last executing test programs: 1.891653755s ago: executing program 0 (id=834): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0xc7, 0xf, 0x2, 0xc5, 0x4, 0x0, 0x9d}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) 1.335372694s ago: executing program 0 (id=853): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xa, 0x8, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) 1.289599783s ago: executing program 0 (id=844): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 1.222140607s ago: executing program 0 (id=848): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 1.194003941s ago: executing program 4 (id=851): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1.189948389s ago: executing program 0 (id=852): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 978.520819ms ago: executing program 0 (id=854): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 977.809719ms ago: executing program 4 (id=856): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) 933.919489ms ago: executing program 3 (id=857): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xa, 0x8, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) 896.79797ms ago: executing program 2 (id=858): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)="667634a4224ebb1721a99d660d089d8f96b2a5caad938c3ecbe172140af6d30098fcf7c71f1df7f33d6deb1b1ea3c1e783f5e2d46a304e9bccdcb77287067ca19f26ee5a3624fde4b84148682be8ff5f4ba060e4573b3f3211de589ec6561f69bef49eb25ba6286b268a4b66a3b7", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="05630633bfe458a67683e4e5", @ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYBLOB="62d52b67868cbbbbbdaf06f43d9a9224b91279a3a0ea1d55b9be336d375aff85f098769ba425b2682750ffb6dac78d108602f06305071228e23b7e13d992f7b7c9cbf38c9fa80418926f480d58c0f659f5fdf39b275c52a3bc5948014bcab90641df8401", @ANYRESDEC, @ANYRES16=r0], 0xd0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="b8", 0x1df244709aab4666}], 0x1}}], 0x2, 0x810) 863.337683ms ago: executing program 3 (id=859): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) 745.158395ms ago: executing program 3 (id=860): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 744.892405ms ago: executing program 1 (id=861): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x4e6a5974, 0x5a}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x1f, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x9, 0x810000, 0x11}}}}]}, 0x78}}, 0x0) 707.730116ms ago: executing program 3 (id=862): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 707.117146ms ago: executing program 2 (id=873): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x84, 0x20, 0x0, 0x0) 680.53245ms ago: executing program 1 (id=863): syz_emit_ethernet(0x11, &(0x7f0000000680)={@broadcast, @empty, @void, {@llc={0x8864, {@llc={0xdc, 0x50, "05"}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 586.634818ms ago: executing program 4 (id=865): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x2}}, 0x18) 577.834306ms ago: executing program 1 (id=866): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 556.518941ms ago: executing program 3 (id=867): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 534.748336ms ago: executing program 4 (id=868): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) 466.47842ms ago: executing program 4 (id=869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 464.721659ms ago: executing program 1 (id=870): unshare(0x6020400) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) 403.070034ms ago: executing program 4 (id=871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") chdir(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', 0x0, 0x0, 0x0) 391.942422ms ago: executing program 2 (id=872): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x73987000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0xff, 0xd608, 0x0, 0x0) 247.141878ms ago: executing program 2 (id=874): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000200)) 241.745826ms ago: executing program 3 (id=875): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001040)={0x0, 0x0, "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", "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"}) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 241.597116ms ago: executing program 1 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 148.655405ms ago: executing program 1 (id=877): r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0xa, 0xc) 79.830038ms ago: executing program 2 (id=878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 0s ago: executing program 2 (id=879): syz_emit_ethernet(0x11, &(0x7f0000000680)={@broadcast, @empty, @void, {@llc={0x8864, {@llc={0xdc, 0x50, "05"}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.064213][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 24.064229][ T28] audit: type=1400 audit(1772350144.713:57): avc: denied { transition } for pid=3289 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.068692][ T28] audit: type=1400 audit(1772350144.713:58): avc: denied { noatsecure } for pid=3289 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.072053][ T28] audit: type=1400 audit(1772350144.713:59): avc: denied { write } for pid=3289 comm="sh" path="pipe:[2347]" dev="pipefs" ino=2347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.075313][ T28] audit: type=1400 audit(1772350144.713:60): avc: denied { rlimitinh } for pid=3289 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.078079][ T28] audit: type=1400 audit(1772350144.713:61): avc: denied { siginh } for pid=3289 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 32.017728][ T28] audit: type=1400 audit(1772350152.663:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.040748][ T28] audit: type=1400 audit(1772350152.693:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.042883][ T3301] cgroup: Unknown subsys name 'net' [ 32.068553][ T28] audit: type=1400 audit(1772350152.713:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.220515][ T3301] cgroup: Unknown subsys name 'cpuset' [ 32.226668][ T3301] cgroup: Unknown subsys name 'rlimit' [ 32.357165][ T28] audit: type=1400 audit(1772350153.003:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.383566][ T28] audit: type=1400 audit(1772350153.003:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.409939][ T28] audit: type=1400 audit(1772350153.003:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.418003][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.430554][ T28] audit: type=1400 audit(1772350153.003:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.459238][ T28] audit: type=1400 audit(1772350153.003:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.484151][ T28] audit: type=1400 audit(1772350153.003:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.507500][ T28] audit: type=1400 audit(1772350153.043:71): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.521382][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.624139][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 33.694507][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 33.719273][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 33.749299][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.756668][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.764037][ T3313] bridge_slave_0: entered allmulticast mode [ 33.770749][ T3313] bridge_slave_0: entered promiscuous mode [ 33.780349][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 33.801730][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.808786][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.815932][ T3313] bridge_slave_1: entered allmulticast mode [ 33.822425][ T3313] bridge_slave_1: entered promiscuous mode [ 33.838180][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 33.865130][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.872280][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.879337][ T3317] bridge_slave_0: entered allmulticast mode [ 33.885844][ T3317] bridge_slave_0: entered promiscuous mode [ 33.907606][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.916742][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.923928][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.931103][ T3317] bridge_slave_1: entered allmulticast mode [ 33.937502][ T3317] bridge_slave_1: entered promiscuous mode [ 33.958023][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.000331][ T3313] team0: Port device team_slave_0 added [ 34.006029][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.013178][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.020320][ T3318] bridge_slave_0: entered allmulticast mode [ 34.026617][ T3318] bridge_slave_0: entered promiscuous mode [ 34.036507][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.050796][ T3313] team0: Port device team_slave_1 added [ 34.060826][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.067919][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.075164][ T3318] bridge_slave_1: entered allmulticast mode [ 34.081870][ T3318] bridge_slave_1: entered promiscuous mode [ 34.091573][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.109531][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.116681][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.123927][ T3322] bridge_slave_0: entered allmulticast mode [ 34.130607][ T3322] bridge_slave_0: entered promiscuous mode [ 34.154253][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.161253][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.187164][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.197895][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.205110][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.212388][ T3322] bridge_slave_1: entered allmulticast mode [ 34.218833][ T3322] bridge_slave_1: entered promiscuous mode [ 34.230589][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.239683][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.246973][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.254146][ T3314] bridge_slave_0: entered allmulticast mode [ 34.260539][ T3314] bridge_slave_0: entered promiscuous mode [ 34.271680][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.278623][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.304778][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.323980][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.333170][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.340354][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.347502][ T3314] bridge_slave_1: entered allmulticast mode [ 34.353979][ T3314] bridge_slave_1: entered promiscuous mode [ 34.361323][ T3317] team0: Port device team_slave_0 added [ 34.381167][ T3317] team0: Port device team_slave_1 added [ 34.396453][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.406976][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.435353][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.449539][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.463576][ T3318] team0: Port device team_slave_0 added [ 34.476062][ T3313] hsr_slave_0: entered promiscuous mode [ 34.482012][ T3313] hsr_slave_1: entered promiscuous mode [ 34.488254][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.495250][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.521262][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.536574][ T3318] team0: Port device team_slave_1 added [ 34.543039][ T3322] team0: Port device team_slave_0 added [ 34.549849][ T3322] team0: Port device team_slave_1 added [ 34.555757][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.562818][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.588750][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.600446][ T3314] team0: Port device team_slave_0 added [ 34.619427][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.626498][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.652535][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.677525][ T3314] team0: Port device team_slave_1 added [ 34.688251][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.695407][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.721350][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.749098][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.756088][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.782120][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.805929][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.813013][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.839076][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.850158][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.857103][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.883026][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.907076][ T3317] hsr_slave_0: entered promiscuous mode [ 34.913136][ T3317] hsr_slave_1: entered promiscuous mode [ 34.918927][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 34.924696][ T3317] Cannot create hsr debugfs directory [ 34.930347][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.937306][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.963326][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.978782][ T3318] hsr_slave_0: entered promiscuous mode [ 34.984816][ T3318] hsr_slave_1: entered promiscuous mode [ 34.990616][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 34.996320][ T3318] Cannot create hsr debugfs directory [ 35.028196][ T3322] hsr_slave_0: entered promiscuous mode [ 35.034333][ T3322] hsr_slave_1: entered promiscuous mode [ 35.040569][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 35.046281][ T3322] Cannot create hsr debugfs directory [ 35.133916][ T3314] hsr_slave_0: entered promiscuous mode [ 35.140090][ T3314] hsr_slave_1: entered promiscuous mode [ 35.145947][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 35.151712][ T3314] Cannot create hsr debugfs directory [ 35.262423][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.286882][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.298360][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.307110][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.315601][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.324371][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.336354][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.345309][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.377637][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.391638][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.404600][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.413785][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.457432][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.466816][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.475837][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.484662][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.504793][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.513708][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.522715][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.542986][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.556850][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.585528][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.593058][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.613658][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.627682][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.634837][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.645177][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.672969][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.680020][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.688880][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.696018][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.709454][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.716508][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.763516][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.777797][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.791092][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.798122][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.820810][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.828733][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.835794][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.851870][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.866659][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.887517][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.894650][ T1660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.913211][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.931488][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.938554][ T1660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.955981][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.966889][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.991383][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.998501][ T1660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.017805][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.024872][ T1660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.054426][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.127622][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.148100][ T3318] veth0_vlan: entered promiscuous mode [ 36.156414][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.171725][ T3318] veth1_vlan: entered promiscuous mode [ 36.189671][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.225036][ T3318] veth0_macvtap: entered promiscuous mode [ 36.254947][ T3318] veth1_macvtap: entered promiscuous mode [ 36.267186][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.286583][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.309344][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.340369][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.349180][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.369899][ T3313] veth0_vlan: entered promiscuous mode [ 36.375875][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.401814][ T3313] veth1_vlan: entered promiscuous mode [ 36.421043][ T3314] veth0_vlan: entered promiscuous mode [ 36.433192][ T3322] veth0_vlan: entered promiscuous mode [ 36.446152][ T3314] veth1_vlan: entered promiscuous mode [ 36.460731][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.474674][ T3314] veth0_macvtap: entered promiscuous mode [ 36.483839][ T3317] veth0_vlan: entered promiscuous mode [ 36.494010][ T3313] veth0_macvtap: entered promiscuous mode [ 36.501693][ T3314] veth1_macvtap: entered promiscuous mode [ 36.521182][ T3317] veth1_vlan: entered promiscuous mode [ 36.531487][ T3313] veth1_macvtap: entered promiscuous mode [ 36.543307][ T3322] veth1_vlan: entered promiscuous mode [ 36.551727][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.582972][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.592453][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.603707][ T3317] veth0_macvtap: entered promiscuous mode [ 36.619756][ T3322] veth0_macvtap: entered promiscuous mode [ 36.628567][ T3317] veth1_macvtap: entered promiscuous mode [ 36.637303][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.652457][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.668015][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.677174][ T3322] veth1_macvtap: entered promiscuous mode [ 36.683836][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.693006][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.715246][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.726372][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.737345][ T1660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.754795][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.765389][ T1660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.790048][ T1660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.798832][ T1660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.833528][ T1660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.846268][ T1660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.875273][ T1660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.881998][ T3498] atomic_op ffff88811b82a528 conn xmit_atomic 0000000000000000 [ 36.889469][ T1660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.917385][ T3501] loop0: detected capacity change from 0 to 512 [ 36.924202][ T3501] ======================================================= [ 36.924202][ T3501] WARNING: The mand mount option has been deprecated and [ 36.924202][ T3501] and is ignored by this kernel. Remove the mand [ 36.924202][ T3501] option from the mount to silence this warning. [ 36.924202][ T3501] ======================================================= [ 36.964148][ T3501] EXT4-fs: Ignoring removed oldalloc option [ 36.973823][ T1660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.990745][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.010360][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.033634][ T3501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10: invalid indirect mapped block 4294967295 (level 1) [ 37.047774][ T3501] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.048287][ T3501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10: invalid indirect mapped block 4294967295 (level 1) [ 37.057500][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.057524][ C1] EXT4-fs (loop0): initial error at time 1772350157: ext4_free_branches:1023: inode 11 [ 37.057558][ C1] EXT4-fs (loop0): last error at time 1772350157: ext4_free_branches:1023: inode 11 [ 37.100251][ T3501] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.100543][ T3501] EXT4-fs (loop0): 2 truncates cleaned up [ 37.148778][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 37.148878][ T28] audit: type=1326 audit(1772350157.793:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.152715][ T3515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.179848][ T28] audit: type=1326 audit(1772350157.793:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.193431][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.222231][ T28] audit: type=1326 audit(1772350157.793:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.248280][ T28] audit: type=1400 audit(1772350157.793:114): avc: denied { create } for pid=3514 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.258422][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.279954][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.285428][ T28] audit: type=1326 audit(1772350157.803:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.330680][ T3515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.338656][ T3515] bond0: (slave bond1): Enslaving as an active interface with an up link [ 37.348208][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.364872][ T28] audit: type=1400 audit(1772350157.803:116): avc: denied { tracepoint } for pid=3511 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.384620][ T28] audit: type=1326 audit(1772350157.873:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.415882][ T28] audit: type=1326 audit(1772350157.873:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.439987][ T28] audit: type=1326 audit(1772350157.873:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278dfcc799 code=0x7ffc0000 [ 37.463671][ T28] audit: type=1400 audit(1772350157.893:120): avc: denied { ioctl } for pid=3514 comm="syz.3.4" path="socket:[3961]" dev="sockfs" ino=3961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.490281][ T3520] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 37.534615][ T3526] loop1: detected capacity change from 0 to 256 [ 37.710773][ T3541] netlink: 399 bytes leftover after parsing attributes in process `syz.3.21'. [ 37.736172][ T3541] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 37.758498][ T3545] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 37.769710][ T3545] @0: renamed from bond_slave_1 (while UP) [ 37.891617][ T3550] dummy0: entered allmulticast mode [ 37.911951][ T3550] dummy0: left allmulticast mode [ 37.999838][ T3541] loop3: detected capacity change from 0 to 8192 [ 38.507854][ T3595] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 39.344738][ T3422] kernel write not supported for file [eventfd] (pid: 3422 comm: kworker/1:5) [ 39.404139][ T3615] serio: Serial port ptm0 [ 39.531013][ T3626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'. [ 39.539836][ T3626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.58'. [ 39.575278][ T3631] loop1: detected capacity change from 0 to 512 [ 39.610361][ T3631] EXT4-fs: Ignoring removed bh option [ 39.623836][ T3631] EXT4-fs: Ignoring removed oldalloc option [ 39.636079][ T3631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.649457][ T3631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.664580][ T3631] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.683692][ T3631] EXT4-fs (loop1): 1 truncate cleaned up [ 39.712571][ T3642] loop0: detected capacity change from 0 to 1024 [ 39.713292][ T3631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.768788][ T3644] netlink: 124 bytes leftover after parsing attributes in process `syz.2.68'. [ 39.782950][ T3642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.803498][ T3650] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 39.813032][ T3644] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.867657][ T3652] loop2: detected capacity change from 0 to 512 [ 39.872891][ T3654] loop3: detected capacity change from 0 to 764 [ 39.896453][ T3654] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 39.917514][ T3652] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.70: iget: bad extended attribute block 1 [ 39.940967][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.954453][ T3652] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.954638][ T3652] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.70: couldn't read orphan inode 15 (err -117) [ 39.963973][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 39.963991][ C0] EXT4-fs (loop2): initial error at time 1772350160: ext4_orphan_get:1391: inode 15 [ 39.964034][ C0] EXT4-fs (loop2): last error at time 1772350160: ext4_orphan_get:1391: inode 15 [ 40.067864][ T3652] loop2: lost filesystem error report for type 5 error -117 [ 40.068528][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.100864][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.123482][ T3665] loop3: detected capacity change from 0 to 1024 [ 40.153491][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.172630][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 40.193677][ T3665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.302484][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.531916][ T3709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 40.738386][ T3720] option changes via remount are deprecated (pid=3719 comm=syz.4.101) [ 40.759941][ T3720] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 40.769432][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 40.806472][ T3724] loop0: detected capacity change from 0 to 128 [ 40.837092][ T3724] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.891654][ T3724] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.988312][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.028604][ T3745] loop3: detected capacity change from 0 to 512 [ 41.072884][ T3745] EXT4-fs (loop3): 1 truncate cleaned up [ 41.079744][ T3745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.092304][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 41.120083][ T3752] Zero length message leads to an empty skb [ 41.126513][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.169708][ T3757] netlink: 156 bytes leftover after parsing attributes in process `syz.4.117'. [ 41.274198][ T3768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 41.287492][ T3768] System zones: 0-1, 3-36 [ 41.292758][ T3768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.357178][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.569023][ C0] hrtimer: interrupt took 38022 ns [ 41.885637][ T3839] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.919200][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 42.590793][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 42.590809][ T28] audit: type=1326 audit(1772350163.243:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fc70dc799 code=0x7ffc0000 [ 42.751049][ T3868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 42.751145][ T3866] set_capacity_and_notify: 1 callbacks suppressed [ 42.751185][ T3866] loop1: detected capacity change from 0 to 512 [ 42.828113][ T3873] loop4: detected capacity change from 0 to 512 [ 42.865834][ T3873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.882985][ T3875] loop2: detected capacity change from 0 to 4096 [ 42.902122][ T3875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.936953][ T3873] EXT4-fs (loop4): 1 truncate cleaned up [ 42.966649][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.990454][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.020214][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.082896][ T28] audit: type=1400 audit(1772350163.723:334): avc: denied { setopt } for pid=3884 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.102835][ T3886] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 43.149976][ T28] audit: type=1400 audit(1772350163.723:335): avc: denied { ioctl } for pid=3883 comm="syz.1.169" path="socket:[6465]" dev="sockfs" ino=6465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.232914][ T3902] loop1: detected capacity change from 0 to 512 [ 43.240123][ T3902] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.252376][ T28] audit: type=1400 audit(1772350163.773:336): avc: denied { bind } for pid=3888 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.273087][ T28] audit: type=1400 audit(1772350163.863:337): avc: denied { write } for pid=3895 comm="syz.2.174" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.332680][ T28] audit: type=1400 audit(1772350163.963:338): avc: denied { mounton } for pid=3904 comm="syz.4.177" path="/31/file0" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.334925][ T3909] netlink: 'syz.4.179': attribute type 62 has an invalid length. [ 43.397051][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 43.425265][ T3911] netlink: 'syz.2.180': attribute type 30 has an invalid length. [ 43.434981][ T3913] loop1: detected capacity change from 0 to 512 [ 43.452519][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 43.470516][ T3913] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 43.503822][ T3913] EXT4-fs (loop1): 1 truncate cleaned up [ 43.525718][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.530003][ T3919] loop3: detected capacity change from 0 to 1024 [ 43.591303][ T3919] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.602380][ T3919] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 43.615527][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.624871][ T3919] EXT4-fs (loop3): invalid journal inode [ 43.630662][ T3919] EXT4-fs (loop3): can't get journal size [ 43.664093][ T3919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.694093][ T3932] capability: warning: `syz.1.188' uses 32-bit capabilities (legacy support in use) [ 43.756806][ T3919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.184'. [ 43.801722][ T3941] loop0: detected capacity change from 0 to 512 [ 43.812704][ T3941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.841611][ T3941] EXT4-fs (loop0): 1 truncate cleaned up [ 43.847841][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.880594][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.946905][ T28] audit: type=1400 audit(1772350164.583:339): avc: denied { read } for pid=3940 comm="syz.0.193" path="/41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.020426][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.050720][ T28] audit: type=1400 audit(1772350164.583:340): avc: denied { ioctl } for pid=3940 comm="syz.0.193" path="/41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop0" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.096797][ T28] audit: type=1326 audit(1772350164.653:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.3.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc70dc799 code=0x0 [ 44.120936][ T28] audit: type=1326 audit(1772350164.673:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.3.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc70dc799 code=0x0 [ 44.307346][ T3960] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.571474][ T3977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 44.695204][ T3991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 44.739783][ T3993] loop1: detected capacity change from 0 to 512 [ 44.771246][ T3993] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 44.779347][ T3993] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 44.862814][ T3993] EXT4-fs (loop1): 1 truncate cleaned up [ 44.869015][ T3993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.891766][ T4010] program syz.4.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.910486][ T3993] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.215: lblock 0 mapped to illegal pblock 4 (length 1) [ 44.931811][ T3993] EXT4-fs (loop1): Remounting filesystem read-only [ 44.948928][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.958288][ T4015] loop2: detected capacity change from 0 to 256 [ 44.972469][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.989996][ T4015] FAT-fs (loop2): Filesystem has been set read-only [ 45.000229][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.009331][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.020788][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.041946][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.062619][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.076067][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.084983][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.102680][ T4023] loop4: detected capacity change from 0 to 512 [ 45.123634][ T4023] EXT4-fs: Ignoring removed nobh option [ 45.134727][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.143632][ T4023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.157895][ T4015] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.168545][ T4023] EXT4-fs (loop4): 1 truncate cleaned up [ 45.175786][ T4023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.401111][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.562154][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.624578][ T4028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 45.685620][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.840643][ T4052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 45.953568][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 45.968831][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 46.250755][ T4093] netlink: 'syz.1.257': attribute type 3 has an invalid length. [ 46.692806][ T4124] process 'syz.1.270' launched './file0' with NULL argv: empty string added [ 46.729669][ T4126] mmap: syz.1.271 (4126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.076544][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.084167][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.256236][ T4161] syz.0.287: attempt to access beyond end of device [ 47.256236][ T4161] loop0: rw=0, sector=97, nr_sectors = 128 limit=128 [ 47.321144][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.330301][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.374484][ T82] kworker/u8:5: attempt to access beyond end of device [ 47.374484][ T82] loop0: rw=1, sector=225, nr_sectors = 816 limit=128 [ 47.478384][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.622850][ T4185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=4185 comm=syz.0.298 [ 47.916819][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.997228][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 47.997241][ T28] audit: type=1400 audit(1772350168.643:375): avc: denied { write } for pid=4197 comm="syz.4.302" path="socket:[6885]" dev="sockfs" ino=6885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.113450][ T4204] set_capacity_and_notify: 4 callbacks suppressed [ 48.113538][ T4204] loop0: detected capacity change from 0 to 256 [ 48.167394][ T4204] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.477121][ T9] kernel read not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 48.502197][ T28] audit: type=1400 audit(1772350169.153:376): avc: denied { override_creds } for pid=4224 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.588437][ T28] audit: type=1400 audit(1772350169.233:377): avc: denied { getopt } for pid=4229 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.608792][ T4230] sctp: [Deprecated]: syz.4.318 (pid 4230) Use of int in max_burst socket option. [ 48.608792][ T4230] Use struct sctp_assoc_value instead [ 48.662793][ T28] audit: type=1400 audit(1772350169.313:378): avc: denied { setopt } for pid=4234 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.691619][ T28] audit: type=1400 audit(1772350169.313:379): avc: denied { bind } for pid=4234 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.713419][ T28] audit: type=1400 audit(1772350169.313:380): avc: denied { name_bind } for pid=4234 comm="syz.0.321" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 48.735037][ T28] audit: type=1400 audit(1772350169.313:381): avc: denied { node_bind } for pid=4234 comm="syz.0.321" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 48.908684][ T28] audit: type=1400 audit(1772350169.553:382): avc: denied { read } for pid=4245 comm="syz.4.326" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.939958][ T4246] program syz.4.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.026815][ T28] audit: type=1400 audit(1772350169.663:383): avc: denied { connect } for pid=4248 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.055880][ T28] audit: type=1400 audit(1772350169.663:384): avc: denied { getopt } for pid=4248 comm="syz.1.327" laddr=::ffff:172.20.20.10 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.088799][ T4252] loop1: detected capacity change from 0 to 512 [ 49.247798][ T4267] loop0: detected capacity change from 0 to 1024 [ 49.258365][ T4267] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.267574][ T4274] loop4: detected capacity change from 0 to 512 [ 49.272174][ T4267] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.289727][ T4267] JBD2: no valid journal superblock found [ 49.295620][ T4267] EXT4-fs (loop0): Could not load journal inode [ 49.310580][ T4274] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.338: corrupted in-inode xattr: bad e_name length [ 49.326820][ T4274] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.326977][ T4274] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.338: couldn't read orphan inode 15 (err -117) [ 49.336181][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.336196][ C0] EXT4-fs (loop4): initial error at time 1772350169: ext4_iget_extra_inode:5025: inode 15 [ 49.336231][ C0] EXT4-fs (loop4): last error at time 1772350169: ext4_iget_extra_inode:5025: inode 15 [ 49.374288][ T4274] loop4: lost filesystem error report for type 5 error -117 [ 49.374905][ T4274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.397808][ T4274] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #2: comm syz.4.338: corrupted xattr entries [ 49.432011][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.467195][ T4285] program syz.4.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.527845][ T4293] loop9: detected capacity change from 0 to 7 [ 49.534136][ T4295] sctp: [Deprecated]: syz.4.348 (pid 4295) Use of int in max_burst socket option deprecated. [ 49.534136][ T4295] Use struct sctp_assoc_value instead [ 49.557405][ T4293] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.568627][ T4293] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.576839][ T4293] loop9: unable to read partition table [ 49.582586][ T4293] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 49.582586][ T4293] ) failed (rc=-5) [ 49.592004][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.654107][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.665275][ T4305] loop4: detected capacity change from 0 to 128 [ 49.674425][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.693622][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.710269][ T4305] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.738939][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.747133][ T4312] loop3: detected capacity change from 0 to 4096 [ 49.755877][ T4305] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.777571][ T4312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.822926][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.832049][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.937214][ T4325] __nla_validate_parse: 2 callbacks suppressed [ 49.937228][ T4325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 49.971055][ T4325] bond0: entered promiscuous mode [ 49.981662][ T4325] bond_slave_0: entered promiscuous mode [ 49.995146][ T4325] @0: entered promiscuous mode [ 50.015160][ T4325] bond0: left promiscuous mode [ 50.025647][ T4325] bond_slave_0: left promiscuous mode [ 50.037807][ T4325] @0: left promiscuous mode [ 50.071647][ T4326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 50.368556][ T4348] loop3: detected capacity change from 0 to 512 [ 50.574815][ T4367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.379'. [ 50.780733][ T4376] loop0: detected capacity change from 0 to 512 [ 50.794567][ T4376] EXT4-fs: dax option not supported [ 50.874771][ T4382] loop1: detected capacity change from 0 to 1024 [ 50.897981][ T4382] EXT4-fs: inline encryption not supported [ 50.920081][ T4382] EXT4-fs: Ignoring removed nobh option [ 50.925767][ T4382] EXT4-fs: Ignoring removed nobh option [ 50.959036][ T4382] EXT4-fs: Ignoring removed bh option [ 50.990643][ T4382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.004363][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 51.190922][ T4382] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.387: Allocating blocks 497-513 which overlap fs metadata [ 51.311582][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.491859][ T4425] delete_channel: no stack [ 51.639064][ T4435] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 51.826374][ T4448] EXT4-fs: Ignoring removed orlov option [ 51.838890][ T4448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.861658][ T4448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.869638][ T4448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.414: bg 0: block 248: padding at end of block bitmap is not set [ 51.910982][ T4448] loop1: lost filesystem error report for type 5 error -117 [ 51.911194][ T4448] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.414: Failed to acquire dquot type 1 [ 51.929898][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.929916][ C0] EXT4-fs (loop1): last error at time 1772350172: ext4_validate_block_bitmap:441 [ 51.963139][ T4448] loop1: lost filesystem error report for type 5 error -117 [ 51.963501][ T4448] EXT4-fs (loop1): 1 truncate cleaned up [ 52.010357][ T4448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.035721][ T4448] EXT4-fs: Ignoring removed orlov option [ 52.041609][ T4448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.050878][ T4448] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 52.067523][ T4469] rock: directory entry would overflow storage [ 52.073941][ T4469] rock: sig=0x5245, size=8, remaining=5 [ 52.100458][ T4448] EXT4-fs error (device loop1): __ext4_remount:6804: comm syz.1.414: Abort forced by user [ 52.120803][ T4448] EXT4-fs (loop1): Remounting filesystem read-only [ 52.133279][ T4448] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 52.148305][ T4448] ext4 filesystem being remounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.171206][ T4448] syz.1.414 (4448) used greatest stack depth: 9480 bytes left [ 52.213238][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.318766][ T4496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.332232][ T4496] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.437: bad orphan inode 131083 [ 52.349960][ T4496] loop1: lost filesystem error report for type 5 error -117 [ 52.370159][ T4496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.425612][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 52.467032][ T4506] netlink: 'syz.3.439': attribute type 18 has an invalid length. [ 52.477659][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 52.491598][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.640605][ T4528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.652481][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 52.673021][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.824305][ T1660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.927697][ T4550] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.451: invalid fast symlink length 39 [ 52.940133][ T1660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.033335][ T1660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.081428][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.091343][ T1660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.149958][ T4574] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 53.218979][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 53.218998][ T28] audit: type=1400 audit(1772350173.863:417): avc: denied { read } for pid=3039 comm="dhcpcd" name="n25" dev="tmpfs" ino=2835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.291411][ T1660] bridge_slave_1: left allmulticast mode [ 53.297137][ T1660] bridge_slave_1: left promiscuous mode [ 53.319926][ T28] audit: type=1400 audit(1772350173.863:418): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.344501][ T1660] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.351901][ T28] audit: type=1400 audit(1772350173.863:419): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.385960][ T1660] bridge_slave_0: left allmulticast mode [ 53.391763][ T1660] bridge_slave_0: left promiscuous mode [ 53.397461][ T1660] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.512203][ T1660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.522598][ T1660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.532340][ T1660] bond0 (unregistering): (slave bond1): Releasing backup interface [ 53.573963][ T1660] bond0 (unregistering): Released all slaves [ 53.581868][ T1660] bond1 (unregistering): Released all slaves [ 53.603839][ T4542] chnl_net:caif_netlink_parms(): no params data found [ 53.621417][ T4585] set_capacity_and_notify: 6 callbacks suppressed [ 53.621433][ T4585] loop2: detected capacity change from 0 to 4096 [ 53.657713][ T28] audit: type=1400 audit(1772350174.303:420): avc: denied { read } for pid=4577 comm="syz.1.469" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.690215][ T28] audit: type=1400 audit(1772350174.303:421): avc: denied { open } for pid=4577 comm="syz.1.469" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.726851][ T4585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.749478][ T28] audit: type=1400 audit(1772350174.393:422): avc: denied { read open } for pid=4589 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.798705][ T1660] hsr_slave_0: left promiscuous mode [ 53.804781][ T1660] hsr_slave_1: left promiscuous mode [ 53.813998][ T1660] veth1_macvtap: left promiscuous mode [ 53.819514][ T1660] veth0_macvtap: left promiscuous mode [ 53.825300][ T1660] veth1_vlan: left promiscuous mode [ 53.831183][ T1660] veth0_vlan: left promiscuous mode [ 53.836722][ T28] audit: type=1400 audit(1772350174.393:423): avc: denied { getattr } for pid=4589 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.864537][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.876434][ T28] audit: type=1400 audit(1772350174.423:424): avc: denied { add_name } for pid=4584 comm="syz.2.470" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.982731][ T28] audit: type=1400 audit(1772350174.633:425): avc: denied { add_name } for pid=4587 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.014277][ T28] audit: type=1400 audit(1772350174.633:426): avc: denied { create } for pid=4587 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.050478][ T1660] team0 (unregistering): Port device team_slave_1 removed [ 54.060933][ T1660] team0 (unregistering): Port device team_slave_0 removed [ 54.230940][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.238113][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.280118][ T4542] bridge_slave_0: entered allmulticast mode [ 54.292627][ T4542] bridge_slave_0: entered promiscuous mode [ 54.318241][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.325918][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.333313][ T4542] bridge_slave_1: entered allmulticast mode [ 54.340151][ T4542] bridge_slave_1: entered promiscuous mode [ 54.358160][ T4542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.370672][ T4542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.442229][ T4561] chnl_net:caif_netlink_parms(): no params data found [ 54.473115][ T4542] team0: Port device team_slave_0 added [ 54.479751][ T4542] team0: Port device team_slave_1 added [ 54.541652][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.558763][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.645222][ T4542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.673320][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.689920][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.769912][ T4542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.061936][ T4542] hsr_slave_0: entered promiscuous mode [ 55.068159][ T4542] hsr_slave_1: entered promiscuous mode [ 55.074397][ T4542] debugfs: 'hsr0' already exists in 'hsr' [ 55.080439][ T4542] Cannot create hsr debugfs directory [ 55.086041][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.094363][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.101724][ T4561] bridge_slave_0: entered allmulticast mode [ 55.108119][ T4561] bridge_slave_0: entered promiscuous mode [ 55.123951][ T4561] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.131440][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.138715][ T4561] bridge_slave_1: entered allmulticast mode [ 55.145468][ T4561] bridge_slave_1: entered promiscuous mode [ 55.169608][ T4561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.186388][ T4561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.220892][ T4561] team0: Port device team_slave_0 added [ 55.230388][ T4561] team0: Port device team_slave_1 added [ 55.298339][ T4561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.308180][ T4561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.336023][ T4561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.370018][ T4561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.377010][ T4561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.456553][ T4561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.494859][ T4671] loop4: detected capacity change from 0 to 512 [ 55.542808][ T4671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.609954][ T4671] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.623554][ T4561] hsr_slave_0: entered promiscuous mode [ 55.629591][ T4561] hsr_slave_1: entered promiscuous mode [ 55.637461][ T4671] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.486: corrupted inode contents [ 55.637635][ T4561] debugfs: 'hsr0' already exists in 'hsr' [ 55.655950][ T4671] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.486: mark_inode_dirty error [ 55.677246][ T4561] Cannot create hsr debugfs directory [ 55.683040][ T4671] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.486: corrupted inode contents [ 55.697856][ T4671] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.486: mark_inode_dirty error [ 55.710153][ T4684] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.486: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 55.710153][ T4684] [ 55.731749][ T1660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.768267][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.797176][ T1660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.869191][ T1660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.983114][ T1660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.032191][ T4707] dummy0: mtu less than device minimum [ 56.070615][ T4542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.090968][ T4542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.106160][ T4542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.114012][ T4714] loop2: detected capacity change from 0 to 256 [ 56.123494][ T4542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.145416][ T4714] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.216706][ T4542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.248908][ T1660] bridge_slave_1: left allmulticast mode [ 56.256083][ T1660] bridge_slave_1: left promiscuous mode [ 56.265219][ T1660] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.277862][ T1660] bridge_slave_0: left allmulticast mode [ 56.284231][ T1660] bridge_slave_0: left promiscuous mode [ 56.291290][ T1660] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.319006][ T4726] FAT-fs (loop2): error, corrupted file size (i_pos 196, 60330) [ 56.347909][ T4726] FAT-fs (loop2): Filesystem has been set read-only [ 56.385025][ T4726] FAT-fs (loop2): error, corrupted file size (i_pos 196, 60330) [ 56.433573][ T1660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.443728][ T1660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.456878][ T1660] bond0 (unregistering): Released all slaves [ 56.489835][ T4542] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.504923][ T1660] hsr_slave_0: left promiscuous mode [ 56.514401][ T1660] hsr_slave_1: left promiscuous mode [ 56.526353][ T1660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.541440][ T4758] loop2: detected capacity change from 0 to 512 [ 56.551208][ T1660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.569290][ T4758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.579894][ T1660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.590635][ T4761] program syz.4.501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.608079][ T4758] EXT4-fs (loop2): 1 truncate cleaned up [ 56.610241][ T1660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.615667][ T4758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.640030][ T1660] veth1_macvtap: left promiscuous mode [ 56.645660][ T1660] veth0_macvtap: left promiscuous mode [ 56.651611][ T1660] veth1_vlan: left promiscuous mode [ 56.657078][ T1660] veth0_vlan: left promiscuous mode [ 56.701145][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.766487][ T1660] team0 (unregistering): Port device team_slave_1 removed [ 56.784592][ T1660] team0 (unregistering): Port device team_slave_0 removed [ 56.837380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.844536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.861426][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.868597][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.000519][ T4542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.079754][ T4561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.108643][ T4561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.123389][ T4561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.152854][ T4561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.216382][ T4542] veth0_vlan: entered promiscuous mode [ 57.237616][ T4542] veth1_vlan: entered promiscuous mode [ 57.290322][ T4542] veth0_macvtap: entered promiscuous mode [ 57.308507][ T4542] veth1_macvtap: entered promiscuous mode [ 57.318413][ T4830] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 57.335306][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.360044][ T4561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.372569][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.394124][ T4561] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.412012][ T82] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.427968][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.435053][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.463715][ T4843] netlink: 15 bytes leftover after parsing attributes in process `syz.4.520'. [ 57.474222][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.481328][ T1660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.497375][ T82] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.506688][ T82] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.543128][ T82] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.614560][ T4856] loop3: detected capacity change from 0 to 164 [ 57.648325][ T4561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.771750][ T4877] netlink: 212 bytes leftover after parsing attributes in process `syz.3.529'. [ 57.826214][ T4561] veth0_vlan: entered promiscuous mode [ 57.861908][ T4561] veth1_vlan: entered promiscuous mode [ 57.901826][ T4561] veth0_macvtap: entered promiscuous mode [ 57.904597][ T4561] veth1_macvtap: entered promiscuous mode [ 57.937688][ T4561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.946135][ T4561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.957599][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957665][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957766][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957887][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.039389][ T4903] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 58.110657][ T4904] netlink: 'syz.1.538': attribute type 25 has an invalid length. [ 58.118471][ T4904] netlink: 'syz.1.538': attribute type 29 has an invalid length. [ 58.219988][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 58.220004][ T28] audit: type=1400 audit(1772350178.863:460): avc: denied { getopt } for pid=4914 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.290300][ T28] audit: type=1400 audit(1772350178.943:461): avc: denied { name_connect } for pid=4925 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 58.315706][ T4922] loop1: detected capacity change from 0 to 764 [ 58.354118][ T4922] rock: directory entry would overflow storage [ 58.389276][ T4922] rock: sig=0x5245, size=8, remaining=5 [ 58.436050][ T28] audit: type=1400 audit(1772350179.083:462): avc: denied { ioctl } for pid=4939 comm="syz.3.554" path="socket:[10363]" dev="sockfs" ino=10363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.503590][ T28] audit: type=1400 audit(1772350179.083:463): avc: denied { connect } for pid=4941 comm="syz.0.555" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.565621][ T28] audit: type=1400 audit(1772350179.083:464): avc: denied { setopt } for pid=4941 comm="syz.0.555" laddr=fe80::aa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.652563][ T28] audit: type=1400 audit(1772350179.113:465): avc: denied { write } for pid=4941 comm="syz.0.555" laddr=fe80::aa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.673521][ T4973] loop0: detected capacity change from 0 to 164 [ 58.709590][ T4973] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 58.737383][ T28] audit: type=1400 audit(1772350179.373:466): avc: denied { write } for pid=4976 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.823122][ T28] audit: type=1400 audit(1772350179.473:467): avc: denied { setopt } for pid=4978 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.979930][ T28] audit: type=1400 audit(1772350179.623:468): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.031978][ T28] audit: type=1400 audit(1772350179.663:469): avc: denied { block_suspend } for pid=4995 comm="syz.2.575" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.361540][ T5036] loop4: detected capacity change from 0 to 128 [ 59.406840][ T5036] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.438146][ T5036] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.450843][ T5048] program syz.2.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.600745][ T5070] loop0: detected capacity change from 0 to 1024 [ 59.647762][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.743358][ T4561] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.769318][ T5100] loop4: detected capacity change from 0 to 512 [ 59.785653][ T5100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.806694][ T5104] rdma_op ffff88811a423580 conn xmit_rdma 0000000000000000 [ 59.845553][ T5100] EXT4-fs (loop4): 1 truncate cleaned up [ 59.853287][ T5100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.886399][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.010699][ T5134] C: renamed from team_slave_0 (while UP) [ 60.041408][ T5134] netlink: 'syz.0.619': attribute type 3 has an invalid length. [ 60.059878][ T5134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.619'. [ 60.082316][ T5134] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 60.280681][ T5190] netlink: 108 bytes leftover after parsing attributes in process `syz.2.625'. [ 61.049728][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 61.214242][ T5276] loop4: detected capacity change from 0 to 512 [ 61.237367][ T5276] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 61.259740][ T5276] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.665: bg 0: block 104: invalid block bitmap [ 61.272449][ T5276] loop4: lost filesystem error report for type 5 error -117 [ 61.279241][ T5276] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 61.289897][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 61.301775][ C1] EXT4-fs (loop4): initial error at time 1772350181: ext4_validate_block_bitmap:432 [ 61.311239][ C1] EXT4-fs (loop4): last error at time 1772350181: ext4_validate_block_bitmap:432 [ 61.324166][ T5276] loop4: lost filesystem error report for type 5 error -117 [ 61.325442][ T5276] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.665: invalid indirect mapped block 1 (level 1) [ 61.346308][ T5276] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.356422][ T5276] EXT4-fs (loop4): 1 truncate cleaned up [ 61.371595][ T5276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.404582][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.528792][ T5297] loop3: detected capacity change from 0 to 4096 [ 61.574535][ T5301] loop1: detected capacity change from 0 to 512 [ 61.592455][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.630596][ T5301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.653294][ T5301] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.665348][ T4542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.783136][ T5317] loop3: detected capacity change from 0 to 128 [ 61.806892][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.076172][ T5346] loop2: detected capacity change from 0 to 164 [ 62.300253][ T5366] rdma_op ffff888120c9b180 conn xmit_rdma 0000000000000000 [ 62.417405][ T5374] loop0: detected capacity change from 0 to 512 [ 62.430267][ T5374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.478858][ T5374] EXT4-fs (loop0): 1 truncate cleaned up [ 62.486455][ T5381] program syz.4.707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.493123][ T5379] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.530267][ T5374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.600816][ T4561] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.770372][ T5406] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 62.789029][ T5406] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 62.806432][ T5406] EXT4-fs (loop0): 1 truncate cleaned up [ 62.841342][ T5406] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 4: comm syz.0.716: lblock 0 mapped to illegal pblock 4 (length 1) [ 62.883499][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 63.921482][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 63.921498][ T28] audit: type=1400 audit(1772350184.573:482): avc: denied { execute } for pid=5440 comm="syz.4.741" dev="tmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.953544][ T5447] netlink: 15 bytes leftover after parsing attributes in process `syz.3.731'. [ 64.066253][ T5454] set_capacity_and_notify: 2 callbacks suppressed [ 64.066271][ T5454] loop1: detected capacity change from 0 to 128 [ 64.104196][ T5454] syz.1.734: attempt to access beyond end of device [ 64.104196][ T5454] loop1: rw=0, sector=97, nr_sectors = 128 limit=128 [ 64.128980][ T28] audit: type=1400 audit(1772350184.603:483): avc: denied { execute_no_trans } for pid=5440 comm="syz.4.741" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.766056][ T5169] kworker/u8:12: attempt to access beyond end of device [ 64.766056][ T5169] loop1: rw=1, sector=225, nr_sectors = 816 limit=128 [ 64.844926][ T5460] netlink: 212 bytes leftover after parsing attributes in process `syz.2.750'. [ 64.851020][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 64.874081][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 64.886223][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 64.902454][ T5466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=5466 comm=syz.3.739 [ 65.021953][ T5478] loop3: detected capacity change from 0 to 164 [ 65.071266][ T5478] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 65.161267][ T5493] sctp: [Deprecated]: syz.3.753 (pid 5493) Use of int in max_burst socket option. [ 65.161267][ T5493] Use struct sctp_assoc_value instead [ 65.235161][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 65.260069][ T5500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.290111][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.310276][ T5500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.317675][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.331264][ T28] audit: type=1400 audit(1772350185.963:484): avc: denied { override_creds } for pid=5502 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.437537][ T5506] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 65.876332][ T5546] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 66.109711][ T5562] netlink: 108 bytes leftover after parsing attributes in process `syz.4.787'. [ 66.326044][ T5590] loop3: detected capacity change from 0 to 256 [ 66.350591][ T5590] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.530666][ T5620] loop2: detected capacity change from 0 to 128 [ 66.543809][ T5620] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.570761][ T5620] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.093830][ T5681] loop1: detected capacity change from 0 to 512 [ 67.198286][ T5681] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.277670][ T5681] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.808: corrupted inode contents [ 67.335435][ T5681] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.808: mark_inode_dirty error [ 67.369935][ T5681] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.808: corrupted inode contents [ 67.402197][ T5681] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.808: mark_inode_dirty error [ 67.426877][ T5699] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.808: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 67.426877][ T5699] [ 67.611218][ T5710] loop9: detected capacity change from 0 to 7 [ 67.642244][ T5710] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.670809][ T5710] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.678694][ T5710] loop9: unable to read partition table [ 67.709975][ T5710] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 67.709975][ T5710] ) failed (rc=-5) [ 67.724635][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.726419][ T5714] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 67.745651][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.776018][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.800020][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.830046][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.930627][ T5726] loop4: detected capacity change from 0 to 256 [ 67.954260][ T5726] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.128594][ T5736] FAT-fs (loop4): error, corrupted file size (i_pos 196, 60330) [ 68.189978][ T5736] FAT-fs (loop4): Filesystem has been set read-only [ 68.196688][ T5736] FAT-fs (loop4): error, corrupted file size (i_pos 196, 60330) [ 68.278078][ T28] audit: type=1400 audit(1772350188.923:485): avc: denied { setopt } for pid=5739 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.407659][ T5745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.842'. [ 69.172673][ T5757] loop0: detected capacity change from 0 to 512 [ 69.200388][ T5759] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.837'. [ 69.268463][ T5757] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.328204][ T5765] loop1: detected capacity change from 0 to 4096 [ 69.753207][ T28] audit: type=1400 audit(1772350190.403:486): avc: denied { getopt } for pid=5768 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.549738][ T5844] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 70.588692][ T28] audit: type=1400 audit(1772350191.233:487): avc: denied { shutdown } for pid=5846 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.676426][ T5854] loop4: detected capacity change from 0 to 512 [ 70.703846][ T5854] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.777690][ T28] audit: type=1400 audit(1772350191.403:488): avc: denied { getopt } for pid=5852 comm="syz.2.872" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.820919][ T5854] EXT4-fs (loop4): 1 truncate cleaned up [ 70.828097][ T5854] EXT4-fs mount: 8 callbacks suppressed [ 70.828178][ T5854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.920747][ T5865] loop3: detected capacity change from 0 to 512 [ 70.984659][ T5865] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.020928][ T5865] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.875: bad orphan inode 131083 [ 71.039875][ T5865] loop3: lost filesystem error report for type 5 error -117 [ 71.040622][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.073243][ T5865] ================================================================== [ 71.081382][ T5865] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 71.088793][ T5865] [ 71.091147][ T5865] read-write to 0xffff88811add16b8 of 8 bytes by interrupt on cpu 0: [ 71.099230][ T5865] __xa_clear_mark+0xf5/0x1e0 [ 71.103946][ T5865] __folio_end_writeback+0xf4/0x360 [ 71.109184][ T5865] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 71.115461][ T5865] folio_end_writeback+0x1c/0x70 [ 71.120439][ T5865] ext4_finish_bio+0x459/0x8b0 [ 71.125242][ T5865] ext4_end_bio+0x27b/0x380 [ 71.129789][ T5865] bio_endio+0x38a/0x420 [ 71.134085][ T5865] blk_update_request+0x338/0x740 [ 71.139155][ T5865] blk_mq_end_request+0x26/0x50 [ 71.144051][ T5865] lo_complete_rq+0x98/0x140 [ 71.148681][ T5865] blk_done_softirq+0x77/0xb0 [ 71.153392][ T5865] handle_softirqs+0xb9/0x2a0 [ 71.158092][ T5865] run_ksoftirqd+0x1c/0x30 [ 71.162569][ T5865] smpboot_thread_fn+0x32a/0x510 [ 71.167557][ T5865] kthread+0x22a/0x280 [ 71.171652][ T5865] ret_from_fork+0x150/0x360 [ 71.176296][ T5865] ret_from_fork_asm+0x1a/0x30 [ 71.181105][ T5865] [ 71.183455][ T5865] read to 0xffff88811add16b8 of 8 bytes by task 5865 on cpu 1: [ 71.191021][ T5865] xas_find_marked+0x213/0x620 [ 71.195822][ T5865] filemap_get_folios_tag+0xfa/0x510 [ 71.201150][ T5865] file_write_and_wait_range+0x20c/0x2f0 [ 71.206817][ T5865] generic_buffers_fsync_noflush+0x45/0x130 [ 71.212758][ T5865] ext4_sync_file+0x1aa/0x6b0 [ 71.217472][ T5865] vfs_fsync_range+0xc5/0xe0 [ 71.222099][ T5865] ext4_buffered_write_iter+0x34f/0x3c0 [ 71.227676][ T5865] ext4_file_write_iter+0x380/0xfa0 [ 71.232926][ T5865] do_iter_readv_writev+0x4fd/0x5a0 [ 71.238181][ T5865] vfs_writev+0x2e1/0x900 [ 71.242560][ T5865] __se_sys_pwritev2+0xfc/0x1c0 [ 71.247453][ T5865] __x64_sys_pwritev2+0x67/0x80 [ 71.252336][ T5865] x64_sys_call+0xe07/0x3020 [ 71.256977][ T5865] do_syscall_64+0x12c/0x370 [ 71.261604][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.267545][ T5865] [ 71.269889][ T5865] value changed: 0x000000000000ffe0 -> 0x000000000000ff00 [ 71.277038][ T5865] [ 71.279470][ T5865] Reported by Kernel Concurrency Sanitizer on: [ 71.285674][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.3.875 Not tainted syzkaller #0 PREEMPT(full) [ 71.294912][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.305000][ T5865] ================================================================== [ 71.384917][ T5872] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.871: invalid fast symlink length 39 [ 71.406215][ T4542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.513233][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.