last executing test programs: 53.69961732s ago: executing program 2 (id=170): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 53.48710531s ago: executing program 2 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 53.459350061s ago: executing program 2 (id=177): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r0}, 0x20) 53.373018136s ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 53.217287863s ago: executing program 2 (id=183): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 52.478473538s ago: executing program 2 (id=193): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x2000, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) 52.461314269s ago: executing program 32 (id=193): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x2000, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) 44.355623587s ago: executing program 3 (id=378): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @local}}}, 0x90) 43.953913367s ago: executing program 3 (id=381): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 43.075307939s ago: executing program 3 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'ip_vti0\x00', 0x400}) close(0x3) 43.04810734s ago: executing program 3 (id=423): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f283597399229a4c66810000000005683ae6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 42.863616769s ago: executing program 3 (id=424): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='_', 0x1}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 42.682243007s ago: executing program 3 (id=430): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 42.6350689s ago: executing program 33 (id=430): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 16.838611645s ago: executing program 6 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 16.800554397s ago: executing program 6 (id=965): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x20060400) 16.758958099s ago: executing program 6 (id=966): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000000e1c"], 0x78) 16.605272686s ago: executing program 6 (id=968): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f283597399229a4c66810000000005683ae6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 16.463537513s ago: executing program 6 (id=969): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010004fc00000000000000000000000000000164010101000000000000000000000000000107144e2300050000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141433000000000000000000000000070000000000000092010000000000000600000000000000ffff00000000000007000000000000000200000000000000f8ffffffffffffff0000000000000000ffffff0b00ffffff03000000000000001f00000000000000feffffffffffbfff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 16.073311321s ago: executing program 6 (id=973): r0 = epoll_create(0xbde) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000008}) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000004c0)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x80000001}) 16.073089831s ago: executing program 34 (id=973): r0 = epoll_create(0xbde) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000008}) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000004c0)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x80000001}) 1.852821592s ago: executing program 7 (id=1196): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.567090426s ago: executing program 1 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x20004040) 1.459745091s ago: executing program 1 (id=1201): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {r2, r3+10000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) 1.365461935s ago: executing program 0 (id=1204): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r1) 1.360851246s ago: executing program 1 (id=1205): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.173646035s ago: executing program 1 (id=1206): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x5f7e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/7, 0x7}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 934.342466ms ago: executing program 4 (id=1208): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 728.957956ms ago: executing program 1 (id=1212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) 696.248537ms ago: executing program 1 (id=1214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x11001}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 695.835477ms ago: executing program 4 (id=1216): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) listen(r1, 0x18000000) 675.750798ms ago: executing program 7 (id=1217): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 639.75831ms ago: executing program 7 (id=1219): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 613.714831ms ago: executing program 7 (id=1220): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r3, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2404c080) 611.393821ms ago: executing program 5 (id=1221): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) close(r0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 580.414333ms ago: executing program 7 (id=1222): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 580.189973ms ago: executing program 4 (id=1223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 579.597693ms ago: executing program 5 (id=1224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) 523.721945ms ago: executing program 4 (id=1225): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x70bd2e, 0x48, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x4) 522.102026ms ago: executing program 5 (id=1235): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0x6, 0x0, 0x0) 486.345977ms ago: executing program 4 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x20004040) 485.714338ms ago: executing program 0 (id=1227): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x2000}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 440.79498ms ago: executing program 4 (id=1228): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 266.073058ms ago: executing program 0 (id=1229): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="09ec8b684f", 0x5}, {&(0x7f00000010c0)="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", 0xffb}, {&(0x7f00000002c0)="fcfcf3521ecb", 0x6}], 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 265.878768ms ago: executing program 5 (id=1230): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 216.74129ms ago: executing program 0 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000680), 0x3ba, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 178.899112ms ago: executing program 0 (id=1232): memfd_create(0x0, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 178.678752ms ago: executing program 5 (id=1233): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) listen(r1, 0x18000000) 69.463227ms ago: executing program 5 (id=1234): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 66.416617ms ago: executing program 0 (id=1245): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xa, 0x42, 0x40, 0xc2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 0s ago: executing program 7 (id=1236): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$evdev(&(0x7f0000000940), 0x1, 0x100) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/170, 0xaa}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): _u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.742474][ T28] audit: type=1400 audit(1775265593.313:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.620935][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.683641][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.690893][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.697993][ T3313] bridge_slave_0: entered allmulticast mode [ 24.704398][ T3313] bridge_slave_0: entered promiscuous mode [ 24.713097][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.720239][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.727378][ T3313] bridge_slave_1: entered allmulticast mode [ 24.733715][ T3313] bridge_slave_1: entered promiscuous mode [ 24.755330][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.764616][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 24.773012][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 24.787276][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.837947][ T3313] team0: Port device team_slave_0 added [ 24.851131][ T3313] team0: Port device team_slave_1 added [ 24.861147][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 24.878627][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.917904][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.925005][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.932278][ T3309] bridge_slave_0: entered allmulticast mode [ 24.938646][ T3309] bridge_slave_0: entered promiscuous mode [ 24.945184][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.952149][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.978046][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.993430][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.000447][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.026356][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.047613][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.054706][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.061881][ T3309] bridge_slave_1: entered allmulticast mode [ 25.068166][ T3309] bridge_slave_1: entered promiscuous mode [ 25.085895][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.093085][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.100185][ T3316] bridge_slave_0: entered allmulticast mode [ 25.106394][ T3316] bridge_slave_0: entered promiscuous mode [ 25.117218][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.124433][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.131631][ T3316] bridge_slave_1: entered allmulticast mode [ 25.138084][ T3316] bridge_slave_1: entered promiscuous mode [ 25.165767][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.179333][ T3313] hsr_slave_0: entered promiscuous mode [ 25.185284][ T3313] hsr_slave_1: entered promiscuous mode [ 25.201273][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.208402][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.215611][ T3314] bridge_slave_0: entered allmulticast mode [ 25.221963][ T3314] bridge_slave_0: entered promiscuous mode [ 25.229091][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.259065][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.266121][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.273232][ T3314] bridge_slave_1: entered allmulticast mode [ 25.279704][ T3314] bridge_slave_1: entered promiscuous mode [ 25.291670][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.300880][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.307982][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.315429][ T3308] bridge_slave_0: entered allmulticast mode [ 25.321790][ T3308] bridge_slave_0: entered promiscuous mode [ 25.330564][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.337682][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.344775][ T3308] bridge_slave_1: entered allmulticast mode [ 25.351146][ T3308] bridge_slave_1: entered promiscuous mode [ 25.362338][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.376324][ T3309] team0: Port device team_slave_0 added [ 25.385057][ T3309] team0: Port device team_slave_1 added [ 25.408761][ T3316] team0: Port device team_slave_0 added [ 25.417146][ T3316] team0: Port device team_slave_1 added [ 25.428092][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.444585][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.451549][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.477541][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.493427][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.503647][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.515438][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.522415][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.548376][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.564313][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.591141][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.598076][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.624009][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.648584][ T3308] team0: Port device team_slave_0 added [ 25.654985][ T3314] team0: Port device team_slave_0 added [ 25.661456][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.668393][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.694282][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.708376][ T3308] team0: Port device team_slave_1 added [ 25.717290][ T3314] team0: Port device team_slave_1 added [ 25.731133][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.738262][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.764238][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.791636][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.798687][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.824624][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.856372][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.863374][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.889291][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.914993][ T3316] hsr_slave_0: entered promiscuous mode [ 25.920951][ T3316] hsr_slave_1: entered promiscuous mode [ 25.926678][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 25.932582][ T3316] Cannot create hsr debugfs directory [ 25.938304][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.945244][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.971235][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.986869][ T3309] hsr_slave_0: entered promiscuous mode [ 25.993039][ T3309] hsr_slave_1: entered promiscuous mode [ 25.998822][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 26.004527][ T3309] Cannot create hsr debugfs directory [ 26.012121][ T3314] hsr_slave_0: entered promiscuous mode [ 26.018344][ T3314] hsr_slave_1: entered promiscuous mode [ 26.024538][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 26.030264][ T3314] Cannot create hsr debugfs directory [ 26.072233][ T3308] hsr_slave_0: entered promiscuous mode [ 26.078145][ T3308] hsr_slave_1: entered promiscuous mode [ 26.084530][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 26.090392][ T3308] Cannot create hsr debugfs directory [ 26.171585][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.194758][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.209908][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.223168][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.291436][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.300597][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.309146][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.318321][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.369232][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.380251][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.387268][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.400823][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.410548][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.426033][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.439853][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.451654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.458733][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.481319][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.490795][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.502146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.509204][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.517749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.524783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.536623][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.545981][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.553097][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.566445][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.577289][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.610370][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.619697][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.635865][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.646300][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.657341][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.665889][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.749365][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.759433][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.783558][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.803211][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.821654][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.828777][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.838810][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.852602][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.861172][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.868245][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.878982][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.900742][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.907933][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.919105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.926168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.935321][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.952033][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.959094][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.981134][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.991934][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.008190][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.015253][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.039072][ T3309] veth0_vlan: entered promiscuous mode [ 27.055662][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.066553][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.102855][ T3309] veth1_vlan: entered promiscuous mode [ 27.112547][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.123241][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.141064][ T3313] veth0_vlan: entered promiscuous mode [ 27.159793][ T3313] veth1_vlan: entered promiscuous mode [ 27.170689][ T3309] veth0_macvtap: entered promiscuous mode [ 27.181508][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.195733][ T3309] veth1_macvtap: entered promiscuous mode [ 27.226185][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.236600][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.251602][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.261376][ T3313] veth0_macvtap: entered promiscuous mode [ 27.278896][ T3313] veth1_macvtap: entered promiscuous mode [ 27.290223][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.311330][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.329027][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.337767][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.347612][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.362135][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.372275][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.406507][ T3316] veth0_vlan: entered promiscuous mode [ 27.420829][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 27.420842][ T28] audit: type=1400 audit(1775265598.113:90): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.ifVg6g/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.433375][ T3316] veth1_vlan: entered promiscuous mode [ 27.463060][ T28] audit: type=1400 audit(1775265598.113:91): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.485858][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.494860][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.504345][ T28] audit: type=1400 audit(1775265598.113:92): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.ifVg6g/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.529946][ T28] audit: type=1400 audit(1775265598.123:93): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.553998][ T28] audit: type=1400 audit(1775265598.123:94): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.ifVg6g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.563464][ T3308] veth0_vlan: entered promiscuous mode [ 27.587424][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.590920][ T3308] veth1_vlan: entered promiscuous mode [ 27.608363][ T28] audit: type=1400 audit(1775265598.123:95): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.ifVg6g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.623928][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.636532][ T28] audit: type=1400 audit(1775265598.123:96): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.664281][ T28] audit: type=1400 audit(1775265598.163:97): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.675821][ T3316] veth0_macvtap: entered promiscuous mode [ 27.693465][ T28] audit: type=1400 audit(1775265598.163:98): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="gadgetfs" ino=4582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.700843][ T3314] veth0_vlan: entered promiscuous mode [ 27.722418][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.734740][ T28] audit: type=1400 audit(1775265598.433:99): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.776577][ T3316] veth1_macvtap: entered promiscuous mode [ 27.798145][ T3314] veth1_vlan: entered promiscuous mode [ 27.835183][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.850449][ T3308] veth0_macvtap: entered promiscuous mode [ 27.861230][ T3314] veth0_macvtap: entered promiscuous mode [ 27.876600][ T3308] veth1_macvtap: entered promiscuous mode [ 27.892970][ T3314] veth1_macvtap: entered promiscuous mode [ 27.901596][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.917035][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.928250][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.936371][ T114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.945743][ T114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.957031][ T114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.974791][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.992215][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.002783][ T114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.016319][ T114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.033209][ T114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.054174][ T114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.063446][ T114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.088438][ T114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.097574][ T114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.120777][ T114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.143683][ T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.177119][ T3504] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 28.207292][ T3511] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 28.236503][ T3504] netlink: 'syz.4.5': attribute type 32 has an invalid length. [ 28.258547][ T3504] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.388793][ T3509] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 28.398576][ T3509] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.406034][ T3528] netlink: 'syz.3.17': attribute type 12 has an invalid length. [ 28.413963][ T3509] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 28.456730][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 28.487288][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.496680][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.507281][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.507970][ T3528] netlink: 'syz.3.17': attribute type 12 has an invalid length. [ 28.517085][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.533268][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 28.542914][ T3528] Zero length message leads to an empty skb [ 28.623676][ T3546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.632979][ T3546] netlink: 3 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.886957][ T3568] loop3: detected capacity change from 0 to 1024 [ 28.936497][ T3568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.040836][ T3568] EXT4-fs (loop3): shut down requested (2) [ 29.057600][ T3579] SELinux: Context system_u:object is not valid (left unmapped). [ 29.119308][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.143317][ T3582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 29.226935][ T3582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 30.951102][ T3642] loop2: detected capacity change from 0 to 512 [ 30.988606][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.008738][ T3642] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.092075][ C1] hrtimer: interrupt took 112864 ns [ 31.215628][ T3650] loop0: detected capacity change from 0 to 256 [ 31.248526][ T3650] FAT-fs (loop0): bogus number of FAT sectors [ 31.254627][ T3650] FAT-fs (loop0): Can't find a valid FAT filesystem [ 31.269942][ T3652] loop4: detected capacity change from 0 to 512 [ 31.276559][ T3652] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 31.286211][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 31.367735][ T3659] loop1: detected capacity change from 0 to 1024 [ 31.383017][ T3659] EXT4-fs: Ignoring removed bh option [ 31.390656][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.408044][ T3659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.428749][ T3659] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.473963][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.672768][ T3691] loop3: detected capacity change from 0 to 1024 [ 31.694793][ T3691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.749453][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.820752][ T3703] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 31.836701][ T3703] bond1: (slave lo): Enslaving as an active interface with an up link [ 31.846705][ T3703] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 32.089368][ T3724] loop0: detected capacity change from 0 to 512 [ 32.197364][ T3731] loop1: detected capacity change from 0 to 512 [ 32.197437][ T3724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.204031][ T3731] ======================================================= [ 32.204031][ T3731] WARNING: The mand mount option has been deprecated and [ 32.204031][ T3731] and is ignored by this kernel. Remove the mand [ 32.204031][ T3731] option from the mount to silence this warning. [ 32.204031][ T3731] ======================================================= [ 32.253199][ T3724] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.322581][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.660460][ T3744] loop4: detected capacity change from 0 to 2048 [ 32.693431][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 32.693517][ T28] audit: type=1400 audit(1775265603.393:198): avc: denied { bind } for pid=3745 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.775867][ T28] audit: type=1400 audit(1775265603.423:199): avc: denied { connect } for pid=3745 comm="syz.1.100" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.777769][ T3261] loop4: p3 < > p4 < > [ 32.805590][ T28] audit: type=1400 audit(1775265603.443:200): avc: denied { write } for pid=3745 comm="syz.1.100" laddr=fe80::b lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.828227][ T3261] loop4: partition table partially beyond EOD, truncated [ 32.842172][ T28] audit: type=1400 audit(1775265603.543:201): avc: denied { write } for pid=3749 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.868800][ T3261] loop4: p3 start 4284289 is beyond EOD, truncated [ 32.905136][ T3744] loop4: p3 < > p4 < > [ 32.910220][ T3744] loop4: partition table partially beyond EOD, truncated [ 32.917518][ T3744] loop4: p3 start 4284289 is beyond EOD, truncated [ 33.014977][ T28] audit: type=1400 audit(1775265603.713:202): avc: denied { ioctl } for pid=3760 comm="syz.1.107" path="socket:[5346]" dev="sockfs" ino=5346 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.059167][ T3720] syz.3.90 (3720) used greatest stack depth: 10376 bytes left [ 33.128273][ T28] audit: type=1400 audit(1775265603.823:203): avc: denied { watch } for pid=3771 comm="syz.0.112" path="/14" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.150844][ T3772] process 'syz.0.112' launched './file1' with NULL argv: empty string added [ 33.180604][ T28] audit: type=1400 audit(1775265603.863:204): avc: denied { execute_no_trans } for pid=3771 comm="syz.0.112" path="/14/file1" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.210730][ T3778] loop0: detected capacity change from 0 to 512 [ 33.221638][ T3778] EXT4-fs: Invalid want_extra_isize 7 [ 33.248645][ T28] audit: type=1400 audit(1775265603.873:205): avc: denied { bind } for pid=3769 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.283751][ T28] audit: type=1400 audit(1775265603.933:206): avc: denied { create } for pid=3777 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.466533][ T28] audit: type=1400 audit(1775265604.163:207): avc: denied { map } for pid=3783 comm="syz.2.118" path="socket:[6369]" dev="sockfs" ino=6369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.998260][ T3835] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 34.001648][ T3837] netlink: 64 bytes leftover after parsing attributes in process `syz.0.139'. [ 34.213489][ T3856] futex_wake_op: syz.1.150 tries to shift op by -1; fix this program [ 34.281574][ T3861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.323202][ T3863] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 34.404051][ T3869] netlink: 27 bytes leftover after parsing attributes in process `syz.3.157'. [ 34.408677][ T3871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.168724][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 35.207911][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 35.703709][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811c334400: rx timeout, send abort [ 35.712089][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811c334400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.037442][ T3397] Process accounting resumed [ 36.142150][ T3954] chnl_net:caif_netlink_parms(): no params data found [ 36.182080][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.190397][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.197592][ T3954] bridge_slave_0: entered allmulticast mode [ 36.204114][ T3954] bridge_slave_0: entered promiscuous mode [ 36.210955][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.218102][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.225307][ T3954] bridge_slave_1: entered allmulticast mode [ 36.232074][ T3954] bridge_slave_1: entered promiscuous mode [ 36.249696][ T3954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.260315][ T3954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.280249][ T3954] team0: Port device team_slave_0 added [ 36.286868][ T3954] team0: Port device team_slave_1 added [ 36.302921][ T3954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.309953][ T3954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.337231][ T3954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.348857][ T3954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.355807][ T3954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.381733][ T3954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.417406][ T3954] hsr_slave_0: entered promiscuous mode [ 36.429692][ T3954] hsr_slave_1: entered promiscuous mode [ 36.435693][ T3954] debugfs: 'hsr0' already exists in 'hsr' [ 36.442436][ T3954] Cannot create hsr debugfs directory [ 36.538529][ T3954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.547808][ T3954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.557520][ T3954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.601599][ T3954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.633503][ T3999] loop4: detected capacity change from 0 to 256 [ 36.654864][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.662013][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.669356][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.676451][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.710521][ T3954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.731547][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.744795][ T4008] loop3: detected capacity change from 0 to 1024 [ 36.757031][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.775511][ T4008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.832818][ T3954] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.843019][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.850172][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.869815][ T3954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.880277][ T3954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.893656][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.900730][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.925161][ T3397] kernel read not supported for file /mISDNtimer (pid: 3397 comm: kworker/0:3) [ 36.997756][ T3954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.066626][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.163180][ T3954] veth0_vlan: entered promiscuous mode [ 37.173064][ T3954] veth1_vlan: entered promiscuous mode [ 37.198077][ T3954] veth0_macvtap: entered promiscuous mode [ 37.217592][ T3954] veth1_macvtap: entered promiscuous mode [ 37.229401][ T3954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.241179][ T3954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.252850][ T3758] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.261938][ T3758] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.273880][ T114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.284262][ T114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.319493][ T114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.349173][ T4033] mmap: syz.3.215 (4033) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.374816][ T114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.422125][ T114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.449212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888123bbce00: rx timeout, send abort [ 37.457580][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888123bbce00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 37.486431][ T114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.535371][ T4048] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 37.559595][ T4048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.574550][ T4050] dummy0: entered promiscuous mode [ 37.583704][ T4050] dummy0: left promiscuous mode [ 37.604834][ T4048] bond1: (slave geneve2): making interface the new active one [ 37.614041][ T4048] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 37.634110][ T70] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 37.648595][ T40] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 37.670452][ T70] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 37.726156][ T70] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 37.738531][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 37.738546][ T28] audit: type=1400 audit(1775265608.433:266): avc: denied { read } for pid=4071 comm="syz.3.226" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.777028][ T70] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 37.788861][ T4076] loop5: detected capacity change from 0 to 2048 [ 37.789364][ T28] audit: type=1400 audit(1775265608.433:267): avc: denied { open } for pid=4071 comm="syz.3.226" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.799608][ T4070] bridge0: port 3(ipvlan2) entered blocking state [ 37.819091][ T28] audit: type=1400 audit(1775265608.443:268): avc: denied { ioctl } for pid=4071 comm="syz.3.226" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.827004][ T4070] bridge0: port 3(ipvlan2) entered disabled state [ 37.872779][ T4070] ipvlan2: entered allmulticast mode [ 37.878926][ T4070] bridge0: entered allmulticast mode [ 37.885073][ T4076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.889270][ T4070] ipvlan2: left allmulticast mode [ 37.902362][ T28] audit: type=1400 audit(1775265608.603:269): avc: denied { read append open } for pid=4075 comm="syz.5.228" path="/2/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.956129][ T4070] bridge0: left allmulticast mode [ 37.962150][ T4076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.228: bg 0: block 234: padding at end of block bitmap is not set [ 37.977965][ T28] audit: type=1400 audit(1775265608.653:270): avc: denied { map } for pid=4075 comm="syz.5.228" path="/2/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.000176][ T4076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1406 with error 28 [ 38.015845][ T4076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 38.015845][ T4076] [ 38.025963][ T4076] EXT4-fs (loop5): Total free blocks count 0 [ 38.032666][ T4076] EXT4-fs (loop5): Free/Dirty block details [ 38.039050][ T4076] EXT4-fs (loop5): free_blocks=0 [ 38.044193][ T4076] EXT4-fs (loop5): dirty_blocks=1408 [ 38.070789][ T114] bridge_slave_1: left allmulticast mode [ 38.085167][ T28] audit: type=1400 audit(1775265608.653:271): avc: denied { write } for pid=4075 comm="syz.5.228" path="/2/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.096764][ T4076] EXT4-fs (loop5): Block reservation details [ 38.111433][ T114] bridge_slave_1: left promiscuous mode [ 38.121843][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.129852][ T114] bridge_slave_0: left allmulticast mode [ 38.135626][ T114] bridge_slave_0: left promiscuous mode [ 38.141380][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.156230][ T4076] EXT4-fs (loop5): i_reserved_data_blocks=88 [ 38.305487][ T4076] syz.5.228 (4076) used greatest stack depth: 9856 bytes left [ 38.311866][ T4100] Illegal XDP return value 448961908 on prog (id 53) dev N/A, expect packet loss! [ 38.376590][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.388719][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.404702][ T4108] capability: warning: `syz.1.235' uses 32-bit capabilities (legacy support in use) [ 38.438090][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.446986][ T4112] loop0: detected capacity change from 0 to 512 [ 38.455788][ T114] bond0 (unregistering): Released all slaves [ 38.535435][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.554902][ T4112] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.608219][ T4091] loop4: detected capacity change from 0 to 256 [ 38.614980][ T114] hsr_slave_0: left promiscuous mode [ 38.615520][ T28] audit: type=1400 audit(1775265609.313:272): avc: denied { append } for pid=4111 comm="syz.0.238" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.642466][ T114] hsr_slave_1: left promiscuous mode [ 38.648064][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.658419][ T4091] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.658958][ T4121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 38.686892][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.696753][ T28] audit: type=1400 audit(1775265609.393:273): avc: denied { ioctl } for pid=4111 comm="syz.0.238" path="/41/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.743850][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.743940][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.751420][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.823361][ T114] veth1_macvtap: left promiscuous mode [ 38.835178][ T114] veth0_macvtap: left promiscuous mode [ 38.843567][ T114] veth1_vlan: left promiscuous mode [ 38.848966][ T114] veth0_vlan: left promiscuous mode [ 38.862145][ T28] audit: type=1400 audit(1775265609.563:274): avc: denied { create } for pid=4143 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.881776][ T28] audit: type=1400 audit(1775265609.593:275): avc: denied { bind } for pid=4143 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.050237][ T114] team0 (unregistering): Port device team_slave_1 removed [ 39.078085][ T114] team0 (unregistering): Port device team_slave_0 removed [ 39.158505][ T4144] tipc: Started in network mode [ 39.163549][ T4144] tipc: Node identity 84e, cluster identity 4711 [ 39.170080][ T4144] tipc: Node number set to 2126 [ 39.453560][ T4174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4174 comm=syz.1.259 [ 39.693369][ T4188] loop1: detected capacity change from 0 to 128 [ 40.259871][ T4160] kexec: Could not allocate control_code_buffer [ 40.310557][ T4241] ip6tnl1: entered allmulticast mode [ 40.615826][ T4263] netlink: 104 bytes leftover after parsing attributes in process `syz.1.279'. [ 40.921249][ T4277] ip6tnl2: entered promiscuous mode [ 40.944102][ T4279] loop1: detected capacity change from 0 to 256 [ 40.961848][ T4279] FAT-fs (loop1): Directory bread(block 64) failed [ 40.968407][ T4279] FAT-fs (loop1): Directory bread(block 65) failed [ 40.975151][ T4279] FAT-fs (loop1): Directory bread(block 66) failed [ 40.981861][ T4279] FAT-fs (loop1): Directory bread(block 67) failed [ 40.988384][ T4279] FAT-fs (loop1): Directory bread(block 68) failed [ 40.995176][ T4279] FAT-fs (loop1): Directory bread(block 69) failed [ 41.001749][ T4279] FAT-fs (loop1): Directory bread(block 70) failed [ 41.008392][ T4279] FAT-fs (loop1): Directory bread(block 71) failed [ 41.014910][ T4279] FAT-fs (loop1): Directory bread(block 72) failed [ 41.021488][ T4279] FAT-fs (loop1): Directory bread(block 73) failed [ 41.037254][ T4279] syz.1.285: attempt to access beyond end of device [ 41.037254][ T4279] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 41.105205][ T4286] capability: warning: `syz.4.288' uses deprecated v2 capabilities in a way that may be insecure [ 41.181410][ T4295] loop0: detected capacity change from 0 to 1024 [ 41.188121][ T4295] EXT4-fs: Ignoring removed orlov option [ 41.210561][ T4295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.245627][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.331690][ T4306] loop0: detected capacity change from 0 to 512 [ 41.368703][ T4306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.381997][ T4306] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.438300][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.594626][ T4326] loop1: detected capacity change from 0 to 512 [ 41.627251][ T4326] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.691845][ T4326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.708153][ T4326] EXT4-fs (loop1): 1 truncate cleaned up [ 41.720725][ T4326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.858826][ T4344] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 41.874326][ T4344] bond1: (slave lo): Enslaving as an active interface with an up link [ 41.885140][ T4344] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 41.955887][ T4347] syz.4.311 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.107794][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.393710][ T4412] loop1: detected capacity change from 0 to 764 [ 42.457910][ T4412] ISOFS: unable to read i-node block [ 42.522847][ T4425] FAT-fs (loop7): unable to read boot sector [ 42.567191][ T4427] syzkaller1: entered promiscuous mode [ 42.578775][ T4427] syzkaller1: entered allmulticast mode [ 42.629941][ T4432] loop3: detected capacity change from 0 to 8192 [ 42.664720][ T4432] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.689167][ T4440] syzkaller1: entered promiscuous mode [ 42.699190][ T4440] syzkaller1: entered allmulticast mode [ 43.012758][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 43.012774][ T28] audit: type=1400 audit(1775265613.713:366): avc: denied { create } for pid=4450 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 43.087309][ T4453] pimreg: entered allmulticast mode [ 43.094145][ T4453] pimreg: left allmulticast mode [ 43.306188][ T28] audit: type=1400 audit(1775265614.003:367): avc: denied { read } for pid=4462 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.379726][ T28] audit: type=1400 audit(1775265614.073:368): avc: denied { bind } for pid=4468 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.415369][ T28] audit: type=1400 audit(1775265614.073:369): avc: denied { write } for pid=4468 comm="syz.5.362" path="socket:[7870]" dev="sockfs" ino=7870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.439402][ T28] audit: type=1400 audit(1775265614.073:370): avc: denied { read } for pid=4468 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.539905][ T28] audit: type=1400 audit(1775265614.243:371): avc: denied { block_suspend } for pid=4480 comm="syz.1.367" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.652839][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.662789][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.674603][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.685350][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.696235][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.706248][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.716569][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.726908][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.749659][ T4485] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 43.908693][ T28] audit: type=1400 audit(1775265614.603:372): avc: denied { bind } for pid=4494 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.948510][ T28] audit: type=1400 audit(1775265614.603:373): avc: denied { listen } for pid=4494 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.972566][ T28] audit: type=1400 audit(1775265614.603:374): avc: denied { connect } for pid=4494 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.000587][ T28] audit: type=1400 audit(1775265614.603:375): avc: denied { read } for pid=4494 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.481700][ T4520] netlink: 876 bytes leftover after parsing attributes in process `syz.1.384'. [ 44.491457][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 44.620433][ T4539] PID 4539 killed due to inadequate hugepage pool [ 44.711628][ T4554] loop5: detected capacity change from 0 to 1024 [ 44.732062][ T4554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.754255][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.781239][ T4561] macvlan2: entered promiscuous mode [ 44.787008][ T4561] team_slave_0: entered promiscuous mode [ 44.792751][ T4561] team_slave_1: entered promiscuous mode [ 44.798918][ T4561] team0: entered promiscuous mode [ 44.804466][ T4561] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 44.813756][ T4561] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 45.159279][ T4598] netlink: 'syz.5.416': attribute type 12 has an invalid length. [ 45.167293][ T4598] netlink: 'syz.5.416': attribute type 29 has an invalid length. [ 45.175476][ T4598] netlink: 148 bytes leftover after parsing attributes in process `syz.5.416'. [ 45.184759][ T4598] netlink: 'syz.5.416': attribute type 2 has an invalid length. [ 45.192550][ T4598] netlink: 23 bytes leftover after parsing attributes in process `syz.5.416'. [ 45.335444][ T4616] loop3: detected capacity change from 0 to 512 [ 45.381460][ T4616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.394392][ T4616] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.475049][ T3316] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.489119][ T3316] EXT4-fs (loop3): Remounting filesystem read-only [ 45.557555][ T4622] syz.0.426 uses obsolete (PF_INET,SOCK_PACKET) [ 45.659605][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.674398][ T70] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.707695][ T4630] netlink: 64 bytes leftover after parsing attributes in process `syz.0.431'. [ 45.751907][ T4634] syzkaller1: entered promiscuous mode [ 45.752346][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 45.757521][ T4634] syzkaller1: entered allmulticast mode [ 45.983894][ T4636] chnl_net:caif_netlink_parms(): no params data found [ 46.152977][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.171119][ T4654] loop4: detected capacity change from 0 to 32768 [ 46.178077][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.185361][ T4636] bridge_slave_0: entered allmulticast mode [ 46.192065][ T4636] bridge_slave_0: entered promiscuous mode [ 46.198999][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.206166][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.213447][ T4636] bridge_slave_1: entered allmulticast mode [ 46.220036][ T4636] bridge_slave_1: entered promiscuous mode [ 46.226349][ T3302] loop4: p1 p3 < > [ 46.237055][ T4654] loop4: p1 p3 < > [ 46.239062][ T4636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.251299][ T4636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.271005][ T4636] team0: Port device team_slave_0 added [ 46.277608][ T4636] team0: Port device team_slave_1 added [ 46.293255][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.300288][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.335557][ T4636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.357267][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.364653][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.390867][ T4636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.490547][ T4683] loop5: detected capacity change from 0 to 128 [ 46.497927][ T4683] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.523267][ T4636] hsr_slave_0: entered promiscuous mode [ 46.538594][ T4683] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.548659][ T4636] hsr_slave_1: entered promiscuous mode [ 46.554657][ T4636] debugfs: 'hsr0' already exists in 'hsr' [ 46.556542][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.561960][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.588910][ T4636] Cannot create hsr debugfs directory [ 46.630856][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.632342][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.650632][ T50] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.739578][ T4691] loop5: detected capacity change from 0 to 1024 [ 46.766003][ T4691] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.826036][ T4691] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.448: Invalid block bitmap block 0 in block_group 0 [ 46.826067][ T4691] loop5: lost filesystem error report for type 5 error -117 [ 46.828486][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 46.828522][ C0] EXT4-fs (loop5): initial error at time 1775265617: ext4_read_block_bitmap_nowait:483 [ 46.828557][ C0] EXT4-fs (loop5): last error at time 1775265617: ext4_read_block_bitmap_nowait:483 [ 46.828917][ T4691] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.448: Failed to acquire dquot type 0 [ 46.828937][ T4691] loop5: lost filesystem error report for type 5 error -117 [ 46.829256][ T4691] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.448: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.829281][ T4691] loop5: lost filesystem error report for type 5 error -117 [ 46.829473][ T4691] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.448: Invalid inode bitmap blk 0 in block_group 0 [ 46.829496][ T4691] loop5: lost filesystem error report for type 5 error -117 [ 46.829555][ T4691] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 46.829571][ T4691] loop5: lost filesystem error report for type 5 error -117 [ 46.829648][ T4691] EXT4-fs (loop5): 1 orphan inode deleted [ 46.830046][ T4691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.834647][ T50] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0 [ 46.980650][ T4636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.991669][ T4636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.993786][ T4636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.054453][ T4636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.060323][ T4691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.094972][ T4704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 47.139363][ T4691] syz.5.448 (4691) used greatest stack depth: 9256 bytes left [ 47.158222][ T4636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.171179][ T4636] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.174962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.174993][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.178307][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.178348][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.198162][ T4636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.198264][ T4636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.329333][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.362791][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 47.515388][ T4636] veth0_vlan: entered promiscuous mode [ 47.521952][ T4636] veth1_vlan: entered promiscuous mode [ 47.545982][ T4754] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 47.546054][ T4754] SELinux: failed to load policy [ 47.554712][ T4636] veth0_macvtap: entered promiscuous mode [ 47.556524][ T4636] veth1_macvtap: entered promiscuous mode [ 47.580404][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.582169][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.593841][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.593957][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.596768][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.596812][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.677394][ T4739] loop1: detected capacity change from 0 to 32768 [ 47.702436][ T3261] loop1: p1 p3 < > [ 47.708379][ T4739] loop1: p1 p3 < > [ 47.743769][ T3397] kernel write not supported for file bpf-prog (pid: 3397 comm: kworker/0:3) [ 47.770057][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 47.775568][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.787011][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.788874][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 47.810880][ T4772] loop6: detected capacity change from 0 to 512 [ 47.816391][ T4772] EXT4-fs: Mount option(s) incompatible with ext2 [ 47.945137][ T4783] netlink: 'syz.4.473': attribute type 21 has an invalid length. [ 47.945158][ T4783] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.945244][ T4783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.945251][ T4783] IPv6: NLM_F_CREATE should be set when creating new route [ 47.945264][ T4783] IPv6: NLM_F_CREATE should be set when creating new route [ 47.945273][ T4783] IPv6: NLM_F_CREATE should be set when creating new route [ 48.058421][ T28] kauditd_printk_skb: 288 callbacks suppressed [ 48.058435][ T28] audit: type=1400 audit(1775265618.753:659): avc: denied { mount } for pid=4789 comm="syz.4.477" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 48.125779][ T4791] 9pnet: p9_errstr2errno: server reported unknown error  [ 48.146367][ T4800] netlink: 'syz.1.482': attribute type 29 has an invalid length. [ 48.148807][ T4800] netlink: 'syz.1.482': attribute type 29 has an invalid length. [ 48.149537][ T4800] netlink: 'syz.1.482': attribute type 32 has an invalid length. [ 48.196417][ T4808] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 48.196436][ T4808] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 48.249646][ T4813] loop1: detected capacity change from 0 to 1024 [ 48.250041][ T4813] EXT4-fs: Ignoring removed bh option [ 48.281697][ T4813] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 48.310829][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.340629][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.967545][ T4849] loop4: detected capacity change from 0 to 512 [ 48.997917][ T4849] EXT4-fs: Ignoring removed nobh option [ 49.026196][ T4849] ------------[ cut here ]------------ [ 49.031730][ T4849] EA inode 11 i_nlink=1026 [ 49.031755][ T4849] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.500/4849 [ 49.046831][ T4849] Modules linked in: [ 49.050771][ T4849] CPU: 1 UID: 0 PID: 4849 Comm: syz.4.500 Not tainted syzkaller #0 PREEMPT(full) [ 49.060193][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.070497][ T4849] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 49.077343][ T4849] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff d2 dd 03 66 66 66 66 66 66 2e [ 49.096987][ T4849] RSP: 0018:ffffc9000f5375a8 EFLAGS: 00010246 [ 49.103273][ T4849] RAX: ffff88810433cdc8 RBX: ffff8881079864a8 RCX: ffffffff81c02c98 [ 49.111426][ T4849] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 49.119639][ T4849] RBP: 000000000000000b R08: 000188810798645b R09: 0000000000000000 [ 49.127763][ T4849] R10: ffffc9000f5374d8 R11: 0001c9000f5374d8 R12: ffff888107986458 [ 49.135816][ T4849] R13: ffffffff871dcd00 R14: ffff888107986410 R15: 0000000000000001 [ 49.143838][ T4849] FS: 00007fdffbbde6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 49.152812][ T4849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.159523][ T4849] CR2: 00007f4a711b0020 CR3: 0000000121c18000 CR4: 00000000003506f0 [ 49.167526][ T4849] Call Trace: [ 49.170877][ T4849] [ 49.173883][ T4849] ext4_xattr_set_entry+0x77c/0x1010 [ 49.179318][ T4849] ext4_xattr_ibody_set+0x184/0x3c0 [ 49.184694][ T4849] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 49.190664][ T4849] __ext4_expand_extra_isize+0x246/0x280 [ 49.196342][ T4849] __ext4_mark_inode_dirty+0x29b/0x400 [ 49.201867][ T4849] ext4_evict_inode+0x865/0xe40 [ 49.206745][ T4849] ? __pfx_ext4_evict_inode+0x10/0x10 [ 49.212285][ T4849] evict+0x2af/0x510 [ 49.216225][ T4849] ? __dquot_initialize+0x146/0x7c0 [ 49.221517][ T4849] iput+0x41a/0x580 [ 49.225410][ T4849] ext4_process_orphan+0x1a9/0x1c0 [ 49.230665][ T4849] ext4_orphan_cleanup+0x6a8/0xa00 [ 49.235856][ T4849] ext4_fill_super+0x3414/0x37c0 [ 49.240824][ T4849] ? set_blocksize+0x14c/0x270 [ 49.245596][ T4849] ? setup_bdev_super+0x30e/0x370 [ 49.250693][ T4849] ? __pfx_ext4_fill_super+0x10/0x10 [ 49.255984][ T4849] get_tree_bdev_flags+0x291/0x300 [ 49.261245][ T4849] ? __pfx_ext4_fill_super+0x10/0x10 [ 49.266539][ T4849] get_tree_bdev+0x1f/0x30 [ 49.271047][ T4849] ext4_get_tree+0x1c/0x30 [ 49.275467][ T4849] vfs_get_tree+0x57/0x1d0 [ 49.279931][ T4849] do_new_mount+0x288/0x8d0 [ 49.284441][ T4849] path_mount+0x4d0/0xbc0 [ 49.288790][ T4849] __se_sys_mount+0x28c/0x2e0 [ 49.293473][ T4849] __x64_sys_mount+0x67/0x80 [ 49.298052][ T4849] x64_sys_call+0x2d61/0x3020 [ 49.302784][ T4849] do_syscall_64+0x12c/0x370 [ 49.307489][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.313474][ T4849] RIP: 0033:0x7fdffd1ada8a [ 49.317884][ T4849] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.337548][ T4849] RSP: 002b:00007fdffbbdde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.345981][ T4849] RAX: ffffffffffffffda RBX: 00007fdffbbddee0 RCX: 00007fdffd1ada8a [ 49.354018][ T4849] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fdffbbddea0 [ 49.362007][ T4849] RBP: 0000200000000180 R08: 00007fdffbbddee0 R09: 0000000000800718 [ 49.369990][ T4849] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 49.378013][ T4849] R13: 00007fdffbbddea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 49.386022][ T4849] [ 49.389069][ T4849] ---[ end trace 0000000000000000 ]--- [ 49.395145][ T4849] EXT4-fs (loop4): 1 orphan inode deleted [ 49.401999][ T4849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.445615][ T4858] loop5: detected capacity change from 0 to 128 [ 49.457648][ T28] audit: type=1326 audit(1775265620.153:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 49.482495][ T28] audit: type=1326 audit(1775265620.153:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 49.486995][ T4858] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.506266][ T28] audit: type=1326 audit(1775265620.153:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 49.523357][ T4858] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.575442][ T28] audit: type=1326 audit(1775265620.153:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 49.601742][ T28] audit: type=1326 audit(1775265620.223:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 49.625252][ T28] audit: type=1326 audit(1775265620.223:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed179ac582 code=0x7ffc0000 [ 49.651365][ T28] audit: type=1326 audit(1775265620.223:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fed179ac617 code=0x7ffc0000 [ 49.675690][ T28] audit: type=1326 audit(1775265620.223:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fed17969511 code=0x7ffc0000 [ 49.700706][ T28] audit: type=1326 audit(1775265620.223:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fed179ad609 code=0x7ffc0000 [ 49.724514][ T3954] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.743970][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.901818][ T4886] loop5: detected capacity change from 0 to 1024 [ 49.917136][ T4886] EXT4-fs: Ignoring removed bh option [ 49.993549][ T4886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.041234][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.194120][ T4917] loop1: detected capacity change from 0 to 1024 [ 50.231553][ T4917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.278370][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.441405][ T4945] loop4: detected capacity change from 0 to 1024 [ 50.450328][ T4945] EXT4-fs: Ignoring removed bh option [ 50.471037][ T4945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.529684][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.889608][ T4974] loop4: detected capacity change from 0 to 1024 [ 50.935422][ T4974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.991415][ T4985] loop5: detected capacity change from 0 to 256 [ 51.000396][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.020980][ T4985] FAT-fs (loop5): bogus number of FAT sectors [ 51.027216][ T4985] FAT-fs (loop5): Can't find a valid FAT filesystem [ 51.649388][ T5020] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.565'. [ 52.489375][ T3261] loop0: p3 < > p4 < > [ 52.497088][ T3261] loop0: partition table partially beyond EOD, truncated [ 52.512433][ T3261] loop0: p3 start 4284289 is beyond EOD, truncated [ 52.526733][ T5054] loop0: p3 < > p4 < > [ 52.535480][ T5054] loop0: partition table partially beyond EOD, truncated [ 52.550266][ T5054] loop0: p3 start 4284289 is beyond EOD, truncated [ 52.613373][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.835116][ T5081] set_capacity_and_notify: 3 callbacks suppressed [ 52.835132][ T5081] loop1: detected capacity change from 0 to 512 [ 52.938905][ T5081] EXT4-fs: Invalid want_extra_isize 7 [ 53.358080][ T5102] loop6: detected capacity change from 0 to 512 [ 53.579646][ T5105] loop4: detected capacity change from 0 to 128 [ 53.830476][ T5102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.858649][ T5102] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.967882][ T4066] kworker/u8:8: attempt to access beyond end of device [ 53.967882][ T4066] loop4: rw=1, sector=145, nr_sectors = 40 limit=128 [ 53.988567][ T4066] kworker/u8:8: attempt to access beyond end of device [ 53.988567][ T4066] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 54.002277][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.002277][ T4066] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 54.015874][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.015874][ T4066] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 54.029739][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.029739][ T4066] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 54.043769][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.043769][ T4066] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 54.061779][ T5120] loop5: detected capacity change from 0 to 512 [ 54.068180][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.068180][ T4066] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 54.085540][ T5120] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.096886][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.096886][ T4066] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 54.110742][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.110742][ T4066] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 54.124474][ T4066] kworker/u8:8: attempt to access beyond end of device [ 54.124474][ T4066] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 54.138648][ T4636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.149071][ T5120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.186050][ T5120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.201037][ T5120] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.265697][ T5137] netlink: 165 bytes leftover after parsing attributes in process `syz.1.592'. [ 54.266097][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.331841][ T5144] serio: Serial port ttyS3 [ 54.359457][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 54.359512][ T28] audit: type=1400 audit(1775265625.063:755): avc: denied { execute } for pid=5148 comm="syz.1.596" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.411226][ T28] audit: type=1400 audit(1775265625.063:756): avc: denied { execute_no_trans } for pid=5148 comm="syz.1.596" path="/151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.499025][ T5161] netlink: 64 bytes leftover after parsing attributes in process `syz.1.598'. [ 54.539423][ T28] audit: type=1400 audit(1775265625.243:757): avc: denied { append } for pid=5167 comm="syz.1.602" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.671174][ T5182] futex_wake_op: syz.5.608 tries to shift op by -1; fix this program [ 54.683636][ T28] audit: type=1400 audit(1775265625.383:758): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.777068][ T28] audit: type=1326 audit(1775265625.473:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 54.838499][ T28] audit: type=1326 audit(1775265625.473:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 54.885621][ T28] audit: type=1326 audit(1775265625.473:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 54.918736][ T28] audit: type=1326 audit(1775265625.473:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 54.945789][ T28] audit: type=1326 audit(1775265625.503:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 54.971035][ T28] audit: type=1326 audit(1775265625.503:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 55.113391][ T5218] loop6: detected capacity change from 0 to 1024 [ 55.169657][ T5218] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 55.201507][ T5218] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.236792][ T5218] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 55.248641][ T5218] System zones: 0-1, 4-36, 102-102 [ 55.254319][ T5218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.295521][ T4636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.462613][ T5239] loop6: detected capacity change from 0 to 2048 [ 55.491280][ T5239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.517650][ T4636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.561527][ T5246] TCP: TCP_TX_DELAY enabled [ 55.790349][ T5272] SELinux: failed to load policy [ 55.832505][ T5278] netlink: 'syz.5.649': attribute type 34 has an invalid length. [ 56.219188][ T5306] bridge0: port 3(syz_tun) entered blocking state [ 56.246644][ T5306] bridge0: port 3(syz_tun) entered disabled state [ 56.253607][ T5306] syz_tun: entered allmulticast mode [ 56.264678][ T5306] syz_tun: entered promiscuous mode [ 56.285287][ T5306] bridge0: port 3(syz_tun) entered blocking state [ 56.291829][ T5306] bridge0: port 3(syz_tun) entered forwarding state [ 57.018108][ T5337] netlink: 'syz.5.684': attribute type 4 has an invalid length. [ 57.060198][ T5337] netlink: 'syz.5.684': attribute type 4 has an invalid length. [ 57.311110][ T5352] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 58.265752][ T5372] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 58.304943][ T5372] team0: Device xfrm0 is of different type [ 58.490649][ T5386] loop0: detected capacity change from 0 to 256 [ 58.545888][ T5395] loop5: detected capacity change from 0 to 512 [ 58.562570][ T5395] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.606829][ T5395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.691282][ T35] kernel read not supported for file /mISDNtimer (pid: 35 comm: kworker/1:1) [ 58.712625][ T5395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.790549][ T5416] loop2: detected capacity change from 0 to 7 [ 58.801310][ T5395] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.812425][ T5417] loop1: detected capacity change from 0 to 512 [ 58.831746][ T5417] EXT4-fs: Ignoring removed nobh option [ 58.859053][ T5417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.893674][ T5417] EXT4-fs (loop1): 1 truncate cleaned up [ 58.910388][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.929243][ T5417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.987815][ T5417] EXT4-fs (loop1): shut down requested (0) [ 59.081883][ T5424] loop0: detected capacity change from 0 to 1024 [ 59.092029][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.151745][ T5424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.530718][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.765496][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 59.791219][ T5476] syzkaller1: entered promiscuous mode [ 59.803295][ T5476] syzkaller1: entered allmulticast mode [ 60.666827][ T5588] net_ratelimit: 33019 callbacks suppressed [ 60.666839][ T5588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.691044][ T5594] dummy0: entered promiscuous mode [ 60.711688][ T5594] dummy0: left promiscuous mode [ 60.752078][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 60.752094][ T28] audit: type=1400 audit(1775265631.453:849): avc: denied { bind } for pid=5609 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.785598][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 60.870805][ T5624] loop2: detected capacity change from 0 to 7 [ 61.106989][ T5659] tipc: Started in network mode [ 61.112102][ T5659] tipc: Node identity 84e, cluster identity 4711 [ 61.129091][ T5659] tipc: Node number set to 2126 [ 61.561622][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 61.570763][ T5709] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 61.570763][ T5709] The task syz.1.767 (5709) triggered the difference, watch for misbehavior. [ 61.635098][ T28] audit: type=1400 audit(1775265632.333:850): avc: denied { listen } for pid=5713 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.654482][ T28] audit: type=1400 audit(1775265632.333:851): avc: denied { accept } for pid=5713 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.717413][ T5717] loop6: detected capacity change from 0 to 512 [ 61.725330][ T5717] tipc: Started in network mode [ 61.730368][ T5717] tipc: Node identity ac1414aa, cluster identity 4711 [ 61.737515][ T5717] tipc: Enabling of bearer rejected, failed to enable media [ 61.775192][ T5721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5721 comm=syz.6.773 [ 61.804795][ T5723] loop6: detected capacity change from 0 to 256 [ 61.813069][ T5723] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.825820][ T5723] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.185641][ T5741] netlink: 'syz.5.781': attribute type 1 has an invalid length. [ 62.214369][ T5741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.236930][ T5741] bond1: (slave geneve2): making interface the new active one [ 62.245629][ T5741] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 62.254276][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.263689][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.284552][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.293612][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.391328][ T28] audit: type=1400 audit(1775265633.093:852): avc: denied { write } for pid=5753 comm="syz.5.785" name="ptype" dev="proc" ino=4026533384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.415104][ T5750] loop0: detected capacity change from 0 to 2048 [ 62.454182][ T5750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.469390][ T5760] loop5: detected capacity change from 0 to 128 [ 62.628904][ T5750] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.794: bg 0: block 234: padding at end of block bitmap is not set [ 62.689444][ T5750] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 492 with error 28 [ 62.715784][ T5750] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.715784][ T5750] [ 62.755102][ T5750] EXT4-fs (loop0): Total free blocks count 0 [ 62.780495][ T5750] EXT4-fs (loop0): Free/Dirty block details [ 62.798852][ T5750] EXT4-fs (loop0): free_blocks=0 [ 62.834819][ T5750] EXT4-fs (loop0): dirty_blocks=496 [ 62.852713][ T5750] EXT4-fs (loop0): Block reservation details [ 62.874929][ T5750] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 63.046881][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.090153][ T28] audit: type=1326 audit(1775265633.793:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 63.120725][ T5781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.133482][ T5781] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.144578][ T28] audit: type=1326 audit(1775265633.793:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 63.186631][ T28] audit: type=1326 audit(1775265633.823:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 63.210718][ T28] audit: type=1326 audit(1775265633.823:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 63.212101][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.241481][ T28] audit: type=1326 audit(1775265633.823:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 63.266976][ T28] audit: type=1326 audit(1775265633.823:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed179ac819 code=0x7ffc0000 [ 63.267916][ T5788] ip6tnl1: entered allmulticast mode [ 63.393887][ T5796] netlink: 164 bytes leftover after parsing attributes in process `syz.6.802'. [ 63.503753][ T5805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.573609][ T5805] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.809: bg 0: block 234: padding at end of block bitmap is not set [ 63.588574][ T5805] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 792 with error 28 [ 63.601656][ T5805] EXT4-fs (loop6): This should not happen!! Data will be lost [ 63.601656][ T5805] [ 63.613387][ T5805] EXT4-fs (loop6): Total free blocks count 0 [ 63.619738][ T5805] EXT4-fs (loop6): Free/Dirty block details [ 63.625720][ T5805] EXT4-fs (loop6): free_blocks=0 [ 63.631048][ T5805] EXT4-fs (loop6): dirty_blocks=800 [ 63.636287][ T5805] EXT4-fs (loop6): Block reservation details [ 63.642508][ T5805] EXT4-fs (loop6): i_reserved_data_blocks=50 [ 63.740118][ T4636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.055695][ T5836] set_capacity_and_notify: 3 callbacks suppressed [ 64.055780][ T5836] loop6: detected capacity change from 0 to 256 [ 64.082439][ T5836] FAT-fs (loop6): Directory bread(block 64) failed [ 64.091295][ T5836] FAT-fs (loop6): Directory bread(block 65) failed [ 64.097931][ T5836] FAT-fs (loop6): Directory bread(block 66) failed [ 64.104823][ T5836] FAT-fs (loop6): Directory bread(block 67) failed [ 64.112554][ T5836] FAT-fs (loop6): Directory bread(block 68) failed [ 64.119401][ T5836] FAT-fs (loop6): Directory bread(block 69) failed [ 64.125947][ T5836] FAT-fs (loop6): Directory bread(block 70) failed [ 64.132920][ T5836] FAT-fs (loop6): Directory bread(block 71) failed [ 64.140015][ T5836] FAT-fs (loop6): Directory bread(block 72) failed [ 64.146598][ T5836] FAT-fs (loop6): Directory bread(block 73) failed [ 64.164988][ T5836] bio_check_eod: 98 callbacks suppressed [ 64.165004][ T5836] syz.6.819: attempt to access beyond end of device [ 64.165004][ T5836] loop6: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 64.943115][ T5867] bridge0: port 4(ipvlan2) entered blocking state [ 64.950711][ T5867] bridge0: port 4(ipvlan2) entered disabled state [ 64.957245][ T5867] ipvlan2: entered allmulticast mode [ 64.965577][ T5867] bridge0: entered allmulticast mode [ 64.971857][ T5867] ipvlan2: left allmulticast mode [ 64.976932][ T5867] bridge0: left allmulticast mode [ 65.277335][ T5871] ip6tnl1: entered promiscuous mode [ 65.353678][ T5877] loop1: detected capacity change from 0 to 2048 [ 65.380591][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.475587][ T5877] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.832: bg 0: block 234: padding at end of block bitmap is not set [ 65.550386][ T5877] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1104 with error 28 [ 65.588566][ T5877] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.588566][ T5877] [ 65.614098][ T5877] EXT4-fs (loop1): Total free blocks count 0 [ 65.632914][ T5877] EXT4-fs (loop1): Free/Dirty block details [ 65.641810][ T5877] EXT4-fs (loop1): free_blocks=0 [ 65.646807][ T5877] EXT4-fs (loop1): dirty_blocks=1104 [ 65.652448][ T5877] EXT4-fs (loop1): Block reservation details [ 65.658422][ T5877] EXT4-fs (loop1): i_reserved_data_blocks=69 [ 65.843928][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.952936][ T5900] bridge0: port 3(ipvlan2) entered blocking state [ 65.969890][ T5900] bridge0: port 3(ipvlan2) entered disabled state [ 65.989750][ T5900] ipvlan2: entered allmulticast mode [ 65.995145][ T5900] bridge0: entered allmulticast mode [ 66.007955][ T5900] ipvlan2: left allmulticast mode [ 66.018969][ T5900] bridge0: left allmulticast mode [ 66.075467][ T5858] kexec: Could not allocate control_code_buffer [ 66.260183][ T5908] loop5: detected capacity change from 0 to 256 [ 66.299149][ T5908] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.492640][ T5935] loop1: detected capacity change from 0 to 1024 [ 66.511891][ T5935] EXT4-fs: Ignoring removed orlov option [ 66.520886][ T5935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.563061][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.102955][ T5966] loop5: detected capacity change from 0 to 1024 [ 67.123390][ T5966] EXT4-fs: Ignoring removed orlov option [ 67.164515][ T5966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.212614][ T5957] loop1: detected capacity change from 0 to 256 [ 67.238829][ T5957] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.272953][ T5982] loop0: detected capacity change from 0 to 512 [ 67.273286][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.296017][ T5982] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.338819][ T5982] EXT4-fs (loop0): 1 truncate cleaned up [ 67.369089][ T5982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.387028][ T5992] syzkaller1: entered promiscuous mode [ 67.390034][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 67.390047][ T28] audit: type=1400 audit(1775265638.083:884): avc: denied { sqpoll } for pid=5993 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.396992][ T5992] syzkaller1: entered allmulticast mode [ 67.520733][ T6005] loop4: detected capacity change from 0 to 8192 [ 67.532022][ T6005] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.618109][ T6013] FAT-fs (loop3): bogus number of reserved sectors [ 67.628683][ T6013] FAT-fs (loop3): Can't find a valid FAT filesystem [ 67.671369][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.675255][ T6015] pimreg: entered allmulticast mode [ 67.732618][ T6015] pimreg: left allmulticast mode [ 67.737750][ T6021] loop4: detected capacity change from 0 to 512 [ 67.752242][ T6021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.779957][ T6021] EXT4-fs (loop4): 1 truncate cleaned up [ 67.791527][ T6021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.823373][ T6023] loop0: detected capacity change from 0 to 256 [ 67.858046][ T6023] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.968310][ T6032] syzkaller1: entered promiscuous mode [ 67.974068][ T6032] syzkaller1: entered allmulticast mode [ 67.995453][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.035340][ T6035] ISOFS: unable to read i-node block [ 68.191720][ T28] audit: type=1326 audit(1775265638.893:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472bec819 code=0x7ffc0000 [ 68.220895][ T28] audit: type=1326 audit(1775265638.913:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472bec819 code=0x7ffc0000 [ 68.250235][ T28] audit: type=1326 audit(1775265638.913:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472bec819 code=0x7ffc0000 [ 68.301421][ T28] audit: type=1326 audit(1775265638.913:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472bec819 code=0x7ffc0000 [ 68.344387][ T28] audit: type=1326 audit(1775265638.913:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff472bec819 code=0x7ffc0000 [ 68.371049][ T28] audit: type=1326 audit(1775265638.973:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472bec819 code=0x7ffc0000 [ 68.407472][ T28] audit: type=1326 audit(1775265638.973:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff472bec582 code=0x7ffc0000 [ 68.466435][ T6065] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.482082][ T28] audit: type=1326 audit(1775265638.973:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff472bec617 code=0x7ffc0000 [ 68.506209][ T6065] EXT4-fs (loop5): 1 truncate cleaned up [ 68.513924][ T6065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.531198][ T6060] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.535288][ T28] audit: type=1326 audit(1775265638.973:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff472ba9511 code=0x7ffc0000 [ 68.740789][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.859364][ T6080] syzkaller1: entered promiscuous mode [ 68.877576][ T6080] syzkaller1: entered allmulticast mode [ 68.925583][ T6082] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.980900][ T6077] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.748957][ T6111] set_capacity_and_notify: 5 callbacks suppressed [ 69.748972][ T6111] loop6: detected capacity change from 0 to 512 [ 69.795001][ T6111] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.823951][ T6111] EXT4-fs (loop6): 1 truncate cleaned up [ 69.831621][ T6111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.944864][ T6112] loop1: detected capacity change from 0 to 256 [ 69.978233][ T6112] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.026890][ T6130] macvlan2: entered promiscuous mode [ 70.033411][ T6130] team_slave_0: entered promiscuous mode [ 70.039108][ T6130] team_slave_1: entered promiscuous mode [ 70.052078][ T6130] team0: entered promiscuous mode [ 70.060080][ T6130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.069221][ T6130] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 70.095570][ T4636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.257889][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.347631][ T6155] pimreg: entered allmulticast mode [ 70.356012][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.363211][ T6155] pimreg: left allmulticast mode [ 70.391477][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.411249][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.436235][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.459465][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.480840][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.511252][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.528541][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 70.538441][ T6149] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 71.216304][ T6163] loop1: detected capacity change from 0 to 512 [ 71.226987][ T6167] loop0: detected capacity change from 0 to 1024 [ 71.234264][ T6163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.257386][ T6163] EXT4-fs (loop1): 1 truncate cleaned up [ 71.269842][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.282663][ T6167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.323269][ T6170] loop5: detected capacity change from 0 to 256 [ 71.372191][ T6170] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.403140][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.670663][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.782168][ T6204] loop6: detected capacity change from 0 to 512 [ 71.820076][ T6204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.838574][ T6204] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.887264][ T6197] loop0: detected capacity change from 0 to 32768 [ 71.913330][ T4636] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 71.926917][ T4636] EXT4-fs (loop6): Remounting filesystem read-only [ 71.939398][ T6197] loop0: p1 p3 < > [ 71.993269][ T5265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.017563][ T30] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.059369][ T6209] pimreg: entered allmulticast mode [ 72.071577][ T6209] pimreg: left allmulticast mode [ 72.096237][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 72.102470][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.321783][ T3758] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.412857][ T6228] PID 6228 killed due to inadequate hugepage pool [ 72.423226][ T3758] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.471162][ T3758] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.523295][ T3758] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.536607][ T6218] chnl_net:caif_netlink_parms(): no params data found [ 72.667256][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.677666][ T6252] netlink: 876 bytes leftover after parsing attributes in process `syz.4.983'. [ 72.686738][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.687580][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 72.698664][ T6218] bridge_slave_0: entered allmulticast mode [ 72.719082][ T6218] bridge_slave_0: entered promiscuous mode [ 72.739822][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.758539][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.765744][ T6218] bridge_slave_1: entered allmulticast mode [ 72.789789][ T6218] bridge_slave_1: entered promiscuous mode [ 72.823991][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.852935][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.870266][ T3758] bridge_slave_1: left allmulticast mode [ 72.883438][ T3758] bridge_slave_1: left promiscuous mode [ 72.893734][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.902714][ T3758] bridge_slave_0: left allmulticast mode [ 72.930241][ T3758] bridge_slave_0: left promiscuous mode [ 72.936066][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.091723][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.105984][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.116079][ T3758] bond0 (unregistering): Released all slaves [ 73.142184][ T6274] pimreg: entered allmulticast mode [ 73.161332][ T6218] team0: Port device team_slave_0 added [ 73.170230][ T6274] pimreg: left allmulticast mode [ 73.226364][ T3758] tipc: Left network mode [ 73.227449][ T6218] team0: Port device team_slave_1 added [ 73.254176][ T3758] hsr_slave_0: left promiscuous mode [ 73.262198][ T3758] hsr_slave_1: left promiscuous mode [ 73.270933][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.278735][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.286545][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.304185][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.324516][ T3758] veth1_macvtap: left promiscuous mode [ 73.335227][ T3758] veth0_macvtap: left promiscuous mode [ 73.340901][ T3758] veth1_vlan: left promiscuous mode [ 73.346257][ T3758] veth0_vlan: left promiscuous mode [ 73.464916][ T3758] team0 (unregistering): Port device team_slave_1 removed [ 73.481935][ T3758] team0 (unregistering): Port device team_slave_0 removed [ 73.527360][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.534386][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.562892][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.574680][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.581805][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.607751][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.636895][ T6218] hsr_slave_0: entered promiscuous mode [ 73.643019][ T6218] hsr_slave_1: entered promiscuous mode [ 73.649026][ T6218] debugfs: 'hsr0' already exists in 'hsr' [ 73.654743][ T6218] Cannot create hsr debugfs directory [ 73.728150][ T6218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.737653][ T6218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.749528][ T6218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.758888][ T6218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.803963][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.816651][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.826536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.833622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.851980][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.859136][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.932041][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.034565][ T6218] veth0_vlan: entered promiscuous mode [ 74.042895][ T6218] veth1_vlan: entered promiscuous mode [ 74.065128][ T6218] veth0_macvtap: entered promiscuous mode [ 74.087786][ T6360] loop4: detected capacity change from 0 to 2048 [ 74.097533][ T6218] veth1_macvtap: entered promiscuous mode [ 74.116714][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.134327][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.149477][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.167306][ T3758] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.198637][ T3758] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.221037][ T6371] loop1: detected capacity change from 0 to 128 [ 74.231870][ T3758] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.242481][ T6360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.987: bg 0: block 234: padding at end of block bitmap is not set [ 74.250691][ T6371] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.269631][ T6360] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1042 with error 28 [ 74.282116][ T6360] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.282116][ T6360] [ 74.292032][ T3758] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301854][ T6360] EXT4-fs (loop4): Total free blocks count 0 [ 74.307847][ T6360] EXT4-fs (loop4): Free/Dirty block details [ 74.308112][ T6371] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.313828][ T6360] EXT4-fs (loop4): free_blocks=0 [ 74.328115][ T6360] EXT4-fs (loop4): dirty_blocks=1056 [ 74.333551][ T6360] EXT4-fs (loop4): Block reservation details [ 74.348687][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 74.348700][ T28] audit: type=1400 audit(1775265645.033:923): avc: denied { mounton } for pid=6218 comm="syz-executor" path="/root/syzkaller.pkh9aM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.384525][ T6360] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 74.438422][ T3758] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.548859][ T6387] netlink: 'syz.5.1011': attribute type 1 has an invalid length. [ 74.557838][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.560205][ T6387] netlink: 'syz.5.1011': attribute type 2 has an invalid length. [ 74.600017][ T6391] loop7: detected capacity change from 0 to 1024 [ 74.672729][ T6391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.705748][ T6218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.800681][ T6405] loop5: detected capacity change from 0 to 512 [ 74.831821][ T6405] EXT4-fs: Mount option(s) incompatible with ext2 [ 75.328864][ T6424] macvlan2: entered promiscuous mode [ 75.335946][ T6424] team_slave_0: entered promiscuous mode [ 75.341648][ T6424] team_slave_1: entered promiscuous mode [ 75.348796][ T6424] team0: entered promiscuous mode [ 75.354353][ T6424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.391178][ T6424] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 75.453291][ T6431] loop1: detected capacity change from 0 to 1024 [ 75.502996][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.547849][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.696906][ T6445] loop4: detected capacity change from 0 to 32768 [ 75.738960][ T6445] loop4: p1 p3 < > [ 75.931135][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 75.943045][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 76.786721][ T6466] loop0: detected capacity change from 0 to 128 [ 76.811476][ T6471] loop7: detected capacity change from 0 to 2048 [ 76.822318][ T6466] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.860708][ T6466] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.934205][ T6471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.089562][ T6471] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1027: bg 0: block 234: padding at end of block bitmap is not set [ 77.109535][ T6471] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 344 with error 28 [ 77.132888][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.158529][ T6471] EXT4-fs (loop7): This should not happen!! Data will be lost [ 77.158529][ T6471] [ 77.183949][ T6471] EXT4-fs (loop7): Total free blocks count 0 [ 77.198588][ T6471] EXT4-fs (loop7): Free/Dirty block details [ 77.227895][ T6471] EXT4-fs (loop7): free_blocks=0 [ 77.237013][ T6471] EXT4-fs (loop7): dirty_blocks=352 [ 77.248536][ T6471] EXT4-fs (loop7): Block reservation details [ 77.258632][ T6471] EXT4-fs (loop7): i_reserved_data_blocks=22 [ 77.307825][ T6218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.446866][ T6505] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1045'. [ 77.548008][ T6485] loop1: detected capacity change from 0 to 32768 [ 77.669929][ T3261] loop1: p1 p3 < > [ 77.724219][ T6485] loop1: p1 p3 < > [ 77.810398][ T2998] loop1: p1 p3 < > [ 77.975255][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 77.985527][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 78.010541][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 78.020637][ T3261] udevd[3261]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 78.085399][ T6535] loop0: detected capacity change from 0 to 128 [ 78.128966][ T6535] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.148606][ T6535] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.216527][ T30] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.562524][ T6551] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.588572][ T6551] SELinux: failed to load policy [ 78.840312][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1065'. [ 78.933656][ T6567] loop1: detected capacity change from 0 to 512 [ 78.941712][ T6567] EXT4-fs: Mount option(s) incompatible with ext2 [ 78.966509][ T6569] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1067'. [ 78.992008][ T6573] loop5: detected capacity change from 0 to 256 [ 79.029929][ T6575] loop4: detected capacity change from 0 to 128 [ 79.040640][ T6575] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.069441][ T6575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.218423][ T4066] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.267899][ T6579] SELinux: unknown common [ 79.268697][ T6581] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 79.272537][ T6579] SELinux: failed to load policy [ 79.298511][ T6581] netlink: 'syz.4.1074': attribute type 2 has an invalid length. [ 79.822305][ T6600] set_capacity_and_notify: 1 callbacks suppressed [ 79.822322][ T6600] loop4: detected capacity change from 0 to 1024 [ 79.839049][ T6600] EXT4-fs: Ignoring removed bh option [ 79.878546][ T6600] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 79.922557][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.080906][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.115533][ T28] audit: type=1326 audit(1775265650.813:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.159362][ T28] audit: type=1326 audit(1775265650.813:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.264089][ T28] audit: type=1326 audit(1775265650.813:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.323650][ T28] audit: type=1326 audit(1775265650.813:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.388701][ T28] audit: type=1326 audit(1775265650.813:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.434746][ T28] audit: type=1326 audit(1775265650.813:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.503505][ T28] audit: type=1326 audit(1775265650.813:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.554789][ T28] audit: type=1326 audit(1775265650.813:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.625389][ T28] audit: type=1326 audit(1775265650.813:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.668509][ T28] audit: type=1326 audit(1775265650.813:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdffd1ac819 code=0x7ffc0000 [ 80.983419][ T6643] loop1: detected capacity change from 0 to 256 [ 81.044459][ T6644] loop5: detected capacity change from 0 to 512 [ 81.063944][ T6644] EXT4-fs: Ignoring removed nobh option [ 81.088246][ T6644] EXT4-fs (loop5): 1 orphan inode deleted [ 81.099086][ T6644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.285534][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.318302][ T6654] loop7: detected capacity change from 0 to 128 [ 81.332388][ T6654] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.374304][ T6654] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.431094][ T6661] loop5: detected capacity change from 0 to 1024 [ 81.439360][ T6661] EXT4-fs: Ignoring removed bh option [ 81.449874][ T6661] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 81.460347][ T30] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.494381][ T6661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.618004][ T3954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.902408][ T6684] serio: Serial port ttyS3 [ 82.165404][ T6709] loop5: detected capacity change from 0 to 128 [ 82.183833][ T6709] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.207822][ T6709] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.258835][ T40] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.559632][ T6726] loop7: detected capacity change from 0 to 512 [ 82.649061][ T6726] EXT4-fs: Ignoring removed nobh option [ 82.847582][ T6726] EXT4-fs (loop7): 1 orphan inode deleted [ 82.863800][ T6726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.982625][ T6218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.024210][ T6739] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.1126'. [ 84.563052][ T6858] loop1: detected capacity change from 0 to 1024 [ 84.577851][ T6858] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 84.595202][ T6858] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.607636][ T6858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 84.620617][ T6858] System zones: 0-1, 4-36, 102-102 [ 84.635252][ T6858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.664646][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.733449][ T6883] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1168'. [ 84.793408][ T6895] bridge0: port 3(syz_tun) entered blocking state [ 84.800109][ T6895] bridge0: port 3(syz_tun) entered disabled state [ 84.806955][ T6895] syz_tun: entered allmulticast mode [ 84.813077][ T6895] syz_tun: entered promiscuous mode [ 84.818814][ T6895] bridge0: port 3(syz_tun) entered blocking state [ 84.825315][ T6895] bridge0: port 3(syz_tun) entered forwarding state [ 84.845410][ T6899] loop1: detected capacity change from 0 to 2048 [ 84.904107][ T6899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.938031][ T6916] netlink: 'syz.4.1178': attribute type 34 has an invalid length. [ 84.981165][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.370850][ T7047] loop7: detected capacity change from 0 to 1024 [ 86.378141][ T7047] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 86.392525][ T7047] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.414221][ T7047] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 86.425270][ T7047] System zones: 0-1, 4-36, 102-102 [ 86.432088][ T7047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.460169][ T6218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.527583][ T7058] loop7: detected capacity change from 0 to 256 [ 86.823971][ T7079] netlink: 'syz.0.1199': attribute type 34 has an invalid length. [ 87.022681][ T7089] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 87.102880][ T7089] team0: Device xfrm0 is of different type [ 87.706180][ T7120] loop2: detected capacity change from 0 to 7 [ 87.860818][ T7094] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 87.938622][ T7150] loop4: detected capacity change from 0 to 256 [ 87.954852][ T7151] loop0: detected capacity change from 0 to 1024 [ 88.009050][ T7151] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 88.009050][ T7151] [ 88.057501][ T7148] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 88.088561][ T7148] SELinux: failed to load policy [ 88.322106][ T7167] loop2: detected capacity change from 0 to 7 [ 88.493626][ T7152] ================================================================== [ 88.501736][ T7152] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 88.509730][ T7152] [ 88.512051][ T7152] write to 0xffff88811b41d714 of 4 bytes by task 7150 on cpu 1: [ 88.519678][ T7152] xas_set_mark+0x12b/0x140 [ 88.524190][ T7152] tag_pages_for_writeback+0xe3/0x2e0 [ 88.529567][ T7152] writeback_iter+0x340/0x830 [ 88.534254][ T7152] __mpage_writepages+0x8a/0x1390 [ 88.539282][ T7152] fat_writepages+0x26/0x30 [ 88.543794][ T7152] do_writepages+0x1c6/0x310 [ 88.548396][ T7152] file_write_and_wait_range+0x178/0x2f0 [ 88.554029][ T7152] __generic_file_fsync+0x46/0x160 [ 88.559140][ T7152] fat_file_fsync+0x49/0x100 [ 88.563734][ T7152] vfs_fsync_range+0xc5/0xe0 [ 88.568324][ T7152] generic_file_write_iter+0x1ba/0x310 [ 88.573784][ T7152] iter_file_splice_write+0x6c4/0xa80 [ 88.579157][ T7152] direct_splice_actor+0x156/0x2a0 [ 88.584264][ T7152] splice_direct_to_actor+0x311/0x670 [ 88.589633][ T7152] do_splice_direct+0x119/0x1a0 [ 88.594489][ T7152] do_sendfile+0x382/0x650 [ 88.598922][ T7152] __x64_sys_sendfile64+0x105/0x150 [ 88.604115][ T7152] x64_sys_call+0x2dc4/0x3020 [ 88.608795][ T7152] do_syscall_64+0x12c/0x370 [ 88.613383][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.619270][ T7152] [ 88.621595][ T7152] read to 0xffff88811b41d714 of 4 bytes by task 7152 on cpu 0: [ 88.629133][ T7152] file_write_and_wait_range+0x130/0x2f0 [ 88.634766][ T7152] __generic_file_fsync+0x46/0x160 [ 88.639879][ T7152] fat_file_fsync+0x49/0x100 [ 88.644524][ T7152] vfs_fsync_range+0xc5/0xe0 [ 88.649124][ T7152] generic_file_write_iter+0x1ba/0x310 [ 88.654598][ T7152] iter_file_splice_write+0x6c4/0xa80 [ 88.659972][ T7152] direct_splice_actor+0x156/0x2a0 [ 88.665087][ T7152] splice_direct_to_actor+0x311/0x670 [ 88.670462][ T7152] do_splice_direct+0x119/0x1a0 [ 88.675307][ T7152] do_sendfile+0x382/0x650 [ 88.679730][ T7152] __x64_sys_sendfile64+0x105/0x150 [ 88.684923][ T7152] x64_sys_call+0x2dc4/0x3020 [ 88.689603][ T7152] do_syscall_64+0x12c/0x370 [ 88.694200][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.700089][ T7152] [ 88.702397][ T7152] value changed: 0x02000021 -> 0x04000021 [ 88.708095][ T7152] [ 88.710399][ T7152] Reported by Kernel Concurrency Sanitizer on: [ 88.716541][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.4.1228 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.727379][ T7152] Tainted: [W]=WARN [ 88.731162][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.741202][ T7152] ==================================================================