last executing test programs: 2.020395497s ago: executing program 3 (id=307): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x807) 1.922099848s ago: executing program 3 (id=311): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r1, r1, 0x0, 0x9) 1.876049789s ago: executing program 3 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.817666729s ago: executing program 3 (id=316): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x8000) 1.658811961s ago: executing program 3 (id=320): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e24, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 1.595487222s ago: executing program 3 (id=322): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 1.497665833s ago: executing program 2 (id=328): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200010, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.423595204s ago: executing program 0 (id=330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="85", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) listen(r0, 0x100101) r1 = accept4(r0, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x83, &(0x7f0000000240), &(0x7f0000000380)=0x8) 1.347991135s ago: executing program 2 (id=333): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x4, &(0x7f00000000c0)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r0, 0x0, 0x0, 0x5}, 0x0, 0x0]) 1.343320775s ago: executing program 0 (id=334): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 1.285364525s ago: executing program 4 (id=338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0xfffffffb, 0x4) sendto$packet(r0, &(0x7f00000001c0)="070520000ae0160006007dff2f555f000100007eab085e499926000000997bea54feff7117599e7dc176", 0xae78, 0x801, &(0x7f0000000280)={0x11, 0x3, r1, 0x1, 0x5f, 0x6, @local}, 0x14) 1.262695285s ago: executing program 1 (id=339): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.256815546s ago: executing program 0 (id=340): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) io_cancel(0x0, 0x0, 0x0) 1.199929916s ago: executing program 4 (id=341): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.199609926s ago: executing program 4 (id=342): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000008"], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400c4) r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1.196899406s ago: executing program 1 (id=343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) 1.133978517s ago: executing program 0 (id=344): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) 1.133823667s ago: executing program 4 (id=345): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.133645047s ago: executing program 1 (id=346): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd26, 0x27dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) 1.133534267s ago: executing program 0 (id=347): unshare(0x2040400) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETVAL(r0, 0x0, 0x10, 0x0) 1.131441287s ago: executing program 4 (id=348): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(0x0, 0xffffffffffffffff, 0x0) 292.514367ms ago: executing program 0 (id=349): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 292.414937ms ago: executing program 1 (id=350): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_destroy(0x0) 292.347127ms ago: executing program 4 (id=351): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 291.998927ms ago: executing program 2 (id=359): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_clone(0x80004500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) 190.680208ms ago: executing program 1 (id=352): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x15}, 0x880, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 76.933179ms ago: executing program 2 (id=353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 46.82987ms ago: executing program 1 (id=354): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 362.64µs ago: executing program 2 (id=355): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12161, 0x0) 0s ago: executing program 2 (id=356): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000180)=""/53, 0x35) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) kernel console output (not intermixed with test programs): enied { siginh } for pid=3254 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.129051][ T28] audit: type=1400 audit(1778403807.821:115): avc: denied { search } for pid=3256 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.151225][ T28] audit: type=1400 audit(1778403807.821:116): avc: denied { search } for pid=3256 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.174708][ T28] audit: type=1400 audit(1778403807.821:117): avc: denied { search } for pid=3256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.197796][ T28] audit: type=1400 audit(1778403807.821:118): avc: denied { search } for pid=3256 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.222276][ T28] audit: type=1400 audit(1778403807.821:119): avc: denied { read } for pid=3257 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 32.733878][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 32.733896][ T28] audit: type=1400 audit(1778403816.461:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.762998][ T28] audit: type=1400 audit(1778403816.481:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.765581][ T3286] cgroup: Unknown subsys name 'net' [ 32.790783][ T28] audit: type=1400 audit(1778403816.521:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.884101][ T3286] cgroup: Unknown subsys name 'cpuset' [ 32.890423][ T3286] cgroup: Unknown subsys name 'rlimit' [ 33.010919][ T28] audit: type=1400 audit(1778403816.731:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.034401][ T28] audit: type=1400 audit(1778403816.731:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.059571][ T28] audit: type=1400 audit(1778403816.731:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.080978][ T28] audit: type=1400 audit(1778403816.731:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.101677][ T28] audit: type=1400 audit(1778403816.731:133): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.122947][ T28] audit: type=1400 audit(1778403816.761:134): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.139664][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.148311][ T28] audit: type=1400 audit(1778403816.761:135): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.195604][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.304879][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.312041][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.319259][ T3298] bridge_slave_0: entered allmulticast mode [ 34.325674][ T3298] bridge_slave_0: entered promiscuous mode [ 34.345083][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.352198][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.359756][ T3298] bridge_slave_1: entered allmulticast mode [ 34.366464][ T3298] bridge_slave_1: entered promiscuous mode [ 34.395491][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.414914][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.483375][ T3298] team0: Port device team_slave_0 added [ 34.489852][ T3298] team0: Port device team_slave_1 added [ 34.500349][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.507573][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.514697][ T3308] bridge_slave_0: entered allmulticast mode [ 34.520997][ T3308] bridge_slave_0: entered promiscuous mode [ 34.544716][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.551915][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.559140][ T3308] bridge_slave_1: entered allmulticast mode [ 34.565805][ T3308] bridge_slave_1: entered promiscuous mode [ 34.575307][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.582293][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.608331][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.636325][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.643349][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.669282][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.692351][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.716511][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.775982][ T3298] hsr_slave_0: entered promiscuous mode [ 34.782015][ T3298] hsr_slave_1: entered promiscuous mode [ 34.791472][ T3308] team0: Port device team_slave_0 added [ 34.807896][ T3308] team0: Port device team_slave_1 added [ 34.813629][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.820724][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.827899][ T3307] bridge_slave_0: entered allmulticast mode [ 34.834403][ T3307] bridge_slave_0: entered promiscuous mode [ 34.854018][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.861110][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.868262][ T3307] bridge_slave_1: entered allmulticast mode [ 34.874778][ T3307] bridge_slave_1: entered promiscuous mode [ 34.917982][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.925109][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.951081][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.966124][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.973321][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.980538][ T3309] bridge_slave_0: entered allmulticast mode [ 34.987047][ T3309] bridge_slave_0: entered promiscuous mode [ 34.996271][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.003438][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.010597][ T3306] bridge_slave_0: entered allmulticast mode [ 35.017203][ T3306] bridge_slave_0: entered promiscuous mode [ 35.023834][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.030866][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.056960][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.068914][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.079657][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.093782][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.100884][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.108088][ T3309] bridge_slave_1: entered allmulticast mode [ 35.114616][ T3309] bridge_slave_1: entered promiscuous mode [ 35.123670][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.130816][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.138131][ T3306] bridge_slave_1: entered allmulticast mode [ 35.144505][ T3306] bridge_slave_1: entered promiscuous mode [ 35.175659][ T3307] team0: Port device team_slave_0 added [ 35.192090][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.202104][ T3307] team0: Port device team_slave_1 added [ 35.214201][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.231044][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.246425][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.278838][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.285937][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.311958][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.323448][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.330432][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.356476][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.373945][ T3308] hsr_slave_0: entered promiscuous mode [ 35.380025][ T3308] hsr_slave_1: entered promiscuous mode [ 35.386089][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 35.391830][ T3308] Cannot create hsr debugfs directory [ 35.409175][ T3309] team0: Port device team_slave_0 added [ 35.415912][ T3309] team0: Port device team_slave_1 added [ 35.425106][ T3306] team0: Port device team_slave_0 added [ 35.431993][ T3306] team0: Port device team_slave_1 added [ 35.459576][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.466846][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.492923][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.520585][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.527592][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.553627][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.572076][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.579116][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.605276][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.628075][ T3307] hsr_slave_0: entered promiscuous mode [ 35.634056][ T3307] hsr_slave_1: entered promiscuous mode [ 35.639980][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 35.645787][ T3307] Cannot create hsr debugfs directory [ 35.651761][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.658795][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.684830][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.723604][ T3309] hsr_slave_0: entered promiscuous mode [ 35.729826][ T3309] hsr_slave_1: entered promiscuous mode [ 35.735826][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 35.741577][ T3309] Cannot create hsr debugfs directory [ 35.787136][ T3306] hsr_slave_0: entered promiscuous mode [ 35.793343][ T3306] hsr_slave_1: entered promiscuous mode [ 35.799210][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 35.804990][ T3306] Cannot create hsr debugfs directory [ 35.828501][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.837255][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.856634][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.865276][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.889804][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.898824][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.918978][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.927672][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.996643][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.005543][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.018662][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.027473][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.035303][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.043935][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.051794][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.060807][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.095402][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.104309][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.111992][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.120777][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.131506][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.140240][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.148724][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.157759][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.195901][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.204385][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.211907][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.220615][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.228553][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.237107][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.244728][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.253083][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.286064][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.306782][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.315861][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.328446][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.337151][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.346117][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.356731][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.365503][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.375000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.382069][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.390837][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.397937][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.411757][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.420712][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.450307][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.470103][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.490775][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.507569][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.516322][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.523450][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.537673][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.544786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.555922][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.563120][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.575589][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.588476][ T1650] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.595590][ T1650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.635083][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.650078][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.661917][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.669035][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.684723][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.691841][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.717460][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.728024][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.747455][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.758724][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.781851][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.789007][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.797640][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.804730][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.970231][ T3298] veth0_vlan: entered promiscuous mode [ 36.999919][ T3298] veth1_vlan: entered promiscuous mode [ 37.018115][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.043147][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.060716][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.070072][ T3298] veth0_macvtap: entered promiscuous mode [ 37.087554][ T3298] veth1_macvtap: entered promiscuous mode [ 37.112502][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.134804][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.156084][ T1650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.166267][ T1650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.178247][ T1650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.193379][ T1650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.206827][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.296305][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.311410][ T3309] veth0_vlan: entered promiscuous mode [ 37.325410][ T3309] veth1_vlan: entered promiscuous mode [ 37.332982][ T3308] veth0_vlan: entered promiscuous mode [ 37.362721][ T3308] veth1_vlan: entered promiscuous mode [ 37.391285][ T3503] Zero length message leads to an empty skb [ 37.392733][ T3309] veth0_macvtap: entered promiscuous mode [ 37.410767][ T3309] veth1_macvtap: entered promiscuous mode [ 37.425561][ T3307] veth0_vlan: entered promiscuous mode [ 37.448359][ T3308] veth0_macvtap: entered promiscuous mode [ 37.455840][ T3306] veth0_vlan: entered promiscuous mode [ 37.462367][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.470553][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.477902][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.488503][ T3306] veth1_vlan: entered promiscuous mode [ 37.500314][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.513020][ T3307] veth1_vlan: entered promiscuous mode [ 37.522850][ T3308] veth1_macvtap: entered promiscuous mode [ 37.532899][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.541908][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.556668][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.565592][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.590146][ T3306] veth0_macvtap: entered promiscuous mode [ 37.600654][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.615107][ T3306] veth1_macvtap: entered promiscuous mode [ 37.621922][ T3307] veth0_macvtap: entered promiscuous mode [ 37.630052][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.653482][ T3307] veth1_macvtap: entered promiscuous mode [ 37.664487][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.673004][ T1650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.681996][ T1650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.692504][ T1650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.704233][ T1650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.715288][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.729233][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.743128][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.752346][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.765909][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.774864][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.784229][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.804014][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.820609][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.844575][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.854340][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 37.854354][ T28] audit: type=1400 audit(1778403821.581:165): avc: denied { prog_load } for pid=3516 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.880298][ T28] audit: type=1400 audit(1778403821.581:166): avc: denied { bpf } for pid=3516 comm="syz.1.9" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.887263][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.929012][ T28] audit: type=1400 audit(1778403821.581:167): avc: denied { perfmon } for pid=3516 comm="syz.1.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.999697][ T28] audit: type=1400 audit(1778403821.581:168): avc: denied { prog_run } for pid=3516 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.020279][ T28] audit: type=1400 audit(1778403821.711:169): avc: denied { name_connect } for pid=3522 comm="syz.1.10" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.048036][ T28] audit: type=1400 audit(1778403821.721:170): avc: denied { map_create } for pid=3520 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.075299][ T3414] IPVS: starting estimator thread 0... [ 38.096085][ T28] audit: type=1400 audit(1778403821.721:171): avc: denied { map_read map_write } for pid=3520 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.131515][ T28] audit: type=1400 audit(1778403821.851:172): avc: denied { create } for pid=3530 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.151442][ T28] audit: type=1400 audit(1778403821.851:173): avc: denied { connect } for pid=3530 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.173117][ T3535] Invalid ELF header magic: != ELF [ 38.179049][ T28] audit: type=1400 audit(1778403821.851:174): avc: denied { read } for pid=3530 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.198191][ T3529] IPVS: using max 2352 ests per chain, 117600 per kthread [ 38.229820][ T3539] vxcan1: tx drop: invalid da for name 0x00000000000000f5 [ 38.321457][ T3545] loop2: detected capacity change from 0 to 512 [ 38.338696][ T320] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.375397][ T3551] loop3: detected capacity change from 0 to 128 [ 38.383837][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.397241][ T3545] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.399446][ T3551] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 38.421988][ T3545] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 38.443274][ T3545] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 38.458730][ T3545] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.458730][ T3545] [ 38.469190][ T3545] EXT4-fs (loop2): Total free blocks count 0 [ 38.475548][ T3545] EXT4-fs (loop2): Free/Dirty block details [ 38.481624][ T3545] EXT4-fs (loop2): free_blocks=65280 [ 38.487176][ T3545] EXT4-fs (loop2): dirty_blocks=1 [ 38.492624][ T3545] EXT4-fs (loop2): Block reservation details [ 38.499106][ T3545] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 38.525019][ T3545] syz.2.17 (3545) used greatest stack depth: 10464 bytes left [ 38.540422][ T3306] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 38.554960][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.691988][ T3568] syz.3.26 (3568) used greatest stack depth: 9504 bytes left [ 38.739728][ T3577] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 38.778891][ T3580] loop3: detected capacity change from 0 to 1024 [ 38.800220][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.859868][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.914002][ T3589] loop0: detected capacity change from 0 to 1024 [ 38.921036][ T3589] ======================================================= [ 38.921036][ T3589] WARNING: The mand mount option has been deprecated and [ 38.921036][ T3589] and is ignored by this kernel. Remove the mand [ 38.921036][ T3589] option from the mount to silence this warning. [ 38.921036][ T3589] ======================================================= [ 38.974711][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.987382][ T3589] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.060193][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.194167][ T3609] loop3: detected capacity change from 0 to 128 [ 39.226681][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.243250][ T3609] FAT-fs (loop3): Filesystem has been set read-only [ 39.251812][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.259940][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.291605][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.299665][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.326891][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.336773][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.345609][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.347145][ T3617] process 'syz.2.44' launched '/dev/fd/3' with NULL argv: empty string added [ 39.353688][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.374004][ T3609] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 39.671226][ T3647] loop1: detected capacity change from 0 to 2048 [ 39.695079][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.754901][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.845756][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 39.855612][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 39.935751][ T3668] loop2: detected capacity change from 0 to 4096 [ 39.947730][ T3668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.166981][ T3674] loop3: detected capacity change from 0 to 128 [ 40.279096][ T3678] loop0: detected capacity change from 0 to 512 [ 40.309084][ T3680] loop3: detected capacity change from 0 to 128 [ 40.317046][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.333666][ T3678] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.353760][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 40.354638][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.601078][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.685398][ T3693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.699367][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.977289][ T3307] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 40.985485][ T3307] FAT-fs (loop4): Filesystem has been set read-only [ 41.132384][ T3714] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.147085][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.160345][ T3714] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.179974][ T3714] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.76: Freeing blocks not in datazone - block = 0, count = 16 [ 41.209413][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.248066][ T3722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.296443][ T3722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.358435][ T3722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.397929][ T3722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.530409][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.545514][ T107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.575149][ T107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.587802][ T107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.603822][ T1650] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.752025][ T3747] can0: slcan on ptm0. [ 41.794321][ T3746] can0 (unregistered): slcan off ptm0. [ 41.844366][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 41.859148][ T3401] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 41.871728][ T3758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.886804][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.894650][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x6 [ 41.902186][ T3401] hid-generic 0000:0000:0000.0001: reserved main item tag 0xd [ 41.910756][ T3401] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.932509][ T3758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.979276][ T3762] fido_id[3762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.002628][ T3758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.024412][ T3768] syz.2.100 uses obsolete (PF_INET,SOCK_PACKET) [ 42.051435][ T3758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.110180][ T3774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.149465][ T1650] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.168467][ T1650] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.183054][ T3774] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.208090][ T1650] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.240936][ T1650] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.519172][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.695616][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.883019][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 42.883035][ T28] audit: type=1400 audit(1778403826.601:269): avc: denied { ioctl } for pid=3800 comm="syz.4.111" path="socket:[6334]" dev="sockfs" ino=6334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.054106][ T28] audit: type=1400 audit(1778403826.771:270): avc: denied { create } for pid=3808 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 43.111871][ T28] audit: type=1400 audit(1778403826.781:271): avc: denied { listen } for pid=3808 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 43.183324][ T28] audit: type=1400 audit(1778403826.801:272): avc: denied { ioctl } for pid=3808 comm="syz.4.115" path="socket:[5636]" dev="sockfs" ino=5636 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 43.449917][ T3778] Set syz1 is full, maxelem 65536 reached [ 43.485918][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.486393][ T3821] xt_hashlimit: size too large, truncated to 1048576 [ 43.502749][ T28] audit: type=1400 audit(1778403827.231:273): avc: denied { create } for pid=3824 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.542871][ T28] audit: type=1400 audit(1778403827.251:274): avc: denied { setopt } for pid=3824 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.595137][ T3830] set_capacity_and_notify: 7 callbacks suppressed [ 43.595151][ T3830] loop3: detected capacity change from 0 to 1024 [ 43.613251][ T28] audit: type=1400 audit(1778403827.251:275): avc: denied { bind } for pid=3824 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.647967][ T28] audit: type=1400 audit(1778403827.251:276): avc: denied { read } for pid=3824 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.676919][ T3830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.699538][ T3837] loop2: detected capacity change from 0 to 128 [ 43.710253][ T28] audit: type=1400 audit(1778403827.301:277): avc: denied { write } for pid=3824 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.813732][ T28] audit: type=1400 audit(1778403827.361:278): avc: denied { create } for pid=3832 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.024970][ T3849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3849 comm=syz.4.130 [ 44.317563][ T3876] loop4: detected capacity change from 0 to 2048 [ 44.325924][ T3876] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.345034][ T3876] EXT4-fs: Ignoring removed i_version option [ 44.378559][ T3876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.457266][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.555060][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.667154][ T3874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.702762][ T3890] netlink: 92 bytes leftover after parsing attributes in process `syz.3.147'. [ 44.844016][ T3897] loop3: detected capacity change from 0 to 128 [ 44.874597][ T3897] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.928722][ T3900] netlink: 136 bytes leftover after parsing attributes in process `syz.0.151'. [ 44.942496][ T3897] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.948779][ T3900] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 45.025917][ T3854] Set syz1 is full, maxelem 65536 reached [ 45.065700][ T3897] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.150: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 45.087669][ T3897] EXT4-fs (loop3): Remounting filesystem read-only [ 45.171433][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.214576][ T3913] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 45.236309][ T3913] team0: Port device dummy0 added [ 45.257719][ T3913] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 45.279225][ T3913] team0: Port device dummy0 removed [ 45.302063][ T3913] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.316435][ T3919] loop0: detected capacity change from 0 to 1024 [ 45.371718][ T3919] EXT4-fs: Ignoring removed orlov option [ 45.454223][ T3919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.474415][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.481232][ T3921] veth1_to_bond: entered allmulticast mode [ 45.489710][ T3920] veth1_to_bond: left allmulticast mode [ 45.530838][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.565290][ T3933] syzkaller1: entered promiscuous mode [ 45.575978][ T3933] syzkaller1: entered allmulticast mode [ 45.753682][ T3956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.808900][ T3956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.856944][ T3956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.898821][ T3956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.979684][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.991074][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.003070][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.015004][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.094196][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.802342][ T3981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.184'. [ 46.811443][ T3981] netlink: 9 bytes leftover after parsing attributes in process `syz.3.184'. [ 46.820463][ T3981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.184'. [ 46.829678][ T3981] netlink: 9 bytes leftover after parsing attributes in process `syz.3.184'. [ 46.838677][ T3981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.184'. [ 47.104432][ T4009] loop2: detected capacity change from 0 to 512 [ 47.127569][ T4009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.154389][ T4009] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.191834][ T4015] loop3: detected capacity change from 0 to 256 [ 47.209044][ T4015] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.243959][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.289899][ T4022] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 47.311195][ T4022] FAT-fs (loop3): Filesystem has been set read-only [ 47.319023][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.326127][ T4023] bridge0: port 2(bridge_slave_1) entered listening state [ 47.328596][ T4022] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 47.333427][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.348472][ T4023] bridge0: port 1(bridge_slave_0) entered listening state [ 47.394695][ T4023] 8021q: adding VLAN 0 to HW filter on device eth0 [ 47.404084][ T4023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 47.412535][ T4023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 47.422139][ T4023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 47.553295][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.555167][ T3974] Bluetooth: hci0: command 0x1003 tx timeout [ 47.839678][ T4051] loop0: detected capacity change from 0 to 1024 [ 47.850350][ T4051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.876095][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.892101][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 47.892115][ T28] audit: type=1400 audit(1778403832.618:384): avc: denied { create } for pid=4057 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.923350][ T28] audit: type=1400 audit(1778403832.648:385): avc: denied { write } for pid=4050 comm="syz.0.213" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.945295][ T28] audit: type=1400 audit(1778403832.648:386): avc: denied { map } for pid=4050 comm="syz.0.213" path="/49/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.968467][ T28] audit: type=1400 audit(1778403832.648:387): avc: denied { execute } for pid=4050 comm="syz.0.213" path="/49/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.076247][ T28] audit: type=1400 audit(1778403832.808:388): avc: denied { ioctl } for pid=4062 comm="syz.3.218" path="socket:[7190]" dev="sockfs" ino=7190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.091280][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.113257][ T42] Bluetooth: hci1: command 0x1003 tx timeout [ 48.119308][ T3549] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.190109][ T28] audit: type=1400 audit(1778403832.918:389): avc: denied { read write } for pid=4067 comm="syz.3.220" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.224147][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.233585][ T28] audit: type=1400 audit(1778403832.918:390): avc: denied { open } for pid=4067 comm="syz.3.220" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.257463][ T28] audit: type=1400 audit(1778403832.948:391): avc: denied { execmem } for pid=4067 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.293270][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.400847][ T28] audit: type=1400 audit(1778403833.128:392): avc: denied { write } for pid=4067 comm="syz.3.220" name="hidraw0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.443944][ T28] audit: type=1326 audit(1778403833.178:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.0.224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d4c9cdd9 code=0x7ffc0000 [ 48.469298][ T3927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.572348][ T4090] geneve2: entered promiscuous mode [ 48.697352][ T4100] geneve2: entered promiscuous mode [ 48.714155][ T4101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 48.725343][ T1650] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 36197 - 0 [ 48.740556][ T1650] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 36197 - 0 [ 48.778097][ T4106] loop2: detected capacity change from 0 to 4096 [ 48.780635][ T1650] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 36197 - 0 [ 48.801059][ T4106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.818090][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 36197 - 0 [ 48.900409][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.979343][ T4115] loop3: detected capacity change from 0 to 128 [ 48.991970][ T4115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.007108][ T4115] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.045601][ T4115] EXT4-fs (loop3): shut down requested (2) [ 49.072414][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.202669][ T4086] Set syz1 is full, maxelem 65536 reached [ 49.249444][ T4121] loop4: detected capacity change from 0 to 1024 [ 49.270347][ T4121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.568719][ T4137] loop0: detected capacity change from 0 to 128 [ 49.584961][ T4137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 49.596148][ T4137] System zones: 1-3, 19-19, 35-36 [ 49.601629][ T4135] loop1: detected capacity change from 0 to 512 [ 49.608684][ T4137] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.622824][ T4137] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.659593][ T4137] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 4232683515 (only 1 groups) [ 49.682122][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.709403][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.755584][ T4135] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.304010][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.329187][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.491060][ T4157] syz.3.254 (4157) used greatest stack depth: 9304 bytes left [ 51.459866][ T4178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.531710][ T4178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.620411][ T4178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.655686][ T4191] loop2: detected capacity change from 0 to 128 [ 51.676447][ T4191] syz.2.270: attempt to access beyond end of device [ 51.676447][ T4191] loop2: rw=2049, sector=201, nr_sectors = 7 limit=128 [ 51.711113][ T4178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.711520][ T12] kworker/u8:0: attempt to access beyond end of device [ 51.711520][ T12] loop2: rw=1, sector=129, nr_sectors = 72 limit=128 [ 51.771953][ T4198] loop0: detected capacity change from 0 to 128 [ 51.818772][ T320] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.830766][ T4155] Set syz1 is full, maxelem 65536 reached [ 51.857298][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.885609][ T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.906510][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.476113][ T4239] loop4: detected capacity change from 0 to 2048 [ 52.506005][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.556104][ T4244] loop1: detected capacity change from 0 to 1024 [ 52.567757][ T4239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 52.602315][ T4239] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 52.609474][ T4244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.625700][ T4239] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.625700][ T4239] [ 52.659995][ T4239] EXT4-fs (loop4): Total free blocks count 0 [ 52.677615][ T4239] EXT4-fs (loop4): Free/Dirty block details [ 52.699830][ T4239] EXT4-fs (loop4): free_blocks=4096 [ 52.715644][ T4239] EXT4-fs (loop4): dirty_blocks=16 [ 52.731708][ T4239] EXT4-fs (loop4): Block reservation details [ 52.774078][ T4239] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 52.847603][ T320] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.881491][ T3307] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.184999][ T4235] Set syz1 is full, maxelem 65536 reached [ 53.421429][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.433384][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 53.433401][ T28] audit: type=1400 audit(1778403838.168:446): avc: denied { watch } for pid=4252 comm="syz.4.298" path="/47/file1" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.472247][ T4259] netlink: 'syz.2.296': attribute type 12 has an invalid length. [ 53.494101][ T4259] netlink: 120 bytes leftover after parsing attributes in process `syz.2.296'. [ 53.550883][ T4265] loop4: detected capacity change from 0 to 1024 [ 53.567695][ T28] audit: type=1400 audit(1778403838.298:447): avc: denied { mount } for pid=4266 comm="syz.3.302" name="/" dev="ramfs" ino=7433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.615919][ T4265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 53.629452][ T28] audit: type=1400 audit(1778403838.358:448): avc: denied { unmount } for pid=4266 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.655489][ T4270] SET target dimension over the limit! [ 53.677886][ T28] audit: type=1400 audit(1778403838.408:449): avc: denied { write } for pid=4264 comm="syz.4.301" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.700045][ T28] audit: type=1400 audit(1778403838.408:450): avc: denied { write } for pid=4264 comm="syz.4.301" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.722200][ T28] audit: type=1400 audit(1778403838.408:451): avc: denied { remove_name } for pid=4264 comm="syz.4.301" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.744792][ T28] audit: type=1400 audit(1778403838.408:452): avc: denied { rename } for pid=4264 comm="syz.4.301" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 53.767670][ T28] audit: type=1400 audit(1778403838.408:453): avc: denied { write } for pid=4264 comm="syz.4.301" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.793032][ T28] audit: type=1400 audit(1778403838.418:454): avc: denied { write } for pid=4264 comm="syz.4.301" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.818964][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 53.857847][ T28] audit: type=1400 audit(1778403838.418:455): avc: denied { write } for pid=4264 comm="syz.4.301" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.957414][ T4285] loop2: detected capacity change from 0 to 512 [ 53.971540][ T4287] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 54.018538][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.061237][ T4285] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.075023][ T4301] netlink: 'syz.3.316': attribute type 8 has an invalid length. [ 54.082863][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 54.104003][ T4285] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz.2.309: Directory hole found for htree leaf block 0 [ 54.110192][ T4304] loop4: detected capacity change from 0 to 256 [ 54.118518][ T4301] erspan0: entered promiscuous mode [ 54.128736][ T4304] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.142239][ T4301] gretap0: entered promiscuous mode [ 54.147573][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 54.150107][ T4301] hsr1: entered promiscuous mode [ 54.162961][ T4304] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.217087][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.231241][ T4308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 54.243300][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.263591][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.297248][ T4312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'. [ 54.400707][ T4327] loop2: detected capacity change from 0 to 1024 [ 54.411032][ T4329] sctp: [Deprecated]: syz.0.327 (pid 4329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.411032][ T4329] Use struct sctp_sack_info instead [ 54.412969][ T4327] EXT4-fs: Ignoring removed bh option [ 54.448036][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.472327][ T4327] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.537302][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.639967][ T4354] xt_l2tp: unknown flags: 10 [ 54.657027][ T4356] serio: Serial port ptm0 [ 55.597474][ T4384] loop2: detected capacity change from 0 to 128 [ 55.605167][ T4385] loop0: detected capacity change from 0 to 1024 [ 55.625471][ T4383] loop4: detected capacity change from 0 to 4096 [ 55.639122][ T4385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.648462][ T4383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.888381][ T4401] loop2: detected capacity change from 0 to 128 [ 55.929463][ T4383] ================================================================== [ 55.937591][ T4383] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 55.944999][ T4383] [ 55.947343][ T4383] read-write to 0xffff88811b812fe0 of 8 bytes by task 107 on cpu 0: [ 55.955329][ T4383] __xa_clear_mark+0xf5/0x1e0 [ 55.960035][ T4383] __folio_end_writeback+0xf4/0x360 [ 55.965266][ T4383] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 55.971546][ T4383] folio_end_writeback+0x1c/0x70 [ 55.976512][ T4383] ext4_finish_bio+0x450/0x760 [ 55.981317][ T4383] ext4_release_io_end+0x9f/0x1f0 [ 55.986408][ T4383] ext4_end_io_end+0x18d/0x240 [ 55.991209][ T4383] ext4_end_io_rsv_work+0x15b/0x1f0 [ 55.996443][ T4383] process_scheduled_works+0x4f0/0x9c0 [ 56.001943][ T4383] worker_thread+0x58a/0x780 [ 56.006557][ T4383] kthread+0x22a/0x280 [ 56.010644][ T4383] ret_from_fork+0x146/0x330 [ 56.015257][ T4383] ret_from_fork_asm+0x1a/0x30 [ 56.020054][ T4383] [ 56.022394][ T4383] read to 0xffff88811b812fe0 of 8 bytes by task 4383 on cpu 1: [ 56.029954][ T4383] xas_find_marked+0x213/0x620 [ 56.034759][ T4383] filemap_get_folios_tag+0xfa/0x430 [ 56.040065][ T4383] file_write_and_wait_range+0x20c/0x2f0 [ 56.045716][ T4383] mmb_fsync_noflush+0x48/0x140 [ 56.050578][ T4383] ext4_sync_file+0x1f1/0x6b0 [ 56.055283][ T4383] vfs_fsync_range+0xc5/0xe0 [ 56.059891][ T4383] ext4_buffered_write_iter+0x447/0x4c0 [ 56.065475][ T4383] ext4_file_write_iter+0x380/0xfa0 [ 56.070696][ T4383] do_iter_readv_writev+0x4fd/0x5a0 [ 56.075914][ T4383] vfs_writev+0x2e1/0x900 [ 56.080251][ T4383] __se_sys_pwritev2+0xfc/0x1c0 [ 56.085128][ T4383] __x64_sys_pwritev2+0x67/0x80 [ 56.089999][ T4383] x64_sys_call+0xe07/0x3020 [ 56.094608][ T4383] do_syscall_64+0x12c/0x3b0 [ 56.099218][ T4383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.105128][ T4383] [ 56.107463][ T4383] value changed: 0xffffffffffffffff -> 0xfffffffffffff000 [ 56.114589][ T4383] [ 56.116918][ T4383] Reported by Kernel Concurrency Sanitizer on: [ 56.123099][ T4383] CPU: 1 UID: 0 PID: 4383 Comm: syz.4.351 Not tainted syzkaller #0 PREEMPT(full) [ 56.132305][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 56.142371][ T4383] ================================================================== [ 56.325255][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.473216][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.