last executing test programs: 30.456383892s ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) get_robust_list(0x0, 0x0, 0xffffffffffffffff) 30.363387762s ago: executing program 0 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x52a, &(0x7f0000000a40)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 29.588336069s ago: executing program 0 (id=18): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000b000a0000000c000100535e7d2721239c0008000200050000001400050009000000000000000000ffffe0000001140006"], 0x58}}, 0x0) 29.528684609s ago: executing program 0 (id=21): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) 29.290224278s ago: executing program 0 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x2a) r1 = io_uring_setup(0x38dc, &(0x7f0000000600)={0x0, 0xd10, 0x10, 0x2, 0x301}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 27.325891771s ago: executing program 0 (id=130): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4, 0x1, 0x3, 0x3e, 0x0, 0x3, 0x40, 0x198, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x2, 0x2, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000005000000080003"], 0x1c}}, 0x0) 27.294704941s ago: executing program 32 (id=130): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4, 0x1, 0x3, 0x3e, 0x0, 0x3, 0x40, 0x198, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x2, 0x2, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000005000000080003"], 0x1c}}, 0x0) 5.99674651s ago: executing program 1 (id=1208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) 5.98888985s ago: executing program 1 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 5.94006794s ago: executing program 1 (id=1212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x0, 0x25dfdbfa, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0) 5.897096539s ago: executing program 1 (id=1214): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$eJzs3M1rHOUfAPDvzG6SX1+TX60vrdVGq1h8SZq0akHBFxA8KAh6qCeJSVpq00aaCLYEG6XUi6AF7yJ4EfwLPHkS9SR41bsUivTS6mllMrPrJtnNSzfJptnPB6aZJ/vMPt/vzDwzz8xkGkDH6s/+SSJ2RsTvEdEbEWl9hW35lNW7dWNm9O8bM6NJVCpv/pVki8XNGzOj1apJ8XNHXihnX5ReTuLFBu1OXbh4ZmRiYvx8UR6cPvv+4NSFi0+dPjtyavzU+Lnh48ePHR169pnhp9ckzyymm/s/mjyw79W3r74+euLquz9/l9QFXZ9Hi57rrc3O1NbJQo+uUWObxa66+aTcxkBYlZ6IyDZX11z/743S5d21z3rjlU/aGhywriqVSmW4+cezFWALS6LdEQDtUT3RZ9e/1WmDhh6bwvWX8gugLO9bxZR/Us7vg/Tk10a71qn9/og4MfvPV9kUq74P0bVOUQEAW9kP2fjnyQbjv3LEPXX1dhfPhvoi4v8RsSci7oqIvRFxd+R1742I+xo30/9Ok/b7F5QXj3/Say2kt6xs/Pd88Wxr/viv9hSsr1SUds3l35WcPD0xfqRYJ4ejqycrDzX89iRiNvv52+fN2q8f/2VT1n51LFjEca3cM3+ZsZHpkZYTL1z/OGJ/uVH+SZT/yyL2RcT+22zj9OPfHpj/m1Jtbvn8l7AGz5kqX0c8lm//2ViQf1Wy9PPJwf/FxPiRwepesdgvv155o1n7ef5pLJ3/ttYTbSLb/tsb7f8v1PLvS+qf104t+oru5dq48senTa9pbnf/707emtf4hyPT0+eHIrqT1xb/vu4Gd7VcrZ/lf/hQ4/6/p1gmy//+iMh24gci4sGIOFjE/lBEPBwRh5bI/6eXH3mvaf4HW9j/10CW/1jD41+z7b/6mdKZH79v1v7Ktv+xamEuqJUc/1YaYCvrDgAAAO4UaUTsjCQdqM2n6cBA/vfye2N7OjE5Nf3EyckPzo3l7wj0RVdavdPVW3c/dKi4N1wtDxflS0X5aHHf+MvStrnywOjkxFi7k4cOt6NJ/8/8WWp3dMC6874WdC79HzrX7fd/Rw640y3Ti9ONigPYeM7i0Lka9f9L9YUk8r+SB7Yc53/oXLX+/8UKKte97rXw5U3gzrPU+b/Su4GBABvO+B86Uivv9W+KmfgmYuk6yWYJdVUzn7WyeHkDIoy0jeunuy0bZbgU0cZdorzS/9UiLlQutdxou49MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa+PfAAAA///67uRi") mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) 5.436356618s ago: executing program 1 (id=1229): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 5.135667847s ago: executing program 1 (id=1242): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 5.111188977s ago: executing program 33 (id=1242): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 3.248897521s ago: executing program 4 (id=1328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x2a0, 0x268, 0x300, 0x0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108, 0x0, {0x9401}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0xd9, 0x1, 0x5, 0x5b, 0x6}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 3.189221861s ago: executing program 4 (id=1330): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 3.11729998s ago: executing program 4 (id=1331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.809183439s ago: executing program 4 (id=1347): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40004, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 1.490679535s ago: executing program 2 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1.316480654s ago: executing program 2 (id=1395): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/108, 0x6c}, 0x8}], 0x1, 0x2, 0x0) 1.299893424s ago: executing program 2 (id=1396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.218940234s ago: executing program 2 (id=1399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000100), &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x457a4f59ceee3eb8}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x106, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 893.055333ms ago: executing program 5 (id=1415): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000880) 770.524973ms ago: executing program 5 (id=1421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000208500000072000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 732.191973ms ago: executing program 5 (id=1422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 664.433492ms ago: executing program 5 (id=1424): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfffffffffffffef8, 0x0, 0x0) 658.098232ms ago: executing program 5 (id=1434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 532.974121ms ago: executing program 6 (id=1429): r0 = epoll_create1(0x0) r1 = socket(0x23, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x8000000}) 437.667191ms ago: executing program 6 (id=1432): unshare(0x22000400) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x5, [{}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 437.233201ms ago: executing program 5 (id=1433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 369.202011ms ago: executing program 3 (id=1436): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}, 0x2142) 368.919841ms ago: executing program 3 (id=1437): sendmmsg(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="eadb7474ae83e3172a0da0e2d1ddceeda9418a489556580ee248061b0ddd9c3850f3aa3643088c99a54cd957278d561b2c7e7ab9ac82141964d3d9b6321a", 0x3e}], 0x1}}], 0x1, 0x880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c0009800800010038a80000c80001800e00010000003a767863616e3100000044000400200001000a004e2100000009ff02000000006f07000000000000000101f8ffff200002000a004e2100000100fe8000000000000000000000000000bb080000000d0001007564703a73797a31000000002c0004001400010002004e20ac1414bb00000000000000001400020002004e23ac1414aa00000000000000003400028008000100"], 0xf4}}, 0x0) 368.716531ms ago: executing program 6 (id=1438): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f00000003c0)=0x8) 324.797571ms ago: executing program 6 (id=1439): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x900}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) 313.592511ms ago: executing program 3 (id=1440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000700000000000009209500000000000000f7315374ce569ec55869bfbcfa7c4e8f52e6288f2fbc43a3af3c6b881320c24423492f2fc14c9de730f42434dfa11c77edc1f06776d8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1}, 0x18) 245.017621ms ago: executing program 3 (id=1441): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x1, 0x6}, &(0x7f0000000180)=0xc) 181.060751ms ago: executing program 2 (id=1442): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}) setxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r0, 0x0) 180.71791ms ago: executing program 6 (id=1443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) ioperm(0x0, 0xc, 0x100000000024101) 112.63718ms ago: executing program 3 (id=1444): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="5800000014", 0x5}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 72.82672ms ago: executing program 6 (id=1445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.33367ms ago: executing program 3 (id=1446): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, &(0x7f0000000600)) 1.16382ms ago: executing program 4 (id=1347): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40004, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 985.71µs ago: executing program 4 (id=1447): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x3067040, &(0x7f0000000c00)={[{@sb={'sb', 0x3d, 0x80000000}}, {@journal_checksum}, {@bsdgroups}, {@delalloc}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@grpjquota, 0x2e}, {@nogrpid}, {@nombcache}], [{@subj_type={'subj_type', 0x3d, '\x00\xf9\xff\xff\xff\x00<\xd5\xa5Yy\b\x96\xf3wg\x94\xe3\xe8\xc3Gs2qWQ\xa4\xdc\x97\xeeK\xcc-\n\xa3\xea\xc9`\xcb\x03\x00\x00\x00\xa4\\\xec\xbd\x10\xc1\xcf\x18\xa8H\x1b;\xe3k\xe8\xc4\x83\xf1\xb3\x94ob(\xe5q\xd0mQ\x88\xd5u\x93\xdc\xf08\f\x8c\x04\x02\x18D\xbf&,N\"\x98\x97\x97Qq_5\xef\xd9\xa4f\xe6zA\x1c\xb3\xe0\xa5\x1e\n/r\x81\x804D\xc5\x9c\x9e\\ktz\x90\xdb<\x12\x85[LAyJl\x02\xf8\xaf\xa4\xb0Mq&pZ:\x00EQo\xde*\xe7\xf6\xbd\xc7\xad9GR\xe1|\xb0c\xe5Y\xc0e\x17\x86\x91\xf6vK\x80\x8e-x{\xf0\xffMN<\xe3y\x02S\xc9=\xa5/8x\x9c\x81\x04\x1f@\x8d\xa7s=\xdb\xdfU\xe6\xaa\xdf\x032\xd2\xb2\xcd\xd0\x91\xdf\xbe`A\x1c\x18]\x1e\x9d\x17\xbcX\xf4\x82\xa6\xdd\xdf%\xb4\x90\x96\xbd\xa8\\\xb4\x1b\xa2\x0fH\xfa\x7f\x9c\xbc\xb6\xb8\x1c\xc8\xf7\xe39\x01-x\x99O\x94H\x85x\xcb\xff\xb9\xd2\x90\n\x13\xb6\xdaSy|[\xbb3\x83=\x91\x05\xc7\x7f\xc7.z\x97\x19`\x00%\x8aO\x05lc\xc3f\xbd\x86\xc3y\x1cp\x94\x16\xbcAAl\xb2\xfa\'\xa4\xc11\x96 9\x91'}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x4000000e) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') 0s ago: executing program 2 (id=1448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='mm_page_free\x00', r0}, 0x54) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca010000871611faba526a3501f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d8201e8c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac454e1127e9c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 26.029499][ T29] audit: type=1400 audit(1734734761.650:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.030536][ T3288] cgroup: Unknown subsys name 'net' [ 26.052206][ T29] audit: type=1400 audit(1734734761.650:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.079744][ T29] audit: type=1400 audit(1734734761.680:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.234953][ T3288] cgroup: Unknown subsys name 'cpuset' [ 26.240983][ T3288] cgroup: Unknown subsys name 'rlimit' [ 26.390310][ T29] audit: type=1400 audit(1734734762.010:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.413666][ T29] audit: type=1400 audit(1734734762.010:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.434374][ T29] audit: type=1400 audit(1734734762.010:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.454713][ T29] audit: type=1400 audit(1734734762.010:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.475002][ T29] audit: type=1400 audit(1734734762.020:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.482615][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.499757][ T29] audit: type=1400 audit(1734734762.020:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.531575][ T29] audit: type=1400 audit(1734734762.130:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.561033][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.560127][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 27.584976][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 27.699781][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.706882][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.714104][ T3297] bridge_slave_0: entered allmulticast mode [ 27.720700][ T3297] bridge_slave_0: entered promiscuous mode [ 27.728931][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.736094][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.743638][ T3297] bridge_slave_1: entered allmulticast mode [ 27.749945][ T3297] bridge_slave_1: entered promiscuous mode [ 27.767321][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.774414][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.781504][ T3299] bridge_slave_0: entered allmulticast mode [ 27.787885][ T3299] bridge_slave_0: entered promiscuous mode [ 27.795872][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.802916][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.810163][ T3299] bridge_slave_1: entered allmulticast mode [ 27.816570][ T3299] bridge_slave_1: entered promiscuous mode [ 27.832791][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.849931][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.881295][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.891307][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.924436][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.937674][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.948015][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.966239][ T3297] team0: Port device team_slave_0 added [ 27.985859][ T3299] team0: Port device team_slave_0 added [ 27.996405][ T3297] team0: Port device team_slave_1 added [ 28.011200][ T3299] team0: Port device team_slave_1 added [ 28.036893][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.043949][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.051303][ T3311] bridge_slave_0: entered allmulticast mode [ 28.057690][ T3311] bridge_slave_0: entered promiscuous mode [ 28.072500][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.079531][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.105471][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.116260][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.123307][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.130504][ T3311] bridge_slave_1: entered allmulticast mode [ 28.137001][ T3311] bridge_slave_1: entered promiscuous mode [ 28.143286][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.150252][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.176251][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.187526][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.194491][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.220383][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.236972][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.243978][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.269957][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.291824][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.311485][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.318588][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.325833][ T3302] bridge_slave_0: entered allmulticast mode [ 28.332315][ T3302] bridge_slave_0: entered promiscuous mode [ 28.338869][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.345933][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.353106][ T3302] bridge_slave_1: entered allmulticast mode [ 28.359586][ T3302] bridge_slave_1: entered promiscuous mode [ 28.371405][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.389189][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.396314][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.403486][ T3301] bridge_slave_0: entered allmulticast mode [ 28.409820][ T3301] bridge_slave_0: entered promiscuous mode [ 28.426697][ T3311] team0: Port device team_slave_0 added [ 28.436691][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.443821][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.450992][ T3301] bridge_slave_1: entered allmulticast mode [ 28.457480][ T3301] bridge_slave_1: entered promiscuous mode [ 28.468991][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.482616][ T3311] team0: Port device team_slave_1 added [ 28.505331][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.520572][ T3297] hsr_slave_0: entered promiscuous mode [ 28.526615][ T3297] hsr_slave_1: entered promiscuous mode [ 28.538774][ T3299] hsr_slave_0: entered promiscuous mode [ 28.544967][ T3299] hsr_slave_1: entered promiscuous mode [ 28.550917][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.558564][ T3299] Cannot create hsr debugfs directory [ 28.564931][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.579114][ T3302] team0: Port device team_slave_0 added [ 28.585050][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.591978][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.617991][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.635714][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.649849][ T3302] team0: Port device team_slave_1 added [ 28.655885][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.662805][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.688694][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.729662][ T3301] team0: Port device team_slave_0 added [ 28.736106][ T3301] team0: Port device team_slave_1 added [ 28.746448][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.753381][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.779353][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.805879][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.812831][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.838831][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.862542][ T3311] hsr_slave_0: entered promiscuous mode [ 28.868441][ T3311] hsr_slave_1: entered promiscuous mode [ 28.874542][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.882233][ T3311] Cannot create hsr debugfs directory [ 28.911018][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.918091][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.944141][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.970395][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.977403][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.003406][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.024386][ T3302] hsr_slave_0: entered promiscuous mode [ 29.030358][ T3302] hsr_slave_1: entered promiscuous mode [ 29.037101][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.044658][ T3302] Cannot create hsr debugfs directory [ 29.095518][ T3301] hsr_slave_0: entered promiscuous mode [ 29.101682][ T3301] hsr_slave_1: entered promiscuous mode [ 29.107598][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.115180][ T3301] Cannot create hsr debugfs directory [ 29.165225][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.173460][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.192019][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.202177][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.248405][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.258654][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.271349][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.279684][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.302098][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.310858][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.329422][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.339633][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.358720][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.372670][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.395291][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.403677][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.426895][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.435416][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.450729][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.459467][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.471348][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.500809][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.511736][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.529028][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.537234][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.544825][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.555770][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.562893][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.583151][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.590223][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.599019][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.606095][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.638624][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.662062][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.676978][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.689071][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.701595][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.718288][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.725389][ T2531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.734359][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.741404][ T2531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.756642][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.775799][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782879][ T2531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.791415][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.798490][ T2531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.818362][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.825450][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.845536][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.852573][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.870025][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.883161][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.970207][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.988574][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.022339][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.062304][ T3299] veth0_vlan: entered promiscuous mode [ 30.077742][ T3299] veth1_vlan: entered promiscuous mode [ 30.118981][ T3299] veth0_macvtap: entered promiscuous mode [ 30.136278][ T3299] veth1_macvtap: entered promiscuous mode [ 30.164993][ T3297] veth0_vlan: entered promiscuous mode [ 30.176779][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.190001][ T3297] veth1_vlan: entered promiscuous mode [ 30.200182][ T3302] veth0_vlan: entered promiscuous mode [ 30.210507][ T3302] veth1_vlan: entered promiscuous mode [ 30.217654][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.226003][ T3301] veth0_vlan: entered promiscuous mode [ 30.239516][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.248296][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.257043][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.265826][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.277668][ T3301] veth1_vlan: entered promiscuous mode [ 30.284667][ T3311] veth0_vlan: entered promiscuous mode [ 30.292671][ T3311] veth1_vlan: entered promiscuous mode [ 30.307570][ T3302] veth0_macvtap: entered promiscuous mode [ 30.318785][ T3297] veth0_macvtap: entered promiscuous mode [ 30.331644][ T3302] veth1_macvtap: entered promiscuous mode [ 30.341656][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.352198][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.362651][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.371512][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.382025][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.393549][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.401530][ T3297] veth1_macvtap: entered promiscuous mode [ 30.413422][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.422242][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.430962][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.439817][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.451160][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.455045][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.476273][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.486109][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.496625][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.507067][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.516815][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.527325][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.537205][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.547736][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.558138][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.570217][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.579149][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.587931][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.596684][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.617377][ T3311] veth0_macvtap: entered promiscuous mode [ 30.630633][ T3301] veth0_macvtap: entered promiscuous mode [ 30.646010][ T3311] veth1_macvtap: entered promiscuous mode [ 30.670314][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.680860][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.690751][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.701271][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.711169][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.721714][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.743675][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.759225][ T3301] veth1_macvtap: entered promiscuous mode [ 30.774167][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.784921][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.794735][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.805160][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.815010][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.825457][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.852233][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.861318][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.870083][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.878815][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.887527][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.918723][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.929259][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.939125][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.949659][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.959676][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.970179][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.980041][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.981562][ T3449] loop0: detected capacity change from 0 to 512 [ 30.990579][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.011153][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.043078][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 31.043091][ T29] audit: type=1400 audit(1734734766.660:138): avc: denied { create } for pid=3454 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.048763][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.058985][ T3452] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 31.068518][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.098254][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.108765][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.108765][ T29] audit: type=1400 audit(1734734766.680:139): avc: denied { relabelfrom } for pid=3451 comm="syz.4.5" name="DCCPv6" dev="sockfs" ino=4544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 31.118596][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.141251][ T29] audit: type=1400 audit(1734734766.700:140): avc: denied { relabelto } for pid=3451 comm="syz.4.5" name="DCCPv6" dev="sockfs" ino=4544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dccp_socket permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 31.151846][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.180394][ T29] audit: type=1400 audit(1734734766.800:141): avc: denied { setopt } for pid=3454 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.188592][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.188613][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.229858][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.239721][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.248531][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257342][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266097][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.275102][ T29] audit: type=1400 audit(1734734766.850:142): avc: denied { write } for pid=3454 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.277311][ T3449] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8: bg 0: block 248: padding at end of block bitmap is not set [ 31.347926][ T3449] Quota error (device loop0): write_blk: dquota write failed [ 31.355396][ T3449] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 31.365604][ T3449] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.8: Failed to acquire dquot type 1 [ 31.375263][ T29] audit: type=1400 audit(1734734766.990:143): avc: denied { create } for pid=3466 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.401376][ T3449] EXT4-fs (loop0): 1 truncate cleaned up [ 31.417755][ T29] audit: type=1400 audit(1734734767.020:144): avc: denied { write } for pid=3466 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.437424][ T3449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.463341][ T3449] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.501373][ T3477] 9pnet: Could not find request transport: f [ 31.503613][ T29] audit: type=1400 audit(1734734767.080:145): avc: denied { create } for pid=3473 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.601991][ T3449] syz.0.8 (3449) used greatest stack depth: 9288 bytes left [ 31.631429][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.735594][ T3497] loop0: detected capacity change from 0 to 1024 [ 31.805002][ T3497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.876433][ T3497] EXT4-fs error (device loop0): ext4_xattr_ibody_get:653: inode #2: comm syz.0.21: corrupted in-inode xattr: bad e_name length [ 31.893606][ T3497] EXT4-fs (loop0): Remounting filesystem read-only [ 31.920645][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.928125][ T3519] delete_channel: no stack [ 31.929493][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.936404][ T3518] delete_channel: no stack [ 31.942796][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.955969][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.964882][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.974263][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.985498][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 31.996512][ T3299] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 32.071980][ T3532] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 32.130359][ T3535] loop2: detected capacity change from 0 to 128 [ 32.156742][ T3539] bpf: Bad value for 'gid' [ 32.562118][ T3597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 32.716246][ T3603] loop3: detected capacity change from 0 to 1764 [ 32.730507][ T3603] ======================================================= [ 32.730507][ T3603] WARNING: The mand mount option has been deprecated and [ 32.730507][ T3603] and is ignored by this kernel. Remove the mand [ 32.730507][ T3603] option from the mount to silence this warning. [ 32.730507][ T3603] ======================================================= [ 32.790960][ T3607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3607 comm=syz.4.73 [ 32.803305][ T3607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3607 comm=syz.4.73 [ 32.820871][ T3611] process 'syz.3.75' launched './file1' with NULL argv: empty string added [ 32.889124][ T3621] netlink: 'syz.4.80': attribute type 8 has an invalid length. [ 32.957718][ T3633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.83'. [ 32.984143][ T3636] loop4: detected capacity change from 0 to 256 [ 33.028610][ T3640] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 33.030168][ T3642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3642 comm=syz.3.88 [ 33.083079][ T3647] Zero length message leads to an empty skb [ 33.130859][ T3654] loop4: detected capacity change from 0 to 256 [ 33.137551][ T3654] vfat: Unknown parameter '���������������' [ 33.212832][ T3664] loop4: detected capacity change from 0 to 512 [ 33.213552][ T3666] syz.3.100[3666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.219650][ T3664] EXT4-fs: Ignoring removed oldalloc option [ 33.228826][ T3666] syz.3.100[3666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.244165][ T3666] syz.3.100[3666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.278440][ T3664] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.99: Parent and EA inode have the same ino 15 [ 33.313407][ T3664] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.326744][ T3664] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.99: Parent and EA inode have the same ino 15 [ 33.338753][ T3666] loop3: detected capacity change from 0 to 512 [ 33.347809][ T3664] EXT4-fs (loop4): 1 orphan inode deleted [ 33.355192][ T3664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.380460][ T3666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.380931][ T3673] 9p: Unknown Cache mode or invalid value f [ 33.399056][ T3666] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.410031][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.428360][ T3677] netlink: 'syz.4.104': attribute type 10 has an invalid length. [ 33.437686][ T3677] veth0_macvtap: left promiscuous mode [ 33.446097][ T3677] veth0_macvtap: entered promiscuous mode [ 33.452610][ T3677] team0: Device macvtap0 failed to register rx_handler [ 33.462457][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.471746][ T3677] veth0_macvtap: left promiscuous mode [ 33.702384][ T3705] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 33.740920][ T3712] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 33.742503][ T3711] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.789485][ T3718] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3718 comm=syz.3.122 [ 33.826532][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.846025][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.961377][ T3745] loop3: detected capacity change from 0 to 512 [ 33.973784][ T3745] EXT4-fs: Ignoring removed i_version option [ 33.979943][ T3745] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.995220][ T3711] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.995428][ T3745] EXT4-fs: quotafile must be on filesystem root [ 34.066481][ T3711] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.090835][ T3759] netlink: 3 bytes leftover after parsing attributes in process `syz.3.141'. [ 34.106337][ T3759] 0�X���: renamed from caif0 [ 34.112648][ T3759] 0�X���: entered allmulticast mode [ 34.117913][ T3759] A link change request failed with some changes committed already. Interface 60�X��� may have been left with an inconsistent configuration, please check. [ 34.169115][ T3711] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.236884][ T3711] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.255086][ T3711] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.294110][ T3789] syz.3.153: attempt to access beyond end of device [ 34.294110][ T3789] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 34.295083][ T3788] loop2: detected capacity change from 0 to 164 [ 34.307148][ T3789] FAT-fs (loop7): unable to read boot sector [ 34.329091][ T3791] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.343444][ T3711] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.354972][ T3711] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.366877][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.371622][ T3788] syz.2.152: attempt to access beyond end of device [ 34.371622][ T3788] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.418692][ T3741] chnl_net:caif_netlink_parms(): no params data found [ 34.426828][ T3788] syz.2.152: attempt to access beyond end of device [ 34.426828][ T3788] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.453227][ T3798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 34.463356][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.533883][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.645326][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.652409][ T3741] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.660079][ T3741] bridge_slave_0: entered allmulticast mode [ 34.666706][ T3741] bridge_slave_0: entered promiscuous mode [ 34.674981][ T11] bridge_slave_1: left allmulticast mode [ 34.680675][ T11] bridge_slave_1: left promiscuous mode [ 34.686415][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.704538][ T11] bridge_slave_0: left allmulticast mode [ 34.710270][ T11] bridge_slave_0: left promiscuous mode [ 34.715928][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.781005][ T3840] program syz.2.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.816365][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.826757][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.836705][ T11] bond0 (unregistering): Released all slaves [ 34.845668][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.852805][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.861340][ T3741] bridge_slave_1: entered allmulticast mode [ 34.869915][ T3741] bridge_slave_1: entered promiscuous mode [ 34.891684][ T3741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.901985][ T3741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.914972][ T11] hsr_slave_0: left promiscuous mode [ 34.921010][ T11] hsr_slave_1: left promiscuous mode [ 34.928255][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.935783][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.943884][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.951469][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.960798][ T11] veth1_macvtap: left promiscuous mode [ 34.966367][ T11] veth0_macvtap: left promiscuous mode [ 34.971944][ T11] veth1_vlan: left promiscuous mode [ 34.977257][ T11] veth0_vlan: left promiscuous mode [ 35.047949][ T11] team0 (unregistering): Port device team_slave_1 removed [ 35.057096][ T11] team0 (unregistering): Port device team_slave_0 removed [ 35.088544][ T3854] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 35.100937][ T3854] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 35.111458][ T3854] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 35.137922][ T3741] team0: Port device team_slave_0 added [ 35.147622][ T3741] team0: Port device team_slave_1 added [ 35.151015][ T3864] capability: warning: `syz.2.186' uses deprecated v2 capabilities in a way that may be insecure [ 35.165197][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 35.193256][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.200306][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.226302][ T3741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.240368][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.247465][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.264472][ T3870] loop1: detected capacity change from 0 to 764 [ 35.274260][ T3741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.291170][ T3870] rock: directory entry would overflow storage [ 35.297462][ T3870] rock: sig=0x4654, size=5, remaining=4 [ 35.343863][ T3741] hsr_slave_0: entered promiscuous mode [ 35.359948][ T3741] hsr_slave_1: entered promiscuous mode [ 35.368551][ T3741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.376412][ T3741] Cannot create hsr debugfs directory [ 35.412953][ T3880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 35.539265][ T3741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.556215][ T3741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.575066][ T3741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.589335][ T3741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.625488][ T3741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.640774][ T3741] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.657492][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.664697][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.665232][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 35.675457][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.680929][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 35.687712][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.695851][ T3741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.714341][ T3741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.768287][ T3741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.924849][ T3741] veth0_vlan: entered promiscuous mode [ 35.932512][ T3741] veth1_vlan: entered promiscuous mode [ 35.958245][ T3741] veth0_macvtap: entered promiscuous mode [ 35.965512][ T3741] veth1_macvtap: entered promiscuous mode [ 35.975283][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.985827][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.995917][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.006445][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.016367][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.026871][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.036854][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.047388][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.058330][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.069059][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.079664][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.089554][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.100011][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.109880][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.120428][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.130290][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.140771][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.151550][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.162229][ T3741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.171040][ T3741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.179830][ T3741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.188706][ T3741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.210034][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 36.210047][ T29] audit: type=1400 audit(1734734771.830:396): avc: denied { mounton } for pid=3741 comm="syz-executor" path="/root/syzkaller.yrcsYi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.314147][ T29] audit: type=1400 audit(1734734771.930:397): avc: denied { accept } for pid=3965 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.404078][ T3974] netlink: 132 bytes leftover after parsing attributes in process `syz.5.229'. [ 36.455400][ T3986] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.230'. [ 36.489626][ T3988] loop4: detected capacity change from 0 to 512 [ 36.536203][ T3988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.554624][ T3988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.565415][ T3988] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.235: invalid block [ 36.565889][ T29] audit: type=1400 audit(1734734772.190:398): avc: denied { setopt } for pid=3996 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.586349][ T3988] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.235: invalid indirect mapped block 4294967295 (level 1) [ 36.622197][ T29] audit: type=1400 audit(1734734772.230:399): avc: denied { setopt } for pid=4000 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.629976][ T3988] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.235: invalid indirect mapped block 4294967295 (level 1) [ 36.656131][ T4005] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.656258][ T3988] EXT4-fs (loop4): 2 truncates cleaned up [ 36.674923][ T3988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.731162][ T4017] syz.3.249 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.758400][ T29] audit: type=1400 audit(1734734772.345:400): avc: denied { create } for pid=4016 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.778476][ T29] audit: type=1400 audit(1734734772.345:401): avc: denied { write } for pid=4016 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.799966][ T29] audit: type=1326 audit(1734734772.415:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4755d29 code=0x7ffc0000 [ 36.823237][ T29] audit: type=1326 audit(1734734772.415:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4755d29 code=0x7ffc0000 [ 36.885843][ T29] audit: type=1326 audit(1734734772.465:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f02f4755d29 code=0x7ffc0000 [ 36.905367][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.908984][ T29] audit: type=1326 audit(1734734772.465:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4755d29 code=0x7ffc0000 [ 36.974436][ T4038] netlink: 'syz.2.259': attribute type 21 has an invalid length. [ 36.982368][ T4038] netlink: 'syz.2.259': attribute type 20 has an invalid length. [ 36.990151][ T4038] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.041159][ T4046] loop2: detected capacity change from 0 to 2048 [ 37.083120][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.132999][ T4046] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.150751][ T4046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.163043][ T4046] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.163043][ T4046] [ 37.172719][ T4046] EXT4-fs (loop2): Total free blocks count 0 [ 37.178778][ T4046] EXT4-fs (loop2): Free/Dirty block details [ 37.184846][ T4046] EXT4-fs (loop2): free_blocks=2415919104 [ 37.190738][ T4046] EXT4-fs (loop2): dirty_blocks=32 [ 37.196020][ T4046] EXT4-fs (loop2): Block reservation details [ 37.202076][ T4046] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 37.203512][ T4065] 9pnet_fd: Insufficient options for proto=fd [ 37.222020][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 37.296124][ T4085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.364624][ T4095] syz.5.282[4095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.364713][ T4095] syz.5.282[4095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.377528][ T4093] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.378245][ T4095] syz.5.282[4095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.467058][ T4087] infiniband syz!: set active [ 37.483018][ T4087] infiniband syz!: added team_slave_0 [ 37.503304][ T4087] RDS/IB: syz!: added [ 37.507565][ T4087] smc: adding ib device syz! with port count 1 [ 37.513755][ T4087] smc: ib device syz! port 1 has pnetid [ 37.789867][ T4141] __nla_validate_parse: 4 callbacks suppressed [ 37.789882][ T4141] netlink: 240 bytes leftover after parsing attributes in process `syz.4.302'. [ 37.839582][ T4146] loop3: detected capacity change from 0 to 512 [ 37.886772][ T4146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.915647][ T4146] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.946363][ T4156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'. [ 37.961455][ T4146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 37.970494][ T4146] netlink: 108 bytes leftover after parsing attributes in process `syz.3.304'. [ 38.048104][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.139520][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 38.209695][ T4186] SELinux: policydb version 0 does not match my version range 15-33 [ 38.215127][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 38.220122][ T4186] SELinux: failed to load policy [ 38.311736][ T4208] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 38.371261][ T4210] loop5: detected capacity change from 0 to 512 [ 38.389644][ T4222] loop1: detected capacity change from 0 to 512 [ 38.393712][ T4218] 9pnet: Could not find request transport: 0xffffffffffffffff [ 38.416027][ T4210] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.334: corrupted in-inode xattr: invalid ea_ino [ 38.450386][ T4210] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.334: couldn't read orphan inode 15 (err -117) [ 38.481337][ T4210] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.500697][ T4210] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.509490][ T4210] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.518418][ T4210] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.527236][ T4210] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.547388][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.559938][ T4222] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.584006][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.588287][ T4245] syz.3.350[4245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.593805][ T4245] syz.3.350[4245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.605949][ T4245] syz.3.350[4245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.653442][ T4245] xt_hashlimit: max too large, truncated to 1048576 [ 38.662283][ T3741] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 38.696571][ T4258] loop3: detected capacity change from 0 to 512 [ 38.706116][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.718928][ T4258] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.794510][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.917033][ T4286] loop4: detected capacity change from 0 to 1024 [ 38.970456][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.367'. [ 38.979416][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.367'. [ 38.991260][ T4286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.053790][ T4286] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.363: missing EA_INODE flag [ 39.066906][ T4286] EXT4-fs (loop4): Remounting filesystem read-only [ 39.068761][ T4309] sg_write: process 175 (syz.2.373) changed security contexts after opening file descriptor, this is not allowed. [ 39.092186][ T4312] syz.3.375[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.092257][ T4312] syz.3.375[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.097005][ T4309] program syz.2.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.104033][ T4312] syz.3.375[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.142715][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.171315][ T4315] netlink: 48 bytes leftover after parsing attributes in process `syz.5.377'. [ 39.180288][ T4315] netlink: 48 bytes leftover after parsing attributes in process `syz.5.377'. [ 39.212929][ T4322] loop1: detected capacity change from 0 to 256 [ 39.316269][ T4344] 9pnet_fd: Insufficient options for proto=fd [ 39.336221][ T4342] loop3: detected capacity change from 0 to 512 [ 39.354625][ T4342] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.390: corrupted in-inode xattr: invalid ea_ino [ 39.375128][ T4342] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.390: couldn't read orphan inode 15 (err -117) [ 39.404885][ T4342] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.431898][ T4342] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.440689][ T4342] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.449465][ T4342] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.458264][ T4342] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.530945][ T4367] Invalid ELF header magic: != ELF [ 39.585146][ T3311] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 39.636631][ T4388] loop2: detected capacity change from 0 to 764 [ 39.652496][ T4388] rock: directory entry would overflow storage [ 39.658738][ T4388] rock: sig=0x4654, size=5, remaining=4 [ 39.794508][ T4411] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 39.805484][ T4413] loop4: detected capacity change from 0 to 1024 [ 39.812292][ T4413] EXT4-fs: Ignoring removed orlov option [ 39.818032][ T4413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.846995][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.034292][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.267563][ T4466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.300362][ T4466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.367624][ T4466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.417006][ T4466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.481512][ T4466] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497267][ T4466] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.528106][ T4466] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.539285][ T4466] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.592774][ T4492] loop2: detected capacity change from 0 to 1024 [ 40.599516][ T4492] EXT4-fs: Ignoring removed orlov option [ 40.605308][ T4492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.628366][ T4492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.705631][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.749406][ T4510] 9pnet_fd: Insufficient options for proto=fd [ 40.867402][ T4538] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 40.873455][ T4538] syzkaller0: linktype set to 776 [ 41.055569][ T4573] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 41.061553][ T4573] syzkaller0: linktype set to 776 [ 41.220513][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 41.220528][ T29] audit: type=1400 audit(1734734776.835:501): avc: denied { create } for pid=4585 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 41.272295][ T29] audit: type=1400 audit(1734734776.865:502): avc: denied { bind } for pid=4585 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 41.292710][ T29] audit: type=1400 audit(1734734776.865:503): avc: denied { setopt } for pid=4585 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 41.319403][ T4598] loop4: detected capacity change from 0 to 512 [ 41.327518][ T4598] EXT4-fs: Ignoring removed nobh option [ 41.336103][ T29] audit: type=1400 audit(1734734776.955:504): avc: denied { create } for pid=4599 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 41.362504][ T29] audit: type=1400 audit(1734734776.955:505): avc: denied { write } for pid=4599 comm="syz.1.508" path="socket:[7876]" dev="sockfs" ino=7876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 41.386752][ T29] audit: type=1400 audit(1734734776.955:506): avc: denied { nlmsg_read } for pid=4599 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 41.407382][ T29] audit: type=1400 audit(1734734776.975:507): avc: denied { write } for pid=4601 comm="syz.5.509" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.463862][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.476478][ T4598] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.505392][ T4615] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 41.505775][ T4613] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 41.515536][ T29] audit: type=1400 audit(1734734777.125:508): avc: denied { mount } for pid=4609 comm="syz.3.513" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 41.523801][ T4613] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 41.574395][ T4598] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.507: bg 0: block 224: padding at end of block bitmap is not set [ 41.594535][ T29] audit: type=1400 audit(1734734777.185:509): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 41.622964][ T4598] EXT4-fs (loop4): Remounting filesystem read-only [ 41.646880][ T165] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 41.663647][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.740365][ T4642] loop3: detected capacity change from 0 to 1024 [ 41.749069][ T4642] EXT4-fs: Ignoring removed orlov option [ 41.754816][ T4642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.795989][ T4653] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 41.807312][ T4650] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 41.815527][ T4650] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 41.828394][ T4642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.937276][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.995382][ T4681] syz.5.545[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.995489][ T4681] syz.5.545[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.006843][ T4681] syz.5.545[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.124996][ T4703] loop2: detected capacity change from 0 to 256 [ 42.146483][ T4705] program syz.3.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.173595][ T4707] delete_channel: no stack [ 42.181236][ T4706] delete_channel: no stack [ 42.230585][ T4716] bpf: Bad value for 'gid' [ 42.280963][ T4732] program syz.1.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.507857][ T4775] binfmt_misc: register: failed to install interpreter file ./file0 [ 42.591371][ T4791] loop2: detected capacity change from 0 to 512 [ 42.603933][ T4791] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.599: invalid indirect mapped block 256 (level 2) [ 42.619630][ T4791] EXT4-fs (loop2): 2 truncates cleaned up [ 42.625988][ T4791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.649228][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.702212][ T4806] Invalid ELF header magic: != ELF [ 42.734908][ T4809] SELinux: security policydb version 18 (MLS) not backwards compatible [ 42.743271][ T4809] SELinux: failed to load policy [ 42.779800][ T4813] netlink: 'syz.1.607': attribute type 8 has an invalid length. [ 42.798303][ T4815] __nla_validate_parse: 12 callbacks suppressed [ 42.798318][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 42.835753][ T4815] bond1: entered promiscuous mode [ 42.840820][ T4815] bond1: entered allmulticast mode [ 42.847340][ T4815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.910632][ T4834] loop3: detected capacity change from 0 to 512 [ 42.954170][ T4834] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.619: Failed to acquire dquot type 1 [ 42.962279][ T4850] loop1: detected capacity change from 0 to 512 [ 42.966408][ T4834] EXT4-fs (loop3): 1 truncate cleaned up [ 42.972316][ T4850] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.990548][ T4850] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.001349][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.014669][ T4834] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.025137][ T4850] EXT4-fs (loop1): 1 truncate cleaned up [ 43.031348][ T4850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.046492][ T4855] loop2: detected capacity change from 0 to 512 [ 43.057862][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.067191][ T4855] EXT4-fs: Ignoring removed bh option [ 43.075342][ T4855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.089375][ T4850] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.626: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 43.111526][ T4855] EXT4-fs (loop2): 1 truncate cleaned up [ 43.118623][ T4855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.146918][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.182910][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.222748][ T4880] netlink: 'syz.2.639': attribute type 25 has an invalid length. [ 43.230560][ T4880] netlink: 'syz.2.639': attribute type 7 has an invalid length. [ 43.466808][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 43.512945][ T4925] SELinux: security policydb version 18 (MLS) not backwards compatible [ 43.521456][ T4925] SELinux: failed to load policy [ 43.650767][ T4954] loop3: detected capacity change from 0 to 128 [ 43.667710][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 43.678670][ T4954] FAT-fs (loop3): bogus number of reserved sectors [ 43.685249][ T4954] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 43.694581][ T4954] FAT-fs (loop3): Can't find a valid FAT filesystem [ 43.733127][ T4966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 43.752415][ T4974] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.774290][ T4974] vhci_hcd: invalid port number 23 [ 43.804025][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'. [ 43.834764][ T4980] bond1: entered promiscuous mode [ 43.839846][ T4980] bond1: entered allmulticast mode [ 43.845336][ T4980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.926698][ T4992] loop1: detected capacity change from 0 to 512 [ 44.033070][ T5012] loop5: detected capacity change from 0 to 512 [ 44.046603][ T4992] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.692: Failed to acquire dquot type 1 [ 44.066902][ T5012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.079878][ T4992] EXT4-fs (loop1): 1 truncate cleaned up [ 44.083781][ T5012] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.700: invalid indirect mapped block 1280 (level 0) [ 44.086286][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.113351][ T4992] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.124983][ T5025] loop3: detected capacity change from 0 to 512 [ 44.131576][ T5025] EXT4-fs: Ignoring removed bh option [ 44.138398][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.144406][ T5025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.175717][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.183994][ T5025] EXT4-fs (loop3): 1 truncate cleaned up [ 44.191361][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.253727][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.319458][ T5048] loop1: detected capacity change from 0 to 4096 [ 44.345733][ T5048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.371348][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 44.387930][ T5056] bond1: entered promiscuous mode [ 44.393057][ T5056] bond1: entered allmulticast mode [ 44.398767][ T5056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.430748][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.632978][ T5092] loop3: detected capacity change from 0 to 8192 [ 44.641464][ T5092] syz.3.738: attempt to access beyond end of device [ 44.641464][ T5092] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.657306][ T5092] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 44.666372][ T5092] FAT-fs (loop3): Filesystem has been set read-only [ 44.673963][ T5092] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 44.697814][ T5092] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 44.741828][ T5098] loop5: detected capacity change from 0 to 128 [ 44.759253][ T5098] FAT-fs (loop5): bogus number of reserved sectors [ 44.765855][ T5098] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 44.775217][ T5098] FAT-fs (loop5): Can't find a valid FAT filesystem [ 44.926691][ T5107] SELinux: Context system_u:object_r:devicekit_var_run_t:s0 is not valid (left unmapped). [ 44.939515][ T5108] loop4: detected capacity change from 0 to 512 [ 44.947631][ T5108] EXT4-fs: Ignoring removed bh option [ 44.953376][ T5108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.989699][ T5108] EXT4-fs (loop4): 1 truncate cleaned up [ 45.019749][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.082129][ T5119] program syz.2.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.127926][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.298478][ T5137] SELinux: syz.3.760 (5137) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.323904][ T5141] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.332855][ T5141] vhci_hcd: invalid port number 23 [ 45.360717][ T5144] loop5: detected capacity change from 0 to 128 [ 45.361361][ T5145] loop2: detected capacity change from 0 to 512 [ 45.379564][ T5145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.448594][ T5145] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.758: invalid indirect mapped block 1280 (level 0) [ 45.521046][ T165] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 45.529242][ T165] FAT-fs (loop5): Filesystem has been set read-only [ 45.536240][ T165] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 45.546229][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.589272][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 45.627035][ T5164] team0 (unregistering): Port device team_slave_0 removed [ 45.640620][ T5164] team0 (unregistering): Port device team_slave_1 removed [ 45.681575][ T5178] loop5: detected capacity change from 0 to 2048 [ 45.685735][ T5174] loop4: detected capacity change from 0 to 4096 [ 45.699330][ T5174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.736163][ T5178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.761617][ T5178] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.779302][ T5178] EXT4-fs (loop5): Remounting filesystem read-only [ 45.808457][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.808791][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.834273][ T5183] ebtables: ebtables: counters copy to user failed while replacing table [ 45.869557][ T5189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.775'. [ 45.924082][ T5199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.779'. [ 45.946235][ T5203] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 45.952869][ T5203] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.960395][ T5203] vhci_hcd vhci_hcd.0: Device attached [ 45.979919][ T5204] vhci_hcd: connection closed [ 45.980065][ T11] vhci_hcd: stop threads [ 45.989102][ T11] vhci_hcd: release socket [ 45.993519][ T11] vhci_hcd: disconnect device [ 46.127238][ T5227] ebtables: ebtables: counters copy to user failed while replacing table [ 46.146535][ T5233] loop5: detected capacity change from 0 to 512 [ 46.153233][ T5233] EXT4-fs: Ignoring removed bh option [ 46.168827][ T5233] EXT4-fs error (device loop5): __ext4_iget:4984: inode #15: block 1803188595: comm syz.5.792: invalid block [ 46.184302][ T5233] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.792: couldn't read orphan inode 15 (err -117) [ 46.198944][ T5233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.351820][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 46.351835][ T29] audit: type=1400 audit(1734734781.965:655): avc: denied { connect } for pid=5250 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.477866][ T29] audit: type=1326 audit(1734734782.095:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.501826][ T29] audit: type=1326 audit(1734734782.095:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.526635][ T29] audit: type=1326 audit(1734734782.095:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.549906][ T29] audit: type=1326 audit(1734734782.095:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.574435][ T29] audit: type=1326 audit(1734734782.095:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.726893][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 46.737644][ T5289] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 46.749000][ T5288] infiniband syz!: set down [ 46.757637][ T5288] team0 (unregistering): Port device team_slave_0 removed [ 46.773770][ T5288] team0 (unregistering): Port device team_slave_1 removed [ 46.833665][ T29] audit: type=1326 audit(1734734782.435:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.858136][ T29] audit: type=1326 audit(1734734782.435:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.881696][ T29] audit: type=1326 audit(1734734782.435:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.906062][ T29] audit: type=1326 audit(1734734782.435:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a4cd5d29 code=0x7ffc0000 [ 46.911557][ T5314] loop4: detected capacity change from 0 to 128 [ 46.955827][ T5314] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.958729][ T5303] 9pnet: Could not find request transport: f [ 46.975527][ T5314] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.014666][ T5314] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 47.051746][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.061804][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.206843][ T5355] loop4: detected capacity change from 0 to 512 [ 47.220942][ T5355] EXT4-fs: Ignoring removed bh option [ 47.230054][ T5355] EXT4-fs error (device loop4): __ext4_iget:4984: inode #15: block 1803188595: comm syz.4.848: invalid block [ 47.252079][ T5356] loop2: detected capacity change from 0 to 2048 [ 47.260074][ T5355] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.848: couldn't read orphan inode 15 (err -117) [ 47.275407][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.301668][ T5356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.320024][ T5356] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.336991][ T5356] EXT4-fs (loop2): Remounting filesystem read-only [ 47.373460][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.654893][ T5412] loop3: detected capacity change from 0 to 2048 [ 47.676319][ T5412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.690970][ T5412] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.707423][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 47.730906][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.868511][ T5439] __nla_validate_parse: 11 callbacks suppressed [ 47.868529][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 47.914127][ T5439] team0 (unregistering): Port device team_slave_0 removed [ 47.935323][ T5439] team0 (unregistering): Port device team_slave_1 removed [ 48.047672][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.071755][ T5455] SELinux: syz.4.895 (5455) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.085441][ T5458] 9pnet: p9_errstr2errno: server reported unknown error [ 48.148729][ T5474] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 48.402495][ T5516] loop4: detected capacity change from 0 to 512 [ 48.410662][ T5518] syz.1.922[5518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.410759][ T5518] syz.1.922[5518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.424711][ T5518] syz.1.922[5518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.458398][ T5516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.458487][ T5523] loop1: detected capacity change from 0 to 128 [ 48.458722][ T5516] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.481781][ T5523] FAT-fs (loop1): bogus number of reserved sectors [ 48.505609][ T5523] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 48.514914][ T5523] FAT-fs (loop1): Can't find a valid FAT filesystem [ 48.535641][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.864669][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.876710][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.877832][ T5559] loop5: detected capacity change from 0 to 256 [ 48.914753][ T5559] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.939526][ T5564] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 48.946154][ T5564] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.953748][ T5564] vhci_hcd vhci_hcd.0: Device attached [ 48.954927][ T5559] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.973510][ T5565] vhci_hcd: connection closed [ 48.977271][ T28] vhci_hcd: stop threads [ 48.986279][ T28] vhci_hcd: release socket [ 48.990701][ T28] vhci_hcd: disconnect device [ 49.068898][ T5572] program syz.4.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.088791][ T5572] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 49.160748][ T5583] netlink: 64 bytes leftover after parsing attributes in process `syz.2.951'. [ 49.255738][ T5595] loop4: detected capacity change from 0 to 1024 [ 49.326997][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.341488][ T5595] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.365725][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.552214][ T5607] bond2: entered promiscuous mode [ 49.557592][ T5607] bond2: entered allmulticast mode [ 49.563940][ T5607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.576950][ T5607] bond2 (unregistering): Released all slaves [ 49.647780][ T5612] syz.4.963[5612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.647887][ T5612] syz.4.963[5612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.659208][ T5612] syz.4.963[5612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.704719][ T5620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.726415][ T5620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.737208][ T5620] bond0 (unregistering): Released all slaves [ 49.757976][ T5624] loop4: detected capacity change from 0 to 1024 [ 49.766879][ T5624] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.780041][ T5624] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 49.788848][ T5624] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.796184][ T5624] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 49.807977][ T5624] EXT4-fs (loop4): Remounting filesystem read-only [ 49.815296][ T5624] EXT4-fs (loop4): 1 orphan inode deleted [ 49.821960][ T5624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.833998][ T5624] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 49.842323][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.957354][ T5649] loop3: detected capacity change from 0 to 128 [ 49.971873][ T5649] FAT-fs (loop3): bogus number of reserved sectors [ 49.978594][ T5649] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 49.989195][ T5649] FAT-fs (loop3): Can't find a valid FAT filesystem [ 50.017748][ T5659] syz.2.986[5659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.017882][ T5659] syz.2.986[5659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.031261][ T5659] syz.2.986[5659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.046184][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 50.068136][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 50.145512][ T5677] netlink: 64 bytes leftover after parsing attributes in process `syz.3.994'. [ 50.192030][ T5680] program syz.3.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.216248][ T5680] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 50.905227][ T5699] loop5: detected capacity change from 0 to 128 [ 50.908937][ T5696] loop1: detected capacity change from 0 to 1024 [ 50.912203][ T5699] FAT-fs (loop5): bogus number of reserved sectors [ 50.925593][ T5699] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 50.934910][ T5699] FAT-fs (loop5): Can't find a valid FAT filesystem [ 50.970614][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 50.982154][ T5696] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.020380][ T5709] loop2: detected capacity change from 0 to 256 [ 51.029088][ T5709] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.044429][ T5709] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.190471][ T5726] bond0: entered promiscuous mode [ 51.195747][ T5726] bond0: entered allmulticast mode [ 51.204037][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.218549][ T5726] bond0 (unregistering): Released all slaves [ 51.279486][ T5739] loop5: detected capacity change from 0 to 1024 [ 51.285514][ T5744] loop3: detected capacity change from 0 to 256 [ 51.292965][ T5744] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.316056][ T5744] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.338040][ T5739] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.372134][ T5751] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 51.378673][ T5751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.386219][ T5751] vhci_hcd vhci_hcd.0: Device attached [ 51.395709][ T5753] vhci_hcd: connection closed [ 51.395931][ T165] vhci_hcd: stop threads [ 51.396248][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 51.396259][ T29] audit: type=1400 audit(1734734787.015:869): avc: denied { write } for pid=5747 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.400606][ T165] vhci_hcd: release socket [ 51.400614][ T165] vhci_hcd: disconnect device [ 51.474844][ T29] audit: type=1400 audit(1734734787.095:870): avc: denied { write } for pid=5763 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.496017][ T29] audit: type=1400 audit(1734734787.095:871): avc: denied { nlmsg_write } for pid=5763 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.523414][ T5767] program syz.4.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.535228][ T29] audit: type=1400 audit(1734734787.155:872): avc: denied { cpu } for pid=5768 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.724325][ C1] sd 0:0:1:0: [sda] tag#3224 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 51.734718][ C1] sd 0:0:1:0: [sda] tag#3224 CDB: Read(6) 08 05 00 00 00 00 [ 52.092594][ T29] audit: type=1400 audit(1734734787.685:873): avc: denied { name_connect } for pid=5771 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 52.125599][ T5776] bond1: entered promiscuous mode [ 52.130764][ T5776] bond1: entered allmulticast mode [ 52.145243][ T5776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.186428][ T5776] bond1 (unregistering): Released all slaves [ 52.238268][ T5782] loop1: detected capacity change from 0 to 256 [ 52.247504][ T5782] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.261956][ T5782] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.272470][ T29] audit: type=1400 audit(1734734787.875:874): avc: denied { create } for pid=5785 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.298779][ T5784] loop2: detected capacity change from 0 to 1024 [ 52.326923][ T5784] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.340263][ T29] audit: type=1400 audit(1734734787.915:875): avc: denied { ioctl } for pid=5785 comm="syz.3.1038" path="socket:[11829]" dev="sockfs" ino=11829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.392716][ T5798] loop4: detected capacity change from 0 to 1024 [ 52.399698][ T29] audit: type=1400 audit(1734734788.015:876): avc: denied { create } for pid=5796 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.454155][ T29] audit: type=1400 audit(1734734788.025:877): avc: denied { bind } for pid=5796 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.474802][ T29] audit: type=1400 audit(1734734788.035:878): avc: denied { create } for pid=5799 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.530238][ T5812] syz.5.1049[5812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.537104][ T5814] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 52.541447][ T5805] loop1: detected capacity change from 0 to 512 [ 52.548566][ T5814] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 52.699152][ T5805] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1047: corrupted in-inode xattr: invalid ea_ino [ 52.747276][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 52.756404][ T5840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1050'. [ 52.790515][ T5838] loop2: detected capacity change from 0 to 1024 [ 52.798777][ T5805] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1047: couldn't read orphan inode 15 (err -117) [ 52.833729][ T5845] loop3: detected capacity change from 0 to 1024 [ 52.858452][ T5845] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.870440][ T5845] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.879409][ T5845] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.899199][ T5845] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 52.909870][ T5845] EXT4-fs (loop3): Remounting filesystem read-only [ 52.918093][ T5845] EXT4-fs (loop3): 1 orphan inode deleted [ 53.175615][ T5845] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 53.301076][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 53.382855][ T5900] 9pnet_fd: Insufficient options for proto=fd [ 53.424722][ T5909] Cannot find del_set index 0 as target [ 53.519593][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1101'. [ 53.536116][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.547948][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.599666][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1107'. [ 53.717925][ T5960] netlink: 'syz.1.1112': attribute type 3 has an invalid length. [ 53.752774][ T5966] loop4: detected capacity change from 0 to 512 [ 53.761780][ T5966] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.770160][ T5966] journal_path: Lookup failure for './file0/file0' [ 53.776765][ T5966] EXT4-fs: error: could not find journal device path [ 53.859490][ T5977] loop4: detected capacity change from 0 to 256 [ 53.885910][ T5981] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 53.893736][ T5981] netlink: 'syz.2.1122': attribute type 2 has an invalid length. [ 54.056277][ T6004] loop4: detected capacity change from 0 to 512 [ 54.065960][ T6008] mmap: syz.1.1134 (6008): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 54.082931][ T6004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.091782][ T6004] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.100929][ T6004] EXT4-fs (loop4): blocks per group (3008) and clusters per group (32768) inconsistent [ 54.112330][ T6008] program syz.1.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.263910][ T6044] loop3: detected capacity change from 0 to 512 [ 54.294371][ T6044] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.326884][ T6056] loop4: detected capacity change from 0 to 512 [ 54.337089][ T6056] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.1158: corrupted xattr block 95: invalid header [ 54.351419][ T6056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1158: bg 0: block 7: invalid block bitmap [ 54.368574][ T6056] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 54.378106][ T6056] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.1158: corrupted xattr block 95: invalid header [ 54.406147][ T6056] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 54.418466][ T6056] EXT4-fs (loop4): 1 orphan inode deleted [ 54.465388][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.477106][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.930986][ T6146] mmap: syz.3.1189 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.059824][ T6158] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 55.089904][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 55.117365][ T6165] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1199'. [ 55.162227][ T6175] SET target dimension over the limit! [ 55.205353][ T6181] loop5: detected capacity change from 0 to 512 [ 55.225828][ T6181] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 55.249008][ T6181] EXT4-fs: error: could not find journal device path [ 55.282777][ T6193] loop2: detected capacity change from 0 to 128 [ 55.308815][ T6195] loop1: detected capacity change from 0 to 512 [ 55.352548][ T6195] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.1214: corrupted xattr block 95: invalid header [ 55.367392][ T6195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1214: bg 0: block 7: invalid block bitmap [ 55.381491][ T6195] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 55.412366][ T6195] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.1214: corrupted xattr block 95: invalid header [ 55.446514][ T6195] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 55.455737][ T6195] EXT4-fs (loop1): 1 orphan inode deleted [ 55.466879][ T6195] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 55.568980][ T6218] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 55.752800][ T3301] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /235/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 55.776580][ T3301] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 55.804054][ T3301] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 56.002742][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 56.062893][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.176181][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.202581][ T6278] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.1252'. [ 56.235903][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.247209][ T6286] netlink: 'syz.4.1255': attribute type 11 has an invalid length. [ 56.255135][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1255'. [ 56.302896][ T6297] ALSA: seq fatal error: cannot create timer (-22) [ 56.311035][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.323602][ T6300] loop4: detected capacity change from 0 to 732 [ 56.398497][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 56.405348][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 56.405362][ T29] audit: type=1400 audit(1734734792.025:1119): avc: denied { unlink } for pid=3741 comm="syz-executor" name="file1" dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.407521][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 56.450344][ T29] audit: type=1400 audit(1734734792.065:1120): avc: denied { create } for pid=6309 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.475616][ T11] bridge_slave_1: left allmulticast mode [ 56.481288][ T11] bridge_slave_1: left promiscuous mode [ 56.487048][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.496290][ T29] audit: type=1400 audit(1734734792.115:1121): avc: denied { setopt } for pid=6309 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.517994][ T11] bridge_slave_0: left allmulticast mode [ 56.523781][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.669840][ T29] audit: type=1400 audit(1734734792.285:1122): avc: denied { bind } for pid=6331 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.690074][ T29] audit: type=1400 audit(1734734792.285:1123): avc: denied { name_bind } for pid=6331 comm="syz.3.1274" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.711854][ T29] audit: type=1400 audit(1734734792.285:1124): avc: denied { node_bind } for pid=6331 comm="syz.3.1274" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.736505][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.746576][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.756487][ T11] bond0 (unregistering): Released all slaves [ 56.808824][ T29] audit: type=1400 audit(1734734792.425:1125): avc: denied { write } for pid=6336 comm="syz.4.1277" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.842042][ T29] audit: type=1400 audit(1734734792.455:1126): avc: denied { setattr } for pid=6338 comm="syz.5.1276" name="bus" dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.876557][ T11] hsr_slave_0: left promiscuous mode [ 56.884393][ T11] hsr_slave_1: left promiscuous mode [ 56.895054][ T29] audit: type=1400 audit(1734734792.505:1127): avc: denied { write } for pid=6344 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.924374][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.931853][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.952085][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.959577][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.971136][ T29] audit: type=1400 audit(1734734792.535:1128): avc: denied { create } for pid=6346 comm="syz.4.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.996474][ T11] veth1_macvtap: left promiscuous mode [ 57.002011][ T11] veth0_macvtap: left promiscuous mode [ 57.007573][ T11] veth1_vlan: left promiscuous mode [ 57.012868][ T11] veth0_vlan: left promiscuous mode [ 57.129596][ T11] team0 (unregistering): Port device team_slave_1 removed [ 57.142405][ T11] team0 (unregistering): Port device team_slave_0 removed [ 57.179257][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 57.245923][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.259426][ T6378] batadv_slave_1: entered promiscuous mode [ 57.301696][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.308900][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.333442][ T6275] bridge_slave_0: entered allmulticast mode [ 57.349074][ T6275] bridge_slave_0: entered promiscuous mode [ 57.384375][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.391454][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.416562][ T6275] bridge_slave_1: entered allmulticast mode [ 57.423242][ T6275] bridge_slave_1: entered promiscuous mode [ 57.455439][ T6404] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 57.464081][ T6404] SELinux: failed to load policy [ 57.475024][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.509800][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.524569][ T6409] loop5: detected capacity change from 0 to 128 [ 57.533459][ T6409] FAT-fs (loop5): bogus number of reserved sectors [ 57.540086][ T6409] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 57.549427][ T6409] FAT-fs (loop5): Can't find a valid FAT filesystem [ 57.558855][ T6413] Cannot find add_set index 0 as target [ 57.565874][ T6275] team0: Port device team_slave_0 added [ 57.572548][ T6275] team0: Port device team_slave_1 added [ 57.602292][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.609435][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.635377][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.647585][ T6416] netlink: 'syz.5.1311': attribute type 3 has an invalid length. [ 57.656052][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.663078][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.689191][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.725378][ T6275] hsr_slave_0: entered promiscuous mode [ 57.737221][ T6275] hsr_slave_1: entered promiscuous mode [ 57.743489][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.754150][ T6275] Cannot create hsr debugfs directory [ 57.815623][ T6440] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 57.858899][ T6444] loop3: detected capacity change from 0 to 512 [ 57.883329][ T6275] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.902222][ T6275] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.912623][ T6444] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.927549][ T6275] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.953636][ T6275] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.971913][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.979012][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.986293][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.993373][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.025021][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.037328][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.052297][ T3297] cgroup: fork rejected by pids controller in /syz4 [ 58.068309][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.077506][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.138884][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.145975][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.164233][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.171301][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.242860][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.358660][ T165] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.416356][ T6511] __nla_validate_parse: 4 callbacks suppressed [ 58.416420][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'. [ 58.442496][ T6275] veth0_vlan: entered promiscuous mode [ 58.450820][ T165] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.478765][ T6275] veth1_vlan: entered promiscuous mode [ 58.502304][ T6275] veth0_macvtap: entered promiscuous mode [ 58.519451][ T165] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.526147][ T6528] loop5: detected capacity change from 0 to 256 [ 58.538399][ T6275] veth1_macvtap: entered promiscuous mode [ 58.550486][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.561051][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.562538][ T6528] FAT-fs (loop5): Directory bread(block 64) failed [ 58.571025][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.588790][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.596531][ T6528] FAT-fs (loop5): Directory bread(block 65) failed [ 58.598658][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.606467][ T6528] FAT-fs (loop5): Directory bread(block 66) failed [ 58.616180][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.616201][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.616214][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.617737][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.644023][ T6528] FAT-fs (loop5): Directory bread(block 67) failed [ 58.661640][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.678460][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.688283][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.699305][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.709213][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.719677][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.730269][ T6528] FAT-fs (loop5): Directory bread(block 68) failed [ 58.730881][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.736899][ T6528] FAT-fs (loop5): Directory bread(block 69) failed [ 58.752590][ T6528] FAT-fs (loop5): Directory bread(block 70) failed [ 58.759813][ T6528] FAT-fs (loop5): Directory bread(block 71) failed [ 58.767271][ T165] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.771268][ T6528] FAT-fs (loop5): Directory bread(block 72) failed [ 58.783993][ T6528] FAT-fs (loop5): Directory bread(block 73) failed [ 58.785483][ T6275] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.799339][ T6275] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.808172][ T6275] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.816934][ T6275] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.888714][ T165] bridge_slave_1: left allmulticast mode [ 58.894525][ T165] bridge_slave_1: left promiscuous mode [ 58.900282][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.910473][ T165] bridge_slave_0: left allmulticast mode [ 58.916248][ T165] bridge_slave_0: left promiscuous mode [ 58.922080][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.925752][ T6541] 9pnet: Could not find request transport: r [ 59.047038][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.057080][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.066354][ T165] bond0 (unregistering): Released all slaves [ 59.075796][ T6554] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1361'. [ 59.160121][ T6565] loop5: detected capacity change from 0 to 512 [ 59.169522][ T6565] EXT4-fs: inline encryption not supported [ 59.186437][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.194998][ T6565] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.205561][ T165] hsr_slave_0: left promiscuous mode [ 59.211622][ T165] hsr_slave_1: left promiscuous mode [ 59.217737][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.225381][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.237314][ T6565] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1367: bg 0: block 64: padding at end of block bitmap is not set [ 59.243225][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.258974][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.261447][ T6565] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1367: Failed to acquire dquot type 0 [ 59.278389][ T6565] EXT4-fs (loop5): 1 truncate cleaned up [ 59.285699][ T165] veth1_macvtap: left promiscuous mode [ 59.291360][ T165] veth1_vlan: left promiscuous mode [ 59.296699][ T165] veth0_vlan: left promiscuous mode [ 59.310585][ T6565] syz.5.1367 (6565) used greatest stack depth: 9280 bytes left [ 59.355807][ T6583] loop5: detected capacity change from 0 to 512 [ 59.372508][ T3393] smc: removing ib device syz! [ 59.391068][ T6581] sctp: [Deprecated]: syz.3.1373 (pid 6581) Use of int in maxseg socket option. [ 59.391068][ T6581] Use struct sctp_assoc_value instead [ 59.432188][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1377'. [ 59.445530][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 59.570173][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.577392][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.619382][ T6516] bridge_slave_0: entered allmulticast mode [ 59.633668][ T6516] bridge_slave_0: entered promiscuous mode [ 59.666074][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.673168][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.691264][ T6516] bridge_slave_1: entered allmulticast mode [ 59.700154][ T6516] bridge_slave_1: entered promiscuous mode [ 59.729304][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.755822][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.778275][ T6516] team0: Port device team_slave_0 added [ 59.784870][ T6516] team0: Port device team_slave_1 added [ 59.802336][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.809429][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.835460][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.848063][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.855062][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.881055][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.920476][ T6516] hsr_slave_0: entered promiscuous mode [ 59.927704][ T6516] hsr_slave_1: entered promiscuous mode [ 60.052970][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 60.061951][ T6653] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.189747][ T6671] netlink: 'syz.5.1412': attribute type 21 has an invalid length. [ 60.197745][ T6671] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1412'. [ 60.206838][ T6671] netlink: 'syz.5.1412': attribute type 4 has an invalid length. [ 60.214695][ T6671] netlink: 'syz.5.1412': attribute type 5 has an invalid length. [ 60.222441][ T6671] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1412'. [ 60.247955][ T6516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.257565][ T6516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.267540][ T6516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.277014][ T6516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.279780][ T6675] RDS: rds_bind could not find a transport for ::1811:0:300:0, load rds_tcp or rds_rdma? [ 60.303713][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.310864][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.318242][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.325398][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.351366][ T6679] vxcan1: tx address claim with dest, not broadcast [ 60.396937][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.410494][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.418981][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.433856][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.443009][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.450147][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.462729][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.469885][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.476060][ T6693] bpf_get_probe_write_proto: 2 callbacks suppressed [ 60.476075][ T6693] syz.5.1422[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.483826][ T6693] syz.5.1422[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.495320][ T6693] syz.5.1422[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.572908][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.773304][ T6730] netlink: 'syz.6.1432': attribute type 5 has an invalid length. [ 60.821334][ T6516] veth0_vlan: entered promiscuous mode [ 60.830698][ T6516] veth1_vlan: entered promiscuous mode [ 60.842624][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 60.848436][ T6516] veth0_macvtap: entered promiscuous mode [ 60.861784][ T6516] veth1_macvtap: entered promiscuous mode [ 60.870115][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1437'. [ 60.883254][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.893812][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.903721][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.914220][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.924236][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.934806][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.944733][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.955364][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.966515][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.987140][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.997643][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.006678][ T6750] loop2: detected capacity change from 0 to 512 [ 61.007452][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.024109][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.033957][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.044507][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.057041][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.065437][ T6516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.074227][ T6516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.082913][ T6516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.091782][ T6516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.104136][ T6750] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.125342][ T6756] program syz.3.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.199449][ T6766] loop4: detected capacity change from 0 to 512 [ 61.208513][ T3302] ================================================================== [ 61.216604][ T3302] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 61.223907][ T3302] [ 61.226241][ T3302] read-write to 0xffff8881067dbfd0 of 8 bytes by task 482 on cpu 0: [ 61.234228][ T3302] xas_clear_mark+0x90/0x180 [ 61.238846][ T3302] __folio_start_writeback+0x2d9/0x430 [ 61.244329][ T3302] __block_write_full_folio+0x506/0x8c0 [ 61.249905][ T3302] block_write_full_folio+0x293/0x2b0 [ 61.255297][ T3302] write_cache_pages+0x62/0x100 [ 61.260164][ T3302] blkdev_writepages+0x59/0x90 [ 61.264935][ T3302] do_writepages+0x1d8/0x480 [ 61.269539][ T3302] __writeback_single_inode+0x89/0x850 [ 61.275005][ T3302] writeback_sb_inodes+0x461/0xa30 [ 61.280116][ T3302] __writeback_inodes_wb+0x9a/0x1a0 [ 61.285313][ T3302] wb_writeback+0x274/0x640 [ 61.289823][ T3302] wb_workfn+0x67f/0x940 [ 61.294084][ T3302] process_scheduled_works+0x483/0x9a0 [ 61.299572][ T3302] worker_thread+0x51d/0x6f0 [ 61.304182][ T3302] kthread+0x1d1/0x210 [ 61.308254][ T3302] ret_from_fork+0x4b/0x60 [ 61.312764][ T3302] ret_from_fork_asm+0x1a/0x30 [ 61.317549][ T3302] [ 61.319882][ T3302] read to 0xffff8881067dbfd0 of 8 bytes by task 3302 on cpu 1: [ 61.327430][ T3302] xas_find_marked+0x216/0x660 [ 61.332228][ T3302] find_get_entry+0x54/0x390 [ 61.336833][ T3302] filemap_get_folios_tag+0x136/0x210 [ 61.342213][ T3302] writeback_iter+0x4b0/0x830 [ 61.346902][ T3302] write_cache_pages+0x4b/0x100 [ 61.351762][ T3302] blkdev_writepages+0x59/0x90 [ 61.356546][ T3302] do_writepages+0x1d8/0x480 [ 61.361152][ T3302] filemap_flush+0xe7/0x120 [ 61.365648][ T3302] sync_blockdev_nowait+0x29/0x40 [ 61.370674][ T3302] sync_filesystem+0xe3/0x190 [ 61.375355][ T3302] generic_shutdown_super+0x46/0x220 [ 61.380654][ T3302] kill_block_super+0x2a/0x70 [ 61.385354][ T3302] ext4_kill_sb+0x44/0x80 [ 61.389777][ T3302] deactivate_locked_super+0x7d/0x1c0 [ 61.395171][ T3302] deactivate_super+0x9f/0xb0 [ 61.399719][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1451'. [ 61.399846][ T3302] cleanup_mnt+0x268/0x2e0 [ 61.413187][ T3302] __cleanup_mnt+0x19/0x20 [ 61.417623][ T3302] task_work_run+0x13a/0x1a0 [ 61.422223][ T3302] syscall_exit_to_user_mode+0xa8/0x120 [ 61.427805][ T3302] do_syscall_64+0xd6/0x1c0 [ 61.432316][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.438241][ T3302] [ 61.440564][ T3302] value changed: 0x00000000000204c2 -> 0x0000000000020480 [ 61.447689][ T3302] [ 61.450016][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 61.456171][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 61.467021][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 61.477071][ T3302] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.508959][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 61.508975][ T29] audit: type=1400 audit(1734734797.105:1281): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[2430]" dev="pipefs" ino=2430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 61.758633][ T482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.769015][ T482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.836451][ T482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.846747][ T482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.916163][ T482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.926478][ T482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.986550][ T482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.996847][ T482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.084931][ T482] bridge_slave_1: left allmulticast mode [ 62.090636][ T482] bridge_slave_1: left promiscuous mode [ 62.096286][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.104069][ T482] bridge_slave_0: left allmulticast mode [ 62.109835][ T482] bridge_slave_0: left promiscuous mode [ 62.115537][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.206612][ T482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.216265][ T482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.226006][ T482] bond0 (unregistering): Released all slaves [ 62.233884][ T482] bond1 (unregistering): Released all slaves [ 62.277677][ T482] hsr_slave_0: left promiscuous mode [ 62.283369][ T482] hsr_slave_1: left promiscuous mode [ 62.289303][ T482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.296725][ T482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.304108][ T482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.335727][ T482] veth1_macvtap: left promiscuous mode [ 62.341280][ T482] veth0_macvtap: left promiscuous mode [ 62.346928][ T482] veth1_vlan: left promiscuous mode [ 62.352166][ T482] veth0_vlan: left promiscuous mode [ 62.918131][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.967007][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.016775][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.067425][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.125140][ T40] bridge_slave_1: left allmulticast mode [ 63.130791][ T40] bridge_slave_1: left promiscuous mode [ 63.136588][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.144359][ T40] bridge_slave_0: left allmulticast mode [ 63.150036][ T40] bridge_slave_0: left promiscuous mode [ 63.155795][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.256701][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.266711][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.276370][ T40] bond0 (unregistering): Released all slaves [ 63.328128][ T40] hsr_slave_0: left promiscuous mode [ 63.333788][ T40] hsr_slave_1: left promiscuous mode [ 63.339618][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.347069][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.354517][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.361960][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.371482][ T40] veth1_macvtap: left promiscuous mode [ 63.377076][ T40] veth0_macvtap: left promiscuous mode [ 63.382649][ T40] veth1_vlan: left promiscuous mode [ 63.387903][ T40] veth0_vlan: left promiscuous mode [ 63.437444][ T40] team0 (unregistering): Port device team_slave_1 removed [ 63.447578][ T40] team0 (unregistering): Port device team_slave_0 removed [ 63.756986][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.006337][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.086111][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.136435][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.205470][ T40] bridge_slave_1: left allmulticast mode [ 65.211136][ T40] bridge_slave_1: left promiscuous mode [ 65.216841][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.224947][ T40] bridge_slave_0: left allmulticast mode [ 65.230568][ T40] bridge_slave_0: left promiscuous mode [ 65.236337][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.306745][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.316404][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.325665][ T40] bond0 (unregistering): Released all slaves [ 65.356978][ T40] hsr_slave_0: left promiscuous mode [ 65.362559][ T40] hsr_slave_1: left promiscuous mode [ 65.368299][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.375679][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.383020][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.390545][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.399141][ T40] veth1_macvtap: left promiscuous mode [ 65.404669][ T40] veth0_macvtap: left promiscuous mode [ 65.410153][ T40] veth1_vlan: left promiscuous mode [ 65.415427][ T40] veth0_vlan: left promiscuous mode [ 65.466172][ T40] team0 (unregistering): Port device team_slave_1 removed [ 65.475590][ T40] team0 (unregistering): Port device team_slave_0 removed