last executing test programs: 2m8.430850644s ago: executing program 32 (id=45): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x104084, 0x0, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getuid() 1m40.297403094s ago: executing program 33 (id=822): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0xe0002000}) epoll_pwait2(r1, &(0x7f0000005780)=[{}], 0x1, 0x0, 0x0, 0x0) 1m38.405922721s ago: executing program 5 (id=871): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1m38.179813896s ago: executing program 5 (id=872): r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 1m38.117083759s ago: executing program 5 (id=873): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000500000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.6204704s ago: executing program 5 (id=875): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000000c0)='^', 0x1, 0x4000080, &(0x7f0000004ff0)={0x2, 0xfffd, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f0000000080)=0x8) 1m36.763960303s ago: executing program 5 (id=889): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m36.691570067s ago: executing program 5 (id=891): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m21.394814874s ago: executing program 34 (id=891): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m13.309506604s ago: executing program 3 (id=1122): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_mr_cache\x00') fchdir(r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1m13.254498098s ago: executing program 3 (id=1124): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 1m13.166509823s ago: executing program 3 (id=1126): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1m13.136662145s ago: executing program 3 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m13.070249119s ago: executing program 3 (id=1129): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2000a212}) 1m12.807423935s ago: executing program 3 (id=1135): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.769990247s ago: executing program 35 (id=1135): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 56.72328358s ago: executing program 8 (id=1392): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x106200, 0xfff, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x31a}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x2}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 56.325613125s ago: executing program 8 (id=1401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 56.229062191s ago: executing program 8 (id=1404): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x4800a000, 0x0, 0x0, 0x0, 0x0, 0x0) 56.151935396s ago: executing program 8 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 56.105369839s ago: executing program 8 (id=1410): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) chdir(&(0x7f00000003c0)='./bus\x00') r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') 55.945306848s ago: executing program 8 (id=1414): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) 55.945122018s ago: executing program 36 (id=1414): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) 47.116858765s ago: executing program 6 (id=1508): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x11, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 46.244679949s ago: executing program 6 (id=1520): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 46.167162124s ago: executing program 6 (id=1524): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.437176889s ago: executing program 6 (id=1535): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 44.977465777s ago: executing program 6 (id=1544): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x84, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 44.633329738s ago: executing program 6 (id=1557): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 44.60274465s ago: executing program 37 (id=1557): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 14.200090922s ago: executing program 2 (id=2051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', '\x00', "00000200", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 14.199645171s ago: executing program 2 (id=2052): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x18, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) 14.128137736s ago: executing program 2 (id=2055): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 14.081357979s ago: executing program 2 (id=2066): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 14.057803411s ago: executing program 2 (id=2057): epoll_create1(0x0) epoll_create1(0x80000) close(0x3) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) exit(0xffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 13.959244047s ago: executing program 2 (id=2060): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x608c, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)) socket(0xa, 0x3, 0x3a) syz_open_dev$evdev(0x0, 0x2, 0xa2000) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 13.943924378s ago: executing program 38 (id=2060): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x608c, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)) socket(0xa, 0x3, 0x3a) syz_open_dev$evdev(0x0, 0x2, 0xa2000) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 2.649873556s ago: executing program 7 (id=2345): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x810406, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.78386024s ago: executing program 7 (id=2365): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$eJzs3U9oI3UUwPGXtGlnqm2CqKCgPt2LioRtjiLslmUrYmBFt7K6IMzaqYaMScmEaBZpsrCwFw9e/HdWQWShIB4EYVkPnqRl2bsn99aD9aTo4k8mM+NMtzOtRrd76PdzmD5+v/fm/ZJJh+YXaLaeef+tP4wxK05XilKQ4nEZFm4WpCJFiQ3libfXrz300iuvPr9Qr598UXVx4fR8TVXnHrly9t3Lj13t3vXy13PfTstG5bWt7dqNjfs3Htj68/SbDV8bvrbaXXXUik6myx/6zarqC57r+K42Wr7bCebPtdtd55zn6orXXl3tq9NavntmteP6vjqtvjbdvnbb2u301XnDabS0Wq3q7Iwg04XR0RK53PtkIT9t6cvfjJHt7g/GTA/FGBNV4bDQ6Gd4/W0ReS8/+cTsQS0LByR1U7dEvEu9pd6SiDcXHAMLK9IQT1w5KmW5KcE9wny6bka3iuD4Tm29fv3J779T1YqseYOoftBbmkjqzdOuzE+luib1i8/VT85raGd9SWbS/WtSlnvDmlBSX8usn5LHj6Tqq1KW669LWzzZvPLorzdOXfoorl+bVz1xqj6qL0pcb8tyvFxLvvgl++mr3N6rAwAAAAAAAADAeKqqqrZo3v59NUi4GESzFVmLPxMO5sMo2l8vpD8fiPfnJ6Lso5n785Ny/I48YgAAAAAADh+/fzGK+uebjue5Hd+Og2Akfg+fjKQCOxmZzMtJBffN7cwxxgySnHhFueV7BvZYVVFgjdn0fNOxo1UPRSQ757ML+53Hlnjk4cW9mx45NrEZN0ymSrdewX8dWOJ2SrdOPWiM2TkyJSLjtPj9THqkPNZSxdpdVfT7xoikkyf/fmXve8JRqiV75ViS7GLl5ZTiwM56ARQKYXVWi5/Hvl7pIGwwLSKlnN/BZ8/++NW+55na9fzsFm7rXf3/7j4AAAAADlLyR/8xGax80xuceeqDf1hqytH7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N+M8S/HNj/OmtIguOfzeORaFExLx89sXNiOvyYgz0+371EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/goAAP//d0Obkw==") socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.749425202s ago: executing program 7 (id=2366): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x8, 0x0) 1.026062787s ago: executing program 4 (id=2391): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) 1.025427167s ago: executing program 1 (id=2392): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x102260, 0x10000, 0x0, 0x1, 0xc, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) tkill(r0, 0x12) ppoll(0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x240000000000000]}, 0x8) 960.976891ms ago: executing program 1 (id=2394): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 903.554264ms ago: executing program 1 (id=2395): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 894.990545ms ago: executing program 9 (id=2396): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3", 0x11, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 872.485466ms ago: executing program 7 (id=2397): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) pwrite64(r1, &(0x7f00000000c0)="10", 0x95d, 0x8) 849.299448ms ago: executing program 1 (id=2399): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x30}}, 0x40000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 754.827723ms ago: executing program 4 (id=2400): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 754.342343ms ago: executing program 7 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 750.739184ms ago: executing program 9 (id=2402): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009cc0)=@newtfilter={0x508, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4dc, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4d0, 0x4, [@m_xt={0x18c, 0x18, 0x0, 0x0, {{0x7}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xc4, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0x7d, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cec"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x27c, 0x4, 0x0, 0x0, {{0xa}, {0x250, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x508}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 716.350606ms ago: executing program 0 (id=2404): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 641.035161ms ago: executing program 9 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 640.64606ms ago: executing program 7 (id=2406): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/191, 0xbf}, {0x0}], 0x2) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 639.959281ms ago: executing program 0 (id=2407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 619.622392ms ago: executing program 9 (id=2408): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 488.63948ms ago: executing program 4 (id=2409): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[], 0xff, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) fchdir(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xaa) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 483.79036ms ago: executing program 9 (id=2410): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$eJzs3U9oI3UUwPGXtGlnqm2CqKCgPt2LioRtjiLslmUrYmBFt7K6IMzaqYaMScmEaBZpsrCwFw9e/HdWQWShIB4EYVkPnqRl2bsn99aD9aTo4k8mM+NMtzOtRrd76PdzmD5+v/fm/ZJJh+YXaLaeef+tP4wxK05XilKQ4nEZFm4WpCJFiQ3libfXrz300iuvPr9Qr598UXVx4fR8TVXnHrly9t3Lj13t3vXy13PfTstG5bWt7dqNjfs3Htj68/SbDV8bvrbaXXXUik6myx/6zarqC57r+K42Wr7bCebPtdtd55zn6orXXl3tq9NavntmteP6vjqtvjbdvnbb2u301XnDabS0Wq3q7Iwg04XR0RK53PtkIT9t6cvfjJHt7g/GTA/FGBNV4bDQ6Gd4/W0ReS8/+cTsQS0LByR1U7dEvEu9pd6SiDcXHAMLK9IQT1w5KmW5KcE9wny6bka3iuD4Tm29fv3J779T1YqseYOoftBbmkjqzdOuzE+luib1i8/VT85raGd9SWbS/WtSlnvDmlBSX8usn5LHj6Tqq1KW669LWzzZvPLorzdOXfoorl+bVz1xqj6qL0pcb8tyvFxLvvgl++mr3N6rAwAAAAAAAADAeKqqqrZo3v59NUi4GESzFVmLPxMO5sMo2l8vpD8fiPfnJ6Lso5n785Ny/I48YgAAAAAADh+/fzGK+uebjue5Hd+Og2Akfg+fjKQCOxmZzMtJBffN7cwxxgySnHhFueV7BvZYVVFgjdn0fNOxo1UPRSQ757ML+53Hlnjk4cW9mx45NrEZN0ymSrdewX8dWOJ2SrdOPWiM2TkyJSLjtPj9THqkPNZSxdpdVfT7xoikkyf/fmXve8JRqiV75ViS7GLl5ZTiwM56ARQKYXVWi5/Hvl7pIGwwLSKlnN/BZ8/++NW+55na9fzsFm7rXf3/7j4AAAAADlLyR/8xGax80xuceeqDf1hqytH7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N+M8S/HNj/OmtIguOfzeORaFExLx89sXNiOvyYgz0+371EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/goAAP//d0Obkw==") socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 458.872992ms ago: executing program 9 (id=2412): modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 434.644453ms ago: executing program 4 (id=2413): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) pwrite64(r1, &(0x7f00000000c0)="10", 0x95d, 0x8) 420.877614ms ago: executing program 0 (id=2414): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 132.045713ms ago: executing program 4 (id=2415): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) 131.197842ms ago: executing program 0 (id=2425): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) 98.648284ms ago: executing program 1 (id=2416): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x4, 0x1, 0x1, 0x0, 0x30, @remote, @rand_addr=' \x01\x00', 0x7, 0x1, 0x1, 0x938}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 97.111074ms ago: executing program 4 (id=2417): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 73.719566ms ago: executing program 1 (id=2418): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x80000400}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 47.316718ms ago: executing program 0 (id=2419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 0s ago: executing program 0 (id=2420): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) kernel console output (not intermixed with test programs): netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 93.366129][ T6522] vlan2: entered allmulticast mode [ 93.721495][ T6540] loop7: detected capacity change from 0 to 128 [ 93.794524][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 93.794543][ T28] audit: type=1400 audit(1775265439.478:644): avc: denied { read } for pid=6541 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.929398][ T28] audit: type=1326 audit(1775265439.618:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a1bcec819 code=0x0 [ 93.967939][ T2468] bio_check_eod: 212 callbacks suppressed [ 93.967952][ T2468] kworker/u8:8: attempt to access beyond end of device [ 93.967952][ T2468] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 93.988441][ T2468] kworker/u8:8: attempt to access beyond end of device [ 93.988441][ T2468] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 94.002281][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.002281][ T2468] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 94.020877][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.020877][ T2468] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 94.037812][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.037812][ T2468] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 94.051746][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.051746][ T2468] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 94.070257][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.070257][ T2468] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 94.087710][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.087710][ T2468] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 94.101390][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.101390][ T2468] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 94.115511][ T2468] kworker/u8:8: attempt to access beyond end of device [ 94.115511][ T2468] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 94.197018][ T28] audit: type=1400 audit(1775265439.888:646): avc: denied { bind } for pid=6559 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.275971][ T28] audit: type=1400 audit(1775265439.908:647): avc: denied { write } for pid=6559 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.299835][ T28] audit: type=1400 audit(1775265439.908:648): avc: denied { setopt } for pid=6559 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.332079][ T6565] loop2: detected capacity change from 0 to 4096 [ 94.376770][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.645220][ T28] audit: type=1400 audit(1775265440.328:649): avc: denied { add_name } for pid=6564 comm="syz.2.1086" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.707187][ T6579] loop7: detected capacity change from 0 to 128 [ 94.728267][ T28] audit: type=1400 audit(1775265440.328:650): avc: denied { create } for pid=6564 comm="syz.2.1086" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.825273][ T28] audit: type=1400 audit(1775265440.328:651): avc: denied { read write } for pid=6564 comm="syz.2.1086" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.053135][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.153223][ T28] audit: type=1400 audit(1775265440.328:652): avc: denied { open } for pid=6564 comm="syz.2.1086" path="/240/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.241547][ T28] audit: type=1400 audit(1775265440.348:653): avc: denied { watch } for pid=6575 comm="syz.7.1090" path="/12" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.291284][ T6584] loop7: detected capacity change from 0 to 1024 [ 95.355891][ T6584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.435889][ T6270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.509970][ T6599] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1098'. [ 96.328373][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.349928][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.894949][ T3390] IPVS: starting estimator thread 0... [ 96.995470][ T6668] IPVS: using max 1824 ests per chain, 91200 per kthread [ 97.255408][ T6700] netlink: 'syz.0.1134': attribute type 1 has an invalid length. [ 97.297249][ T12] IPVS: stop unused estimator thread 0... [ 97.380428][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.488684][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.548507][ T6728] loop0: detected capacity change from 0 to 4096 [ 97.549708][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.589653][ T6728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.672038][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.695017][ T6738] netlink: 'syz.7.1147': attribute type 1 has an invalid length. [ 97.726222][ T6741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1148'. [ 97.739361][ T6710] chnl_net:caif_netlink_parms(): no params data found [ 97.911132][ T12] bridge_slave_1: left allmulticast mode [ 97.928636][ T12] bridge_slave_1: left promiscuous mode [ 97.945511][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.953533][ T12] bridge_slave_0: left promiscuous mode [ 97.959362][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.056042][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.070096][ T6764] loop2: detected capacity change from 0 to 4096 [ 98.100843][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.213179][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.258591][ T6773] loop2: detected capacity change from 0 to 512 [ 98.268672][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.279211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.289545][ T12] bond0 (unregistering): Released all slaves [ 98.295190][ T6773] FAT-fs (loop2): Directory bread(block 199916) failed [ 98.305096][ T6773] FAT-fs (loop2): Directory bread(block 199917) failed [ 98.312912][ T6773] FAT-fs (loop2): Directory bread(block 199918) failed [ 98.320108][ T6773] FAT-fs (loop2): Directory bread(block 199919) failed [ 98.327096][ T6773] FAT-fs (loop2): Directory bread(block 199920) failed [ 98.330790][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.341275][ T6773] FAT-fs (loop2): Directory bread(block 199921) failed [ 98.348413][ T6773] FAT-fs (loop2): Directory bread(block 199922) failed [ 98.355424][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.355498][ T6773] FAT-fs (loop2): Directory bread(block 199923) failed [ 98.372804][ T6710] bridge_slave_0: entered allmulticast mode [ 98.380340][ T6710] bridge_slave_0: entered promiscuous mode [ 98.391268][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.398580][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.416075][ T6710] bridge_slave_1: entered allmulticast mode [ 98.427592][ T6710] bridge_slave_1: entered promiscuous mode [ 98.437332][ T12] hsr_slave_0: left promiscuous mode [ 98.459081][ T12] hsr_slave_1: left promiscuous mode [ 98.468264][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.482595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.490438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.497980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.513265][ T12] veth1_macvtap: left promiscuous mode [ 98.519038][ T12] veth0_macvtap: left promiscuous mode [ 98.524653][ T12] veth1_vlan: left promiscuous mode [ 98.530206][ T12] veth0_vlan: left promiscuous mode [ 98.606366][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.678433][ T6777] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 98.727317][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.750158][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.777524][ T6799] loop0: detected capacity change from 0 to 512 [ 98.798387][ T6806] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 98.803949][ T6710] team0: Port device team_slave_0 added [ 98.812367][ T6806] netlink: 'syz.2.1167': attribute type 2 has an invalid length. [ 98.821790][ T6799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.834604][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 98.835800][ T6799] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.863557][ T6710] team0: Port device team_slave_1 added [ 98.903471][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.913457][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.940577][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.952524][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.959562][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.969253][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.985807][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.019577][ T6817] loop6: detected capacity change from 0 to 1024 [ 99.049912][ T6817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.064607][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 99.064622][ T28] audit: type=1400 audit(1775265444.748:684): avc: denied { watch } for pid=6813 comm="syz.6.1170" path="/65/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.115774][ T5668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.124839][ T28] audit: type=1400 audit(1775265444.788:685): avc: denied { setattr } for pid=6813 comm="syz.6.1170" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.184155][ T6710] hsr_slave_0: entered promiscuous mode [ 99.198252][ T6710] hsr_slave_1: entered promiscuous mode [ 99.210468][ T6710] debugfs: 'hsr0' already exists in 'hsr' [ 99.216712][ T6710] Cannot create hsr debugfs directory [ 99.276225][ T6842] loop0: detected capacity change from 0 to 1024 [ 99.300698][ T6842] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.334822][ T6842] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 99.344327][ T6842] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.352155][ T6842] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.1181: Invalid inode table block 0 in block_group 0 [ 99.379324][ T28] audit: type=1400 audit(1775265445.058:686): avc: denied { mount } for pid=6848 comm="syz.6.1183" name="/" dev="ramfs" ino=16219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 99.379502][ T6842] loop0: lost filesystem error report for type 5 error -117 [ 99.417082][ T6842] EXT4-fs (loop0): Remounting filesystem read-only [ 99.431012][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 99.431041][ C0] EXT4-fs (loop0): initial error at time 1775265445: __ext4_get_inode_loc:4797 [ 99.431061][ C0] EXT4-fs (loop0): last error at time 1775265445: __ext4_get_inode_loc:4797 [ 99.475482][ T6842] Quota error (device loop0): write_blk: dquota write failed [ 99.484659][ T6842] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 99.487938][ T6710] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 99.525385][ T6842] EXT4-fs (loop0): 1 truncate cleaned up [ 99.535871][ T6710] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 99.543673][ T6842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.558365][ T6710] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 99.575045][ T6710] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 99.589022][ T6842] raw_sendmsg: syz.0.1181 forgot to set AF_INET. Fix it! [ 99.664717][ T6870] loop2: detected capacity change from 0 to 8192 [ 99.680097][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.699774][ T6870] bio_check_eod: 212 callbacks suppressed [ 99.699789][ T6870] syz.2.1188: attempt to access beyond end of device [ 99.699789][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 99.759698][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 99.778322][ T6877] syz.2.1188: attempt to access beyond end of device [ 99.778322][ T6877] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 99.792595][ T6877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 99.863507][ T6870] syz.2.1188: attempt to access beyond end of device [ 99.863507][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 99.885549][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 99.921504][ T6877] syz.2.1188: attempt to access beyond end of device [ 99.921504][ T6877] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 99.943909][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.965899][ T6877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 99.986728][ T6710] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.005698][ T6877] syz.2.1188: attempt to access beyond end of device [ 100.005698][ T6877] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.016267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.026770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.038220][ T6887] loop0: detected capacity change from 0 to 8192 [ 100.076208][ T6710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.087030][ T28] audit: type=1400 audit(1775265445.748:687): avc: denied { read write } for pid=6898 comm="syz.6.1193" name="file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.114210][ T6877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 100.129459][ T6887] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.135844][ T6870] syz.2.1188: attempt to access beyond end of device [ 100.135844][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.164278][ T6710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.175384][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 100.181087][ T28] audit: type=1400 audit(1775265445.748:688): avc: denied { open } for pid=6898 comm="syz.6.1193" path="/70/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.186954][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.223472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.230962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.238732][ T6870] syz.2.1188: attempt to access beyond end of device [ 100.238732][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.269580][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.271369][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 100.285754][ T6870] syz.2.1188: attempt to access beyond end of device [ 100.285754][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.300052][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 100.308583][ T6870] syz.2.1188: attempt to access beyond end of device [ 100.308583][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.322683][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 100.339698][ T6870] syz.2.1188: attempt to access beyond end of device [ 100.339698][ T6870] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.350288][ T28] audit: type=1400 audit(1775265445.748:689): avc: denied { ioctl } for pid=6898 comm="syz.6.1193" path="/70/file0" dev="tmpfs" ino=378 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.378528][ T6870] Buffer I/O error on dev loop2, logical block 57847, async page read [ 100.419634][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.448006][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.490013][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.722953][ T6710] veth0_vlan: entered promiscuous mode [ 100.731560][ T6710] veth1_vlan: entered promiscuous mode [ 100.750661][ T6710] veth0_macvtap: entered promiscuous mode [ 100.759147][ T6710] veth1_macvtap: entered promiscuous mode [ 100.772516][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.786625][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.815626][ T4734] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.844251][ T4734] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.857306][ T4734] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.885401][ T4734] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.005316][ T28] audit: type=1400 audit(1775265446.688:690): avc: denied { connect } for pid=6974 comm="syz.7.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.032487][ T28] audit: type=1400 audit(1775265446.688:691): avc: denied { read } for pid=6974 comm="syz.7.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.220082][ T1030] IPVS: starting estimator thread 0... [ 101.295602][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 101.305178][ T3399] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.316928][ T6993] IPVS: using max 1824 ests per chain, 91200 per kthread [ 101.647865][ T7018] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 101.662702][ T7018] netlink: 'syz.0.1218': attribute type 2 has an invalid length. [ 101.682247][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 101.807219][ T3399] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.834825][ T3399] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.863440][ T7030] loop8: detected capacity change from 0 to 128 [ 102.222513][ T7045] loop6: detected capacity change from 0 to 128 [ 102.260590][ T7045] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.285725][ T7045] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.341366][ T7045] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.394340][ T5668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.949568][ T5287] IPVS: starting estimator thread 0... [ 103.055337][ T7089] IPVS: using max 1776 ests per chain, 88800 per kthread [ 103.214592][ T7098] loop0: detected capacity change from 0 to 4096 [ 103.240538][ T7098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.905827][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.114202][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1245'. [ 104.154410][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 104.154428][ T28] audit: type=1400 audit(1775265449.838:708): avc: denied { transition } for pid=7155 comm="syz.7.1248" path="/45/file1" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 104.186251][ T28] audit: type=1400 audit(1775265449.868:709): avc: denied { entrypoint } for pid=7155 comm="syz.7.1248" path="/45/file1" dev="tmpfs" ino=252 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.218362][ T28] audit: type=1400 audit(1775265449.868:710): avc: denied { noatsecure } for pid=7155 comm="syz.7.1248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 104.444779][ T7163] loop0: detected capacity change from 0 to 256 [ 104.454202][ T7163] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.472797][ T7163] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.699090][ T7185] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.899080][ T28] audit: type=1400 audit(1775265450.588:711): avc: denied { create } for pid=7197 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.932608][ T7200] capability: warning: `syz.0.1261' uses deprecated v2 capabilities in a way that may be insecure [ 104.943366][ T28] audit: type=1400 audit(1775265450.608:712): avc: denied { bind } for pid=7197 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.943399][ T28] audit: type=1400 audit(1775265450.608:713): avc: denied { listen } for pid=7197 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.000732][ T7196] loop7: detected capacity change from 0 to 4096 [ 105.027971][ T7196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.127964][ T6270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.299238][ T28] audit: type=1400 audit(1775265450.988:714): avc: denied { ioctl } for pid=7219 comm="syz.7.1269" path="socket:[18443]" dev="sockfs" ino=18443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.621550][ T7226] loop8: detected capacity change from 0 to 512 [ 105.629212][ T7226] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.653243][ T28] audit: type=1400 audit(1775265451.338:715): avc: denied { cpu } for pid=7229 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.679934][ T7226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 105.689256][ T7226] System zones: 1-12 [ 105.693502][ T7226] EXT4-fs (loop8): orphan cleanup on readonly fs [ 105.701109][ T7226] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1271: bg 0: block 361: padding at end of block bitmap is not set [ 105.717561][ T7226] loop8: lost filesystem error report for type 5 error -117 [ 105.717767][ T7226] EXT4-fs (loop8): Remounting filesystem read-only [ 105.731706][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 105.731723][ C0] EXT4-fs (loop8): initial error at time 1775265451: ext4_validate_block_bitmap:441 [ 105.731759][ C0] EXT4-fs (loop8): last error at time 1775265451: ext4_validate_block_bitmap:441 [ 105.758588][ T7226] EXT4-fs (loop8): 1 truncate cleaned up [ 105.764759][ T7226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 105.824490][ T28] audit: type=1326 audit(1775265451.508:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1bcec819 code=0x7ffc0000 [ 105.852981][ T7226] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.1271: error -117 reading directory block [ 105.869454][ T28] audit: type=1326 audit(1775265451.508:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1bcec819 code=0x7ffc0000 [ 105.925596][ T6710] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 105.954741][ T7244] loop0: detected capacity change from 0 to 128 [ 105.999614][ T7244] bio_check_eod: 620 callbacks suppressed [ 105.999632][ T7244] syz.0.1278: attempt to access beyond end of device [ 105.999632][ T7244] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 106.020171][ T7249] netem: change failed [ 106.024539][ T7244] syz.0.1278: attempt to access beyond end of device [ 106.024539][ T7244] loop0: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 106.039056][ T7244] syz.0.1278: attempt to access beyond end of device [ 106.039056][ T7244] loop0: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 106.053017][ T7244] buffer_io_error: 509 callbacks suppressed [ 106.053082][ T7244] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 106.282719][ T7265] loop6: detected capacity change from 0 to 8192 [ 106.315670][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.315670][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.330441][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.338913][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.338913][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.353837][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.362385][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.362385][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.376858][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.385133][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.385133][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.399294][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.407623][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.407623][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.421878][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.430256][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.430256][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.445392][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.454238][ T7265] syz.6.1288: attempt to access beyond end of device [ 106.454238][ T7265] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.498621][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.515178][ T7269] Buffer I/O error on dev loop6, logical block 57847, async page read [ 106.524150][ T7265] Buffer I/O error on dev loop6, logical block 57847, async page read [ 108.084961][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b8a800: rx timeout, send abort [ 108.093356][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119b8a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.203239][ T7290] loop8: detected capacity change from 0 to 1024 [ 108.256910][ T7290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.333324][ T7290] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 108.410676][ T6710] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.471754][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1298'. [ 108.546648][ T7300] loop8: detected capacity change from 0 to 512 [ 109.231800][ T7310] loop6: detected capacity change from 0 to 256 [ 109.266757][ T7310] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.329583][ T7310] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.454534][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 109.454548][ T28] audit: type=1400 audit(1775265455.138:752): avc: denied { read write } for pid=7317 comm="syz.6.1308" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.510554][ T28] audit: type=1400 audit(1775265455.178:753): avc: denied { open } for pid=7317 comm="syz.6.1308" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.554085][ T28] audit: type=1400 audit(1775265455.178:754): avc: denied { ioctl } for pid=7317 comm="syz.6.1308" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.627916][ T28] audit: type=1400 audit(1775265455.318:755): avc: denied { mount } for pid=7321 comm="syz.7.1311" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.684523][ T28] audit: type=1400 audit(1775265455.368:756): avc: denied { relabelfrom } for pid=7327 comm="syz.7.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.731951][ T28] audit: type=1400 audit(1775265455.368:757): avc: denied { relabelto } for pid=7327 comm="syz.7.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.862312][ T7345] loop0: detected capacity change from 0 to 128 [ 109.871506][ T28] audit: type=1326 audit(1775265455.548:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 109.921036][ T7345] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.924992][ T28] audit: type=1326 audit(1775265455.548:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 109.956592][ T28] audit: type=1326 audit(1775265455.548:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 109.972451][ T7345] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.989251][ T28] audit: type=1326 audit(1775265455.548:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 110.074632][ T7345] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 20: comm syz.0.1320: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 110.094579][ T7345] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 110.141284][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.189930][ T7354] loop0: detected capacity change from 0 to 1024 [ 110.246950][ T7354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.436448][ T7354] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 110.490018][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.593997][ T7378] loop8: detected capacity change from 0 to 128 [ 110.604163][ T7378] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.619326][ T7378] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.656958][ T7378] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.1336: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 110.675823][ T7378] EXT4-fs error (device loop8) in do_split:2027: Corrupt filesystem [ 110.699673][ T6710] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.076537][ T7403] loop7: detected capacity change from 0 to 1024 [ 111.106957][ T7403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.179080][ T6270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.611891][ T7450] loop0: detected capacity change from 0 to 8192 [ 111.640094][ T7450] bio_check_eod: 13075 callbacks suppressed [ 111.640114][ T7450] syz.0.1361: attempt to access beyond end of device [ 111.640114][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.666273][ T7450] buffer_io_error: 13073 callbacks suppressed [ 111.666290][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.681015][ T7450] syz.0.1361: attempt to access beyond end of device [ 111.681015][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.698235][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.707443][ T7461] syz.0.1361: attempt to access beyond end of device [ 111.707443][ T7461] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.722282][ T7461] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.733676][ T7450] syz.0.1361: attempt to access beyond end of device [ 111.733676][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.758616][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.780507][ T7461] syz.0.1361: attempt to access beyond end of device [ 111.780507][ T7461] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.820608][ T7461] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.855538][ T7461] syz.0.1361: attempt to access beyond end of device [ 111.855538][ T7461] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.872854][ T7461] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.913950][ T7450] syz.0.1361: attempt to access beyond end of device [ 111.913950][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.959464][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 111.980238][ T7450] syz.0.1361: attempt to access beyond end of device [ 111.980238][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.014216][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 112.044562][ T7450] syz.0.1361: attempt to access beyond end of device [ 112.044562][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.063063][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 112.071536][ T7450] syz.0.1361: attempt to access beyond end of device [ 112.071536][ T7450] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.085637][ T7450] Buffer I/O error on dev loop0, logical block 57847, async page read [ 112.171892][ T7484] loop6: detected capacity change from 0 to 1024 [ 112.202436][ T7484] EXT4-fs: Ignoring removed orlov option [ 112.258597][ T7484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.280774][ T7484] EXT4-fs (loop6): shut down requested (2) [ 112.297658][ T7484] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 112.366740][ T5668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.543380][ T7432] Set syz1 is full, maxelem 65536 reached [ 112.860168][ T7539] loop6: detected capacity change from 0 to 128 [ 113.067567][ T7549] loop0: detected capacity change from 0 to 128 [ 113.185460][ T7555] Falling back ldisc for ttyS3. [ 113.416899][ T7571] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.475422][ T7571] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #3: block 5: comm syz.6.1394: lblock 5 mapped to illegal pblock 5 (length 1) [ 113.516388][ T7571] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.516620][ T7571] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1394: Failed to acquire dquot type 0 [ 113.525723][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 113.525743][ C0] EXT4-fs (loop6): initial error at time 1775265459: ext4_map_blocks:828: inode 3: block 5 [ 113.525773][ C0] EXT4-fs (loop6): last error at time 1775265459: ext4_map_blocks:828: inode 3: block 5 [ 113.590303][ T7571] loop6: lost filesystem error report for type 5 error -117 [ 113.595303][ T7571] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 5: comm syz.6.1394: lblock 5 mapped to illegal pblock 5 (length 1) [ 113.645520][ T7571] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.645741][ T7571] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1394: Failed to acquire dquot type 0 [ 113.674249][ T7571] loop6: lost filesystem error report for type 5 error -117 [ 113.674441][ T7571] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.1394: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.695339][ T7571] loop6: lost filesystem error report for type 5 error -117 [ 113.695586][ T7571] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 5: comm syz.6.1394: lblock 5 mapped to illegal pblock 5 (length 1) [ 113.717302][ T7571] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.717430][ T7571] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1394: Failed to acquire dquot type 0 [ 113.738625][ T7571] loop6: lost filesystem error report for type 5 error -117 [ 113.743353][ T7571] EXT4-fs (loop6): 1 orphan inode deleted [ 113.763225][ T7571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.795628][ T5668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.940228][ T7609] netlink: 'syz.6.1406': attribute type 15 has an invalid length. [ 114.010954][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1412'. [ 114.100183][ T4734] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.115567][ T7619] Falling back ldisc for ttyS3. [ 114.153498][ T4734] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.205797][ T4734] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.314746][ T7640] set_capacity_and_notify: 1 callbacks suppressed [ 114.314762][ T7640] loop0: detected capacity change from 0 to 1024 [ 114.365750][ T7640] EXT4-fs: Ignoring removed orlov option [ 114.432641][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 114.446120][ T7640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.472877][ T7640] EXT4-fs (loop0): shut down requested (2) [ 114.482719][ T7640] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 114.521465][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.530882][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.538575][ T7621] bridge_slave_0: entered allmulticast mode [ 114.545150][ T7621] bridge_slave_0: entered promiscuous mode [ 114.552619][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.560007][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.567454][ T7621] bridge_slave_1: entered allmulticast mode [ 114.574022][ T7621] bridge_slave_1: entered promiscuous mode [ 114.593701][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.605033][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.628569][ T7621] team0: Port device team_slave_0 added [ 114.637162][ T7621] team0: Port device team_slave_1 added [ 114.655574][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.662627][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.689201][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.701139][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.708748][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.736134][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.779788][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.884054][ T4734] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.905034][ T7654] loop2: detected capacity change from 0 to 512 [ 114.916671][ T7621] hsr_slave_0: entered promiscuous mode [ 114.922986][ T7621] hsr_slave_1: entered promiscuous mode [ 114.943629][ T7621] debugfs: 'hsr0' already exists in 'hsr' [ 114.949905][ T7621] Cannot create hsr debugfs directory [ 114.976745][ T7656] syz_tun: entered allmulticast mode [ 114.992475][ T7655] syz_tun: left allmulticast mode [ 114.994661][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 114.994755][ T28] audit: type=1400 audit(1775265460.678:802): avc: denied { remount } for pid=7653 comm="syz.2.1421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 115.092912][ T4734] bridge_slave_1: left allmulticast mode [ 115.098828][ T4734] bridge_slave_1: left promiscuous mode [ 115.107554][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.117718][ T4734] bridge_slave_0: left allmulticast mode [ 115.123617][ T4734] bridge_slave_0: left promiscuous mode [ 115.129775][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.198927][ T4734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.209406][ T4734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.219296][ T4734] bond0 (unregistering): Released all slaves [ 115.280036][ T4734] hsr_slave_0: left promiscuous mode [ 115.285772][ T4734] hsr_slave_1: left promiscuous mode [ 115.291461][ T4734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.299010][ T4734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.306715][ T4734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.314135][ T4734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.324598][ T4734] veth1_macvtap: left promiscuous mode [ 115.330337][ T4734] veth0_macvtap: left promiscuous mode [ 115.335955][ T4734] veth1_vlan: left promiscuous mode [ 115.341238][ T4734] veth0_vlan: left promiscuous mode [ 115.414802][ T4734] team0 (unregistering): Port device team_slave_1 removed [ 115.424777][ T4734] team0 (unregistering): Port device team_slave_0 removed [ 118.064401][ T7662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.085375][ T7621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 118.094649][ T7621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 118.123450][ T7621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 118.146608][ T28] audit: type=1400 audit(1775265463.828:803): avc: denied { create } for pid=7678 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.171135][ T28] audit: type=1400 audit(1775265463.858:804): avc: denied { write } for pid=7678 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.191725][ T28] audit: type=1400 audit(1775265463.858:805): avc: denied { setopt } for pid=7678 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.222427][ T7621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 118.293671][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.310755][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.326483][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.333615][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.365915][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.373027][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.591088][ T28] audit: type=1400 audit(1775265464.278:806): avc: denied { create } for pid=7740 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.613912][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.642279][ T28] audit: type=1400 audit(1775265464.278:807): avc: denied { ioctl } for pid=7740 comm="syz.2.1444" path="socket:[19539]" dev="sockfs" ino=19539 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.899675][ T7621] veth0_vlan: entered promiscuous mode [ 118.916835][ T7621] veth1_vlan: entered promiscuous mode [ 118.951775][ T7621] veth0_macvtap: entered promiscuous mode [ 118.973867][ T7621] veth1_macvtap: entered promiscuous mode [ 119.001773][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.018364][ T7786] loop6: detected capacity change from 0 to 512 [ 119.041533][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.097721][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.112598][ T70] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.128626][ T70] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.172312][ T70] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.395395][ T28] audit: type=1400 audit(1775265465.078:808): avc: denied { read } for pid=7828 comm="syz.6.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.730246][ T7846] loop6: detected capacity change from 0 to 2048 [ 119.752772][ T7846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.769857][ T28] audit: type=1400 audit(1775265465.458:809): avc: denied { create } for pid=7845 comm="syz.6.1466" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.790191][ T28] audit: type=1400 audit(1775265465.458:810): avc: denied { add_name } for pid=7845 comm="syz.6.1466" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.810986][ T28] audit: type=1400 audit(1775265465.458:811): avc: denied { remove_name } for pid=7845 comm="syz.6.1466" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.837953][ T5668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.884366][ T7854] xt_hashlimit: size too large, truncated to 1048576 [ 120.582766][ T7886] loop2: detected capacity change from 0 to 4096 [ 120.603108][ T7886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.637362][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 120.637423][ T28] audit: type=1400 audit(1775265466.328:818): avc: denied { create } for pid=7885 comm="syz.2.1479" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 120.695646][ T28] audit: type=1400 audit(1775265466.348:819): avc: denied { append } for pid=7885 comm="syz.2.1479" path="/323/file0/cpuset.effective_mems" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.758382][ T7896] loop6: detected capacity change from 0 to 512 [ 120.797300][ T7896] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.818055][ T7896] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #17: comm syz.6.1484: inode has both inline data and extents flags [ 120.832519][ T7896] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 120.832715][ T7896] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1484: couldn't read orphan inode 17 (err -117) [ 120.841942][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 120.841969][ C0] EXT4-fs (loop6): initial error at time 1775265466: ext4_orphan_get:1397: inode 17 [ 120.842016][ C0] EXT4-fs (loop6): last error at time 1775265466: ext4_orphan_get:1397: inode 17 [ 120.880794][ T7896] loop6: lost filesystem error report for type 5 error -117 [ 120.881511][ T7896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.967314][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.985472][ T5668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.124292][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1490'. [ 121.326871][ T28] audit: type=1400 audit(1775265467.018:820): avc: denied { setopt } for pid=7936 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.396495][ T28] audit: type=1400 audit(1775265467.088:821): avc: denied { bind } for pid=7936 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.063308][ T7951] loop2: detected capacity change from 0 to 512 [ 122.084854][ T7951] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1511: inode has both inline data and extents flags [ 122.105818][ T7951] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.106631][ T7951] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1511: couldn't read orphan inode 15 (err -117) [ 122.115923][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 122.115945][ C1] EXT4-fs (loop2): initial error at time 1775265467: ext4_orphan_get:1397: inode 15 [ 122.115982][ C1] EXT4-fs (loop2): last error at time 1775265467: ext4_orphan_get:1397: inode 15 [ 122.155289][ T7951] loop2: lost filesystem error report for type 5 error -117 [ 122.156882][ T7951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.925629][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.003429][ T28] audit: type=1326 audit(1775265468.688:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.2.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ff8c819 code=0x7ffc0000 [ 123.031239][ T28] audit: type=1326 audit(1775265468.718:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.2.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ff8c819 code=0x7ffc0000 [ 123.055683][ T28] audit: type=1326 audit(1775265468.718:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.2.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ff8c819 code=0x7ffc0000 [ 123.079298][ T28] audit: type=1326 audit(1775265468.718:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.2.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff1ff8c819 code=0x7ffc0000 [ 123.103186][ T28] audit: type=1326 audit(1775265468.718:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.2.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ff8c819 code=0x7ffc0000 [ 123.138921][ T28] audit: type=1326 audit(1775265468.718:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.2.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ff8c819 code=0x7ffc0000 [ 124.020732][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1528'. [ 124.068014][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1540'. [ 124.188349][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 124.197359][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 124.656948][ T8024] loop6: detected capacity change from 0 to 512 [ 124.664957][ T8024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 124.673412][ T8024] EXT4-fs (loop6): orphan cleanup on readonly fs [ 124.682163][ T8024] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 124.719326][ T8024] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 124.753350][ T8024] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.1535: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 124.821986][ T8024] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.823592][ T8024] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1535: couldn't read orphan inode 13 (err -117) [ 124.832857][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 124.832874][ C0] EXT4-fs (loop6): last error at time 1775265470: ext4_ext_check_inode:521: inode 13 [ 124.873334][ T8024] loop6: lost filesystem error report for type 5 error -117 [ 124.873932][ T8024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.902303][ T8036] loop9: detected capacity change from 0 to 512 [ 124.911288][ T8035] ip6gre1: entered promiscuous mode [ 124.916838][ T8035] ip6gre1: entered allmulticast mode [ 124.929320][ T8036] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.979138][ T8036] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #17: comm syz.9.1549: inode has both inline data and extents flags [ 125.002168][ T8036] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 125.003989][ T8036] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1549: couldn't read orphan inode 17 (err -117) [ 125.013207][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 125.013230][ C1] EXT4-fs (loop9): initial error at time 1775265470: ext4_orphan_get:1397: inode 17 [ 125.013274][ C1] EXT4-fs (loop9): last error at time 1775265470: ext4_orphan_get:1397: inode 17 [ 125.050789][ T8036] loop9: lost filesystem error report for type 5 error -117 [ 125.057054][ T8036] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.085478][ T5668] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 125.106069][ T5668] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 125.124654][ T7621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.198388][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.502899][ T4722] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.515885][ T8079] loop0: detected capacity change from 0 to 128 [ 125.602547][ T4722] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.831125][ T4722] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.909173][ T4722] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.046830][ T4722] bridge_slave_1: left allmulticast mode [ 126.052684][ T4722] bridge_slave_1: left promiscuous mode [ 126.064795][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.081676][ T4722] bridge_slave_0: left promiscuous mode [ 126.098046][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.287742][ T4722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.304740][ T4722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.316269][ T4722] bond0 (unregistering): Released all slaves [ 126.378692][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 126.400772][ T4722] hsr_slave_0: left promiscuous mode [ 126.415696][ T4722] hsr_slave_1: left promiscuous mode [ 126.421417][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.436149][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.455697][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.463202][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.489376][ T4722] veth1_macvtap: left promiscuous mode [ 126.494933][ T4722] veth0_macvtap: left promiscuous mode [ 126.505735][ T4722] veth1_vlan: left promiscuous mode [ 126.511203][ T4722] veth0_vlan: left promiscuous mode [ 126.634430][ T4722] team0 (unregistering): Port device team_slave_1 removed [ 126.645716][ T4722] team0 (unregistering): Port device team_slave_0 removed [ 126.764515][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.774304][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.793614][ T8084] bridge_slave_0: entered allmulticast mode [ 126.800433][ T8084] bridge_slave_0: entered promiscuous mode [ 126.807562][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.814711][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.822018][ T8084] bridge_slave_1: entered allmulticast mode [ 126.828878][ T8084] bridge_slave_1: entered promiscuous mode [ 126.851125][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.862116][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.917177][ T8084] team0: Port device team_slave_0 added [ 126.935776][ T8084] team0: Port device team_slave_1 added [ 127.023493][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.055677][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.095299][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.107160][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.114132][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.155354][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.168934][ T4722] IPVS: stop unused estimator thread 0... [ 127.236730][ T8084] hsr_slave_0: entered promiscuous mode [ 127.246038][ T8084] hsr_slave_1: entered promiscuous mode [ 127.252069][ T8084] debugfs: 'hsr0' already exists in 'hsr' [ 127.267121][ T8084] Cannot create hsr debugfs directory [ 127.633541][ T8180] Process accounting resumed [ 127.676389][ T8084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.689343][ T8084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.714110][ T8140] loop2: detected capacity change from 0 to 1764 [ 127.723565][ T8084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.734899][ T8084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.786951][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 127.786967][ T28] audit: type=1400 audit(1775265473.478:861): avc: denied { mount } for pid=8138 comm="syz.2.1573" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 127.810889][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.835124][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.874290][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.881616][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.902191][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.909351][ T4730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.013846][ T8084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.037663][ T28] audit: type=1400 audit(1775265473.728:862): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.177218][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.219702][ T8225] loop0: detected capacity change from 0 to 2048 [ 128.250011][ T8225] EXT4-fs warning (device loop0): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 128.550640][ T28] audit: type=1400 audit(1775265474.218:863): avc: denied { ioctl } for pid=8259 comm="syz.7.1579" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.894576][ T8084] veth0_vlan: entered promiscuous mode [ 128.905143][ T8084] veth1_vlan: entered promiscuous mode [ 128.962657][ T8084] veth0_macvtap: entered promiscuous mode [ 128.993101][ T8084] veth1_macvtap: entered promiscuous mode [ 129.048994][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.072140][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.111788][ T4730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.187939][ T4730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.222453][ T4730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.243372][ T4730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.346354][ T28] audit: type=1400 audit(1775265475.038:864): avc: denied { ioctl } for pid=8308 comm="syz.2.1600" path="socket:[21551]" dev="sockfs" ino=21551 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.548070][ T28] audit: type=1326 audit(1775265475.238:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea80c819 code=0x7fc00000 [ 129.993350][ T28] audit: type=1400 audit(1775265475.678:866): avc: denied { bind } for pid=8340 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.013794][ T28] audit: type=1400 audit(1775265475.698:867): avc: denied { write } for pid=8340 comm="syz.2.1593" path="socket:[22649]" dev="sockfs" ino=22649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.378685][ T28] audit: type=1326 audit(1775265476.058:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09ea806597 code=0x7fc00000 [ 130.439442][ T8392] loop7: detected capacity change from 0 to 128 [ 130.551334][ T8387] loop2: detected capacity change from 0 to 8192 [ 130.826906][ T28] audit: type=1400 audit(1775265476.518:869): avc: denied { create } for pid=8418 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.845183][ T8387] loop2: p2 p3 [ 130.865523][ T8387] loop2: p3 size 100663552 extends beyond EOD, truncated [ 130.948947][ T28] audit: type=1400 audit(1775265476.538:870): avc: denied { write } for pid=8418 comm="syz.0.1608" path="socket:[22727]" dev="sockfs" ino=22727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.250888][ T8466] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 131.297006][ T8475] bridge0: port 3(batadv1) entered blocking state [ 131.303550][ T8475] bridge0: port 3(batadv1) entered disabled state [ 131.385521][ T8475] batadv1: entered allmulticast mode [ 131.391543][ T8475] batadv1: entered promiscuous mode [ 131.796916][ T4734] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 131.806341][ T4734] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 131.891771][ T8515] netlink: 'syz.0.1635': attribute type 7 has an invalid length. [ 131.900864][ T8515] netlink: 'syz.0.1635': attribute type 7 has an invalid length. [ 132.364598][ T8540] loop0: detected capacity change from 0 to 512 [ 132.381364][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'. [ 132.412116][ T8540] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.440420][ T8540] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 132.455243][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 132.461693][ C0] EXT4-fs (loop0): initial error at time 1775265478: ext4_mb_generate_buddy:1317 [ 132.470871][ C0] EXT4-fs (loop0): last error at time 1775265478: ext4_mb_generate_buddy:1317 [ 132.575496][ T8540] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.1639: Failed to acquire dquot type 1 [ 132.604463][ T8540] loop0: lost filesystem error report for type 5 error -28 [ 132.604910][ T8540] EXT4-fs (loop0): 1 truncate cleaned up [ 132.638216][ T8540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.194571][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.654794][ T8640] netlink: 'syz.4.1660': attribute type 18 has an invalid length. [ 133.665296][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 133.678417][ T4734] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.687258][ T4734] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.696890][ T8640] netlink: 'syz.4.1660': attribute type 18 has an invalid length. [ 133.704840][ T4734] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.713778][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 133.723517][ T4734] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.754257][ T8643] netlink: 'syz.9.1661': attribute type 7 has an invalid length. [ 133.775884][ T8643] netlink: 'syz.9.1661': attribute type 7 has an invalid length. [ 133.959862][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 134.116567][ T8666] loop2: detected capacity change from 0 to 2048 [ 134.125181][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 134.125208][ T28] audit: type=1400 audit(1775265479.808:876): avc: denied { mount } for pid=8667 comm="syz.9.1671" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 134.193915][ T28] audit: type=1400 audit(1775265479.838:877): avc: denied { unmount } for pid=7621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 134.194768][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.289666][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1672'. [ 134.315536][ T28] audit: type=1400 audit(1775265479.998:878): avc: denied { map } for pid=8665 comm="syz.2.1670" path="/364/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.335967][ T8666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1670: bg 0: block 234: padding at end of block bitmap is not set [ 134.362163][ T8666] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 814 with error 28 [ 134.378032][ T8666] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.378032][ T8666] [ 134.388912][ T8666] EXT4-fs (loop2): Total free blocks count 0 [ 134.409632][ T8666] EXT4-fs (loop2): Free/Dirty block details [ 134.423070][ T8666] EXT4-fs (loop2): free_blocks=0 [ 134.428386][ T8666] EXT4-fs (loop2): dirty_blocks=816 [ 134.434005][ T8666] EXT4-fs (loop2): Block reservation details [ 134.451195][ T8679] netlink: 'syz.9.1674': attribute type 18 has an invalid length. [ 134.469129][ T8666] EXT4-fs (loop2): i_reserved_data_blocks=51 [ 134.494063][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1674'. [ 134.528858][ T8679] netlink: 'syz.9.1674': attribute type 18 has an invalid length. [ 134.542862][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1674'. [ 134.554400][ T4734] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.572504][ T4734] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.602489][ T3318] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 134.651891][ T4734] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.668867][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.688860][ T4734] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.766313][ T8698] loop9: detected capacity change from 0 to 8192 [ 134.826079][ T8698] loop9: p2 p3 [ 134.830387][ T8698] loop9: p3 size 100663552 extends beyond EOD, truncated [ 134.974706][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 134.975203][ T6286] udevd[6286]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 136.014027][ T8720] loop2: detected capacity change from 0 to 512 [ 136.027166][ T8720] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.068568][ T8720] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 136.083786][ T8720] Quota error (device loop2): write_blk: dquota write failed [ 136.091214][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 136.091238][ C0] EXT4-fs (loop2): initial error at time 1775265481: ext4_mb_generate_buddy:1317 [ 136.091268][ C0] EXT4-fs (loop2): last error at time 1775265481: ext4_mb_generate_buddy:1317 [ 136.145275][ T8720] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 136.165288][ T8720] Quota error (device loop2): write_blk: dquota write failed [ 136.172751][ T8720] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 136.185507][ T8720] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1692: Failed to acquire dquot type 1 [ 136.196906][ T8720] loop2: lost filesystem error report for type 5 error -28 [ 136.197162][ T8720] EXT4-fs (loop2): 1 truncate cleaned up [ 136.210918][ T8720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.303201][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.647434][ T8746] atomic_op ffff888104109128 conn xmit_atomic 0000000000000000 [ 137.609511][ T8782] loop2: detected capacity change from 0 to 512 [ 137.645367][ T8782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.703735][ T8787] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1722'. [ 137.775437][ T8787] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1722'. [ 137.815327][ T8782] EXT4-fs (loop2): 1 truncate cleaned up [ 137.821536][ T8782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.833911][ T8787] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1722'. [ 137.880682][ T28] audit: type=1400 audit(1775265483.568:879): avc: denied { ioctl } for pid=8780 comm="syz.2.1720" path="/381/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.952408][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.147856][ T28] audit: type=1400 audit(1775265483.838:880): avc: denied { map } for pid=8784 comm="syz.4.1721" path="socket:[22054]" dev="sockfs" ino=22054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.213752][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1728'. [ 138.238965][ T28] audit: type=1400 audit(1775265483.928:881): avc: denied { write } for pid=8807 comm="syz.2.1729" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.634045][ T8823] xt_hashlimit: size too large, truncated to 1048576 [ 138.652765][ T8829] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1735'. [ 138.675568][ T8829] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1735'. [ 138.716195][ T8829] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1735'. [ 138.936127][ T8842] atomic_op ffff888117968128 conn xmit_atomic 0000000000000000 [ 139.094014][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1744'. [ 139.487107][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1752'. [ 139.607505][ T28] audit: type=1326 audit(1775265485.298:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 139.695271][ T28] audit: type=1326 audit(1775265485.298:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 139.745259][ T28] audit: type=1326 audit(1775265485.298:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 139.813362][ T28] audit: type=1326 audit(1775265485.298:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 139.880145][ T28] audit: type=1326 audit(1775265485.298:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 139.939810][ T28] audit: type=1326 audit(1775265485.318:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 139.998001][ T28] audit: type=1326 audit(1775265485.318:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 140.052119][ T28] audit: type=1326 audit(1775265485.318:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.7.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 140.625255][ T28] audit: type=1326 audit(1775265486.308:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 140.697201][ T28] audit: type=1326 audit(1775265486.308:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 141.262053][ T8940] ip6gre1: entered allmulticast mode [ 141.987245][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 142.492887][ T8986] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.636605][ T8986] bond1: (slave lo): Enslaving as an active interface with an up link [ 142.736196][ T8986] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 144.560055][ T9055] loop2: detected capacity change from 0 to 256 [ 144.824236][ T9079] ip6gre1: entered allmulticast mode [ 144.915816][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 144.957109][ T7069] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 144.973267][ T7069] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.191779][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.208223][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.267611][ T9087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.548782][ T9093] netlink: 'syz.4.1827': attribute type 15 has an invalid length. [ 145.565367][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 145.636176][ T9093] netlink: 'syz.4.1827': attribute type 15 has an invalid length. [ 145.664836][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 145.859358][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 145.859378][ T28] audit: type=1326 audit(1775265491.548:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 145.943842][ T28] audit: type=1326 audit(1775265491.578:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 145.995285][ T28] audit: type=1326 audit(1775265491.578:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 146.068133][ T28] audit: type=1326 audit(1775265491.578:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e6cc819 code=0x7ffc0000 [ 146.211317][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1835'. [ 146.268024][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1835'. [ 146.319959][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1835'. [ 146.319959][ T4715] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.320004][ T4715] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.345473][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1835'. [ 146.398909][ T4715] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.415897][ T4715] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.632093][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 146.956224][ T9156] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check. [ 147.007610][ T9165] tipc: Started in network mode [ 147.012574][ T9165] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 147.042443][ T9165] tipc: Enabling of bearer rejected, failed to enable media [ 147.161123][ T9175] netlink: 'syz.4.1848': attribute type 1 has an invalid length. [ 147.177069][ T9175] bond1: entered promiscuous mode [ 147.182349][ T9175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.252962][ T9175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.291838][ T9175] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 147.334470][ T9175] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 147.410958][ T9175] bond1: (slave wireguard0): making interface the new active one [ 147.429697][ T9175] wireguard0: entered promiscuous mode [ 147.451473][ T9175] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 147.654679][ T9206] tipc: Started in network mode [ 147.661603][ T9211] loop4: detected capacity change from 0 to 256 [ 147.664403][ T9206] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 147.672881][ T9211] msdos: Unknown parameter 'ÿ18446744073709551615' [ 147.677399][ T9206] tipc: Enabling of bearer rejected, failed to enable media [ 147.806224][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 147.822513][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 148.196697][ T9251] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.231585][ T9251] bond1: (slave lo): Enslaving as an active interface with an up link [ 148.240900][ T9251] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 148.310046][ T9263] netlink: 'syz.9.1883': attribute type 83 has an invalid length. [ 148.350074][ T2468] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.358733][ T2468] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.368563][ T9268] netlink: 'syz.9.1886': attribute type 1 has an invalid length. [ 148.376780][ T2468] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.393427][ T9268] bond1: entered promiscuous mode [ 148.398794][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.407773][ T2468] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.437589][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.447176][ T9268] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.458314][ T9268] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 148.471254][ T9268] bond1: (slave wireguard0): making interface the new active one [ 148.479582][ T9268] wireguard0: entered promiscuous mode [ 148.487523][ T9268] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 148.755760][ T28] audit: type=1400 audit(1775265494.438:903): avc: denied { getopt } for pid=9310 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.876658][ T28] audit: type=1400 audit(1775265494.568:904): avc: denied { setopt } for pid=9312 comm="syz.2.1905" lport=38151 faddr=::ffff:172.30.0.3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 149.835433][ T28] audit: type=1400 audit(1775265495.508:905): avc: denied { write } for pid=9331 comm="syz.7.1914" lport=44062 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 149.946329][ T9345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.974964][ T9345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.009186][ T9345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.024247][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.042988][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.064464][ T9344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.083518][ T9344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.182228][ T9358] netlink: 'syz.7.1922': attribute type 4 has an invalid length. [ 150.235987][ T9358] netlink: 'syz.7.1922': attribute type 4 has an invalid length. [ 150.246472][ T9362] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 150.350295][ T9362] bond2: entered promiscuous mode [ 150.355807][ T9362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.423145][ T9364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.435145][ T9364] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 150.641406][ T9364] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 150.710425][ T9364] bond2: (slave wireguard0): making interface the new active one [ 150.718389][ T9364] wireguard0: entered promiscuous mode [ 150.725643][ T9364] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 150.839465][ T9378] vcan0: tx drop: invalid sa for name 0x0001000000000000 [ 151.027331][ T9382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.027389][ T9387] __nla_validate_parse: 8 callbacks suppressed [ 151.027402][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 151.190367][ T9392] loop4: detected capacity change from 0 to 512 [ 151.217217][ T9375] loop0: detected capacity change from 0 to 32768 [ 151.227637][ T9392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.245774][ T9392] EXT4-fs (loop4): 1 truncate cleaned up [ 151.269662][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.303562][ T6286] loop0: p1 p3 < > [ 151.310520][ T9375] loop0: p1 p3 < > [ 151.386581][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.416618][ T9396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1940'. [ 151.444904][ T9396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1940'. [ 151.535412][ T28] audit: type=1400 audit(1775265497.198:906): avc: denied { connect } for pid=9401 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.580736][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 151.596839][ T6286] udevd[6286]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 151.613583][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 151.624794][ T6286] udevd[6286]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 151.872214][ T28] audit: type=1400 audit(1775265497.558:907): avc: denied { bind } for pid=9424 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.131342][ T9458] loop4: detected capacity change from 0 to 4096 [ 152.153945][ T9460] loop0: detected capacity change from 0 to 1024 [ 152.173460][ T9458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.269735][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.292093][ T9460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.603844][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.765031][ T28] audit: type=1400 audit(1775265498.448:908): avc: denied { name_bind } for pid=9489 comm="syz.4.1974" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 152.903859][ T9496] loop4: detected capacity change from 0 to 256 [ 153.004782][ T9502] loop0: detected capacity change from 0 to 256 [ 153.173332][ T9514] loop4: detected capacity change from 0 to 1024 [ 153.185680][ T9502] FAT-fs (loop0): Directory bread(block 64) failed [ 153.208130][ T9514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 153.213263][ T9502] FAT-fs (loop0): Directory bread(block 65) failed [ 153.223453][ T9514] System zones: 0-1, 3-36 [ 153.234119][ T9502] FAT-fs (loop0): Directory bread(block 66) failed [ 153.255904][ T9514] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1980: bad orphan inode 134217728 [ 153.280416][ T9514] loop4: lost filesystem error report for type 5 error -117 [ 153.280422][ T9502] FAT-fs (loop0): Directory bread(block 67) failed [ 153.280494][ T9502] FAT-fs (loop0): Directory bread(block 68) failed [ 153.305233][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 153.311734][ C1] EXT4-fs (loop4): initial error at time 1775265498: ext4_orphan_get:1423 [ 153.320316][ C1] EXT4-fs (loop4): last error at time 1775265498: ext4_orphan_get:1423 [ 153.320951][ T9514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.394181][ T9520] loop2: detected capacity change from 0 to 4096 [ 153.411059][ T9502] FAT-fs (loop0): Directory bread(block 69) failed [ 153.441395][ T9520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.494042][ T9502] FAT-fs (loop0): Directory bread(block 70) failed [ 153.638164][ T9502] FAT-fs (loop0): Directory bread(block 71) failed [ 153.681220][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.699957][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.718580][ T9502] FAT-fs (loop0): Directory bread(block 72) failed [ 153.750846][ T9502] FAT-fs (loop0): Directory bread(block 73) failed [ 154.143543][ T9537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.152508][ T9537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.161067][ T9537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.220685][ T9538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.229129][ T9538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.459395][ T9546] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 154.489552][ T9546] bond2: entered promiscuous mode [ 154.494941][ T9546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.519384][ T9546] bond2: (slave bridge1): making interface the new active one [ 154.537862][ T9546] bridge1: entered promiscuous mode [ 154.550973][ T9546] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 154.561249][ T9554] loop0: detected capacity change from 0 to 128 [ 154.609048][ T9558] 9p: Bad value for 'rfdno' [ 154.683475][ T28] audit: type=1400 audit(1775265500.368:909): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.743484][ T28] audit: type=1400 audit(1775265500.398:910): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.819282][ T28] audit: type=1400 audit(1775265500.398:911): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.865328][ T28] audit: type=1400 audit(1775265500.418:912): avc: denied { create } for pid=9570 comm="syz.9.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.885789][ T28] audit: type=1400 audit(1775265500.418:913): avc: denied { ioctl } for pid=9570 comm="syz.9.2009" path="socket:[25125]" dev="sockfs" ino=25125 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.925933][ T28] audit: type=1400 audit(1775265500.418:914): avc: denied { module_request } for pid=9570 comm="syz.9.2009" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.960853][ T28] audit: type=1400 audit(1775265500.428:915): avc: denied { sys_module } for pid=9570 comm="syz.9.2009" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 155.086860][ T9602] loop4: detected capacity change from 0 to 4096 [ 155.138530][ T9602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.192710][ T9609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 155.201230][ T9609] System zones: 0-1, 3-36 [ 155.208724][ T9609] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2025: bad orphan inode 134217728 [ 155.241044][ T9609] loop2: lost filesystem error report for type 5 error -117 [ 155.245254][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 155.256817][ T9609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.259151][ C1] EXT4-fs (loop2): initial error at time 1775265500: ext4_orphan_get:1423 [ 155.280066][ C1] EXT4-fs (loop2): last error at time 1775265500: ext4_orphan_get:1423 [ 155.289347][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.379393][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.463313][ T9629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.487594][ T9629] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.500150][ T9637] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2035'. [ 155.522420][ T9629] EXT4-fs (loop2): shut down requested (0) [ 155.605433][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.651160][ T9651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 155.664199][ T9651] System zones: 0-1, 3-36 [ 155.692838][ T9651] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2041: bad orphan inode 134217728 [ 155.703691][ T9651] loop0: lost filesystem error report for type 5 error -117 [ 155.705229][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 155.716254][ T9651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.719225][ C0] EXT4-fs (loop0): initial error at time 1775265501: ext4_orphan_get:1423 [ 155.740291][ C0] EXT4-fs (loop0): last error at time 1775265501: ext4_orphan_get:1423 [ 155.797413][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.865144][ T9667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.939117][ T9667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.052220][ T9667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2050: bg 0: block 2: invalid block bitmap [ 156.096268][ T9667] EXT4-fs (loop4): Remounting filesystem read-only [ 156.188760][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.313481][ T9711] netlink: 'syz.9.2063': attribute type 1 has an invalid length. [ 156.362555][ T9711] bond2: entered promiscuous mode [ 156.369209][ T9711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.400426][ T9715] bond2: (slave bridge1): making interface the new active one [ 156.408096][ T9715] bridge1: entered promiscuous mode [ 156.415026][ T9715] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 156.509100][ T9697] chnl_net:caif_netlink_parms(): no params data found [ 156.585578][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 156.585593][ T28] audit: type=1400 audit(1775265502.278:997): avc: denied { mount } for pid=9724 comm="syz.4.2070" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 156.650672][ T28] audit: type=1400 audit(1775265502.318:998): avc: denied { write } for pid=9727 comm="syz.9.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.731098][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.744194][ T28] audit: type=1400 audit(1775265502.428:999): avc: denied { create } for pid=9734 comm="syz.4.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.785355][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.807832][ T9697] bridge_slave_0: entered allmulticast mode [ 156.821973][ T9697] bridge_slave_0: entered promiscuous mode [ 156.835415][ T28] audit: type=1400 audit(1775265502.428:1000): avc: denied { setopt } for pid=9734 comm="syz.4.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.857116][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.864272][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.879805][ T9697] bridge_slave_1: entered allmulticast mode [ 156.885988][ T28] audit: type=1400 audit(1775265502.428:1001): avc: denied { bind } for pid=9734 comm="syz.4.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.912985][ T9697] bridge_slave_1: entered promiscuous mode [ 156.929077][ T28] audit: type=1400 audit(1775265502.428:1002): avc: denied { ioctl } for pid=9734 comm="syz.4.2072" path="socket:[25418]" dev="sockfs" ino=25418 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.986178][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.995460][ T28] audit: type=1400 audit(1775265502.678:1003): avc: denied { create } for pid=9743 comm="syz.9.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.017005][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.072875][ T9697] team0: Port device team_slave_0 added [ 157.079590][ T28] audit: type=1400 audit(1775265502.708:1004): avc: denied { bind } for pid=9743 comm="syz.9.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.116579][ T9697] team0: Port device team_slave_1 added [ 157.125408][ T28] audit: type=1400 audit(1775265502.708:1005): avc: denied { name_bind } for pid=9743 comm="syz.9.2079" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 157.170040][ T28] audit: type=1400 audit(1775265502.708:1006): avc: denied { node_bind } for pid=9743 comm="syz.9.2079" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 157.195488][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.202633][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.275365][ T9697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.299125][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.313684][ T9760] set_capacity_and_notify: 4 callbacks suppressed [ 157.313702][ T9760] loop0: detected capacity change from 0 to 2048 [ 157.315523][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.355938][ T9697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.372026][ T9760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.400304][ T9697] hsr_slave_0: entered promiscuous mode [ 157.406780][ T9697] hsr_slave_1: entered promiscuous mode [ 157.412778][ T9697] debugfs: 'hsr0' already exists in 'hsr' [ 157.418879][ T9697] Cannot create hsr debugfs directory [ 157.450970][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.682173][ T9784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.690657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.971711][ T9697] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.987823][ T9697] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.020816][ T9697] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.115142][ T9697] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.235559][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.353995][ T9697] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.373632][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.380856][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.463150][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.470316][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.502666][ T9855] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 158.553115][ T9855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.572412][ T9697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.585161][ T9697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.630200][ T9855] bond3: (slave geneve2): making interface the new active one [ 158.668075][ T9855] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 158.694194][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.695464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.711039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.731531][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.744647][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.753512][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.792643][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.938617][ T9697] veth0_vlan: entered promiscuous mode [ 158.949145][ T9697] veth1_vlan: entered promiscuous mode [ 158.977359][ T9697] veth0_macvtap: entered promiscuous mode [ 158.986669][ T9697] veth1_macvtap: entered promiscuous mode [ 158.999023][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.009445][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.024422][ T4722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.033938][ T4722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.043413][ T4722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.067296][ T4722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.122689][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2127'. [ 159.140032][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2127'. [ 159.448631][ T9973] netlink: 'syz.1.2128': attribute type 11 has an invalid length. [ 159.456858][ T9973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2128'. [ 159.474664][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 159.497603][ T9976] vxlan0: entered promiscuous mode [ 159.828201][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 159.837457][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 159.859489][T10030] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 159.880072][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 159.900204][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 159.909858][T10030] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 159.922372][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2147'. [ 159.940782][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2147'. [ 160.241949][T10087] ipvlan2: entered promiscuous mode [ 160.289420][T10087] ipvlan2: entered allmulticast mode [ 160.305546][T10087] erspan0: entered allmulticast mode [ 160.312703][T10087] team0: Device ipvlan2 failed to register rx_handler [ 160.336863][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.345187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.366475][T10102] bridge0: port 3(batadv1) entered blocking state [ 160.381863][T10102] bridge0: port 3(batadv1) entered disabled state [ 160.394668][T10102] batadv1: entered allmulticast mode [ 160.409805][T10102] batadv1: entered promiscuous mode [ 160.595391][T10137] IPv6: addrconf: prefix option has invalid lifetime [ 160.734263][T10145] veth1_to_bridge: entered promiscuous mode [ 160.771547][T10145] veth1_to_bridge: left promiscuous mode [ 160.855323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.863566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.875431][ T4722] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 160.884755][ T4722] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 161.102050][T10199] loop0: detected capacity change from 0 to 256 [ 161.175221][T10199] FAT-fs (loop0): Directory bread(block 64) failed [ 161.194279][T10199] FAT-fs (loop0): Directory bread(block 65) failed [ 161.205367][T10199] FAT-fs (loop0): Directory bread(block 66) failed [ 161.211980][T10199] FAT-fs (loop0): Directory bread(block 67) failed [ 161.228676][T10199] FAT-fs (loop0): Directory bread(block 68) failed [ 161.261605][T10199] FAT-fs (loop0): Directory bread(block 69) failed [ 161.268389][T10199] FAT-fs (loop0): Directory bread(block 70) failed [ 161.278307][T10199] FAT-fs (loop0): Directory bread(block 71) failed [ 161.289263][T10199] FAT-fs (loop0): Directory bread(block 72) failed [ 161.301578][T10199] FAT-fs (loop0): Directory bread(block 73) failed [ 161.401750][T10214] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.651173][T10225] hsr_slave_1 (unregistering): left promiscuous mode [ 161.815432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.823863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.832206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.840515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.848817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.058750][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 162.058766][ T28] audit: type=1400 audit(1775265507.748:1112): avc: denied { mounton } for pid=10249 comm="syz.4.2213" path="/proc/279/task" dev="proc" ino=27338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 162.164432][ T28] audit: type=1400 audit(1775265507.788:1113): avc: denied { associate } for pid=10252 comm="syz.4.2213" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.538596][T10274] netlink: 'syz.0.2223': attribute type 11 has an invalid length. [ 162.625691][T10280] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 162.679826][T10280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.710629][T10284] bond3: (slave geneve2): making interface the new active one [ 162.756518][T10284] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 162.846924][ T28] audit: type=1326 audit(1775265508.538:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 162.850989][T10284] syz.4.2225 (10284) used greatest stack depth: 8192 bytes left [ 162.893578][T10298] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.899877][ T28] audit: type=1326 audit(1775265508.538:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 162.924413][T10296] loop0: detected capacity change from 0 to 1024 [ 162.941105][ T28] audit: type=1326 audit(1775265508.568:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 163.003216][T10296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.026474][ T28] audit: type=1326 audit(1775265508.568:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 163.055394][ T28] audit: type=1326 audit(1775265508.568:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 163.079089][ T28] audit: type=1326 audit(1775265508.578:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 163.103280][ T28] audit: type=1326 audit(1775265508.578:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 163.127158][ T28] audit: type=1326 audit(1775265508.578:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.9.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dbcc819 code=0x7ffc0000 [ 163.164438][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.192955][T10307] netlink: 'syz.9.2238': attribute type 11 has an invalid length. [ 163.240292][T10320] netlink: 'syz.7.2244': attribute type 1 has an invalid length. [ 163.258042][T10322] loop1: detected capacity change from 0 to 2048 [ 163.276598][T10320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.288745][T10322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.330041][T10320] bond1: (slave geneve2): making interface the new active one [ 163.356897][T10320] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 163.396335][ T9697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.446708][T10333] veth1_to_bridge: entered promiscuous mode [ 163.472707][T10320] syz.7.2244 (10320) used greatest stack depth: 7848 bytes left [ 163.534327][T10333] veth1_to_bridge: left promiscuous mode [ 163.738078][T10360] loop4: detected capacity change from 0 to 512 [ 163.798592][T10360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.839609][T10360] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.917096][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.067386][T10375] loop1: detected capacity change from 0 to 256 [ 164.106567][T10375] FAT-fs (loop1): Directory bread(block 64) failed [ 164.117613][T10375] FAT-fs (loop1): Directory bread(block 65) failed [ 164.157501][T10375] FAT-fs (loop1): Directory bread(block 66) failed [ 164.179596][T10375] FAT-fs (loop1): Directory bread(block 67) failed [ 164.206634][T10375] FAT-fs (loop1): Directory bread(block 68) failed [ 164.223299][T10375] FAT-fs (loop1): Directory bread(block 69) failed [ 164.242127][T10375] FAT-fs (loop1): Directory bread(block 70) failed [ 164.259806][T10375] FAT-fs (loop1): Directory bread(block 71) failed [ 164.294162][T10375] FAT-fs (loop1): Directory bread(block 72) failed [ 164.312024][T10375] FAT-fs (loop1): Directory bread(block 73) failed [ 164.410764][T10392] pimreg: entered allmulticast mode [ 164.433893][T10389] bridge0: port 4(batadv2) entered blocking state [ 164.454981][T10389] bridge0: port 4(batadv2) entered disabled state [ 164.475517][T10389] batadv2: entered allmulticast mode [ 164.496671][T10389] batadv2: entered promiscuous mode [ 164.735566][T10414] loop4: detected capacity change from 0 to 1024 [ 164.763879][T10416] __nla_validate_parse: 5 callbacks suppressed [ 164.763899][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 164.800336][T10414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.836089][T10416] vxlan0: entered promiscuous mode [ 164.854736][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.866232][ T2468] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.877211][ T2468] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.889276][ T2468] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.898325][ T2468] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.908796][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.926213][ T8084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.935802][ T4722] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 164.945028][ T4722] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 164.997923][T10425] veth0: entered promiscuous mode [ 165.004191][T10425] veth0: left promiscuous mode [ 165.302964][T10447] netlink: 'syz.7.2297': attribute type 12 has an invalid length. [ 165.311031][T10447] netlink: 'syz.7.2297': attribute type 29 has an invalid length. [ 165.318980][T10447] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2297'. [ 165.345298][ C1] net_ratelimit: 23 callbacks suppressed [ 165.345336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.548041][T10462] loop4: detected capacity change from 0 to 8192 [ 165.558666][T10462] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.576097][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.577168][T10465] netlink: 'syz.1.2303': attribute type 4 has an invalid length. [ 165.589428][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.649798][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2306'. [ 166.217303][T10484] rdma_op ffff888128831580 conn xmit_rdma 0000000000000000 [ 166.375306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.421076][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 166.535456][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.055840][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2333'. [ 167.096712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.282233][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 167.415307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.471743][T10556] ªªªªªª: renamed from vlan0 (while UP) [ 167.486959][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 167.486974][ T28] audit: type=1326 audit(1775265513.178:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.532118][ T28] audit: type=1326 audit(1775265513.208:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.555934][ T28] audit: type=1326 audit(1775265513.208:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.580554][ T28] audit: type=1326 audit(1775265513.208:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.604305][ T28] audit: type=1326 audit(1775265513.208:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.628107][ T28] audit: type=1326 audit(1775265513.208:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.657594][ T28] audit: type=1326 audit(1775265513.208:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.692801][ T28] audit: type=1400 audit(1775265513.218:1172): avc: denied { read write } for pid=10561 comm="syz.1.2349" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.716544][ T28] audit: type=1400 audit(1775265513.218:1173): avc: denied { open } for pid=10561 comm="syz.1.2349" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.743708][T10573] loop1: detected capacity change from 0 to 512 [ 167.766972][ T28] audit: type=1326 audit(1775265513.408:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f09ea80c819 code=0x7ffc0000 [ 167.790914][T10573] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.822980][T10573] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2353: bad orphan inode 131083 [ 167.833747][T10573] loop1: lost filesystem error report for type 5 error -117 [ 167.834546][T10573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.863544][T10573] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.1.2353: path /45/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 167.938915][ T9697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.052148][T10605] loop1: detected capacity change from 0 to 164 [ 168.061032][T10605] iso9660: Bad value for 'check' [ 168.156729][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.164168][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.242237][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.255081][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.386560][ T4722] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.397259][ T4722] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.406873][ T4722] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.415979][ T4722] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.424965][ T4722] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.434744][ T4722] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.444210][ T4722] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.453860][ T4722] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.463095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.463224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.463355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.508722][T10631] netlink: 'syz.9.2367': attribute type 19 has an invalid length. [ 168.516671][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2367'. [ 168.526921][T10631] netlink: 'syz.9.2367': attribute type 19 has an invalid length. [ 168.534765][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2367'. [ 168.928253][T10672] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 168.956008][T10672] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.994505][T10672] bond4: (slave gretap2): making interface the new active one [ 169.003388][T10672] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 169.124420][T10695] loop0: detected capacity change from 0 to 128 [ 169.259214][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.269166][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.425562][T10721] netlink: 'syz.7.2406': attribute type 4 has an invalid length. [ 169.607586][T10735] loop4: detected capacity change from 0 to 256 [ 169.669332][T10740] loop4: detected capacity change from 0 to 256 [ 169.687019][T10740] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.701316][T10740] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 169.710450][T10740] FAT-fs (loop4): Filesystem has been set read-only [ 169.718114][T10740] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 170.179371][ T3002] ================================================================== [ 170.187522][ T3002] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 170.195023][ T3002] [ 170.197348][ T3002] write to 0xffff888107ec89c0 of 4 bytes by task 6279 on cpu 1: [ 170.205027][ T3002] d_make_discardable+0x4f/0xa0 [ 170.209890][ T3002] simple_unlink+0x68/0x80 [ 170.214306][ T3002] shmem_unlink+0x12d/0x140 [ 170.218833][ T3002] vfs_unlink+0x1c7/0x490 [ 170.223177][ T3002] filename_unlinkat+0x1e2/0x410 [ 170.228128][ T3002] __se_sys_unlink+0x2b/0xe0 [ 170.232725][ T3002] __x64_sys_unlink+0x1f/0x30 [ 170.237495][ T3002] x64_sys_call+0x2eb6/0x3020 [ 170.242189][ T3002] do_syscall_64+0x12c/0x370 [ 170.246783][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.252690][ T3002] [ 170.255015][ T3002] read to 0xffff888107ec89c0 of 4 bytes by task 3002 on cpu 0: [ 170.262557][ T3002] do_readlinkat+0xa0/0x2f0 [ 170.267074][ T3002] __x64_sys_readlink+0x47/0x60 [ 170.271930][ T3002] x64_sys_call+0x2b51/0x3020 [ 170.276620][ T3002] do_syscall_64+0x12c/0x370 [ 170.281237][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.287134][ T3002] [ 170.289458][ T3002] value changed: 0x08300080 -> 0x00300180 [ 170.295170][ T3002] [ 170.297534][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 170.303717][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 170.314137][ T3002] Tainted: [W]=WARN [ 170.317944][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.328013][ T3002] ================================================================== [ 170.695961][ T2468] net_ratelimit: 9 callbacks suppressed [ 170.695981][ T2468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.710655][ T2468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.855391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.225417][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.336862][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.815453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.823795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.832093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.985616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.335817][ T2468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.755410][ T4715] net_ratelimit: 9 callbacks suppressed [ 176.755430][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.735594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.875654][ T4734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.295351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.535425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.543708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.552003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.995390][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.105323][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog