last executing test programs: 37.18678946s ago: executing program 3 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x8, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}}, 0x0) 37.011654115s ago: executing program 3 (id=439): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 36.8534277s ago: executing program 3 (id=442): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x3, 0x2002) fsopen(0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x40000005, 0x0}) 36.771603942s ago: executing program 3 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 36.737492713s ago: executing program 3 (id=447): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x8003, 0x4, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000580)=0x8) 36.51979002s ago: executing program 3 (id=456): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/49, 0x31}, 0x4000}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 36.431934523s ago: executing program 32 (id=456): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/49, 0x31}, 0x4000}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.025144074s ago: executing program 0 (id=1126): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3.694699835s ago: executing program 0 (id=1139): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2(&(0x7f0000000000), 0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.639244087s ago: executing program 0 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x10000, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) 2.965863288s ago: executing program 0 (id=1159): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x443, 0xca, 0xfffe0000, 0x40000009, 0x4, "7f04371e6367f3a18d000100000000000038f6"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 2.787635593s ago: executing program 0 (id=1170): unshare(0x22020400) r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x142) 2.684177866s ago: executing program 0 (id=1163): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x1224, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.467323583s ago: executing program 2 (id=1169): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 2.092837205s ago: executing program 1 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 1.951696079s ago: executing program 4 (id=1180): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.950973379s ago: executing program 1 (id=1190): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400005, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() 1.862781082s ago: executing program 4 (id=1181): write$selinux_user(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x25) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 1.809683813s ago: executing program 1 (id=1182): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r2, @ANYBLOB="0800010000002000080009000700200008000200ffffffff08000900060000000800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.767441975s ago: executing program 1 (id=1183): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.766910765s ago: executing program 4 (id=1184): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) 1.366232897s ago: executing program 2 (id=1185): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000a00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xab, 0xd000007}) 1.163239633s ago: executing program 2 (id=1186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.137930034s ago: executing program 4 (id=1188): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') 1.076759896s ago: executing program 2 (id=1189): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 1.038329057s ago: executing program 4 (id=1191): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000030, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 966.30809ms ago: executing program 5 (id=1193): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) 933.55481ms ago: executing program 5 (id=1194): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400005, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() 802.795905ms ago: executing program 1 (id=1195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000380)="88", 0x1) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, &(0x7f0000000380)=ANY=[], 0x1e0}}], 0x1, 0x5d2dd0c54751f8e3) 719.028337ms ago: executing program 1 (id=1196): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 697.389298ms ago: executing program 5 (id=1197): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0xe}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="250347c600e60000000008"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 636.741ms ago: executing program 5 (id=1198): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x107, 0xc}], 0x10}}], 0x1, 0x4000854) 125.195525ms ago: executing program 4 (id=1199): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x200600, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x423, &(0x7f0000000980)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000580)=0xfedc) 124.986985ms ago: executing program 5 (id=1201): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) 99.459436ms ago: executing program 2 (id=1202): write(0xffffffffffffffff, &(0x7f00000000c0)='$\x00\x00\x00N\x00%', 0x7) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 26.460168ms ago: executing program 2 (id=1203): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) 0s ago: executing program 5 (id=1204): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x2}, 0x100260, 0x10000, 0x4, 0x5, 0x8, 0x0, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x200, 0x1) getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 32.768337][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 32.768355][ T28] audit: type=1400 audit(1779968687.796:117): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.797471][ T28] audit: type=1400 audit(1779968687.826:118): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.799730][ T3288] cgroup: Unknown subsys name 'net' [ 32.825242][ T28] audit: type=1400 audit(1779968687.856:119): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.924014][ T3288] cgroup: Unknown subsys name 'cpuset' [ 32.930191][ T3288] cgroup: Unknown subsys name 'rlimit' [ 33.040837][ T28] audit: type=1400 audit(1779968688.066:120): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.073832][ T28] audit: type=1400 audit(1779968688.066:121): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.094448][ T28] audit: type=1400 audit(1779968688.066:122): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.114895][ T28] audit: type=1400 audit(1779968688.066:123): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.123924][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.135375][ T28] audit: type=1400 audit(1779968688.066:124): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.164832][ T28] audit: type=1400 audit(1779968688.066:125): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.184395][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.190110][ T28] audit: type=1400 audit(1779968688.066:126): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.444086][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.451214][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.458466][ T3301] bridge_slave_0: entered allmulticast mode [ 34.464968][ T3301] bridge_slave_0: entered promiscuous mode [ 34.487508][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.494707][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.501815][ T3301] bridge_slave_1: entered allmulticast mode [ 34.508307][ T3301] bridge_slave_1: entered promiscuous mode [ 34.547003][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.554122][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.561214][ T3304] bridge_slave_0: entered allmulticast mode [ 34.567645][ T3304] bridge_slave_0: entered promiscuous mode [ 34.588240][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.595370][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.602429][ T3304] bridge_slave_1: entered allmulticast mode [ 34.608868][ T3304] bridge_slave_1: entered promiscuous mode [ 34.616057][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.644308][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.659653][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.666814][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.674097][ T3300] bridge_slave_0: entered allmulticast mode [ 34.680594][ T3300] bridge_slave_0: entered promiscuous mode [ 34.699889][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.706982][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.714139][ T3300] bridge_slave_1: entered allmulticast mode [ 34.720452][ T3300] bridge_slave_1: entered promiscuous mode [ 34.727864][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.738030][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.753988][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.761052][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.768233][ T3305] bridge_slave_0: entered allmulticast mode [ 34.774537][ T3305] bridge_slave_0: entered promiscuous mode [ 34.789832][ T3301] team0: Port device team_slave_0 added [ 34.796286][ T3301] team0: Port device team_slave_1 added [ 34.805633][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.812744][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.819888][ T3305] bridge_slave_1: entered allmulticast mode [ 34.826154][ T3305] bridge_slave_1: entered promiscuous mode [ 34.857582][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.867545][ T3304] team0: Port device team_slave_0 added [ 34.885031][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.894818][ T3304] team0: Port device team_slave_1 added [ 34.905371][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.912412][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.938392][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.952674][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.967466][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.981212][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.988259][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.014305][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.039567][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.046625][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.072561][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.086413][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.093382][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.119551][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.135641][ T3300] team0: Port device team_slave_0 added [ 35.147021][ T3305] team0: Port device team_slave_0 added [ 35.155328][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.162431][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.169652][ T3307] bridge_slave_0: entered allmulticast mode [ 35.176056][ T3307] bridge_slave_0: entered promiscuous mode [ 35.183238][ T3300] team0: Port device team_slave_1 added [ 35.194736][ T3305] team0: Port device team_slave_1 added [ 35.205450][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.212530][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.219684][ T3307] bridge_slave_1: entered allmulticast mode [ 35.226328][ T3307] bridge_slave_1: entered promiscuous mode [ 35.241859][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.248851][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.274919][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.307483][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.314639][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.340582][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.351686][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.358766][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.384744][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.401666][ T3301] hsr_slave_0: entered promiscuous mode [ 35.407599][ T3301] hsr_slave_1: entered promiscuous mode [ 35.421208][ T3304] hsr_slave_0: entered promiscuous mode [ 35.427420][ T3304] hsr_slave_1: entered promiscuous mode [ 35.433319][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.439056][ T3304] Cannot create hsr debugfs directory [ 35.454310][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.461362][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.487299][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.499052][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.516934][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.553342][ T3307] team0: Port device team_slave_0 added [ 35.566850][ T3300] hsr_slave_0: entered promiscuous mode [ 35.572748][ T3300] hsr_slave_1: entered promiscuous mode [ 35.578535][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 35.584315][ T3300] Cannot create hsr debugfs directory [ 35.594762][ T3307] team0: Port device team_slave_1 added [ 35.635947][ T3305] hsr_slave_0: entered promiscuous mode [ 35.642074][ T3305] hsr_slave_1: entered promiscuous mode [ 35.648010][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 35.653746][ T3305] Cannot create hsr debugfs directory [ 35.674642][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.681626][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.707684][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.718936][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.725907][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.751851][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.840288][ T3307] hsr_slave_0: entered promiscuous mode [ 35.846296][ T3307] hsr_slave_1: entered promiscuous mode [ 35.852097][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 35.857890][ T3307] Cannot create hsr debugfs directory [ 35.914569][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.923152][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.930762][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.939313][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.955067][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.964122][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.976947][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.985759][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.032456][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.041375][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.049371][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.058395][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.066335][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.075082][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.086772][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.095569][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.117441][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.127703][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.136056][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.145537][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.160957][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.169586][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.177764][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.186440][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.221653][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.230672][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.238492][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.246723][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.255178][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.263493][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.271146][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.279908][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.309072][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.317734][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.326054][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.334937][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.348966][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.357598][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.365157][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.374002][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.387937][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.425252][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.439531][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.454704][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.461777][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.471417][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.480603][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.487688][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.524599][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.532528][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.541998][ T2348] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.549101][ T2348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.559139][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.569865][ T2348] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.577046][ T2348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.594418][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.601568][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.610295][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.617415][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.629117][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.640699][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.661841][ T2348] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.668966][ T2348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.678276][ T2348] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.685327][ T2348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.699099][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.716521][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.723607][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.745545][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.752622][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.791974][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.965523][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.999428][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.018490][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.064784][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.082071][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.137007][ T3301] veth0_vlan: entered promiscuous mode [ 37.156183][ T3301] veth1_vlan: entered promiscuous mode [ 37.205719][ T3304] veth0_vlan: entered promiscuous mode [ 37.214645][ T3301] veth0_macvtap: entered promiscuous mode [ 37.238601][ T3301] veth1_macvtap: entered promiscuous mode [ 37.245333][ T3304] veth1_vlan: entered promiscuous mode [ 37.257016][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.273444][ T3307] veth0_vlan: entered promiscuous mode [ 37.286465][ T3304] veth0_macvtap: entered promiscuous mode [ 37.294419][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.310983][ T3304] veth1_macvtap: entered promiscuous mode [ 37.318764][ T2004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.327629][ T2004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.337912][ T3307] veth1_vlan: entered promiscuous mode [ 37.349019][ T2004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.357807][ T2004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.372025][ T3300] veth0_vlan: entered promiscuous mode [ 37.391631][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.410537][ T3300] veth1_vlan: entered promiscuous mode [ 37.417901][ T3305] veth0_vlan: entered promiscuous mode [ 37.421116][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.431287][ T3307] veth0_macvtap: entered promiscuous mode [ 37.448125][ T3305] veth1_vlan: entered promiscuous mode [ 37.455806][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.469192][ T3307] veth1_macvtap: entered promiscuous mode [ 37.487228][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.496873][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.509151][ T3305] veth0_macvtap: entered promiscuous mode [ 37.524986][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.534532][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.559262][ T3305] veth1_macvtap: entered promiscuous mode [ 37.569882][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.578432][ T3300] veth0_macvtap: entered promiscuous mode [ 37.600976][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.608847][ T3300] veth1_macvtap: entered promiscuous mode [ 37.623661][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.640670][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.663424][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.675095][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.684849][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.693776][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.702829][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.725532][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.737753][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.749075][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.757665][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.766898][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.792148][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.801941][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.807678][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 37.807725][ T28] audit: type=1400 audit(1779968692.826:171): avc: denied { create } for pid=3520 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 37.846896][ T2004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.855921][ T2004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.912484][ T28] audit: type=1400 audit(1779968692.936:172): avc: denied { map_create } for pid=3525 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.940257][ T28] audit: type=1400 audit(1779968692.936:173): avc: denied { map_read map_write } for pid=3525 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.964744][ T28] audit: type=1400 audit(1779968692.986:174): avc: denied { prog_load } for pid=3524 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.005885][ T28] audit: type=1400 audit(1779968692.986:175): avc: denied { bpf } for pid=3524 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.026331][ T28] audit: type=1400 audit(1779968692.996:176): avc: denied { create } for pid=3530 comm="syz.0.13" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.050467][ T28] audit: type=1400 audit(1779968693.026:177): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.073170][ T28] audit: type=1400 audit(1779968693.056:178): avc: denied { prog_run } for pid=3524 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.092080][ T28] audit: type=1400 audit(1779968693.076:179): avc: denied { allowed } for pid=3535 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.111548][ T28] audit: type=1400 audit(1779968693.106:180): avc: denied { create } for pid=3535 comm="syz.0.14" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.172824][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.194643][ T3548] hsr0: entered promiscuous mode [ 38.201788][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 38.432793][ T3563] loop4: detected capacity change from 0 to 512 [ 38.452863][ T3563] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 38.489535][ T3563] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.25: corrupted in-inode xattr: e_value size too large [ 38.503801][ T3563] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.504071][ T3563] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.25: couldn't read orphan inode 15 (err -117) [ 38.513252][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.513271][ C1] EXT4-fs (loop4): initial error at time 1779968693: ext4_iget_extra_inode:5128: inode 15 [ 38.513317][ C1] EXT4-fs (loop4): last error at time 1779968693: ext4_iget_extra_inode:5128: inode 15 [ 38.551497][ T3563] loop4: lost filesystem error report for type 5 error -117 [ 38.556398][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.591878][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.666161][ T3581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.33'. [ 38.674826][ T3579] SELinux: failed to load policy [ 38.799106][ T3596] sg_write: data in/out 37854/658 bytes for SCSI command 0x0-- guessing data in; [ 38.799106][ T3596] program syz.0.40 not setting count and/or reply_len properly [ 38.957277][ T3610] random: crng reseeded on system resumption [ 38.972402][ T3610] Restarting kernel threads ... [ 38.977710][ T3610] Done restarting kernel threads. [ 38.990126][ T3610] Restarting kernel threads ... [ 38.995698][ T3610] Done restarting kernel threads. [ 39.034861][ T3616] loop3: detected capacity change from 0 to 164 [ 39.079882][ T3616] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 39.112946][ T3623] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 39.627300][ T3661] netlink: 100 bytes leftover after parsing attributes in process `syz.2.66'. [ 39.719841][ T30] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.818885][ T3673] syzkaller1: entered promiscuous mode [ 39.824825][ T3673] syzkaller1: entered allmulticast mode [ 39.845239][ T3674] SELinux: failed to load policy [ 39.868550][ T3676] syzkaller1: entered promiscuous mode [ 39.874120][ T3676] syzkaller1: entered allmulticast mode [ 40.212420][ T3684] loop3: detected capacity change from 0 to 512 [ 40.219490][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.237153][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.249663][ T3684] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.286077][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.327183][ T3695] process 'syz.1.81' launched './file1' with NULL argv: empty string added [ 40.354683][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 40.363679][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 40.376748][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 40.385500][ T68] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.394451][ T68] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.403646][ T68] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.412445][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 40.422115][ T68] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.432138][ T3697] Zero length message leads to an empty skb [ 40.491504][ T3709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 40.504058][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.519904][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.635554][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 41.733365][ T3544] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 41.744945][ T3749] loop4: detected capacity change from 0 to 512 [ 41.763854][ T3749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 42.019198][ T3782] loop3: detected capacity change from 0 to 512 [ 42.879576][ T3831] loop0: detected capacity change from 0 to 512 [ 42.927575][ T3831] EXT4-fs: quotafile must be on filesystem root [ 43.253457][ T3888] loop0: detected capacity change from 0 to 128 [ 43.261286][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 43.261300][ T28] audit: type=1400 audit(1779968698.286:278): avc: denied { ioctl } for pid=3887 comm="syz.4.154" path="socket:[6422]" dev="sockfs" ino=6422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.297015][ T3888] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.310388][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.323330][ T3888] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.354522][ T28] audit: type=1400 audit(1779968698.386:279): avc: denied { write } for pid=3886 comm="syz.0.153" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.386828][ T28] audit: type=1400 audit(1779968698.406:280): avc: denied { append open } for pid=3886 comm="syz.0.153" path="/36/mnt/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.389514][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.421027][ T28] audit: type=1400 audit(1779968698.406:281): avc: denied { read write } for pid=3886 comm="syz.0.153" name="file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.443622][ T28] audit: type=1400 audit(1779968698.406:282): avc: denied { setattr } for pid=3886 comm="syz.0.153" path="/36/mnt/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.586061][ T28] audit: type=1400 audit(1779968698.606:283): avc: denied { create } for pid=3937 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.691418][ T28] audit: type=1400 audit(1779968698.606:284): avc: denied { setopt } for pid=3937 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.711332][ T3943] loop4: detected capacity change from 0 to 512 [ 43.730733][ T28] audit: type=1400 audit(1779968698.606:285): avc: denied { bind } for pid=3937 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.761474][ T28] audit: type=1400 audit(1779968698.786:286): avc: denied { read } for pid=3960 comm="syz.1.148" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.785134][ T28] audit: type=1400 audit(1779968698.786:287): avc: denied { open } for pid=3960 comm="syz.1.148" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.919012][ T3943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.937529][ T3968] netlink: 'syz.1.150': attribute type 15 has an invalid length. [ 43.947026][ T3943] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.958000][ T3968] __nla_validate_parse: 1 callbacks suppressed [ 43.958015][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 44.080196][ T3968] netlink: 'syz.1.150': attribute type 15 has an invalid length. [ 44.088055][ T2004] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 44.101599][ T2004] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 44.113650][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 44.121759][ T2004] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 44.151814][ T2004] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 44.189902][ T3968] syz.1.150 (3968) used greatest stack depth: 10752 bytes left [ 44.277638][ T3978] loop1: detected capacity change from 0 to 512 [ 44.284384][ T3978] ======================================================= [ 44.284384][ T3978] WARNING: The mand mount option has been deprecated and [ 44.284384][ T3978] and is ignored by this kernel. Remove the mand [ 44.284384][ T3978] option from the mount to silence this warning. [ 44.284384][ T3978] ======================================================= [ 44.321850][ T3978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.335613][ T3978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.335675][ T3943] syz.4.145 (3943) used greatest stack depth: 10432 bytes left [ 44.356860][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.368210][ T3978] EXT4-fs (loop1): 1 truncate cleaned up [ 44.407287][ T3981] loop4: detected capacity change from 0 to 512 [ 44.414207][ T3978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.447233][ T3981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.461396][ T3981] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.532953][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.606572][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.109643][ T4010] loop3: detected capacity change from 0 to 512 [ 45.133902][ T4010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.150827][ T4010] EXT4-fs (loop3): 1 truncate cleaned up [ 45.158707][ T4010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.279855][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.618595][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 45.634712][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 45.643811][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 45.652702][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 45.797851][ T4040] netlink: 'syz.3.183': attribute type 7 has an invalid length. [ 45.814530][ T4040] netlink: 'syz.3.183': attribute type 7 has an invalid length. [ 46.040035][ T3853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.280257][ T4072] loop2: detected capacity change from 0 to 512 [ 46.290497][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.303375][ T4072] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.360556][ T4079] loop0: detected capacity change from 0 to 1024 [ 46.367810][ T4079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.381920][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.392660][ T4079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.418348][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.549986][ T4092] loop0: detected capacity change from 0 to 512 [ 46.558962][ T4092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.576041][ T4092] EXT4-fs (loop0): 1 truncate cleaned up [ 46.582482][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.701087][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.820355][ T4095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.829002][ T4095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.357298][ T4129] loop4: detected capacity change from 0 to 512 [ 47.371092][ T4129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.387954][ T4129] EXT4-fs (loop4): 1 truncate cleaned up [ 47.395954][ T4129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.529333][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.561171][ T4144] loop2: detected capacity change from 0 to 2048 [ 47.593399][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.616221][ T4146] loop4: detected capacity change from 0 to 1024 [ 47.632195][ T4146] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 47.676350][ T4146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.689089][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.711131][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.136523][ T4171] Alternate GPT is invalid, using primary GPT. [ 48.142992][ T4171] loop4: p1 p2 p3 [ 48.146871][ T4171] loop4: partition table partially beyond EOD, truncated [ 48.411049][ T4191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.484036][ T4191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.539406][ T4191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.553035][ T4203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.574124][ T4203] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.594783][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 48.594798][ T28] audit: type=1400 audit(1779968703.626:330): avc: denied { write } for pid=4202 comm="syz.1.248" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.631873][ T4191] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.707389][ T3944] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.730127][ T3944] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.740555][ T3944] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.764952][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.872723][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 48.882343][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 48.891773][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 48.923897][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 49.702383][ T4203] syz.1.248 (4203) used greatest stack depth: 10048 bytes left [ 49.729768][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.936188][ T28] audit: type=1400 audit(1779968704.966:331): avc: denied { ioctl } for pid=4248 comm="syz.1.267" path="socket:[5956]" dev="sockfs" ino=5956 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.989795][ T4252] syzkaller0: mtu greater than device maximum [ 50.002301][ T28] audit: type=1400 audit(1779968705.026:332): avc: denied { sqpoll } for pid=4253 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.102339][ T28] audit: type=1400 audit(1779968705.126:333): avc: denied { associate } for pid=4260 comm="syz.1.282" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.130171][ T4263] set_capacity_and_notify: 2 callbacks suppressed [ 50.130266][ T4263] loop3: detected capacity change from 0 to 512 [ 50.157488][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.170552][ T4263] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.183718][ T28] audit: type=1400 audit(1779968705.216:334): avc: denied { write } for pid=4261 comm="syz.3.272" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.343635][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.518807][ T28] audit: type=1400 audit(1779968705.546:335): avc: denied { create } for pid=4278 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.538539][ T28] audit: type=1400 audit(1779968705.546:336): avc: denied { bind } for pid=4278 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.624535][ T28] audit: type=1400 audit(1779968705.656:337): avc: denied { bind } for pid=4280 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.645414][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 50.673733][ T4286] loop3: detected capacity change from 0 to 512 [ 50.682137][ T4286] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.696917][ T4286] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 50.708843][ T4286] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.283: Corrupt directory, running e2fsck is recommended [ 50.723002][ T4286] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 50.731796][ T4286] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.283: corrupted in-inode xattr: e_name out of bounds [ 50.745959][ T4286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.746127][ T4286] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.283: couldn't read orphan inode 15 (err -117) [ 50.755304][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 50.755318][ C0] EXT4-fs (loop3): initial error at time 1779968705: ext4_iget_extra_inode:5128: inode 15 [ 50.755356][ C0] EXT4-fs (loop3): last error at time 1779968705: ext4_iget_extra_inode:5128: inode 15 [ 50.793199][ T4286] loop3: lost filesystem error report for type 5 error -117 [ 50.793944][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.828334][ T4286] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.845881][ T4289] loop0: detected capacity change from 0 to 736 [ 50.855034][ T4286] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 50.865712][ T4286] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.283: Corrupt directory, running e2fsck is recommended [ 50.881581][ T4286] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.895109][ T4286] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 50.909995][ T4286] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.283: Corrupt directory, running e2fsck is recommended [ 50.936025][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.985278][ T28] audit: type=1400 audit(1779968706.016:338): avc: denied { create } for pid=4294 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.007773][ T28] audit: type=1400 audit(1779968706.016:339): avc: denied { read } for pid=4294 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.369507][ T4317] ipip0: entered promiscuous mode [ 51.374766][ T4317] ipip0: entered allmulticast mode [ 51.390030][ T4193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.429737][ T4319] netlink: 35 bytes leftover after parsing attributes in process `syz.3.296'. [ 51.459641][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 51.474213][ T4321] bond1: entered allmulticast mode [ 51.489499][ T4321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.705986][ T4351] loop0: detected capacity change from 0 to 256 [ 51.721090][ T4351] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.008922][ T4384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'. [ 52.055503][ T4390] loop2: detected capacity change from 0 to 512 [ 52.082632][ T4390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.095937][ T4390] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.322330][ T4390] syz.2.325 (4390) used greatest stack depth: 9792 bytes left [ 52.331422][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.566644][ T4427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4427 comm=syz.4.342 [ 52.617161][ T4431] loop1: detected capacity change from 0 to 512 [ 52.625781][ T4431] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 52.634201][ T4431] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.354: invalid block [ 52.645593][ T4431] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 52.646418][ T4431] EXT4-fs (loop1): 1 truncate cleaned up [ 52.655574][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 52.655588][ C0] EXT4-fs (loop1): initial error at time 1779968707: ext4_get_branch:178: inode 13: block 1024 [ 52.655636][ C0] EXT4-fs (loop1): last error at time 1779968707: ext4_get_branch:178: inode 13: block 1024 [ 52.690432][ T4431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.723254][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.072326][ T4491] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 53.086430][ T4491] bond1: entered promiscuous mode [ 53.091776][ T4491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.113564][ T4491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.120750][ T4491] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 53.131288][ T4491] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 53.142733][ T4491] bond1: (slave ip6gre1): making interface the new active one [ 53.150356][ T4491] ip6gre1: entered promiscuous mode [ 53.157568][ T4491] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 53.318525][ T4503] loop4: detected capacity change from 0 to 1024 [ 53.346782][ T4503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.365645][ T4503] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.384899][ T4503] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.375: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.400041][ T4503] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.412662][ T4503] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.412662][ T4503] [ 53.430241][ T4503] EXT4-fs: Ignoring removed orlov option [ 53.436901][ T4503] EXT4-fs (loop4): re-mounted 00000000-0000-0006-0000-000000000000. [ 53.446586][ T4503] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.375: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.490956][ T4503] EXT4-fs (loop4): Remounting filesystem read-only [ 53.648750][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 53.648768][ T28] audit: type=1400 audit(1779968708.676:394): avc: denied { accept } for pid=4520 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.682519][ T28] audit: type=1400 audit(1779968708.706:395): avc: denied { unmount } for pid=4523 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.723099][ T28] audit: type=1400 audit(1779968708.756:396): avc: denied { map } for pid=4525 comm="syz.0.383" path="socket:[7442]" dev="sockfs" ino=7442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 54.193774][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.220250][ T28] audit: type=1400 audit(1779968709.246:397): avc: denied { map } for pid=4527 comm="syz.3.385" path="socket:[8472]" dev="sockfs" ino=8472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.258917][ T4530] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.394'. [ 54.265943][ T28] audit: type=1400 audit(1779968709.246:398): avc: denied { read } for pid=4527 comm="syz.3.385" path="socket:[8472]" dev="sockfs" ino=8472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.268695][ T4530] netlink: zone id is out of range [ 54.318296][ T4530] netlink: zone id is out of range [ 54.323868][ T4530] netlink: zone id is out of range [ 54.351397][ T4530] netlink: set zone limit has 8 unknown bytes [ 54.449560][ T4541] loop2: detected capacity change from 0 to 256 [ 54.494913][ T28] audit: type=1400 audit(1779968709.526:399): avc: denied { read } for pid=4544 comm="syz.0.390" laddr=::1 lport=255 faddr=::1 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.556483][ T28] audit: type=1400 audit(1779968709.586:400): avc: denied { mount } for pid=4547 comm="syz.0.391" name="/" dev="ramfs" ino=7476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.922174][ T28] audit: type=1400 audit(1779968709.946:401): avc: denied { read write } for pid=4578 comm="syz.0.406" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.926529][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.954804][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.964223][ T28] audit: type=1400 audit(1779968709.946:402): avc: denied { open } for pid=4578 comm="syz.0.406" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.976378][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.996867][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.039555][ T28] audit: type=1400 audit(1779968710.066:403): avc: denied { accept } for pid=4585 comm="syz.4.408" path="socket:[8549]" dev="sockfs" ino=8549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.092236][ T4590] loop2: detected capacity change from 0 to 128 [ 55.123019][ T4590] loop5: detected capacity change from 0 to 7 [ 55.186098][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.309292][ T4612] loop1: detected capacity change from 0 to 128 [ 55.614829][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 56.257753][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 57.924932][ T23] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 57.949055][ T4648] fido_id[4648]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.978103][ T4651] loop1: detected capacity change from 0 to 1024 [ 58.007051][ T4655] loop0: detected capacity change from 0 to 512 [ 58.024957][ T4651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.046973][ T4651] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.063508][ T4651] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.435: lblock 3 mapped to illegal pblock 3 (length 3) [ 58.083041][ T4651] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 58.099987][ T4655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.114760][ T4655] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.118445][ T4651] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.118445][ T4651] [ 58.167461][ T4651] EXT4-fs: Ignoring removed orlov option [ 58.220572][ T4651] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000. [ 58.268487][ T4651] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.435: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.307524][ T4651] EXT4-fs (loop1): Remounting filesystem read-only [ 58.335166][ T4676] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 58.465999][ T4683] tls_set_device_offload_rx: netdev not found [ 58.580552][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.593096][ T2004] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.635597][ T4701] loop0: detected capacity change from 0 to 512 [ 58.651377][ T4703] gretap1: entered allmulticast mode [ 58.666054][ T4703] team0: Port device gretap1 added [ 58.672156][ T2004] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.688312][ T4703] bridge0: port 3(team0) entered blocking state [ 58.695241][ T4703] bridge0: port 3(team0) entered disabled state [ 58.701697][ T4703] team0: entered allmulticast mode [ 58.707135][ T4703] team_slave_0: entered allmulticast mode [ 58.713438][ T4703] team_slave_1: entered allmulticast mode [ 58.731632][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 58.741005][ T4701] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 58.748295][ T4703] team0: entered promiscuous mode [ 58.754324][ T4701] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.455: invalid block [ 58.756264][ T4703] team_slave_0: entered promiscuous mode [ 58.780956][ T4703] team_slave_1: entered promiscuous mode [ 58.786865][ T4703] gretap1: entered promiscuous mode [ 58.792634][ T4703] bridge0: port 3(team0) entered blocking state [ 58.798961][ T4703] bridge0: port 3(team0) entered forwarding state [ 58.800251][ T4701] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 58.808462][ T2004] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.837999][ T4701] EXT4-fs (loop0): 1 truncate cleaned up [ 58.843768][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.843783][ C1] EXT4-fs (loop0): initial error at time 1779968713: ext4_get_branch:178: inode 13: block 1024 [ 58.843825][ C1] EXT4-fs (loop0): last error at time 1779968713: ext4_get_branch:178: inode 13: block 1024 [ 58.893569][ T4701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.908996][ T2004] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.945154][ T28] kauditd_printk_skb: 258 callbacks suppressed [ 58.945169][ T28] audit: type=1400 audit(1779968713.976:662): avc: denied { connect } for pid=4714 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.010596][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.025638][ T28] audit: type=1400 audit(1779968714.056:663): avc: denied { mount } for pid=4720 comm="syz.2.464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.064131][ T28] audit: type=1400 audit(1779968714.066:664): avc: denied { read } for pid=3023 comm="dhcpcd" name="n25" dev="tmpfs" ino=2859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.086450][ T28] audit: type=1400 audit(1779968714.066:665): avc: denied { open } for pid=3023 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.125822][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 59.146364][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 59.156439][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.176970][ T28] audit: type=1400 audit(1779968714.066:666): avc: denied { getattr } for pid=3023 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.200784][ T28] audit: type=1400 audit(1779968714.076:667): avc: denied { search } for pid=4720 comm="syz.2.464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.223196][ T28] audit: type=1400 audit(1779968714.076:668): avc: denied { search } for pid=4720 comm="syz.2.464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.251053][ T28] audit: type=1400 audit(1779968714.076:669): avc: denied { read } for pid=4720 comm="syz.2.464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.273139][ T28] audit: type=1400 audit(1779968714.076:670): avc: denied { read open } for pid=4720 comm="syz.2.464" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.356209][ T28] audit: type=1400 audit(1779968714.276:671): avc: denied { read } for pid=4735 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.467841][ T4753] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 59.706059][ T2004] bridge_slave_1: left allmulticast mode [ 59.711764][ T2004] bridge_slave_1: left promiscuous mode [ 59.717657][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.725938][ T2004] bridge_slave_0: left allmulticast mode [ 59.731704][ T2004] bridge_slave_0: left promiscuous mode [ 59.737512][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.813293][ T4755] loop2: detected capacity change from 0 to 8192 [ 59.826100][ T2004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.839000][ T2004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.848874][ T2004] bond0 (unregistering): Released all slaves [ 59.863319][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 59.873013][ T3944] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.882073][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 59.889299][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 59.903253][ T4753] team0: Port device dummy0 added [ 59.911085][ T3944] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.921389][ T3944] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.947025][ T3944] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.976632][ T2004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.988829][ T4753] syz.1.471 (4753) used greatest stack depth: 9688 bytes left [ 60.001191][ T2004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.016735][ T2004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.030586][ T2004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.043318][ T4769] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 60.071151][ T2004] veth1_macvtap: left promiscuous mode [ 60.085679][ T2004] veth0_macvtap: left promiscuous mode [ 60.101457][ T2004] veth1_vlan: left promiscuous mode [ 60.120110][ T2004] veth0_vlan: left promiscuous mode [ 60.271145][ T2004] team0 (unregistering): Port device team_slave_1 removed [ 60.286309][ T2004] team0 (unregistering): Port device team_slave_0 removed [ 60.356548][ T4769] bond1: entered promiscuous mode [ 60.364927][ T4769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.392591][ T4781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.399932][ T4781] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 60.420559][ T4781] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 60.438763][ T4781] bond1: (slave ip6gre1): making interface the new active one [ 60.446591][ T4781] ip6gre1: entered promiscuous mode [ 60.453628][ T4781] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 60.462634][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.539968][ T4817] loop2: detected capacity change from 0 to 1024 [ 60.566501][ T4817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.599253][ T4817] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.646801][ T4817] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.488: lblock 3 mapped to illegal pblock 3 (length 3) [ 60.662397][ T4817] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 60.675576][ T4817] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.675576][ T4817] [ 60.693168][ T4817] EXT4-fs: Ignoring removed orlov option [ 60.702547][ T4817] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000. [ 60.713889][ T4817] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.488: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.754823][ T4833] bridge1: entered promiscuous mode [ 60.760097][ T4817] EXT4-fs (loop2): Remounting filesystem read-only [ 60.766777][ T4833] bridge1: entered allmulticast mode [ 60.826699][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.939971][ T4835] loop0: detected capacity change from 0 to 2048 [ 60.943465][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.968325][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.975622][ T4711] bridge_slave_0: entered allmulticast mode [ 60.982155][ T4711] bridge_slave_0: entered promiscuous mode [ 60.989059][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.996212][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.003801][ T4711] bridge_slave_1: entered allmulticast mode [ 61.010811][ T4711] bridge_slave_1: entered promiscuous mode [ 61.025088][ T4835] loop0: p2 < > p4 [ 61.046714][ T4835] loop0: p4 size 262144 extends beyond EOD, truncated [ 61.054930][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.119203][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.178767][ T4711] team0: Port device team_slave_0 added [ 61.198950][ T4711] team0: Port device team_slave_1 added [ 61.244430][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.259554][ T4723] udevd[4723]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.269852][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.297173][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 61.314304][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.325549][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.332584][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.358506][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.370861][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.403207][ T4711] hsr_slave_0: entered promiscuous mode [ 61.409358][ T4711] hsr_slave_1: entered promiscuous mode [ 61.423955][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 61.432349][ T4711] Cannot create hsr debugfs directory [ 61.446428][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.523313][ T4711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.531477][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.539078][ T4711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.547774][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.556124][ T4711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.564636][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.572172][ T4711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.580941][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.616644][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.629037][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.638731][ T2004] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.645814][ T2004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.657499][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.664572][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.764663][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.861658][ T4711] veth0_vlan: entered promiscuous mode [ 61.870282][ T4711] veth1_vlan: entered promiscuous mode [ 61.886695][ T4711] veth0_macvtap: entered promiscuous mode [ 61.894557][ T4711] veth1_macvtap: entered promiscuous mode [ 61.906206][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.917102][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.927454][ T3944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.936754][ T2004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.946228][ T2004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.955021][ T2004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.008236][ T4909] xt_hashlimit: size too large, truncated to 1048576 [ 62.008918][ T4906] loop1: detected capacity change from 0 to 512 [ 62.025737][ T4908] syz_tun: entered allmulticast mode [ 62.057524][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.085580][ T4906] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.127445][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.219324][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 62.256478][ T4917] team1: entered promiscuous mode [ 62.262666][ T4917] team1: entered allmulticast mode [ 62.268151][ T4923] loop5: detected capacity change from 0 to 512 [ 62.277077][ T4917] 8021q: adding VLAN 0 to HW filter on device team1 [ 62.297600][ T4929] loop1: detected capacity change from 0 to 1024 [ 62.309350][ T4923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.316593][ T4929] EXT4-fs: Ignoring removed orlov option [ 62.324646][ T4923] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.347541][ T4929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.391458][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.401455][ T3382] IPVS: starting estimator thread 0... [ 62.502981][ T4939] IPVS: using max 2688 ests per chain, 134400 per kthread [ 62.602217][ T3948] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.716295][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.166812][ T4991] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 63.423214][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 63.652150][ T5019] loop1: detected capacity change from 0 to 32768 [ 63.704435][ T5019] loop1: p1 p3 < > [ 63.820958][ T5037] loop1: detected capacity change from 0 to 4096 [ 63.840171][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.870159][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 63.880332][ T4723] udevd[4723]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 63.897151][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.984227][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 63.984240][ T28] audit: type=1400 audit(1779968719.006:706): avc: denied { execute } for pid=5041 comm="syz.0.552" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 64.049744][ T28] audit: type=1400 audit(1779968719.056:707): avc: denied { wake_alarm } for pid=5041 comm="syz.0.552" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.115827][ T28] audit: type=1400 audit(1779968719.146:708): avc: denied { connect } for pid=5045 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.137196][ T28] audit: type=1400 audit(1779968719.166:709): avc: denied { read } for pid=5045 comm="syz.1.563" laddr=172.20.20.170 lport=58179 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.198945][ T28] audit: type=1400 audit(1779968719.226:710): avc: denied { create } for pid=5049 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.199379][ T5050] netlink: 'syz.0.554': attribute type 6 has an invalid length. [ 64.228591][ T28] audit: type=1400 audit(1779968719.226:711): avc: denied { write } for pid=5049 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.257452][ T28] audit: type=1400 audit(1779968719.256:712): avc: denied { read } for pid=5024 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.365063][ T28] audit: type=1326 audit(1779968719.396:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.0.557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 64.401812][ T28] audit: type=1326 audit(1779968719.396:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.0.557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 64.457898][ T28] audit: type=1326 audit(1779968719.396:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.0.557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 64.622990][ T3664] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.599880][ T4953] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 67.734817][ T5086] sock: sock_set_timeout: `syz.5.570' (pid 5086) tries to set negative timeout [ 67.831950][ T5099] xt_hashlimit: size too large, truncated to 1048576 [ 67.840803][ T5103] loop2: detected capacity change from 0 to 1024 [ 67.861984][ T5103] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.877858][ T5103] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 67.890332][ T5103] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 67.901101][ T5103] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #5: comm syz.2.577: unexpected bad inode w/o EXT4_IGET_BAD [ 67.914508][ T5103] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 67.914632][ T5103] EXT4-fs (loop2): no journal found [ 67.923715][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 67.923729][ C0] EXT4-fs (loop2): initial error at time 1779968722: ext4_get_journal_inode:5896: inode 5 [ 67.923757][ C0] EXT4-fs (loop2): last error at time 1779968722: ext4_get_journal_inode:5896: inode 5 [ 67.979822][ T5103] EXT4-fs (loop2): can't get journal size [ 67.990746][ T5103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.026381][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.049475][ T5112] loop1: detected capacity change from 0 to 512 [ 68.077080][ T5112] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 68.109992][ T5112] EXT4-fs (loop1): invalid journal inode [ 68.121900][ T5112] EXT4-fs (loop1): can't get journal size [ 68.155581][ T5112] EXT4-fs (loop1): 1 truncate cleaned up [ 68.162642][ T5112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.191316][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.297081][ T5126] loop1: detected capacity change from 0 to 1024 [ 68.318529][ T5126] EXT4-fs: Ignoring removed orlov option [ 68.329051][ T5126] /dev/loop1: Can't open blockdev [ 68.398587][ T5134] netlink: 'syz.4.588': attribute type 3 has an invalid length. [ 68.669233][ T5152] loop0: detected capacity change from 0 to 512 [ 68.703936][ T5152] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.597: corrupted in-inode xattr: e_value size too large [ 68.720245][ T5152] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.722720][ T5152] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.597: couldn't read orphan inode 15 (err -117) [ 68.732005][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 68.732019][ C1] EXT4-fs (loop0): initial error at time 1779968723: ext4_iget_extra_inode:5128: inode 15 [ 68.732040][ C1] EXT4-fs (loop0): last error at time 1779968723: ext4_iget_extra_inode:5128: inode 15 [ 68.775894][ T5152] loop0: lost filesystem error report for type 5 error -117 [ 68.778110][ T5152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.805351][ T5158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.599'. [ 68.828420][ T5164] netlink: 'syz.2.601': attribute type 20 has an invalid length. [ 68.838502][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 68.852308][ T2004] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.852355][ T5164] netlink: 'syz.2.601': attribute type 20 has an invalid length. [ 68.869413][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 68.878320][ T2004] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.892433][ T2004] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.908549][ T2004] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.948493][ T5168] netlink: 136 bytes leftover after parsing attributes in process `syz.5.604'. [ 68.978238][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.009629][ T5174] loop4: detected capacity change from 0 to 512 [ 69.062177][ T5174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.085713][ T28] kauditd_printk_skb: 405 callbacks suppressed [ 69.085727][ T28] audit: type=1400 audit(1779968724.116:1121): avc: denied { write } for pid=5185 comm="syz.1.614" path="socket:[9937]" dev="sockfs" ino=9937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.139447][ T5174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.188321][ T5174] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.247411][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.452434][ T28] audit: type=1400 audit(1779968724.476:1122): avc: denied { ioctl } for pid=5223 comm="syz.1.630" path="socket:[10551]" dev="sockfs" ino=10551 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.480159][ T5224] xt_hashlimit: size too large, truncated to 1048576 [ 69.530259][ T28] audit: type=1400 audit(1779968724.556:1123): avc: denied { read } for pid=5225 comm="syz.4.631" path="socket:[10036]" dev="sockfs" ino=10036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.449450][ T28] audit: type=1400 audit(1779968725.476:1124): avc: denied { setopt } for pid=5243 comm="syz.0.645" lport=39964 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.485051][ T28] audit: type=1400 audit(1779968725.506:1125): avc: denied { execute } for pid=5240 comm="syz.4.647" name="file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.540799][ T5253] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 70.573934][ T5253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.636853][ T5253] bond2: (slave gretap1): making interface the new active one [ 70.682070][ T5253] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 70.861778][ T28] audit: type=1326 audit(1779968725.886:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.0.656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 70.904143][ T28] audit: type=1326 audit(1779968725.886:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.0.656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 70.937721][ T28] audit: type=1326 audit(1779968725.886:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.0.656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 70.967664][ T28] audit: type=1326 audit(1779968725.886:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.0.656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 71.000240][ T28] audit: type=1326 audit(1779968725.886:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.0.656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc496ce59 code=0x7ffc0000 [ 71.229495][ T5317] loop5: detected capacity change from 0 to 512 [ 71.236624][ T5317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.249397][ T5317] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.667: bad orphan inode 131083 [ 71.260250][ T5317] loop5: lost filesystem error report for type 5 error -117 [ 71.260701][ T5317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.296272][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.337132][ T5320] loop5: detected capacity change from 0 to 128 [ 71.673043][ T5363] SELinux: Context system_u: is not valid (left unmapped). [ 71.923492][ T5385] loop1: detected capacity change from 0 to 128 [ 71.933760][ T5385] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 71.946997][ T5385] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.101331][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.295044][ T5414] loop2: detected capacity change from 0 to 136 [ 72.321827][ T5414] Attempt to read inode for relocated directory [ 72.366514][ T5418] capability: warning: `syz.0.709' uses deprecated v2 capabilities in a way that may be insecure [ 72.559397][ T5449] loop5: detected capacity change from 0 to 1024 [ 72.567954][ T5449] EXT4-fs: Ignoring removed bh option [ 72.608733][ T5449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.626328][ T5449] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.658544][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.983987][ T5465] loop0: detected capacity change from 0 to 512 [ 72.998519][ T5467] loop4: detected capacity change from 0 to 128 [ 73.008440][ T5465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.033933][ T5465] EXT4-fs (loop0): 1 truncate cleaned up [ 73.041799][ T5467] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 73.056280][ T5465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.059543][ T5467] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.098699][ T5467] ext2 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.140547][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.179390][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.274906][ T5488] xt_hashlimit: size too large, truncated to 1048576 [ 73.649220][ T5531] loop1: detected capacity change from 0 to 4096 [ 73.685086][ T5531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.397459][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.411691][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 74.411706][ T28] audit: type=1400 audit(1779968985.432:1180): avc: denied { mounton } for pid=5543 comm="syz.2.743" path="/file0" dev="ramfs" ino=10968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 74.537947][ T5562] FAT-fs (loop11): unable to read boot sector [ 74.539585][ T28] audit: type=1400 audit(1779968985.562:1181): avc: denied { mounton } for pid=5548 comm="syz.5.746" path="/67/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.597188][ T5566] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.729615][ T28] audit: type=1400 audit(1779968985.752:1182): avc: denied { read write } for pid=5577 comm="syz.2.760" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.762732][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.770082][ T28] audit: type=1400 audit(1779968985.752:1183): avc: denied { open } for pid=5577 comm="syz.2.760" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.793959][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.832497][ T5578] loop2: detected capacity change from 0 to 4096 [ 74.846593][ T5578] EXT4-fs: test_dummy_encryption option not supported [ 74.970526][ T5591] loop0: detected capacity change from 0 to 512 [ 74.988797][ T5591] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.765: corrupted in-inode xattr: invalid ea_ino [ 75.002428][ T5591] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.002784][ T5591] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.765: couldn't read orphan inode 15 (err -117) [ 75.002903][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 75.002927][ C0] EXT4-fs (loop0): initial error at time 1779968986: ext4_iget_extra_inode:5128: inode 15 [ 75.003013][ C0] EXT4-fs (loop0): last error at time 1779968986: ext4_iget_extra_inode:5128: inode 15 [ 75.053975][ T5591] loop0: lost filesystem error report for type 5 error -117 [ 75.055540][ T5591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.566646][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.612719][ T28] audit: type=1400 audit(1779968986.632:1184): avc: denied { create } for pid=5606 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.637771][ T28] audit: type=1400 audit(1779968986.662:1185): avc: denied { bind } for pid=5606 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.657438][ T28] audit: type=1400 audit(1779968986.662:1186): avc: denied { read } for pid=5606 comm="syz.0.771" path="socket:[11104]" dev="sockfs" ino=11104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.692368][ T5607] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 75.695388][ T28] audit: type=1400 audit(1779968986.722:1187): avc: denied { write } for pid=5613 comm="syz.5.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.748033][ T5620] loop0: detected capacity change from 0 to 512 [ 75.755069][ T5620] EXT4-fs: Ignoring removed nobh option [ 75.767303][ T5620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.779560][ T5620] EXT4-fs (loop0): 1 truncate cleaned up [ 75.785883][ T5620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.826032][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.967764][ T28] audit: type=1400 audit(1779968986.992:1188): avc: denied { connect } for pid=5643 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.989211][ T30] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x17 [ 76.019623][ T5647] usb usb7: usbfs: process 5647 (syz.0.786) did not claim interface 0 before use [ 76.137595][ T5657] loop0: detected capacity change from 0 to 256 [ 76.189825][ T28] audit: type=1326 audit(1779968987.212:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31920ace59 code=0x0 [ 76.305545][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 76.328186][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 76.492439][ T5667] syzkaller1: entered promiscuous mode [ 76.498525][ T5667] syzkaller1: entered allmulticast mode [ 76.775306][ T5673] loop2: detected capacity change from 0 to 32768 [ 76.813509][ T5673] loop2: p1 p3 < > [ 76.922522][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.932548][ T4723] udevd[4723]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.993635][ T5686] sctp: [Deprecated]: syz.2.802 (pid 5686) Use of int in max_burst socket option deprecated. [ 76.993635][ T5686] Use struct sctp_assoc_value instead [ 77.257542][ T5708] Cannot find add_set index 0 as target [ 77.299779][ T5712] loop0: detected capacity change from 0 to 128 [ 77.314953][ T5712] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.331387][ T5712] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.357858][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.433394][ T5721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.817'. [ 77.494873][ T5726] loop4: detected capacity change from 0 to 8192 [ 78.075506][ T5748] set_capacity_and_notify: 1 callbacks suppressed [ 78.075522][ T5748] loop6: detected capacity change from 0 to 8 [ 78.215898][ T5748] loop6: detected capacity change from 8 to 7 [ 78.237174][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.246400][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.255171][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.264383][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.272960][ T5748] loop6: unable to read partition table [ 78.291623][ T5748] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 78.291623][ T5748] .BL_se) failed (rc=-5) [ 78.332970][ T5751] loop6: detected capacity change from 7 to 0 [ 78.417507][ T5768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.835'. [ 79.098817][ T5822] tls_set_device_offload: netdev not found [ 79.255428][ T5832] loop1: detected capacity change from 0 to 1024 [ 79.284949][ T5832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.310396][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.342827][ T5836] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 79.440183][ T5842] loop1: detected capacity change from 0 to 4096 [ 79.479391][ T5842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.511920][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 79.511933][ T28] audit: type=1400 audit(1779968990.532:1205): avc: denied { write } for pid=5841 comm="syz.1.864" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.657489][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.723012][ T5865] xt_hashlimit: size too large, truncated to 1048576 [ 79.819895][ T5873] syzkaller1: entered promiscuous mode [ 79.837906][ T5873] syzkaller1: entered allmulticast mode [ 79.864252][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 80.104863][ T5900] loop5: detected capacity change from 0 to 1024 [ 80.116107][ T5900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.153461][ T5900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.177021][ T5911] netlink: 'syz.2.890': attribute type 10 has an invalid length. [ 80.191248][ T5900] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.207869][ T28] audit: type=1400 audit(1779968991.232:1206): avc: denied { write } for pid=5899 comm="syz.5.886" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.233959][ T5911] team0: Device wg2 is of different type [ 80.246529][ T5900] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.886: lblock 0 mapped to illegal pblock 0 (length 1) [ 80.297345][ T5900] EXT4-fs (loop5): Remounting filesystem read-only [ 80.363531][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.385470][ T28] audit: type=1326 audit(1779968991.412:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.468704][ T28] audit: type=1326 audit(1779968991.412:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.544433][ T28] audit: type=1326 audit(1779968991.412:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.617074][ T28] audit: type=1326 audit(1779968991.412:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.689923][ T28] audit: type=1326 audit(1779968991.412:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.764387][ T28] audit: type=1326 audit(1779968991.412:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.827573][ T28] audit: type=1326 audit(1779968991.412:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 80.873054][ T5945] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 80.894372][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 80.906473][ T28] audit: type=1326 audit(1779968991.412:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7ffc0000 [ 81.085633][ T5961] loop0: detected capacity change from 0 to 512 [ 81.121571][ T5961] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 81.177636][ T5961] EXT4-fs (loop0): invalid journal inode [ 81.220621][ T5961] EXT4-fs (loop0): can't get journal size [ 81.230407][ T5965] netlink: 'syz.4.914': attribute type 29 has an invalid length. [ 81.239719][ T5965] loop4: detected capacity change from 0 to 128 [ 81.252846][ T5961] EXT4-fs (loop0): 1 truncate cleaned up [ 81.265694][ T5965] FAT-fs (loop4): bogus sectors per cluster 0 [ 81.271907][ T5965] FAT-fs (loop4): Can't find a valid FAT filesystem [ 81.291328][ T5965] netlink: 'syz.4.914': attribute type 29 has an invalid length. [ 81.304099][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.337827][ T5965] netlink: 500 bytes leftover after parsing attributes in process `syz.4.914'. [ 81.511346][ T5982] netlink: 'syz.4.921': attribute type 11 has an invalid length. [ 81.519440][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 81.529358][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.539655][ T5982] netlink: 'syz.4.921': attribute type 11 has an invalid length. [ 81.555234][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 81.962216][ T5998] bridge0: port 3(syz_tun) entered blocking state [ 81.974614][ T5998] bridge0: port 3(syz_tun) entered disabled state [ 82.001016][ T5998] syz_tun: entered allmulticast mode [ 82.014087][ T5998] syz_tun: entered promiscuous mode [ 82.019608][ T5998] bridge0: port 3(syz_tun) entered blocking state [ 82.026099][ T5998] bridge0: port 3(syz_tun) entered forwarding state [ 82.076119][ T6017] loop0: detected capacity change from 0 to 512 [ 82.097919][ T6017] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.122021][ T6017] EXT4-fs (loop0): 1 truncate cleaned up [ 82.142361][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.155089][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 82.742487][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 82.763100][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 82.840709][ T6055] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.952'. [ 82.948691][ T6060] netlink: 'syz.1.954': attribute type 4 has an invalid length. [ 82.957122][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.106543][ T6066] SELinux: failed to load policy [ 83.229626][ T6080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.963'. [ 83.669112][ T6113] netlink: 64 bytes leftover after parsing attributes in process `syz.5.978'. [ 83.774926][ T6117] xt_hashlimit: size too large, truncated to 1048576 [ 83.828731][ T6124] syz_tun: entered allmulticast mode [ 83.845177][ T6123] syz_tun: left allmulticast mode [ 83.869324][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 83.927613][ T6133] Illegal XDP return value 2288121549 on prog (id 180) dev syz_tun, expect packet loss! [ 83.992801][ T6138] netlink: 'syz.2.990': attribute type 25 has an invalid length. [ 84.017435][ T6138] netlink: 'syz.2.990': attribute type 25 has an invalid length. [ 84.317084][ T6159] syz_tun: entered allmulticast mode [ 84.328069][ T6158] syz_tun: left allmulticast mode [ 84.416992][ T6170] netlink: 'syz.5.1002': attribute type 4 has an invalid length. [ 85.016020][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 85.016037][ T28] audit: type=1326 audit(1779968996.042:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.2.996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f5cce59 code=0x7fc00000 [ 85.068750][ T6193] loop4: detected capacity change from 0 to 512 [ 85.089194][ T6193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.127377][ T6193] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1012: bad orphan inode 131083 [ 85.141769][ T6193] loop4: lost filesystem error report for type 5 error -117 [ 85.142457][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.166273][ T28] audit: type=1400 audit(1779968996.192:1253): avc: denied { write } for pid=6192 comm="syz.4.1012" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.198115][ T28] audit: type=1400 audit(1779968996.212:1254): avc: denied { read write } for pid=6192 comm="syz.4.1012" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.222687][ T28] audit: type=1400 audit(1779968996.212:1255): avc: denied { open } for pid=6192 comm="syz.4.1012" path="/188/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.229324][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.480617][ T6232] loop5: detected capacity change from 0 to 1024 [ 85.493496][ T6232] EXT4-fs: Ignoring removed orlov option [ 85.511898][ T6232] /dev/loop5: Can't open blockdev [ 85.519904][ T3944] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.764584][ T6242] loop5: detected capacity change from 0 to 512 [ 85.794548][ T6242] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.814645][ T6242] EXT4-fs (loop5): 1 truncate cleaned up [ 85.820967][ T6242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.835868][ T28] audit: type=1400 audit(1779968996.862:1256): avc: denied { write } for pid=6241 comm="syz.5.1031" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.439980][ T6278] bridge0: port 4(syz_tun) entered blocking state [ 86.446675][ T6278] bridge0: port 4(syz_tun) entered disabled state [ 86.454432][ T6278] syz_tun: entered promiscuous mode [ 86.456590][ T28] audit: type=1400 audit(1779968997.482:1257): avc: denied { kexec_image_load } for pid=6287 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 86.460174][ T6278] bridge0: port 4(syz_tun) entered blocking state [ 86.486228][ T6278] bridge0: port 4(syz_tun) entered forwarding state [ 86.602024][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.639983][ T6292] xt_hashlimit: size too large, truncated to 1048576 [ 87.163259][ T6300] __nla_validate_parse: 6 callbacks suppressed [ 87.163317][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1055'. [ 87.348801][ T6313] sctp: [Deprecated]: syz.5.1059 (pid 6313) Use of int in max_burst socket option deprecated. [ 87.348801][ T6313] Use struct sctp_assoc_value instead [ 87.572938][ T3544] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.574471][ T3664] Bluetooth: hci0: command 0x1003 tx timeout [ 87.616722][ T6288] kexec: Could not allocate control_code_buffer [ 87.805768][ T6338] loop1: detected capacity change from 0 to 512 [ 87.814118][ T6338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.872393][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.888348][ T6338] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.920189][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.966493][ T6325] program syz.0.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.243327][ T6376] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 88.254435][ T6376] bridge0: port 4(syz_tun) entered disabled state [ 88.261006][ T6376] bridge0: port 3(team0) entered disabled state [ 88.267423][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.274655][ T6376] bridge0: entered allmulticast mode [ 88.320748][ T6372] xt_hashlimit: size too large, truncated to 1048576 [ 88.345540][ T6381] loop4: detected capacity change from 0 to 128 [ 88.385832][ T2004] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.608212][ T6395] loop5: detected capacity change from 0 to 2048 [ 88.626971][ T6395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.651639][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.688174][ T28] audit: type=1326 audit(1779969255.718:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b28fce59 code=0x7ffc0000 [ 88.713907][ T28] audit: type=1326 audit(1779969255.718:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc3b28fce59 code=0x7ffc0000 [ 88.739850][ T28] audit: type=1326 audit(1779969255.718:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b28fce59 code=0x7ffc0000 [ 88.765488][ T28] audit: type=1326 audit(1779969255.718:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc3b28fce59 code=0x7ffc0000 [ 88.806391][ T6409] netlink: 'syz.5.1099': attribute type 1 has an invalid length. [ 88.841566][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.864039][ T6409] bond1: (slave gretap1): making interface the new active one [ 88.872654][ T6409] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 88.972432][ T6418] Process accounting resumed [ 89.923476][ T6455] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 90.452914][ T3664] Bluetooth: hci0: command 0x1003 tx timeout [ 90.458986][ T3544] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.465814][ T6385] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 90.788805][ T6489] loop2: detected capacity change from 0 to 512 [ 90.795688][ T6489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.814559][ T6489] EXT4-fs (loop2): 1 truncate cleaned up [ 90.824966][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.840931][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 90.840942][ T28] audit: type=1400 audit(1779969257.868:1266): avc: denied { write } for pid=6488 comm="syz.2.1141" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.956908][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.966394][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.978563][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.030932][ T6494] xt_hashlimit: size too large, truncated to 1048576 [ 91.046594][ T6498] loop2: detected capacity change from 0 to 128 [ 91.290182][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.319156][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.355203][ T6502] bond2: entered promiscuous mode [ 91.360859][ T6502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.532646][ T28] audit: type=1400 audit(1779969258.558:1267): avc: denied { write } for pid=6517 comm="syz.4.1145" lport=46898 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.583349][ T6521] loop4: detected capacity change from 0 to 512 [ 91.607025][ T6521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.618216][ T6521] EXT4-fs (loop4): 1 truncate cleaned up [ 91.624500][ T6521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.640925][ T28] audit: type=1400 audit(1779969258.668:1268): avc: denied { write } for pid=6520 comm="syz.4.1146" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.664061][ T28] audit: type=1400 audit(1779969258.668:1269): avc: denied { map } for pid=6520 comm="syz.4.1146" path="/228/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.701052][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.788197][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 91.818227][ T6529] syz_tun (unregistering): left allmulticast mode [ 91.831465][ T6529] syz_tun (unregistering): left promiscuous mode [ 91.838157][ T6529] bridge0: port 4(syz_tun) entered disabled state [ 91.922775][ T28] audit: type=1400 audit(1779969258.948:1270): avc: denied { lock } for pid=6531 comm="syz.5.1150" path="socket:[13954]" dev="sockfs" ino=13954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.138696][ T6544] xt_hashlimit: size too large, truncated to 1048576 [ 92.376899][ T6557] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.391871][ T28] audit: type=1400 audit(1779969259.418:1271): avc: denied { mount } for pid=6554 comm="syz.0.1170" name="/" dev="hugetlbfs" ino=13979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 92.511425][ T3941] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.528368][ T6565] loop5: detected capacity change from 0 to 1024 [ 92.557591][ T6565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.573877][ T28] audit: type=1400 audit(1779969259.608:1272): avc: denied { write } for pid=6564 comm="syz.5.1164" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.599283][ T6565] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 92.619487][ T6565] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 92.645817][ T6565] EXT4-fs (loop5): This should not happen!! Data will be lost [ 92.645817][ T6565] [ 92.662976][ T6565] EXT4-fs (loop5): Total free blocks count 0 [ 92.674992][ T6565] EXT4-fs (loop5): Free/Dirty block details [ 92.681120][ T6565] EXT4-fs (loop5): free_blocks=20480 [ 92.717513][ T6565] EXT4-fs (loop5): dirty_blocks=80 [ 92.727270][ T6565] EXT4-fs (loop5): Block reservation details [ 92.734252][ T6565] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 92.740415][ T6565] EXT4-fs error (device loop5) in ext4_setattr:6120: error 28 [ 92.761117][ T6583] all: renamed from lo [ 92.800072][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 92.814016][ T4711] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 92.943713][ T3382] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 92.954799][ T3382] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.003243][ T6595] loop1: detected capacity change from 0 to 4096 [ 93.017133][ T6595] EXT4-fs: test_dummy_encryption option not supported [ 93.084014][ T6599] loop5: detected capacity change from 0 to 136 [ 93.136787][ T6599] Attempt to read inode for relocated directory [ 93.353767][ T6609] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1182'. [ 93.846892][ T6615] loop2: detected capacity change from 0 to 512 [ 93.876238][ T6615] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1185: corrupted in-inode xattr: invalid ea_ino [ 93.891172][ T6615] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.892226][ T6615] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1185: couldn't read orphan inode 15 (err -117) [ 93.901814][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 93.901843][ C1] EXT4-fs (loop2): initial error at time 1779969260: ext4_iget_extra_inode:5128: inode 15 [ 93.901944][ C1] EXT4-fs (loop2): last error at time 1779969260: ext4_iget_extra_inode:5128: inode 15 [ 93.941389][ T6615] loop2: lost filesystem error report for type 5 error -117 [ 93.948086][ T6615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.987031][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.040280][ T6623] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.533798][ T3664] Bluetooth: hci0: command 0x1003 tx timeout [ 94.539859][ T3544] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.127572][ T6651] loop4: detected capacity change from 0 to 136 [ 95.173267][ T6651] Attempt to read inode for relocated directory [ 95.203849][ T6655] loop5: detected capacity change from 0 to 512 [ 95.218361][ T6655] EXT4-fs: Ignoring removed nobh option [ 95.226312][ T6655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.238607][ T2984] ================================================================== [ 95.246725][ T2984] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 95.254220][ T2984] [ 95.256566][ T2984] write to 0xffff8881085ec0c0 of 4 bytes by task 3293 on cpu 0: [ 95.264221][ T2984] d_make_discardable+0x4f/0xa0 [ 95.269197][ T2984] simple_unlink+0x68/0x80 [ 95.273654][ T2984] shmem_unlink+0x12d/0x140 [ 95.278195][ T2984] vfs_unlink+0x1c7/0x490 [ 95.282561][ T2984] filename_unlinkat+0x1e2/0x410 [ 95.287707][ T2984] __se_sys_unlink+0x2b/0xe0 [ 95.292349][ T2984] __x64_sys_unlink+0x1f/0x30 [ 95.297068][ T2984] x64_sys_call+0x2eb6/0x3020 [ 95.301786][ T2984] do_syscall_64+0x12c/0x3b0 [ 95.306425][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.312354][ T2984] [ 95.314699][ T2984] read to 0xffff8881085ec0c0 of 4 bytes by task 2984 on cpu 1: [ 95.322267][ T2984] do_readlinkat+0xa0/0x2f0 [ 95.326811][ T2984] __x64_sys_readlink+0x47/0x60 [ 95.331694][ T2984] x64_sys_call+0x2b51/0x3020 [ 95.336405][ T2984] do_syscall_64+0x12c/0x3b0 [ 95.341037][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.346974][ T2984] [ 95.349319][ T2984] value changed: 0x08300080 -> 0x00300180 [ 95.355054][ T2984] [ 95.357387][ T2984] Reported by Kernel Concurrency Sanitizer on: [ 95.363573][ T2984] CPU: 1 UID: 0 PID: 2984 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 95.372454][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.382538][ T2984] ================================================================== [ 95.396544][ T6655] EXT4-fs (loop5): 1 truncate cleaned up [ 95.403119][ T6655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.444413][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.