detected capacity change from 0 to 512 [ 52.365302][ T4396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.365406][ T4396] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.409214][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.440301][ T4401] loop2: detected capacity change from 0 to 256 [ 52.718967][ T4408] loop2: detected capacity change from 0 to 8192 [ 52.998188][ T4437] program syz.4.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.028930][ T4441] tipc: Enabling of bearer rejected, failed to enable media [ 53.175346][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 53.262956][ T4467] loop1: detected capacity change from 0 to 512 [ 53.294399][ T4467] EXT4-fs: Ignoring removed bh option [ 53.321898][ T4467] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.416: corrupted xattr block 95: invalid header [ 53.359160][ T4475] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.380468][ T4467] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.383814][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 53.399456][ C1] EXT4-fs (loop1): initial error at time 1780443723: ext4_expand_extra_isize_ea:2810: inode 11 [ 53.409894][ C1] EXT4-fs (loop1): last error at time 1780443723: ext4_expand_extra_isize_ea:2810: inode 11 [ 53.432801][ T4467] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.416: bg 0: block 7: invalid block bitmap [ 53.446898][ T4475] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.465696][ T4475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.420: bg 0: block 248: padding at end of block bitmap is not set [ 53.481802][ T4467] loop1: lost filesystem error report for type 5 error -117 [ 53.485517][ T4467] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 53.505334][ T4475] loop0: lost filesystem error report for type 5 error -117 [ 53.505476][ T4467] loop1: lost filesystem error report for type 5 error -117 [ 53.513819][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 53.527623][ C0] EXT4-fs (loop0): last error at time 1780443723: ext4_validate_block_bitmap:441 [ 53.533276][ T4475] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.420: Failed to acquire dquot type 1 [ 53.538266][ T4467] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.416: corrupted xattr block 95: invalid header [ 53.576390][ T4467] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.577986][ T4467] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 53.596378][ T4475] loop0: lost filesystem error report for type 5 error -28 [ 53.598585][ T4475] EXT4-fs (loop0): 1 truncate cleaned up [ 53.619273][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 53.649063][ T4467] EXT4-fs (loop1): 1 orphan inode deleted [ 53.655830][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.753570][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 53.764034][ T310] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 53.792505][ T310] loop0: lost filesystem error report for type 5 error -117 [ 53.801805][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.102004][ T4502] mmap: syz.4.426 (4502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.384805][ T3296] ================================================================== [ 54.392949][ T3296] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 54.400344][ T3296] [ 54.402668][ T3296] read-write to 0xffff88811bc36908 of 8 bytes by interrupt on cpu 0: [ 54.410737][ T3296] __xa_clear_mark+0xf5/0x1e0 [ 54.415428][ T3296] __folio_end_writeback+0xf4/0x360 [ 54.420636][ T3296] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 54.426889][ T3296] folio_end_writeback+0x1c/0x70 [ 54.431841][ T3296] mpage_write_end_io+0x245/0x4c0 [ 54.436874][ T3296] bio_endio+0x35b/0x3f0 [ 54.441130][ T3296] blk_update_request+0x338/0x710 [ 54.446163][ T3296] blk_mq_end_request+0x26/0x50 [ 54.451027][ T3296] lo_complete_rq+0x98/0x140 [ 54.455636][ T3296] blk_done_softirq+0x77/0xb0 [ 54.460317][ T3296] handle_softirqs+0xb9/0x280 [ 54.464999][ T3296] do_softirq+0x45/0x60 [ 54.469166][ T3296] __local_bh_enable_ip+0x70/0x80 [ 54.474203][ T3296] srcu_invoke_callbacks+0x175/0x270 [ 54.479507][ T3296] process_scheduled_works+0x4f0/0x9c0 [ 54.484982][ T3296] worker_thread+0x58a/0x780 [ 54.489773][ T3296] kthread+0x22a/0x280 [ 54.493859][ T3296] ret_from_fork+0x146/0x330 [ 54.498478][ T3296] ret_from_fork_asm+0x1a/0x30 [ 54.503258][ T3296] [ 54.505583][ T3296] read to 0xffff88811bc36908 of 8 bytes by task 3296 on cpu 1: [ 54.513124][ T3296] xas_find_marked+0x213/0x620 [ 54.517901][ T3296] filemap_get_folios_tag+0xfa/0x430 [ 54.523221][ T3296] filemap_fdatawait_keep_errors+0x6c/0x190 [ 54.529120][ T3296] sync_inodes_sb+0x424/0x4d0 [ 54.533810][ T3296] sync_filesystem+0x102/0x190 [ 54.538601][ T3296] generic_shutdown_super+0x4c/0x220 [ 54.543909][ T3296] kill_block_super+0x2a/0x70 [ 54.548616][ T3296] deactivate_locked_super+0x75/0x1c0 [ 54.553993][ T3296] deactivate_super+0x97/0xa0 [ 54.558677][ T3296] cleanup_mnt+0x2bb/0x330 [ 54.563102][ T3296] __cleanup_mnt+0x19/0x20 [ 54.567536][ T3296] task_work_run+0x130/0x1a0 [ 54.572136][ T3296] exit_to_user_mode_loop+0x211/0x820 [ 54.577516][ T3296] do_syscall_64+0x232/0x3b0 [ 54.582119][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.588016][ T3296] [ 54.590343][ T3296] value changed: 0xfffffffffff80000 -> 0xfffffffffc000000 [ 54.597452][ T3296] [ 54.599775][ T3296] Reported by Kernel Concurrency Sanitizer on: [ 54.605924][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 54.615382][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 54.625442][ T3296] ==================================================================