last executing test programs: 2.518078405s ago: executing program 4 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x238, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409}], {0x14}}, 0x3c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) 2.468271649s ago: executing program 4 (id=1801): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x4973, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, 0x0) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 2.442868161s ago: executing program 4 (id=1803): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x0) 2.423009213s ago: executing program 4 (id=1804): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 2.401469924s ago: executing program 4 (id=1805): inotify_init1(0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xe, &(0x7f0000000480)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 2.303818642s ago: executing program 4 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800004466000000000000000000008ea7543f0010110000", @ANYBLOB="00000000000000f7b6080000000000007b8af8ff000000ffbfa2000000ef9ee93fe321135372da100400d34cec8900000005"], 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x220, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x0, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f00000002c0), &(0x7f0000000a40)=""/4096, &(0x7f00000003c0)="3fd9c627db48509ddac9a6e5c380b022f15518337f5a31ca07490a72f407482e86518ebfbb8c44fd2d4e60ea9d6991f3ab659a24e2dce98f65d766f9921cea1d3efe87741ed78f4a238e6ff52e91142817790040ae84272404b3bbdaa1ba6fbeb8ef7d291414f6902a95a5d7f9f1e315c3ade99b2a16bba6c6cde1e5d1", &(0x7f0000000500)="2a73e4e45a37e41384b29c1920be0e2edfb5568a17cc20307c74121b83eeae745de9240e9acb750c75389e43f9a2e9e5ad90ed6623c3c5af1a1bf8d6f986bac0c4e3a7ac5a18d5fe7623fa362719eb323e17911350f90e202e49a9e0b998abf65f94de6f7165119b7e79f754cf8c83cb73e20aba2552f243d94c161b9436c98004419343e7c1383241fa3de5b2ff96b20e4628451a4d0d9c63cc1d0d24ce67ab286214a5616817e78c0e899c2d6a8837fb10132d1972ff081dc80b65c3e9fa55d8fe7b92b562ab6db590856f8087101c94769e8a7eec21b8336c74a8a28dd10adf18ae8efb1d7715c502205438333d", 0x4, r1}, 0x38) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r4, 0x8982, 0x20000000) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2077, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_IOCTL(r5, 0xc00c5512, 0x0) connect$can_bcm(r0, &(0x7f0000001e40), 0x2b) 2.135905806s ago: executing program 3 (id=1818): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11fe, &(0x7f0000000780)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x4, 0x0) 2.005720746s ago: executing program 3 (id=1824): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 2.005501036s ago: executing program 3 (id=1825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000009c0)={@val={0x58}, @void, @eth={@multicast, @local, @val={@void}, {@generic={0x88ca}}}}, 0x16) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cffdf8cbb00010000e40000000000001c00000300000000325de115"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) mq_getsetattr(r8, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mlockall(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TCSETSF2(0xffffffffffffffff, 0x5424, 0xfffffffffffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.433261113s ago: executing program 2 (id=1845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) 1.35773688s ago: executing program 3 (id=1846): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="9d", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4) 1.357564549s ago: executing program 2 (id=1847): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000340)={0x2, 0x0, 0x8}) 1.357427789s ago: executing program 3 (id=1848): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="c60a0000000000006b110600000000001800000000000000000000000000fc009500000000000000bf07a2643fcb09f09e8b32aec6cb609a17fc88814d3e8cc883476a97d23f0612310ce244a64c411145c418312bb3378a5dcfe6be6a9858992ff8496e76377ac271ca5f22ddaa38a1746ad6143316264a53c15ad9082f0b9bfff254e3fb9c63d545a3f0496d52d600539287cbad8116b2d50680d6fba3d20e1947478c0f4f7082d209048344568ce9f1c1895c48"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) bind$netlink(r4, &(0x7f0000000240), 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x68, 0x13, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0xffffff81}, {0x0, 0x0, 0xf2}]}) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000680)={r10, 0x3, 0x6}, 0x10) 480.474131ms ago: executing program 3 (id=1855): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='io_uring_register\x00'}, 0x10) r4 = io_uring_setup(0x28bc, &(0x7f0000000100)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000300)=""/250, &(0x7f00000000c0)=0xfa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}, 0x20) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000940)=""/4096, &(0x7f0000000000)=0x1000) 381.138398ms ago: executing program 1 (id=1862): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2b}, 0x20) 367.43745ms ago: executing program 0 (id=1863): r0 = socket$packet(0x11, 0x3, 0x300) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb100002f000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 354.123281ms ago: executing program 1 (id=1864): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 310.118544ms ago: executing program 2 (id=1865): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100), r2, 0x0, 0x1, 0xfdf1}}, 0x20) 309.717094ms ago: executing program 0 (id=1866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000080)="02001e2a020002e300308d9ebfa7d9e6", 0x10) 307.855944ms ago: executing program 2 (id=1867): syz_emit_ethernet(0x8e, &(0x7f0000000ac0)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x54, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4fa860", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [@hopopts={0x2f, 0x2, '\x00', [@generic, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo]}, @fragment={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], "6fefca4a"}}}}}}}, 0x0) 295.475186ms ago: executing program 0 (id=1868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x18, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CT={0x4}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000001c0)=0xc8, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x10c) writev(r7, &(0x7f0000000400), 0x26) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x79, 0xe8, 0x2, 0x2, 0x1, 0x7, 0x7}}, {0x12, 0x2, [0x8, 0x7, 0x9, 0x6, 0x7f, 0x93d0, 0x4]}}, {{0x1c, 0x1, {0x4, 0x66, 0x6, 0x15f, 0x1, 0x0, 0x6, 0x5}}, {0xe, 0x2, [0x6, 0xffff, 0x4, 0xb1, 0x7ff]}}, {{0x1c, 0x1, {0x1, 0xf, 0x68fc, 0x5d85, 0x2, 0x800, 0xf58, 0x6}}, {0x10, 0x2, [0xff, 0x80, 0x3, 0x126, 0x25f, 0x0]}}, {{0x1c, 0x1, {0x8, 0x5, 0x800, 0xff5d, 0x1, 0x0, 0xffff, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0xd4}}, 0x0) io_uring_enter(r7, 0x712, 0xc42a, 0x10, &(0x7f0000000300)={[0x5]}, 0x8) 293.571426ms ago: executing program 2 (id=1869): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000514ff4), 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 275.607968ms ago: executing program 1 (id=1870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4) 269.004808ms ago: executing program 0 (id=1871): r0 = gettid() sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000000, 0xff54}, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000140)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000940)=@IORING_OP_UNLINKAT={0x24, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000001700)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d72656d6f756e742d726f2c636865636b3d7374726963742c757466604e740e87d9e7fe4e383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d312c00dcc7853f1234f97c0b7050325b1e5f7d9233d0f117f1d59a6e12cc4aacd830312bf1d604fe1ff06cebbd"], 0xff, 0x191, &(0x7f0000000580)="$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") open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) prctl$PR_SET_SECUREBITS(0x1c, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) recvmsg(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000180)=""/18, 0x12}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f0000001400)=""/87, 0x57}], 0x6, &(0x7f0000001500)=""/186, 0xba}, 0x61) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='~\x00\x00\n', @ANYRES16=0x0, @ANYBLOB="0000f33bdc97a8d29ebcae76e05f43000000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800a500000000000400a6804000a6800a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000800a50001"], 0x7c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f00000016c0)='system_u:object_r:crash_device_t:s0\x00', 0x7, 0x3) r8 = socket(0x10, 0x2, 0x80) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) accept(r5, &(0x7f0000001600)=@in6={0xa, 0x0, 0x0, @dev}, 0x0) 259.209169ms ago: executing program 1 (id=1872): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001b80)={0x18, r0, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 251.330189ms ago: executing program 2 (id=1873): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='attr/prev\x00') pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={0x3fc}, 0x0, 0x0) 242.45538ms ago: executing program 1 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) 69.674864ms ago: executing program 0 (id=1875): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)}}], 0x3, 0x0) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000001300f5d100"/20, @ANYRES32=r7, @ANYBLOB="020000000000000008002800002900000001000000000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x1fc, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3c}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20004000}, 0x20014040) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r13, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000002c0)={'bond_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) close_range(r11, 0xffffffffffffffff, 0x0) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYBLOB="cb4512e68e16d29700bab79bb109f810e2468a6eae059e5aa10128311e65759349f7ddf68ed34ebe6990a236f1b1d3d0a04425aab26e1244ce923e40e6fd7ba5948991a5d4c630f236f8bf0e0c55f214e46a47546f229ff5f833515d0f26a1c00e6720a6193613bae3158c5229a841b34c166a2c64b1f23c68c732c0cf2dbf6d31e1baa07ef851ea3b8424d662e96844d9c763aa019f371b82a9c383096f8105ad99b68da254f8a55b476e6c84ee12a5d84e73c76d3e4f7b7af5d348dc7414bf8ab4f51755afa9f6ae0b0bec13f80cd2f376835cd8ac29d67bc2998898ac184fadaf", @ANYBLOB="00000000000000005c001280080001006772650050000280050013000000000006000f0036000000050008001f0000000800050004000000040012"], 0x84}}, 0x0) 69.584164ms ago: executing program 1 (id=1876): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 0s ago: executing program 0 (id=1877): socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300), 0x16) r3 = dup3(r2, r0, 0x0) sendfile(r3, r1, 0x0, 0x800008038) sendfile(r0, r1, 0x0, 0xef84) kernel console output (not intermixed with test programs): =0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.4.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc5179f9 code=0x0 [ 91.909254][ T6460] loop2: detected capacity change from 0 to 512 [ 91.919865][ T6460] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.580083][ T6484] loop0: detected capacity change from 0 to 128 [ 92.589019][ T6484] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.689457][ T6493] loop2: detected capacity change from 0 to 128 [ 92.798847][ T6493] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.901881][ T6510] loop2: detected capacity change from 0 to 512 [ 92.911018][ T6510] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 92.919399][ T6510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.926056][ T6510] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 92.936572][ T6510] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.952417][ T6510] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 92.953833][ T6514] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 92.961511][ T6510] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.991: casefold flag without casefold feature [ 92.981055][ T6510] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.991: couldn't read orphan inode 16 (err -117) [ 93.002973][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 93.058645][ T6514] veth0_vlan: left promiscuous mode [ 93.065143][ T6514] veth0_vlan: entered promiscuous mode [ 93.073491][ T6514] team0: Device veth0_vlan failed to register rx_handler [ 93.091643][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1004'. [ 93.226495][ T29] audit: type=1326 audit(1722791948.972:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09aac579f9 code=0x7ffc0000 [ 93.249995][ T29] audit: type=1326 audit(1722791948.972:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09aac579f9 code=0x7ffc0000 [ 93.252383][ T6543] loop3: detected capacity change from 0 to 1024 [ 93.284729][ T6544] loop1: detected capacity change from 0 to 512 [ 93.291839][ T6543] EXT4-fs: Ignoring removed nobh option [ 93.297557][ T6543] EXT4-fs: Ignoring removed orlov option [ 93.298769][ T29] audit: type=1326 audit(1722791949.032:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09aac579f9 code=0x7ffc0000 [ 93.326939][ T29] audit: type=1326 audit(1722791949.032:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09aac579f9 code=0x7ffc0000 [ 93.339005][ T6546] pim6reg: entered allmulticast mode [ 93.354236][ T6544] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.372346][ T6546] pim6reg: left allmulticast mode [ 93.419060][ T6554] loop3: detected capacity change from 0 to 764 [ 93.434046][ T6554] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 93.481535][ T6560] loop2: detected capacity change from 0 to 1024 [ 93.541771][ T6566] loop2: detected capacity change from 0 to 1024 [ 93.548890][ T6566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.615880][ T6570] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 93.638468][ T6572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6572 comm=syz.2.1017 [ 94.042197][ T6593] netlink: 'syz.4.1035': attribute type 10 has an invalid length. [ 94.078854][ T6593] macvlan1: entered promiscuous mode [ 94.084227][ T6593] macvlan1: entered allmulticast mode [ 94.138781][ T6593] veth1_vlan: entered allmulticast mode [ 94.155284][ T6598] loop2: detected capacity change from 0 to 512 [ 94.190216][ T6593] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 94.218576][ T6598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.232241][ T6598] EXT4-fs (loop2): 1 truncate cleaned up [ 94.239413][ T6603] loop1: detected capacity change from 0 to 128 [ 94.253645][ T6603] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.329494][ T6562] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 94.452315][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 94.471060][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1036'. [ 94.486930][ T6640] pim6reg: entered allmulticast mode [ 94.510812][ T6640] pim6reg: left allmulticast mode [ 94.577769][ T6650] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 94.603937][ T6648] loop1: detected capacity change from 0 to 4096 [ 94.612236][ T6648] EXT4-fs (loop1): unsupported descriptor size 0 [ 94.618842][ T6650] macvlan1: entered promiscuous mode [ 94.624160][ T6650] macvlan1: entered allmulticast mode [ 94.646504][ T6650] veth1_vlan: entered allmulticast mode [ 94.680404][ T6650] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 94.834786][ T6667] loop2: detected capacity change from 0 to 1024 [ 94.841567][ T6667] EXT4-fs: Ignoring removed nobh option [ 94.847205][ T6667] EXT4-fs: Ignoring removed orlov option [ 94.864578][ T6669] loop0: detected capacity change from 0 to 1024 [ 94.874153][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 94.874166][ T29] audit: type=1326 audit(1722791950.612:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4245a579f9 code=0x7ffc0000 [ 94.903776][ T29] audit: type=1326 audit(1722791950.612:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4245a579f9 code=0x7ffc0000 [ 94.927300][ T29] audit: type=1326 audit(1722791950.612:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4245a579f9 code=0x7ffc0000 [ 94.951224][ T29] audit: type=1326 audit(1722791950.612:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4245a579f9 code=0x7ffc0000 [ 94.975186][ T29] audit: type=1326 audit(1722791950.612:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4245a57a33 code=0x7ffc0000 [ 94.998403][ T29] audit: type=1326 audit(1722791950.612:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4245a564df code=0x7ffc0000 [ 95.021668][ T29] audit: type=1326 audit(1722791950.612:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4245a57a87 code=0x7ffc0000 [ 95.045841][ T29] audit: type=1326 audit(1722791950.612:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4245a56390 code=0x7ffc0000 [ 95.069527][ T29] audit: type=1326 audit(1722791950.612:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4245a575fb code=0x7ffc0000 [ 95.092879][ T29] audit: type=1326 audit(1722791950.622:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4245a5668a code=0x7ffc0000 [ 95.386533][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 95.573808][ T6659] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 95.733729][ T6696] loop1: detected capacity change from 0 to 1024 [ 95.779800][ T6696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.832651][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'. [ 95.965283][ T6709] msdos: Unknown parameter 'rt' [ 96.325805][ T6720] loop0: detected capacity change from 0 to 256 [ 96.346338][ T6718] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 96.411074][ T6724] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 96.593661][ T6741] loop0: detected capacity change from 0 to 1024 [ 96.609727][ T6741] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 96.620745][ T6741] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 96.645590][ T6741] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.657067][ T6741] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.1070: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 96.677508][ T6741] EXT4-fs (loop0): no journal found [ 96.709920][ T6745] msdos: Unknown parameter 'rt' [ 96.721150][ T6747] loop4: detected capacity change from 0 to 2048 [ 96.735290][ T6747] ext4: Unknown parameter 'uid>00000000000000000000' [ 96.828606][ T3341] IPVS: starting estimator thread 0... [ 96.851877][ T6751] loop1: detected capacity change from 0 to 512 [ 96.870968][ T6751] EXT4-fs: Ignoring removed oldalloc option [ 96.877927][ T6762] loop4: detected capacity change from 0 to 4096 [ 96.885155][ T6751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.894173][ T6762] EXT4-fs (loop4): unsupported descriptor size 0 [ 96.917259][ T6751] loop1: detected capacity change from 0 to 128 [ 96.947254][ T6761] IPVS: using max 2208 ests per chain, 110400 per kthread [ 97.294227][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 97.424603][ T6780] loop1: detected capacity change from 0 to 1024 [ 97.500865][ T6780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.688499][ T6795] loop0: detected capacity change from 0 to 164 [ 97.696219][ T6795] Unable to read rock-ridge attributes [ 97.843547][ T6810] loop0: detected capacity change from 0 to 512 [ 97.855922][ T6810] EXT4-fs: Ignoring removed oldalloc option [ 97.866113][ T6810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.888518][ T6814] loop1: detected capacity change from 0 to 512 [ 97.898209][ T6814] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 97.910398][ T6817] loop4: detected capacity change from 0 to 512 [ 97.919077][ T6814] EXT4-fs (loop1): invalid journal inode [ 97.924763][ T6814] EXT4-fs (loop1): can't get journal size [ 97.925538][ T6810] EXT4-fs (loop0): 1 truncate cleaned up [ 97.932914][ T6817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.945506][ T6814] EXT4-fs (loop1): 1 truncate cleaned up [ 97.956910][ T6814] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 97.969768][ T6817] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 97.980334][ T6817] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 98.000455][ T6817] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3011510273 > max in inode 13 [ 98.014595][ T6817] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3011510274 > max in inode 13 [ 98.025759][ T6817] EXT4-fs (loop4): 1 truncate cleaned up [ 98.062528][ T6817] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 4: comm syz.4.1102: lblock 0 mapped to illegal pblock 4 (length 1) [ 98.078033][ T6817] EXT4-fs (loop4): Remounting filesystem read-only [ 98.118979][ T6823] loop2: detected capacity change from 0 to 8192 [ 98.127552][ T6823] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿcq¤(^&w1u‡µwý¦Áf¤;{Wƒ¤€”Æ{8Å!¿5yÔá' [ 98.158748][ T6829] loop0: detected capacity change from 0 to 128 [ 98.190964][ T6834] loop1: detected capacity change from 0 to 2048 [ 98.216341][ T6835] loop4: detected capacity change from 0 to 1024 [ 98.227335][ T6835] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.342690][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 98.410707][ T6852] 9pnet_fd: p9_fd_create_tcp (6852): problem connecting socket to 127.0.0.1 [ 98.491921][ T6872] loop1: detected capacity change from 0 to 512 [ 98.645168][ T6872] EXT4-fs mount: 54 callbacks suppressed [ 98.645186][ T6872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.698614][ T6872] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.723392][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 99.140982][ T6905] 9pnet_fd: p9_fd_create_tcp (6905): problem connecting socket to 127.0.0.1 [ 99.152858][ T6906] loop3: detected capacity change from 0 to 1024 [ 99.169407][ T6906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.192436][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.262429][ T4902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.360492][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.414163][ T6924] loop1: detected capacity change from 0 to 512 [ 99.440508][ T6924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.448690][ T6936] loop4: detected capacity change from 0 to 128 [ 99.459502][ T6924] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.459745][ T6936] EXT4-fs: Ignoring removed nobh option [ 99.482734][ T6938] loop0: detected capacity change from 0 to 128 [ 99.485417][ T6936] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.525500][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.536734][ T6936] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.591696][ T5683] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.711663][ T6954] loop4: detected capacity change from 0 to 128 [ 99.906905][ T6975] loop0: detected capacity change from 0 to 512 [ 99.913723][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 99.913739][ T29] audit: type=1326 audit(1722791955.662:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.1161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b6c79f9 code=0x0 [ 99.943672][ T6975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.955813][ T6975] EXT4-fs (loop0): 1 truncate cleaned up [ 99.960575][ T6977] loop4: detected capacity change from 0 to 1024 [ 99.962658][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.972212][ T6977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.992449][ T6975] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.992495][ T6977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.074316][ T6985] netlink: 'syz.0.1167': attribute type 9 has an invalid length. [ 100.082163][ T6985] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1167'. [ 100.169762][ T6987] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 100.300441][ T29] audit: type=1400 audit(1722791956.052:1204): avc: denied { read write } for pid=6995 comm="syz.2.1170" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.324011][ T29] audit: type=1400 audit(1722791956.052:1205): avc: denied { open } for pid=6995 comm="syz.2.1170" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.359978][ T29] audit: type=1400 audit(1722791956.102:1206): avc: denied { prog_load } for pid=6995 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.379101][ T29] audit: type=1400 audit(1722791956.102:1207): avc: denied { bpf } for pid=6995 comm="syz.2.1170" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.400060][ T29] audit: type=1400 audit(1722791956.102:1208): avc: denied { perfmon } for pid=6995 comm="syz.2.1170" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.421066][ T29] audit: type=1400 audit(1722791956.102:1209): avc: denied { prog_run } for pid=6995 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.440635][ T29] audit: type=1400 audit(1722791956.102:1210): avc: denied { create } for pid=6995 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.460657][ T29] audit: type=1400 audit(1722791956.102:1211): avc: denied { connect } for pid=6995 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.480540][ T29] audit: type=1400 audit(1722791956.102:1212): avc: denied { name_connect } for pid=6995 comm="syz.2.1170" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 100.510346][ T6999] bond_slave_0: entered promiscuous mode [ 100.516055][ T6999] bond_slave_1: entered promiscuous mode [ 100.526156][ T6999] bond_slave_0: left promiscuous mode [ 100.531682][ T6999] bond_slave_1: left promiscuous mode [ 100.641767][ T6999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.654846][ T6999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.668938][ T6999] bond0 (unregistering): Released all slaves [ 100.703540][ T5683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.714531][ T7002] loop0: detected capacity change from 0 to 128 [ 100.775301][ T7012] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.803805][ T7014] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 100.826627][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 100.827145][ T7019] loop4: detected capacity change from 0 to 2048 [ 100.843426][ T7019] msdos: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿ' [ 100.902622][ T7030] loop0: detected capacity change from 0 to 1024 [ 100.913550][ T7030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.938489][ T7036] loop4: detected capacity change from 0 to 512 [ 100.949285][ T7036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.962726][ T7036] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.992557][ T5683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.026467][ T5517] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.043878][ T5480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.075475][ T7048] loop4: detected capacity change from 0 to 1024 [ 101.093410][ T5480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.105253][ T7048] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 101.113507][ T7048] System zones: 0-1, 3-12 [ 101.118876][ T7048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.153731][ T5480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.169572][ T5683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.203845][ T5480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.288433][ T7050] chnl_net:caif_netlink_parms(): no params data found [ 101.297290][ T5480] bridge_slave_0: left allmulticast mode [ 101.302966][ T5480] bridge_slave_0: left promiscuous mode [ 101.308667][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.319886][ T5480] bridge_slave_1: left allmulticast mode [ 101.325693][ T5480] bridge_slave_1: left promiscuous mode [ 101.331490][ T5480] bridge1: port 1(bridge_slave_1) entered disabled state [ 101.428969][ T7080] loop4: detected capacity change from 0 to 2048 [ 101.435588][ T7080] ext4: Unknown parameter 'fowner<00000000000000000000' [ 101.569402][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.576559][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.584143][ T7050] bridge_slave_0: entered allmulticast mode [ 101.591761][ T7050] bridge_slave_0: entered promiscuous mode [ 101.599298][ T5480] tipc: Disabling bearer [ 101.604677][ T5480] tipc: Left network mode [ 101.604727][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.616465][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.623840][ T7050] bridge_slave_1: entered allmulticast mode [ 101.630849][ T7050] bridge_slave_1: entered promiscuous mode [ 101.649922][ T7099] program syz.4.1204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.663016][ T7050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.679988][ T5480] hsr_slave_0: left promiscuous mode [ 101.689486][ T5480] hsr_slave_1: left promiscuous mode [ 101.695522][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.703260][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.710970][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.718470][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.728171][ T5480] veth1_macvtap: left promiscuous mode [ 101.733683][ T5480] veth0_macvtap: left promiscuous mode [ 101.739805][ T5480] veth1_vlan: left promiscuous mode [ 101.833896][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 101.845169][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 101.904103][ T7050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.913416][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 101.946849][ T7050] team0: Port device team_slave_0 added [ 101.960487][ T7050] team0: Port device team_slave_1 added [ 101.983062][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.990211][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.016513][ T7050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.032088][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.039244][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.063998][ T7130] tmpfs: Bad value for 'mpol' [ 102.065257][ T7050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.114252][ T7050] hsr_slave_0: entered promiscuous mode [ 102.122342][ T7050] hsr_slave_1: entered promiscuous mode [ 102.132570][ T7050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.141583][ T7050] Cannot create hsr debugfs directory [ 102.144992][ T7132] loop1: detected capacity change from 0 to 1764 [ 102.155266][ T7132] iso9660: Bad value for 'uid' [ 102.160237][ T7132] iso9660: Bad value for 'uid' [ 102.255750][ T5480] IPVS: stop unused estimator thread 0... [ 102.292071][ T7150] loop2: detected capacity change from 0 to 512 [ 102.303339][ T7150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.321967][ T7150] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.348780][ T7150] Process accounting resumed [ 102.355674][ T7150] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.399875][ T4822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.512008][ T7050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.522647][ T7158] loop2: detected capacity change from 0 to 256 [ 102.544197][ T7050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.565498][ T7050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.582950][ T7050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.595305][ T3326] kernel write not supported for file /251/net/ip6_tables_matches (pid: 3326 comm: kworker/0:2) [ 102.676904][ T7050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.706121][ T7050] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.723542][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.730768][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.760050][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.767234][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.866468][ T7182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'. [ 102.944913][ T7050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.021180][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.2.1239 [ 103.069879][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 103.096054][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.162485][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.179138][ T7191] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 103.208544][ T7191] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 103.265440][ T7050] veth0_vlan: entered promiscuous mode [ 103.281757][ T7050] veth1_vlan: entered promiscuous mode [ 103.302296][ T7050] veth0_macvtap: entered promiscuous mode [ 103.318413][ T7050] veth1_macvtap: entered promiscuous mode [ 103.335428][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.346017][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.355970][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.367090][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.377039][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.387614][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.397508][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.408019][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.419099][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.431302][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.441881][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.451785][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.462301][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.472253][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.482674][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.492529][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.502991][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.515171][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.529005][ T7050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.538153][ T7050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.546912][ T7050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.555785][ T7050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.568234][ T7228] netlink: 'syz.1.1249': attribute type 10 has an invalid length. [ 103.576254][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1249'. [ 103.587080][ T7228] bridge0: port 3(veth1_macvtap) entered blocking state [ 103.594416][ T7228] bridge0: port 3(veth1_macvtap) entered disabled state [ 103.601787][ T7228] veth1_macvtap: entered allmulticast mode [ 103.608612][ T7228] veth1_macvtap: left allmulticast mode [ 103.614748][ T7228] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 103.765302][ T7253] program syz.3.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.180653][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 104.272950][ T7292] loop3: detected capacity change from 0 to 2048 [ 104.300227][ T7292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.335605][ T7292] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 104.347945][ T7292] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.347945][ T7292] [ 104.357672][ T7292] EXT4-fs (loop3): Total free blocks count 0 [ 104.363674][ T7292] EXT4-fs (loop3): Free/Dirty block details [ 104.369673][ T7292] EXT4-fs (loop3): free_blocks=0 [ 104.374887][ T7292] EXT4-fs (loop3): dirty_blocks=0 [ 104.378724][ T7270] chnl_net:caif_netlink_parms(): no params data found [ 104.380061][ T7292] EXT4-fs (loop3): Block reservation details [ 104.392948][ T7292] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 104.403624][ T7302] netlink: 'syz.4.1281': attribute type 32 has an invalid length. [ 104.411519][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 104.420744][ T7302] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 104.430829][ T4902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.442842][ T7302] loop4: detected capacity change from 0 to 1024 [ 104.450049][ T7302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.457664][ T7302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.474830][ T7302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 104.496325][ T7302] System zones: 0-1, 3-36 [ 104.503110][ T7302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.517723][ T7316] loop3: detected capacity change from 0 to 512 [ 104.524536][ T7316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.531560][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.538725][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.548313][ T7316] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 104.557758][ T7270] bridge_slave_0: entered allmulticast mode [ 104.565509][ T7270] bridge_slave_0: entered promiscuous mode [ 104.572677][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.579860][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.588411][ T7270] bridge_slave_1: entered allmulticast mode [ 104.595083][ T7270] bridge_slave_1: entered promiscuous mode [ 104.630271][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.653526][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.681337][ T7270] team0: Port device team_slave_0 added [ 104.688060][ T7270] team0: Port device team_slave_1 added [ 104.710667][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.717791][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.744016][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.756875][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.763908][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.789886][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.965498][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 104.965518][ T29] audit: type=1400 audit(1722792472.712:1362): avc: denied { mount } for pid=7332 comm="syz.2.1290" name="/" dev="hugetlbfs" ino=18236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 105.064229][ T5683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.128749][ T7270] hsr_slave_0: entered promiscuous mode [ 105.134853][ T29] audit: type=1400 audit(1722792472.882:1363): avc: denied { unmount } for pid=4822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 105.159788][ T7270] hsr_slave_1: entered promiscuous mode [ 105.165495][ T29] audit: type=1400 audit(1722792472.912:1364): avc: denied { bind } for pid=7340 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.187796][ T7270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.190329][ T7345] netlink: 'syz.2.1294': attribute type 3 has an invalid length. [ 105.195469][ T7270] Cannot create hsr debugfs directory [ 105.203292][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 105.217541][ T7344] loop4: detected capacity change from 0 to 512 [ 105.227197][ T7344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 105.235664][ T7344] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.236379][ T7345] netlink: 'syz.2.1294': attribute type 3 has an invalid length. [ 105.243294][ T7344] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 105.249919][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 105.274413][ T7344] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 105.285585][ T7349] loop2: detected capacity change from 0 to 512 [ 105.293108][ T7349] ext4: Unknown parameter 'noacl' [ 105.298818][ T7344] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.1296: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 105.358255][ T7344] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1296: couldn't read orphan inode 13 (err -117) [ 105.417524][ T7359] loop0: detected capacity change from 0 to 2048 [ 105.421273][ T29] audit: type=1400 audit(1722792473.142:1365): avc: denied { getopt } for pid=7356 comm="syz.0.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.448263][ T7344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.455083][ T7270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.476565][ T7365] loop2: detected capacity change from 0 to 256 [ 105.485785][ T29] audit: type=1326 audit(1722792473.232:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.4.1296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc5179f9 code=0x0 [ 105.511314][ T7359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.512192][ T29] audit: type=1326 audit(1722792473.262:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.3.1305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98f17e79f9 code=0x0 [ 105.546673][ T7359] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 105.559021][ T7359] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.559021][ T7359] [ 105.568877][ T7359] EXT4-fs (loop0): Total free blocks count 0 [ 105.575049][ T7359] EXT4-fs (loop0): Free/Dirty block details [ 105.580999][ T7359] EXT4-fs (loop0): free_blocks=0 [ 105.586052][ T7359] EXT4-fs (loop0): dirty_blocks=0 [ 105.591108][ T7359] EXT4-fs (loop0): Block reservation details [ 105.597080][ T7359] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 105.616079][ T7270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.636675][ T29] audit: type=1400 audit(1722792473.372:1368): avc: denied { read } for pid=7372 comm="syz.2.1306" path="socket:[18311]" dev="sockfs" ino=18311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.662437][ T7050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.662477][ T29] audit: type=1400 audit(1722792473.402:1369): avc: denied { read } for pid=7372 comm="syz.2.1306" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.694798][ T29] audit: type=1400 audit(1722792473.402:1370): avc: denied { open } for pid=7372 comm="syz.2.1306" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.719309][ T29] audit: type=1326 audit(1722792473.412:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.2.1306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09aac579f9 code=0x0 [ 105.725658][ T7374] Invalid ELF section header overflow [ 105.784958][ T7270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.841584][ T7270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.906484][ T7270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.918578][ T7270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.928963][ T7270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.938484][ T7270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.994171][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.019233][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.027615][ T5683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.033752][ T7396] loop0: detected capacity change from 0 to 8192 [ 106.048425][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.055674][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.062967][ T7396] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 106.065614][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.070234][ T7396] FAT-fs (loop0): Filesystem has been set read-only [ 106.077295][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.157511][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.170435][ T7402] loop0: detected capacity change from 0 to 8192 [ 106.229223][ T7402] loop0: p1 p2 p3 p4 [ 106.233391][ T7402] loop0: p1 start 17760256 is beyond EOD, truncated [ 106.240127][ T7402] loop0: p2 size 64053 extends beyond EOD, truncated [ 106.250358][ T7402] loop0: p3 start 458496 is beyond EOD, [ 106.250360][ T7270] veth0_vlan: entered promiscuous mode [ 106.254189][ T7270] veth1_vlan: entered promiscuous mode [ 106.256027][ T7402] truncated [ 106.256036][ T7402] loop0: p4 size 50331648 extends beyond EOD, truncated [ 106.296943][ T7270] veth0_macvtap: entered promiscuous mode [ 106.312464][ T7270] veth1_macvtap: entered promiscuous mode [ 106.330773][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.341506][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.351659][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.362253][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.372205][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.382741][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.392690][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.403505][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.413460][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.423938][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.436468][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.445197][ T7416] bond_slave_0: entered promiscuous mode [ 106.451055][ T7416] bond_slave_1: entered promiscuous mode [ 106.458748][ T7420] bond_slave_0: left promiscuous mode [ 106.464204][ T7420] bond_slave_1: left promiscuous mode [ 106.493928][ T7420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.518505][ T7420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.538838][ T7420] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 106.553640][ T7420] veth1_vlan: left allmulticast mode [ 106.567798][ T7420] bond0 (unregistering): Released all slaves [ 106.585181][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.595929][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.605821][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.616435][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.616456][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.637484][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.647463][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.657955][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.667819][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.678440][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.690621][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.703176][ T7270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.712244][ T7270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.721150][ T7270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.730127][ T7270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.745523][ T7423] loop2: detected capacity change from 0 to 128 [ 106.950313][ T7442] loop3: detected capacity change from 0 to 1764 [ 106.950400][ T7446] loop4: detected capacity change from 0 to 256 [ 106.957379][ T7442] iso9660: Bad value for 'uid' [ 106.968071][ T7442] iso9660: Bad value for 'uid' [ 107.039266][ T7455] loop4: detected capacity change from 0 to 164 [ 107.068044][ T7457] bond_slave_0: entered promiscuous mode [ 107.073735][ T7457] bond_slave_1: entered promiscuous mode [ 107.075061][ T7460] netlink: 'syz.4.1335': attribute type 3 has an invalid length. [ 107.087443][ T7460] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 107.095479][ T7457] bond_slave_0: left promiscuous mode [ 107.101067][ T7457] bond_slave_1: left promiscuous mode [ 107.127456][ T7457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.155008][ T7457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.170612][ T7457] bond0 (unregistering): Released all slaves [ 107.479354][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1342'. [ 108.353816][ T7506] loop1: detected capacity change from 0 to 512 [ 108.384189][ T7506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.397299][ T7506] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.528840][ T7270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.570422][ T7532] ip6t_REJECT: ECHOREPLY is not supported [ 108.617781][ T7536] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.652802][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1371'. [ 108.661313][ T7539] loop1: detected capacity change from 0 to 8192 [ 108.728058][ T7539] loop1: p1 p3 p4 [ 108.728107][ T7539] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 108.745194][ T7539] loop1: p3 start 4294901760 is beyond EOD, truncated [ 108.752134][ T7539] loop1: p4 size 50331648 extends beyond EOD, truncated [ 109.553686][ T7564] loop4: detected capacity change from 0 to 1764 [ 109.573156][ T7564] netlink: zone id is out of range [ 109.581099][ T7564] netlink: zone id is out of range [ 109.586235][ T7564] netlink: zone id is out of range [ 109.591395][ T7564] netlink: zone id is out of range [ 109.596507][ T7564] netlink: zone id is out of range [ 109.601816][ T7564] netlink: zone id is out of range [ 109.606954][ T7564] netlink: zone id is out of range [ 109.612094][ T7564] netlink: zone id is out of range [ 109.617405][ T7564] netlink: zone id is out of range [ 109.647301][ T7564] netlink: zone id is out of range [ 109.657075][ T7566] netlink: 'syz.3.1378': attribute type 3 has an invalid length. [ 109.664874][ T7566] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 109.782471][ T7575] loop1: detected capacity change from 0 to 164 [ 109.995109][ T7585] loop4: detected capacity change from 0 to 8192 [ 110.037370][ T7594] netlink: 'syz.1.1390': attribute type 32 has an invalid length. [ 110.045252][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 110.057352][ T7594] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 110.082522][ T7585] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 110.089769][ T7585] FAT-fs (loop4): Filesystem has been set read-only [ 110.099732][ T7598] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 110.123131][ T7597] loop1: detected capacity change from 0 to 1024 [ 110.123809][ T7600] loop3: detected capacity change from 0 to 164 [ 110.129980][ T7597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.143118][ T7597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.159890][ T7597] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 110.170075][ T7597] System zones: 0-1, 3-36 [ 110.176063][ T7597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.232667][ T7614] loop3: detected capacity change from 0 to 512 [ 110.248963][ T7614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.262951][ T7614] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.321573][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 110.321591][ T29] audit: type=1400 audit(1722792477.570:1401): avc: denied { bind } for pid=7623 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.369876][ T4902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.395822][ T7631] ip6t_REJECT: ECHOREPLY is not supported [ 110.436328][ T7270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.503302][ T7644] loop2: detected capacity change from 0 to 512 [ 110.504583][ T7646] loop4: detected capacity change from 0 to 512 [ 110.516669][ T7644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 110.526228][ T7648] loop0: detected capacity change from 0 to 128 [ 110.526305][ T7644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.542026][ T7651] loop1: detected capacity change from 0 to 164 [ 110.548847][ T7646] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.567655][ T7644] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 110.582735][ T5683] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 110.584916][ T7644] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 110.600332][ T7644] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1409: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.620474][ T7644] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1409: couldn't read orphan inode 13 (err -117) [ 110.641339][ T7644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.691172][ T29] audit: type=1326 audit(1722792477.940:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.0.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80cd6979f9 code=0x0 [ 110.714134][ T29] audit: type=1326 audit(1722792477.940:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7643 comm="syz.2.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09aac579f9 code=0x0 [ 110.761969][ T7663] bond_slave_0: entered promiscuous mode [ 110.767700][ T7663] bond_slave_1: entered promiscuous mode [ 110.774955][ T7664] loop3: detected capacity change from 0 to 128 [ 110.781322][ T7663] bond_slave_0: left promiscuous mode [ 110.784710][ T7664] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.786743][ T7663] bond_slave_1: left promiscuous mode [ 110.799844][ T7664] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.924803][ T7667] Invalid ELF section header overflow [ 110.949361][ T7663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.958824][ T29] audit: type=1400 audit(1722792478.210:1404): avc: denied { read } for pid=7659 comm="syz.3.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.979440][ T29] audit: type=1400 audit(1722792478.210:1405): avc: denied { bind } for pid=7659 comm="syz.3.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.998922][ T29] audit: type=1400 audit(1722792478.210:1406): avc: denied { name_bind } for pid=7659 comm="syz.3.1417" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 111.020814][ T29] audit: type=1400 audit(1722792478.210:1407): avc: denied { node_bind } for pid=7659 comm="syz.3.1417" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 111.046318][ T7663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.057997][ T7663] bond0 (unregistering): Released all slaves [ 111.337068][ T4822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.376730][ T29] audit: type=1326 audit(1722792478.620:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.4.1421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc5179f9 code=0x0 [ 111.426503][ T7678] loop4: detected capacity change from 0 to 128 [ 111.457838][ T7681] loop2: detected capacity change from 0 to 2048 [ 111.464529][ T7681] EXT4-fs: Ignoring removed orlov option [ 111.470278][ T7681] journal_path: Non-blockdev passed as '' [ 111.476044][ T7681] EXT4-fs: error: could not find journal device path [ 111.504285][ T29] audit: type=1400 audit(1722792478.070:1409): avc: denied { bind } for pid=7682 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.527254][ T29] audit: type=1400 audit(1722792478.080:1410): avc: denied { ioctl } for pid=7682 comm="syz.2.1423" path="socket:[19971]" dev="sockfs" ino=19971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.552881][ T4902] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.658109][ T7704] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 111.662022][ T7702] loop3: detected capacity change from 0 to 512 [ 111.674146][ T7702] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 111.685316][ T7702] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.698895][ T7702] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 111.714213][ T7702] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 111.721478][ T7702] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.1431: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.746365][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1431: couldn't read orphan inode 13 (err -117) [ 111.760038][ T7702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.979363][ T7713] Invalid ELF section header overflow [ 112.213287][ T7715] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1447'. [ 112.296191][ T7721] loop2: detected capacity change from 0 to 8192 [ 112.341087][ T7721] loop2: p1 p3 p4 [ 112.345002][ T7721] loop2: p1 size 3523149824 extends beyond EOD, truncated [ 112.355759][ T7721] loop2: p3 start 4294901760 is beyond EOD, truncated [ 112.362689][ T7721] loop2: p4 size 50331648 extends beyond EOD, truncated [ 112.503756][ T4902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.524443][ T7746] loop0: detected capacity change from 0 to 128 [ 112.550015][ T7753] netlink: 376 bytes leftover after parsing attributes in process `syz.4.1454'. [ 112.626479][ T7764] loop3: detected capacity change from 0 to 2048 [ 112.633441][ T7764] EXT4-fs: Ignoring removed orlov option [ 112.641584][ T7764] journal_path: Non-blockdev passed as '' [ 112.647396][ T7764] EXT4-fs: error: could not find journal device path [ 112.801087][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 112.857487][ T7775] loop2: detected capacity change from 0 to 1024 [ 112.864364][ T7775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.874187][ T7775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 112.882455][ T7775] System zones: 0-1, 3-36 [ 112.889748][ T7775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.914623][ T7775] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1463: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 112.944154][ T4822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.258367][ T7784] loop0: detected capacity change from 0 to 512 [ 113.267095][ T7784] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 113.277461][ T7784] EXT4-fs (loop0): orphan cleanup on readonly fs [ 113.284233][ T7784] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 113.300824][ T7784] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 113.307724][ T7784] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.1464: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 113.345876][ T7784] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1464: couldn't read orphan inode 13 (err -117) [ 113.388844][ T7784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.420084][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 113.431778][ T7798] dummy0: entered promiscuous mode [ 113.480944][ T7805] loop2: detected capacity change from 0 to 128 [ 113.611556][ T7817] loop1: detected capacity change from 0 to 128 [ 113.653423][ T7819] Invalid ELF section header overflow [ 113.747325][ T7823] bond_slave_0: entered promiscuous mode [ 113.753031][ T7823] bond_slave_1: entered promiscuous mode [ 113.760075][ T7823] bond_slave_0: left promiscuous mode [ 113.765861][ T7823] bond_slave_1: left promiscuous mode [ 113.784497][ T7823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.798345][ T7823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.813288][ T7823] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 113.822510][ T7823] veth1_vlan: left allmulticast mode [ 113.832146][ T7823] bond0 (unregistering): Released all slaves [ 113.944517][ T7839] loop2: detected capacity change from 0 to 128 [ 113.951539][ T7839] EXT4-fs: Ignoring removed nobh option [ 113.958821][ T7839] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.971353][ T7839] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.995318][ T4822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.089811][ T7050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.139730][ T7865] syz.2.1499[7865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.139802][ T7865] syz.2.1499[7865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.156969][ T7867] loop0: detected capacity change from 0 to 2048 [ 114.176251][ T7867] EXT4-fs (loop0): unsupported inode size: 32768 [ 114.182681][ T7867] EXT4-fs (loop0): blocksize: 2048 [ 114.244025][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1505'. [ 114.399192][ T7892] loop1: detected capacity change from 0 to 512 [ 114.416331][ T7892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 114.436295][ T7892] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.447489][ T7902] loop0: detected capacity change from 0 to 512 [ 114.451560][ T7892] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 114.468865][ T7902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.471680][ T7902] EXT4-fs (loop0): 1 truncate cleaned up [ 114.480218][ T7892] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 114.486413][ T7902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.491723][ T7892] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1507: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 114.523266][ T7892] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1507: couldn't read orphan inode 13 (err -117) [ 114.537497][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.563576][ T7050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.610577][ T7908] syz.0.1513[7908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.612400][ T7908] syz.0.1513[7908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.794366][ T7912] Invalid ELF section header overflow [ 114.815106][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 114.824175][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 114.893694][ T7920] smc: adding net device pimreg with user defined pnetid SYZ1 [ 114.902761][ T7920] pimreg: entered allmulticast mode [ 114.932601][ T7926] loop3: detected capacity change from 0 to 1024 [ 114.943856][ T7926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.982871][ T7926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.996689][ T7933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1529'. [ 115.022777][ T7933] loop4: detected capacity change from 0 to 256 [ 115.030331][ T4902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.078315][ T7937] syz.3.1530[7937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.082177][ T7937] syz.3.1530[7937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.130330][ T7941] tmpfs: Unsupported parameter 'huge' [ 115.153208][ T7941] loop0: detected capacity change from 0 to 512 [ 115.170899][ T7941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.198331][ T7941] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.210636][ T7941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.237403][ T7270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.257568][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 115.266587][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 115.307552][ T7952] loop0: detected capacity change from 0 to 512 [ 115.322045][ T7952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.346694][ T7952] EXT4-fs (loop0): 1 orphan inode deleted [ 115.352533][ T7952] EXT4-fs (loop0): 1 truncate cleaned up [ 115.367680][ T7952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.432231][ T7968] loop4: detected capacity change from 0 to 256 [ 115.466616][ T7966] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 115.550332][ T7973] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 115.558801][ T7973] bridge0: port 3(team0) entered blocking state [ 115.565185][ T7973] bridge0: port 3(team0) entered disabled state [ 115.575926][ T7973] team0: entered allmulticast mode [ 115.581136][ T7973] team_slave_0: entered allmulticast mode [ 115.586959][ T7973] team_slave_1: entered allmulticast mode [ 115.593656][ T7973] team0: entered promiscuous mode [ 115.598886][ T7973] team_slave_0: entered promiscuous mode [ 115.604660][ T7973] team_slave_1: entered promiscuous mode [ 115.611785][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 115.689243][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 115.689260][ T29] audit: type=1400 audit(1722792482.070:1440): avc: denied { setopt } for pid=7983 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.743159][ T7988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7988 comm=syz.1.1549 [ 115.757754][ T7989] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.759097][ T7988] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 115.777988][ T7988] vlan2: entered promiscuous mode [ 115.783127][ T7988] vlan2: entered allmulticast mode [ 115.850624][ T7992] loop1: detected capacity change from 0 to 1024 [ 115.859432][ T7992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.910675][ T7270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.968528][ T7050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.989560][ T8001] loop0: detected capacity change from 0 to 128 [ 116.001676][ T8003] loop2: detected capacity change from 0 to 128 [ 116.010049][ T8003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.022348][ T8003] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.072032][ T4822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.121938][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1559'. [ 116.175291][ T29] audit: type=1400 audit(1722792482.550:1441): avc: denied { connect } for pid=8016 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.212149][ T29] audit: type=1400 audit(1722792482.570:1442): avc: denied { bind } for pid=8016 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.231596][ T29] audit: type=1400 audit(1722792482.570:1443): avc: denied { node_bind } for pid=8016 comm="syz.2.1560" saddr=2001::2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 116.252803][ T29] audit: type=1400 audit(1722792482.570:1444): avc: denied { ioctl } for pid=8016 comm="syz.2.1560" path="socket:[20976]" dev="sockfs" ino=20976 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.255508][ T8023] loop3: detected capacity change from 0 to 4096 [ 116.295670][ T8023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.795182][ T8041] netlink: 'syz.1.1570': attribute type 9 has an invalid length. [ 116.803383][ T8041] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1570'. [ 116.836259][ T8045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1572'. [ 116.849198][ T8045] loop1: detected capacity change from 0 to 256 [ 117.157803][ T4902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.184185][ T29] audit: type=1400 audit(1722792483.560:1445): avc: denied { bind } for pid=8053 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.590220][ T8104] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.940854][ T8125] loop3: detected capacity change from 0 to 512 [ 117.971220][ T29] audit: type=1400 audit(1722792484.350:1446): avc: denied { wake_alarm } for pid=8126 comm="syz.0.1603" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.028737][ T29] audit: type=1400 audit(1722792484.410:1447): avc: denied { map } for pid=8132 comm="syz.4.1607" path="socket:[21206]" dev="sockfs" ino=21206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.066798][ T8136] loop1: detected capacity change from 0 to 512 [ 118.089364][ T8136] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.236383][ T29] audit: type=1400 audit(1722792484.610:1448): avc: denied { override_creds } for pid=8161 comm="syz.0.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.259446][ T29] audit: type=1400 audit(1722792484.640:1449): avc: denied { setopt } for pid=8160 comm="syz.4.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.282751][ T4727] IPVS: starting estimator thread 0... [ 118.303442][ T8163] loop4: detected capacity change from 0 to 512 [ 118.329105][ T8163] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.344584][ T8163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.375665][ T8163] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.385676][ T8168] IPVS: using max 2496 ests per chain, 124800 per kthread [ 118.406358][ T8163] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.425848][ T8163] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.434210][ T8163] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1617: Invalid block bitmap block 0 in block_group 0 [ 118.450974][ T8163] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1617: Invalid block bitmap block 0 in block_group 0 [ 118.468769][ T8163] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1617: Invalid block bitmap block 0 in block_group 0 [ 118.491690][ T8163] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1617: Failed to acquire dquot type 1 [ 118.536555][ T8163] EXT4-fs (loop4): 1 orphan inode deleted [ 118.542453][ T5467] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u8:42: Failed to release dquot type 1 [ 118.580712][ T8177] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.725558][ T8186] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 119.041347][ T8221] loop3: detected capacity change from 0 to 128 [ 119.055201][ T8223] loop4: detected capacity change from 0 to 256 [ 119.095071][ T8229] loop1: detected capacity change from 0 to 1024 [ 119.141939][ T8229] Invalid ELF header type: 0 != 1 [ 119.166616][ T8247] loop0: detected capacity change from 0 to 512 [ 119.195874][ T8247] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.233469][ T8261] loop1: detected capacity change from 0 to 2048 [ 119.240183][ T8261] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.277512][ T8270] netlink: 'syz.4.1659': attribute type 10 has an invalid length. [ 119.299912][ T8272] loop3: detected capacity change from 0 to 512 [ 119.322088][ T8261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1657: bg 0: block 234: padding at end of block bitmap is not set [ 119.337223][ T8261] EXT4-fs (loop1): Remounting filesystem read-only [ 119.339975][ T8272] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.355550][ T8272] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1660: path /242/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 119.379227][ T8272] EXT4-fs (loop3): Remounting filesystem read-only [ 119.395154][ T8280] __nla_validate_parse: 5 callbacks suppressed [ 119.395174][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 119.422675][ T8280] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (16) [ 119.866291][ T8286] loop2: detected capacity change from 0 to 1024 [ 119.913261][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 119.935057][ T8291] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 119.948074][ T8291] bond1: (slave vcan1): Error -95 calling set_mac_address [ 119.997785][ C1] Illegal XDP return value 16128 on prog (id 322) dev team0, expect packet loss! [ 120.150845][ T8303] cgroup: fork rejected by pids controller in /syz3 [ 120.279496][ T5475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.374044][ T5475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.425008][ T8320] loop1: detected capacity change from 0 to 128 [ 120.472442][ T8327] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 120.480507][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 120.494433][ T5475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.543698][ T8333] loop1: detected capacity change from 0 to 128 [ 120.567505][ T5475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.573176][ T8335] loop1: detected capacity change from 0 to 256 [ 120.656924][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 120.701456][ T5475] bridge_slave_1: left allmulticast mode [ 120.707264][ T5475] bridge_slave_1: left promiscuous mode [ 120.713011][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.742041][ T5475] bridge_slave_0: left allmulticast mode [ 120.747909][ T5475] bridge_slave_0: left promiscuous mode [ 120.753667][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.893294][ T8358] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 120.907464][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 120.907487][ T29] audit: type=1326 audit(1722792487.280:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.1690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc5179f9 code=0x0 [ 120.954935][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.962131][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.971538][ T8313] bridge_slave_0: entered allmulticast mode [ 120.974687][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 120.981987][ T8313] bridge_slave_0: entered promiscuous mode [ 121.003356][ T5475] hsr_slave_0: left promiscuous mode [ 121.009421][ T5475] hsr_slave_1: left promiscuous mode [ 121.017483][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 121.033947][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.041637][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.056421][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.064125][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.075720][ T5475] veth1_macvtap: left promiscuous mode [ 121.081284][ T5475] veth0_macvtap: left promiscuous mode [ 121.086948][ T5475] veth1_vlan: left promiscuous mode [ 121.092425][ T5475] veth0_vlan: left promiscuous mode [ 121.119611][ T8379] loop1: detected capacity change from 0 to 8192 [ 121.204097][ T5475] pimreg (unregistering): left allmulticast mode [ 121.212570][ T5475] smc: removing net device pimreg with user defined pnetid SYZ1 [ 121.276911][ T8379] loop1: detected capacity change from 0 to 512 [ 121.288609][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 121.299168][ T8382] futex_wake_op: syz.2.1694 tries to shift op by 36; fix this program [ 121.316904][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 121.337409][ T8379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.432191][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.439435][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.451187][ T8313] bridge_slave_1: entered allmulticast mode [ 121.458577][ T8379] EXT4-fs (loop1): 1 orphan inode deleted [ 121.464423][ T8379] EXT4-fs (loop1): 1 truncate cleaned up [ 121.472808][ T8313] bridge_slave_1: entered promiscuous mode [ 121.526432][ T8379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 121.566595][ T29] audit: type=1400 audit(1722792487.900:1462): avc: denied { mounton } for pid=8378 comm="syz.1.1695" path="/64/bus/bus" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.589379][ T29] audit: type=1400 audit(1722792487.940:1463): avc: denied { unmount } for pid=7270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 121.609830][ T7270] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 524051: comm syz-executor: invalid block [ 121.615042][ T29] audit: type=1400 audit(1722792487.990:1464): avc: denied { unlink } for pid=7270 comm="syz-executor" name="bus" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.623801][ T7270] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 524051: comm syz-executor: invalid block [ 121.657098][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 121.668269][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.689450][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.725178][ T8313] team0: Port device team_slave_0 added [ 121.735743][ T8313] team0: Port device team_slave_1 added [ 121.771322][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.778399][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.804743][ T8313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.817667][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.824810][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.835116][ T8342] bridge_slave_0: entered allmulticast mode [ 121.843069][ T8342] bridge_slave_0: entered promiscuous mode [ 121.851836][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.858851][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.884830][ T8313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.898762][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.905875][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.914397][ T8342] bridge_slave_1: entered allmulticast mode [ 121.921907][ T8342] bridge_slave_1: entered promiscuous mode [ 121.929669][ T7270] Trying to write to read-only block-device loop1 [ 122.011436][ T3334] IPVS: starting estimator thread 0... [ 122.026055][ T8313] hsr_slave_0: entered promiscuous mode [ 122.032361][ T8313] hsr_slave_1: entered promiscuous mode [ 122.038390][ T8313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.045955][ T8313] Cannot create hsr debugfs directory [ 122.052962][ T5475] IPVS: stop unused estimator thread 0... [ 122.070181][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.103185][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.107828][ T8405] IPVS: using max 2064 ests per chain, 103200 per kthread [ 122.163019][ T8342] team0: Port device team_slave_0 added [ 122.188690][ T5475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.204632][ T8342] team0: Port device team_slave_1 added [ 122.231945][ T5475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.263323][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.270364][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.296321][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.311472][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.318548][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.344502][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.362064][ T5475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.401501][ T5475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.437831][ T8342] hsr_slave_0: entered promiscuous mode [ 122.444088][ T8342] hsr_slave_1: entered promiscuous mode [ 122.450468][ T8342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.460107][ T8342] Cannot create hsr debugfs directory [ 122.490055][ T8419] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.544629][ T5475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.599555][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 122.636815][ T5475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.671838][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.679041][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.688468][ T8398] bridge_slave_0: entered allmulticast mode [ 122.695182][ T8398] bridge_slave_0: entered promiscuous mode [ 122.702975][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.710170][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.717637][ T8398] bridge_slave_1: entered allmulticast mode [ 122.724304][ T8398] bridge_slave_1: entered promiscuous mode [ 122.731230][ T29] audit: type=1326 audit(1722792489.110:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8427 comm="syz.2.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09aac579f9 code=0x0 [ 122.755834][ T5475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.772407][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 122.794340][ T8430] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 122.806501][ T8430] bond0: (slave vcan1): Error -95 calling set_mac_address [ 122.819145][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.831443][ T5475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.844171][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.865525][ T8398] team0: Port device team_slave_0 added [ 122.872845][ T8398] team0: Port device team_slave_1 added [ 122.895253][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.902276][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.928428][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.940295][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.947315][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.973396][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.003653][ T8398] hsr_slave_0: entered promiscuous mode [ 123.009869][ T8398] hsr_slave_1: entered promiscuous mode [ 123.015822][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.023444][ T8398] Cannot create hsr debugfs directory [ 123.045873][ T5475] team0: left allmulticast mode [ 123.050881][ T5475] team_slave_0: left allmulticast mode [ 123.056362][ T5475] team_slave_1: left allmulticast mode [ 123.061928][ T5475] team0: left promiscuous mode [ 123.066683][ T5475] team_slave_0: left promiscuous mode [ 123.072109][ T5475] team_slave_1: left promiscuous mode [ 123.077725][ T5475] bridge0: port 3(team0) entered disabled state [ 123.084846][ T5475] bridge_slave_1: left allmulticast mode [ 123.090611][ T5475] bridge_slave_1: left promiscuous mode [ 123.096389][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.104580][ T5475] bridge_slave_0: left allmulticast mode [ 123.110289][ T5475] bridge_slave_0: left promiscuous mode [ 123.115930][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.124552][ T5475] bridge_slave_1: left allmulticast mode [ 123.130331][ T5475] bridge_slave_1: left promiscuous mode [ 123.136009][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.143981][ T5475] bridge_slave_0: left allmulticast mode [ 123.149761][ T5475] bridge_slave_0: left promiscuous mode [ 123.155449][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.409330][ T5475] bond1 (unregistering): Released all slaves [ 123.418812][ T5475] bond0 (unregistering): Released all slaves [ 123.565917][ T5475] hsr_slave_0: left promiscuous mode [ 123.577710][ T5475] hsr_slave_1: left promiscuous mode [ 123.587039][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.594634][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.602378][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.609910][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.620874][ T5475] hsr_slave_0: left promiscuous mode [ 123.626630][ T5475] hsr_slave_1: left promiscuous mode [ 123.632836][ T5475] batman_adv: batadv0: Removing interface: team0 [ 123.639832][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.647389][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.655267][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.662737][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.674607][ T5475] veth1_macvtap: left promiscuous mode [ 123.680237][ T5475] veth0_macvtap: left promiscuous mode [ 123.685745][ T5475] veth1_vlan: left promiscuous mode [ 123.691005][ T5475] veth0_vlan: left promiscuous mode [ 123.696959][ T5475] dummy0: left promiscuous mode [ 123.701999][ T5475] veth1_macvtap: left promiscuous mode [ 123.707619][ T5475] veth0_macvtap: left promiscuous mode [ 123.713134][ T5475] veth1_vlan: left promiscuous mode [ 123.718578][ T5475] veth0_vlan: left promiscuous mode [ 123.915154][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 123.929301][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 123.940020][ T8450] usb usb8: usbfs: process 8450 (syz.2.1715) did not claim interface 0 before use [ 124.023806][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 124.037015][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 124.094089][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 124.125237][ T8313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.136691][ T8313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.145653][ T8313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.154556][ T8456] pim6reg1: entered allmulticast mode [ 124.168064][ T8313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.176945][ T8456] pim6reg1: entered promiscuous mode [ 124.228033][ T8313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.243937][ T8313] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.253571][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.260749][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.278421][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.285523][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.367641][ T8313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.439682][ T8313] veth0_vlan: entered promiscuous mode [ 124.448747][ T8313] veth1_vlan: entered promiscuous mode [ 124.465724][ T8313] veth0_macvtap: entered promiscuous mode [ 124.478595][ T8313] veth1_macvtap: entered promiscuous mode [ 124.493152][ T8398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.504370][ T8398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.513230][ T8398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.524545][ T8398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.538261][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.548925][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.558875][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.569439][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.579366][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.589797][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.600726][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.611802][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.622313][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.632216][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.642832][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.652765][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.663253][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.674735][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.687131][ T8313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.696137][ T8313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.705063][ T8313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.713878][ T8313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.728709][ T8342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.741981][ T8342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.751187][ T8342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.760220][ T8342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.870674][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.886770][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.910427][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.924297][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.931460][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.941092][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.948367][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.018889][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.049159][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.056271][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.090834][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.098040][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.159755][ T8342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.257340][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.321597][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.344276][ T8476] chnl_net:caif_netlink_parms(): no params data found [ 125.429489][ T3341] kernel write not supported for file bpf-prog (pid: 3341 comm: kworker/0:6) [ 125.461354][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.468694][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.475974][ T8476] bridge_slave_0: entered allmulticast mode [ 125.485949][ T8476] bridge_slave_0: entered promiscuous mode [ 125.521110][ T8398] veth0_vlan: entered promiscuous mode [ 125.530496][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.537631][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.549824][ T8476] bridge_slave_1: entered allmulticast mode [ 125.559995][ T8476] bridge_slave_1: entered promiscuous mode [ 125.587804][ T8398] veth1_vlan: entered promiscuous mode [ 125.606578][ T8476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.619209][ T8533] cgroup: fork rejected by pids controller in /syz2 [ 125.626350][ T8342] veth0_vlan: entered promiscuous mode [ 125.634710][ T8476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.660410][ T8398] veth0_macvtap: entered promiscuous mode [ 125.669527][ T8342] veth1_vlan: entered promiscuous mode [ 125.687709][ T8476] team0: Port device team_slave_0 added [ 125.695016][ T8398] veth1_macvtap: entered promiscuous mode [ 125.716046][ T8476] team0: Port device team_slave_1 added [ 125.761713][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.768887][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.795012][ T8476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.812585][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.819764][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.845944][ T8476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.871221][ T8342] veth0_macvtap: entered promiscuous mode [ 125.879258][ T8342] veth1_macvtap: entered promiscuous mode [ 125.893642][ T8476] hsr_slave_0: entered promiscuous mode [ 125.900121][ T8476] hsr_slave_1: entered promiscuous mode [ 125.906344][ T8476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.914204][ T8476] Cannot create hsr debugfs directory [ 125.926792][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.937416][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.947291][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.957858][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.967732][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.978412][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.988418][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.999027][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.010286][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.021069][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.031971][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.041828][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.052355][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.062367][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.072923][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.082936][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.093563][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.104940][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.133775][ T8398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.142587][ T8398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.151398][ T8398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.160304][ T8398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.177213][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.187896][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.197844][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.208304][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.218130][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.228736][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.238892][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.249385][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.259274][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.269718][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.281369][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.320068][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.330638][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.340639][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.351180][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.361066][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.371571][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.381490][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.392006][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.402130][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.412581][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.424647][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.454049][ T8342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.462876][ T8342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.471594][ T8342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.480362][ T8342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.540152][ T8476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.555658][ T8558] loop0: detected capacity change from 0 to 512 [ 126.562436][ T8558] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 126.581759][ T8561] loop1: detected capacity change from 0 to 1024 [ 126.608226][ T8561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.627909][ T8476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.673680][ T8567] loop3: detected capacity change from 0 to 1024 [ 126.701363][ T8476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.726450][ T8571] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 126.742712][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.748525][ T8567] Invalid ELF header type: 0 != 1 [ 126.750075][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.794180][ T8578] sctp: [Deprecated]: syz.1.1745 (pid 8578) Use of int in max_burst socket option. [ 126.794180][ T8578] Use struct sctp_assoc_value instead [ 126.797371][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.816031][ T8571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.823496][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.830660][ T8571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.845053][ T8571] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.860221][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1744'. [ 126.876135][ T8476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.889399][ T8582] 8021q: VLANs not supported on hsr0 [ 126.896796][ T8582] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 126.908036][ T8584] vlan2: entered allmulticast mode [ 126.913240][ T8584] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.923370][ T8584] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 126.956807][ T8587] loop3: detected capacity change from 0 to 512 [ 126.965593][ T8587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.975282][ T8587] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.982789][ T8587] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1744: bg 0: block 248: padding at end of block bitmap is not set [ 126.999768][ T8587] Quota error (device loop3): write_blk: dquota write failed [ 127.007400][ T8587] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.017707][ T8587] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1744: Failed to acquire dquot type 1 [ 127.031290][ T8587] EXT4-fs (loop3): 1 truncate cleaned up [ 127.055739][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 127.068627][ T8476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.078329][ T8476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.104347][ T8476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.116931][ T8476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.166211][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.173393][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.183008][ T8545] bridge_slave_0: entered allmulticast mode [ 127.189808][ T8545] bridge_slave_0: entered promiscuous mode [ 127.204033][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.211243][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.221774][ T8545] bridge_slave_1: entered allmulticast mode [ 127.228611][ T8545] bridge_slave_1: entered promiscuous mode [ 127.267764][ T29] audit: type=1400 audit(1722792493.650:1466): avc: denied { create } for pid=8605 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.291101][ T29] audit: type=1400 audit(1722792493.670:1467): avc: denied { bind } for pid=8605 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.310493][ T29] audit: type=1400 audit(1722792493.670:1468): avc: denied { write } for pid=8605 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.344218][ T8476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.352126][ T29] audit: type=1400 audit(1722792493.740:1469): avc: denied { ioctl } for pid=8605 comm="syz.1.1752" path="socket:[24894]" dev="sockfs" ino=24894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.354706][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.389344][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.405289][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 127.432712][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.464305][ T8476] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.467008][ T8611] sctp: [Deprecated]: syz.0.1754 (pid 8611) Use of int in max_burst socket option. [ 127.467008][ T8611] Use struct sctp_assoc_value instead [ 127.495742][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.502911][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.510707][ T29] audit: type=1326 audit(1722792493.890:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f81b79f9 code=0x0 [ 127.513480][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.540728][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.560088][ T8476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.572759][ T8545] team0: Port device team_slave_0 added [ 127.579883][ T8545] team0: Port device team_slave_1 added [ 127.610141][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.617131][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.643282][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.656686][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.663798][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.689918][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.724694][ T29] audit: type=1400 audit(1722792494.100:1471): avc: denied { getopt } for pid=8622 comm="syz.3.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.768406][ T8545] hsr_slave_0: entered promiscuous mode [ 127.774303][ T8626] loop1: detected capacity change from 0 to 256 [ 127.781400][ T8545] hsr_slave_1: entered promiscuous mode [ 127.790025][ T8545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.793323][ T8626] loop1: detected capacity change from 0 to 512 [ 127.805090][ T8545] Cannot create hsr debugfs directory [ 127.820993][ T8476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.828288][ T8628] 8021q: VLANs not supported on hsr0 [ 127.834797][ T8628] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 127.884152][ T8636] loop1: detected capacity change from 0 to 512 [ 127.897409][ T8636] EXT4-fs: Ignoring removed i_version option [ 127.949567][ T8545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.018850][ T8545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.037352][ T29] audit: type=1400 audit(1722792494.410:1472): avc: denied { read } for pid=8644 comm="syz.3.1763" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.108640][ T29] audit: type=1400 audit(1722792494.480:1473): avc: denied { map } for pid=8648 comm="syz.3.1764" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.138040][ T8545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.174344][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'. [ 128.185533][ T8476] veth0_vlan: entered promiscuous mode [ 128.205680][ T8545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.235101][ T8476] veth1_vlan: entered promiscuous mode [ 128.262642][ T8476] veth0_macvtap: entered promiscuous mode [ 128.276911][ T8476] veth1_macvtap: entered promiscuous mode [ 128.285061][ T8545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.294981][ T8664] tipc: Started in network mode [ 128.299981][ T8664] tipc: Node identity , cluster identity 4711 [ 128.306323][ T8545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.319636][ T8545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.330956][ T8545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.359698][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.370425][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.380349][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.390788][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.400729][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.411461][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.421478][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.430516][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 128.431930][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.450984][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.461527][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.471396][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.482099][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.494863][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.509209][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.519741][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.529763][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.540950][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.550817][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.561363][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.571325][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.582078][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.592038][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.602812][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.612856][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.623609][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.636010][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.645522][ T8476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.654334][ T8476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.663221][ T8476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.672188][ T8476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.739704][ T8695] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1782'. [ 128.781978][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.799527][ T8699] loop3: detected capacity change from 0 to 512 [ 128.806211][ T8699] EXT4-fs: Ignoring removed i_version option [ 128.822399][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.833463][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.840607][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.849686][ T8699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 128.863621][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.870908][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.881944][ T8699] System zones: 1-12 [ 128.886347][ T8699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1783: bg 0: block 131: padding at end of block bitmap is not set [ 128.926095][ T8699] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 128.942578][ T8545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.953107][ T8545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.969293][ T8699] EXT4-fs (loop3): 1 truncate cleaned up [ 128.975370][ T8699] EXT4-fs mount: 20 callbacks suppressed [ 128.975387][ T8699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.061983][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.082771][ T8342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.174767][ T8724] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.213414][ T8545] veth0_vlan: entered promiscuous mode [ 129.233691][ T8545] veth1_vlan: entered promiscuous mode [ 129.256281][ T8545] veth0_macvtap: entered promiscuous mode [ 129.264864][ T8545] veth1_macvtap: entered promiscuous mode [ 129.281859][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.292417][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.302389][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.312907][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.322805][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.333478][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.343497][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.353999][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.364040][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.374587][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.384567][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.395048][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.405250][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.415737][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.427497][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.451777][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.462452][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.472372][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.482946][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.492857][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.503589][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.513477][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.523950][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.533831][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.544312][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.554168][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.564618][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.574456][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.585007][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.598923][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.610947][ T8545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.619755][ T8545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.628638][ T8545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.637469][ T8545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.675386][ T8747] x_tables: duplicate underflow at hook 1 [ 129.793081][ T8765] usb usb5: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.800760][ T8765] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 129.832157][ T8772] loop4: detected capacity change from 0 to 512 [ 129.840240][ T8772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.854733][ T8772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 129.863170][ T8772] System zones: 1-12 [ 129.867764][ T8772] EXT4-fs (loop4): 1 truncate cleaned up [ 129.874559][ T8772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.943192][ T8782] sg_write: data in/out 54/154 bytes for SCSI command 0x0-- guessing data in; [ 129.943192][ T8782] program syz.0.1810 not setting count and/or reply_len properly [ 130.020778][ T8788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8788 comm=syz.1.1813 [ 130.064194][ T8797] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 130.140986][ T8800] loop3: detected capacity change from 0 to 8192 [ 130.148487][ T8800] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.149184][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1823'. [ 130.168647][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1823'. [ 130.180499][ T8811] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 130.302975][ T8822] netlink: 'syz.0.1828': attribute type 12 has an invalid length. [ 130.316678][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'. [ 130.587302][ T8848] loop2: detected capacity change from 0 to 2048 [ 130.621586][ T8848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.715326][ T8545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.859186][ T8870] loop3: detected capacity change from 0 to 2048 [ 130.882624][ T8870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.049220][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 131.401595][ T8881] loop0: detected capacity change from 0 to 8192 [ 131.468522][ T8881] loop0: p1 p2 p3 p4 [ 131.473295][ T8881] loop0: p1 start 51379968 is beyond EOD, truncated [ 131.480032][ T8881] loop0: p2 start 4293394432 is beyond EOD, truncated [ 131.486844][ T8881] loop0: p3 size 15991040 extends beyond EOD, truncated [ 131.497548][ T8881] loop0: p4 size 50331648 extends beyond EOD, truncated [ 131.742825][ T8342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.016254][ T8924] loop0: detected capacity change from 0 to 128 [ 132.023019][ T8924] vfat: Unknown parameter 'utf`Nt‡ÙçþN8' [ 132.035311][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 132.035319][ T8924] SELinux: Context system_ is not valid (left unmapped). [ 132.035333][ T29] audit: type=1400 audit(1722792498.410:1497): avc: denied { relabelfrom } for pid=8923 comm="syz.0.1871" name="UNIX" dev="sockfs" ino=26795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 132.072473][ T29] audit: type=1400 audit(1722792498.410:1498): avc: denied { mac_admin } for pid=8923 comm="syz.0.1871" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.094380][ T29] audit: type=1400 audit(1722792498.410:1499): avc: denied { relabelto } for pid=8923 comm="syz.0.1871" name="UNIX" dev="sockfs" ino=26795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_" [ 132.120190][ T29] audit: type=1400 audit(1722792498.410:1500): avc: denied { accept } for pid=8923 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.158161][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 132.176683][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.225951][ T8937] loop0: detected capacity change from 0 to 128 [ 132.403579][ T8938] ================================================================== [ 132.411731][ T8938] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 132.419692][ T8938] [ 132.422035][ T8938] write to 0xffff888106545f28 of 8 bytes by task 8937 on cpu 0: [ 132.429703][ T8938] __mark_inode_dirty+0x256/0x7e0 [ 132.434776][ T8938] fat_update_time+0x1f5/0x210 [ 132.439580][ T8938] touch_atime+0x14f/0x350 [ 132.444032][ T8938] filemap_splice_read+0x8b0/0x920 [ 132.449186][ T8938] splice_direct_to_actor+0x26c/0x670 [ 132.454597][ T8938] do_splice_direct+0xd7/0x150 [ 132.459382][ T8938] do_sendfile+0x3ab/0x950 [ 132.463836][ T8938] __x64_sys_sendfile64+0x110/0x150 [ 132.469071][ T8938] x64_sys_call+0xed5/0x2d60 [ 132.473703][ T8938] do_syscall_64+0xc9/0x1c0 [ 132.478246][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.484174][ T8938] [ 132.486515][ T8938] read to 0xffff888106545f28 of 8 bytes by task 8938 on cpu 1: [ 132.494086][ T8938] __mark_inode_dirty+0x58/0x7e0 [ 132.499071][ T8938] fat_update_time+0x1f5/0x210 [ 132.503882][ T8938] touch_atime+0x14f/0x350 [ 132.508335][ T8938] filemap_splice_read+0x8b0/0x920 [ 132.513488][ T8938] splice_direct_to_actor+0x26c/0x670 [ 132.518889][ T8938] do_splice_direct+0xd7/0x150 [ 132.523671][ T8938] do_sendfile+0x3ab/0x950 [ 132.528120][ T8938] __x64_sys_sendfile64+0x110/0x150 [ 132.533341][ T8938] x64_sys_call+0xed5/0x2d60 [ 132.537970][ T8938] do_syscall_64+0xc9/0x1c0 [ 132.542509][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.548438][ T8938] [ 132.550774][ T8938] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 132.557898][ T8938] [ 132.560237][ T8938] Reported by Kernel Concurrency Sanitizer on: [ 132.566418][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.0.1877 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 132.577125][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 132.587205][ T8938] ================================================================== [ 133.228709][ T8476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.246341][ T7159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.551603][ T7159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.601570][ T7159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.652191][ T7159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.705487][ T7159] bridge_slave_1: left allmulticast mode [ 133.711262][ T7159] bridge_slave_1: left promiscuous mode [ 133.717077][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.727355][ T7159] bridge_slave_0: left allmulticast mode [ 133.733007][ T7159] bridge_slave_0: left promiscuous mode [ 133.738825][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.852032][ T7159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.864291][ T7159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.876791][ T7159] bond0 (unregistering): Released all slaves [ 133.960073][ T7159] hsr_slave_0: left promiscuous mode [ 133.965817][ T7159] hsr_slave_1: left promiscuous mode [ 133.973429][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.980885][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.990220][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.998165][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.010988][ T7159] veth1_macvtap: left promiscuous mode [ 134.016686][ T7159] veth0_macvtap: left promiscuous mode [ 134.022343][ T7159] veth1_vlan: left promiscuous mode [ 134.027924][ T7159] veth0_vlan: left promiscuous mode [ 134.137192][ T29] audit: type=1400 audit(1722792500.510:1501): avc: denied { read } for pid=2941 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 134.159511][ T29] audit: type=1400 audit(1722792500.510:1502): avc: denied { search } for pid=2941 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.181268][ T29] audit: type=1400 audit(1722792500.510:1503): avc: denied { append } for pid=2941 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.203657][ T29] audit: type=1400 audit(1722792500.510:1504): avc: denied { open } for pid=2941 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.226336][ T29] audit: type=1400 audit(1722792500.510:1505): avc: denied { getattr } for pid=2941 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.250284][ T7159] team0 (unregistering): Port device team_slave_1 removed [ 134.263761][ T7159] team0 (unregistering): Port device team_slave_0 removed