last executing test programs: 2.844211725s ago: executing program 0 (id=4436): pipe(0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ftruncate(r0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48b082, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[], 0x9) 2.844028815s ago: executing program 0 (id=4437): unlinkat(0xffffffffffffffff, 0x0, 0x200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000100)) 2.791269478s ago: executing program 0 (id=4438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) unshare(0x22020600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(r1, 0x0, 0x0, 0x6, 0x0, 0x9) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) bind$packet(r3, &(0x7f0000000140)={0x11, 0x1, 0x0, 0x1, 0x5a}, 0x14) 2.710058203s ago: executing program 0 (id=4439): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000004700)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@mpls_uc={0x8847, {[{0x100, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x5}, {0x9}, {0x7066, 0x0, 0x1}], @llc={@llc={0xff, 0x80, "9e3e", "b8a4bc213bb122de1b2b053e06289e78d4f1e88c1b9bfd943df73050c6a29185271507ea8b62c6fafebf7bf3ca7ecc1f9bce09e3a0f7309aa27a68cca53b0159b586c7e5da7d5bfe1bed1bc75bed728007e833a58c956ef7e11a8feeac9cfbb9514b2e9feff47ced328e36ee5322"}}}}}}, &(0x7f0000000180)={0x0, 0x2, [0x219, 0x2d0, 0xa84, 0xb20]}) sendmsg$nl_route(r4, 0x0, 0x20004003) close(0x3) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = open(0x0, 0x143bc2, 0x1c0) fcntl$setlease(r6, 0x400, 0x1) 2.564339431s ago: executing program 0 (id=4441): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r0, 0x24, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.474895947s ago: executing program 0 (id=4443): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.718147061s ago: executing program 1 (id=4457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xb, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae8", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.678408593s ago: executing program 1 (id=4459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 1.645959024s ago: executing program 1 (id=4462): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.645785535s ago: executing program 3 (id=4463): unshare(0x6020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 1.579856809s ago: executing program 1 (id=4465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.573724229s ago: executing program 3 (id=4466): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 1.480191584s ago: executing program 1 (id=4468): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2424, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000280)=@base={0xf, 0x6, 0x9, 0x1, 0x4, r3, 0xb8, '\x00', r6, r2, 0x2, 0x0, 0x5}, 0x50) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) r7 = accept(r1, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000440)='\x00', 0x1, 0x4004, 0x0, 0x0) 1.052020249s ago: executing program 2 (id=4476): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0x7, 0x7d}, {0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0xfffefffffdfffffe}, 0xfffbffff, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@empty, 0x3503, 0x4, 0x2, 0x4, 0x0, 0x7, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 855.54152ms ago: executing program 2 (id=4478): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000004700)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@mpls_uc={0x8847, {[{0x100, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x5}, {0x9}, {0x7066, 0x0, 0x1}], @llc={@llc={0xff, 0x80, "9e3e", "b8a4bc213bb122de1b2b053e06289e78d4f1e88c1b9bfd943df73050c6a29185271507ea8b62c6fafebf7bf3ca7ecc1f9bce09e3a0f7309aa27a68cca53b0159b586c7e5da7d5bfe1bed1bc75bed728007e833a58c956ef7e11a8feeac9cfbb9514b2e9feff47ced328e36ee5322"}}}}}}, &(0x7f0000000180)={0x0, 0x2, [0x219, 0x2d0, 0xa84, 0xb20]}) sendmsg$nl_route(r4, 0x0, 0x20004003) close(0x3) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = open(0x0, 0x143bc2, 0x1c0) getdents(r6, 0x0, 0x0) 787.016914ms ago: executing program 4 (id=4480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xb, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae8", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 786.833384ms ago: executing program 4 (id=4481): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 761.048906ms ago: executing program 2 (id=4482): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 695.76839ms ago: executing program 2 (id=4483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe0f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8884}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0xfbfb, "e682"}}}}, 0x1c) 695.258009ms ago: executing program 4 (id=4484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 664.318391ms ago: executing program 1 (id=4485): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 657.276282ms ago: executing program 4 (id=4486): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="eb9f116f09ca62eb"}, 0x2b, 0x0, '\x00', @auto=[0x3f, 0x24, 0x29, 0x3c, 0x40]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) 580.503346ms ago: executing program 4 (id=4487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020301020000000000000000070002100800010001"], 0x1c}}, 0x4004890) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, 0x0, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 579.901446ms ago: executing program 2 (id=4488): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "89"}, @global=@item_4={0x3, 0x1, 0x5, "9276f310"}]}}, 0x0}, 0x0) 512.2904ms ago: executing program 4 (id=4489): r0 = eventfd(0x9) ppoll(&(0x7f0000000480)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)="580000007fffffff81", 0x9}], 0x1) 512.02565ms ago: executing program 3 (id=4490): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071182b000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 497.895171ms ago: executing program 3 (id=4491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000180)='\f', 0xfffff, 0x400002d, 0x0, 0x0) 472.231713ms ago: executing program 3 (id=4492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) unshare(0x22020400) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) 450.458604ms ago: executing program 3 (id=4493): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed721", 0xa) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 2 (id=4494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="5d98ddf2421dc46973b816ed0f47e888255d688ecc7e50b5464fdd64839ca45503da79ed5274c7bea4f30a67fb909e63591f146233d3d0238dd36fc12cc40f76c76a3faa56823b0eb1c7447a7f1d4a41869073854537f1b80819ca71d42b9ff7478d2372fe871542e7c60b8157bd7773c9b1da8cf49e9c502463954164a70988b4835d6e8ea00730", 0x88, 0x4404, 0x0, 0x0) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.850505][ T9837] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 141.866766][ T9837] 8021q: adding VLAN 0 to HW filter on device bond7 [ 141.953358][ T9846] loop3: detected capacity change from 0 to 128 [ 142.022518][ T9849] loop4: detected capacity change from 0 to 128 [ 142.055773][ T9849] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.078094][ T9849] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.109787][ T315] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.142369][ T9856] syzkaller0: entered promiscuous mode [ 142.147954][ T9856] syzkaller0: entered allmulticast mode [ 142.187437][ T30] audit: type=1326 audit(1769600391.402:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b31caeb9 code=0x7fc00000 [ 142.321330][ T9866] netlink: 'syz.4.2674': attribute type 1 has an invalid length. [ 142.336930][ T9866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 142.887049][ T9894] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 142.901969][ T9894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 142.936778][ T9897] syzkaller0: entered promiscuous mode [ 142.942543][ T9897] syzkaller0: entered allmulticast mode [ 143.006559][ T9903] loop2: detected capacity change from 0 to 7 [ 143.037278][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2691'. [ 143.136319][ T9918] netlink: 'syz.1.2696': attribute type 1 has an invalid length. [ 143.151248][ T9918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 143.255750][ T9927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9927 comm=syz.2.2700 [ 143.270395][ T9927] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 143.292150][ T9927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.313651][ T9927] bond4: (slave veth0_virt_wifi): Releasing active interface [ 143.384566][ T9936] loop2: detected capacity change from 0 to 256 [ 143.391750][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2703'. [ 143.412922][ T9936] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 143.420532][ T9936] FAT-fs (loop2): Filesystem has been set read-only [ 143.451167][ T9936] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 143.461133][ T9936] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 143.531196][ T9942] loop1: detected capacity change from 0 to 128 [ 143.669655][ T9954] syzkaller0: entered promiscuous mode [ 143.675239][ T9954] syzkaller0: entered allmulticast mode [ 143.729376][ T9962] loop2: detected capacity change from 0 to 128 [ 143.750737][ T9962] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.768250][ T9962] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.827532][ T315] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.864900][ T9968] syzkaller0: entered promiscuous mode [ 143.870526][ T9968] syzkaller0: entered allmulticast mode [ 143.959354][ T9970] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 144.147400][ T9986] syzkaller0: entered promiscuous mode [ 144.153078][ T9986] syzkaller0: entered allmulticast mode [ 144.265416][ T9997] syzkaller0: entered promiscuous mode [ 144.271058][ T9997] syzkaller0: entered allmulticast mode [ 144.449058][T10019] syzkaller0: entered promiscuous mode [ 144.454704][T10019] syzkaller0: entered allmulticast mode [ 144.621327][T10034] syzkaller0: entered promiscuous mode [ 144.626945][T10034] syzkaller0: entered allmulticast mode [ 144.781661][T10046] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 144.813473][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2755'. [ 144.828814][T10046] 8021q: adding VLAN 0 to HW filter on device bond13 [ 144.856408][T10054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.060057][T10071] syzkaller0: entered promiscuous mode [ 145.065685][T10071] syzkaller0: entered allmulticast mode [ 145.143276][T10074] syzkaller0: entered promiscuous mode [ 145.148867][T10074] syzkaller0: entered allmulticast mode [ 145.231528][T10081] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 145.325161][T10081] 8021q: adding VLAN 0 to HW filter on device bond7 [ 145.491815][T10105] syzkaller0: entered promiscuous mode [ 145.497393][T10105] syzkaller0: entered allmulticast mode [ 145.545460][T10104] syzkaller0: entered promiscuous mode [ 145.551178][T10104] syzkaller0: entered allmulticast mode [ 145.792082][T10129] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 145.859340][T10136] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 145.903335][T10131] set_capacity_and_notify: 4 callbacks suppressed [ 145.903357][T10131] loop0: detected capacity change from 0 to 8192 [ 146.012290][T10136] 8021q: adding VLAN 0 to HW filter on device bond8 [ 146.033106][T10141] loop3: detected capacity change from 0 to 136 [ 146.095556][T10141] Attempt to read inode for relocated directory [ 146.171757][T10147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10147 comm=syz.1.2795 [ 146.202072][T10147] netlink: 'syz.1.2795': attribute type 1 has an invalid length. [ 146.233290][T10147] bond5: (slave veth0_virt_wifi): Releasing active interface [ 146.648400][T10171] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 146.701389][T10174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10174 comm=syz.3.2807 [ 146.990548][T10174] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 147.031070][T10174] bond6: (slave veth0_virt_wifi): Releasing active interface [ 147.057646][T10178] loop0: detected capacity change from 0 to 136 [ 147.103894][T10178] Attempt to read inode for relocated directory [ 147.321402][ T30] audit: type=1400 audit(1769600396.542:246): avc: denied { ioctl } for pid=10193 comm="syz.3.2817" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.379798][T10197] loop2: detected capacity change from 0 to 128 [ 147.410630][T10197] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.482424][T10197] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.553812][T10210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10210 comm=syz.2.2822 [ 147.588656][T10216] loop3: detected capacity change from 0 to 128 [ 147.629684][T10210] netlink: 'syz.2.2822': attribute type 1 has an invalid length. [ 147.779199][T10232] 8021q: adding VLAN 0 to HW filter on device bond9 [ 147.844201][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2836'. [ 147.892111][T10246] loop2: detected capacity change from 0 to 128 [ 147.908900][T10248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10248 comm=syz.1.2839 [ 147.947017][T10248] netlink: 'syz.1.2839': attribute type 1 has an invalid length. [ 148.232084][ T30] audit: type=1326 audit(1769600397.452:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.256983][ T30] audit: type=1326 audit(1769600397.452:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.281033][ T30] audit: type=1326 audit(1769600397.452:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.304779][ T30] audit: type=1326 audit(1769600397.482:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.328232][ T30] audit: type=1326 audit(1769600397.482:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.351913][ T30] audit: type=1326 audit(1769600397.482:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.387721][ T30] audit: type=1326 audit(1769600397.502:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.411366][ T30] audit: type=1326 audit(1769600397.502:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5a3111aeb9 code=0x7ffc0000 [ 148.512580][T10277] loop2: detected capacity change from 0 to 7 [ 148.537812][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2854'. [ 148.572638][T10279] loop0: detected capacity change from 0 to 8192 [ 148.974621][T10301] 9p: Bad value for 'rfdno' [ 149.034661][T10305] syzkaller0: entered promiscuous mode [ 149.040255][T10305] syzkaller0: entered allmulticast mode [ 149.114129][T10311] loop4: detected capacity change from 0 to 7 [ 149.120569][T10311] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.128469][T10311] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.136403][T10311] loop4: unable to read partition table [ 149.142108][T10311] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 149.155095][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.170963][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.186968][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.195397][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.235774][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.245048][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.253829][T10315] netlink: 'syz.3.2869': attribute type 1 has an invalid length. [ 149.255956][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.269841][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.303388][T10315] 8021q: adding VLAN 0 to HW filter on device bond8 [ 149.366093][T10321] 8021q: adding VLAN 0 to HW filter on device bond10 [ 149.400521][T10329] netlink: 'syz.2.2873': attribute type 12 has an invalid length. [ 149.408435][T10329] netlink: 'syz.2.2873': attribute type 29 has an invalid length. [ 149.416422][T10329] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2873'. [ 149.419604][T10331] 9p: Bad value for 'rfdno' [ 149.425640][T10329] netlink: 'syz.2.2873': attribute type 1 has an invalid length. [ 149.518317][T10337] netlink: 'syz.4.2878': attribute type 1 has an invalid length. [ 149.582283][T10337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 149.631939][ T30] audit: type=1400 audit(1769600398.852:255): avc: denied { watch } for pid=10348 comm="syz.0.2882" path="/proc/1314/net/sctp" dev="proc" ino=4026532854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 149.691604][T10355] 8021q: adding VLAN 0 to HW filter on device bond14 [ 149.834509][T10375] netlink: 'syz.4.2893': attribute type 1 has an invalid length. [ 149.849289][T10375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.045587][T10401] loop4: detected capacity change from 0 to 128 [ 150.054906][T10401] /dev/loop4: Can't open blockdev [ 150.106432][T10407] netlink: 'syz.0.2905': attribute type 1 has an invalid length. [ 150.121686][T10407] 8021q: adding VLAN 0 to HW filter on device bond15 [ 150.183257][T10414] 8021q: adding VLAN 0 to HW filter on device bond16 [ 150.424604][T10419] chnl_net:caif_netlink_parms(): no params data found [ 150.488808][T10444] 8021q: adding VLAN 0 to HW filter on device bond9 [ 150.537832][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2922'. [ 150.559903][T10454] 8021q: adding VLAN 0 to HW filter on device bond11 [ 150.576775][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2922'. [ 150.586347][T10419] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.593624][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.601030][T10419] bridge_slave_0: entered allmulticast mode [ 150.607891][T10419] bridge_slave_0: entered promiscuous mode [ 150.615160][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.622350][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.650298][T10419] bridge_slave_1: entered allmulticast mode [ 150.662460][T10419] bridge_slave_1: entered promiscuous mode [ 150.706526][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.717218][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.745601][T10419] team0: Port device team_slave_0 added [ 150.757178][T10419] team0: Port device team_slave_1 added [ 150.850323][T10419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.857395][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.883878][T10419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.896410][T10419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.903599][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.929682][T10419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.960419][T10419] hsr_slave_0: entered promiscuous mode [ 150.966800][T10419] hsr_slave_1: entered promiscuous mode [ 150.972988][T10419] debugfs: 'hsr0' already exists in 'hsr' [ 150.978805][T10419] Cannot create hsr debugfs directory [ 151.068257][T10480] syzkaller0: entered promiscuous mode [ 151.073935][T10480] syzkaller0: entered allmulticast mode [ 151.103816][T10482] 8021q: adding VLAN 0 to HW filter on device bond9 [ 151.132462][T10485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10485 comm=syz.4.2932 [ 151.169036][T10487] 8021q: adding VLAN 0 to HW filter on device bond10 [ 151.209264][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2935'. [ 151.220872][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2935'. [ 151.371299][T10419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.380726][T10419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.409428][T10419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.424016][T10419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.518869][T10419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.544336][T10513] 8021q: adding VLAN 0 to HW filter on device bond10 [ 151.576248][T10419] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.588265][T10518] set_capacity_and_notify: 2 callbacks suppressed [ 151.588282][T10518] loop2: detected capacity change from 0 to 7 [ 151.614306][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.621449][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.640317][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.647883][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.723813][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2945'. [ 151.734975][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2945'. [ 151.770713][T10419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.781164][T10419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.796417][T10530] loop1: detected capacity change from 0 to 136 [ 151.806799][T10530] Attempt to read inode for relocated directory [ 151.911768][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.000213][T10419] veth0_vlan: entered promiscuous mode [ 152.009495][T10419] veth1_vlan: entered promiscuous mode [ 152.029974][T10419] veth0_macvtap: entered promiscuous mode [ 152.038292][T10419] veth1_macvtap: entered promiscuous mode [ 152.051439][T10419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.063657][T10419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.075656][ T315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.091127][ T315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.103161][ T315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.122107][ T315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.400968][T10569] validate_nla: 5 callbacks suppressed [ 152.400988][T10569] netlink: 'syz.0.2959': attribute type 1 has an invalid length. [ 152.418018][T10569] vlan2: entered allmulticast mode [ 152.423358][T10569] veth0_to_bond: entered allmulticast mode [ 152.429787][T10569] veth0_to_bond: entered promiscuous mode [ 152.437467][T10569] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 152.466642][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2960'. [ 152.478114][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2960'. [ 152.504306][T10573] loop2: detected capacity change from 0 to 128 [ 152.511962][T10573] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.524626][T10573] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.546560][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 152.546579][ T30] audit: type=1400 audit(1769600401.762:257): avc: denied { name_bind } for pid=10574 comm="syz.0.2962" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.744818][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.833456][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.903767][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.936530][T10601] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10601 comm=syz.0.2970 [ 152.982919][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.089345][ T50] bridge_slave_1: left allmulticast mode [ 153.095205][ T50] bridge_slave_1: left promiscuous mode [ 153.100967][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.109909][ T50] bridge_slave_0: left allmulticast mode [ 153.115695][ T50] bridge_slave_0: left promiscuous mode [ 153.121428][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.232346][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.242321][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.252512][ T50] bond0 (unregistering): Released all slaves [ 153.261749][ T50] bond1 (unregistering): Released all slaves [ 153.271498][ T50] bond2 (unregistering): Released all slaves [ 153.281655][ T50] bond3 (unregistering): (slave vlan2): Releasing active interface [ 153.291375][ T50] bond3 (unregistering): Released all slaves [ 153.302585][ T30] audit: type=1400 audit(1769600402.522:258): avc: denied { node_bind } for pid=10619 comm="syz.3.2977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 153.304134][ T50] bond4 (unregistering): Released all slaves [ 153.333529][ T50] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 153.342611][ T30] audit: type=1400 audit(1769600402.552:259): avc: denied { name_bind } for pid=10619 comm="syz.3.2977" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 153.366696][ T50] bond5 (unregistering): Released all slaves [ 153.376817][ T50] bond6 (unregistering): Released all slaves [ 153.386193][ T50] bond7 (unregistering): Released all slaves [ 153.395542][ T50] bond8 (unregistering): Released all slaves [ 153.404210][ T50] bond9 (unregistering): Released all slaves [ 153.413035][ T50] bond10 (unregistering): Released all slaves [ 153.476969][ T30] audit: type=1400 audit(1769600402.692:260): avc: denied { read } for pid=3040 comm="dhcpcd" name="n30" dev="tmpfs" ino=12919 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.498970][ T30] audit: type=1400 audit(1769600402.692:261): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=12919 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.522380][ T30] audit: type=1400 audit(1769600402.692:262): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=12919 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.553127][ T50] hsr_slave_0: left promiscuous mode [ 153.565025][T10628] netlink: 'syz.1.2981': attribute type 1 has an invalid length. [ 153.585527][ T50] hsr_slave_1: left promiscuous mode [ 153.591672][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.599577][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.607255][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.618436][ T50] veth1_macvtap: left promiscuous mode [ 153.624091][ T50] veth0_macvtap: left promiscuous mode [ 153.629756][ T50] veth1_vlan: left promiscuous mode [ 153.635231][ T50] : left promiscuous mode [ 153.685108][ T30] audit: type=1400 audit(1769600402.902:263): avc: denied { write } for pid=10638 comm="syz.3.2984" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.747499][ T50] team0 (unregistering): Port device team_slave_1 removed [ 153.758679][ T50] team0 (unregistering): Port device team_slave_0 removed [ 153.803515][T10628] 8021q: adding VLAN 0 to HW filter on device bond12 [ 153.817721][T10588] chnl_net:caif_netlink_parms(): no params data found [ 153.923547][ T30] audit: type=1400 audit(1769600403.142:264): avc: denied { create } for pid=10645 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.946290][ T30] audit: type=1400 audit(1769600403.142:265): avc: denied { write } for pid=10645 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=12978 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.971007][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.973159][ T30] audit: type=1400 audit(1769600403.142:266): avc: denied { append } for pid=10645 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=12978 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.979898][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.012589][T10588] bridge_slave_0: entered allmulticast mode [ 154.019407][T10588] bridge_slave_0: entered promiscuous mode [ 154.027665][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.035108][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.043033][T10588] bridge_slave_1: entered allmulticast mode [ 154.088405][T10588] bridge_slave_1: entered promiscuous mode [ 154.147595][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.158885][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.192942][T10677] 9pnet_fd: Insufficient options for proto=fd [ 154.202924][T10588] team0: Port device team_slave_0 added [ 154.216231][T10588] team0: Port device team_slave_1 added [ 154.278888][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.286195][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.312564][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.336959][T10689] netlink: 'syz.1.2995': attribute type 1 has an invalid length. [ 154.372046][T10689] 8021q: adding VLAN 0 to HW filter on device bond13 [ 154.381493][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.388493][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.415164][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.429990][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2995'. [ 154.500893][T10588] hsr_slave_0: entered promiscuous mode [ 154.509741][T10588] hsr_slave_1: entered promiscuous mode [ 154.524308][T10705] loop2: detected capacity change from 0 to 256 [ 154.629225][T10716] 9pnet_fd: Insufficient options for proto=fd [ 154.756979][T10726] syzkaller0: entered promiscuous mode [ 154.762920][T10726] syzkaller0: entered allmulticast mode [ 154.867284][T10744] loop4: detected capacity change from 0 to 7 [ 154.885087][T10744] buffer_io_error: 2 callbacks suppressed [ 154.885105][T10744] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.911841][T10744] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.919747][T10744] loop4: unable to read partition table [ 154.949680][T10744] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 154.962327][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.973731][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.983186][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.010701][T10756] 9pnet_fd: Insufficient options for proto=fd [ 155.042629][T10588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.055400][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.077622][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.080871][T10588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.101002][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.122944][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.124289][T10588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.145446][T10588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.147156][ T3305] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.173845][T10761] loop3: detected capacity change from 0 to 8192 [ 155.309270][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.331545][T10783] loop0: detected capacity change from 0 to 128 [ 155.341587][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.360546][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.367747][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.395053][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.402236][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.683893][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.003345][T10588] veth0_vlan: entered promiscuous mode [ 156.023286][T10588] veth1_vlan: entered promiscuous mode [ 156.026402][T10847] loop1: detected capacity change from 0 to 136 [ 156.050778][T10847] Attempt to read inode for relocated directory [ 156.068127][T10588] veth0_macvtap: entered promiscuous mode [ 156.083716][T10588] veth1_macvtap: entered promiscuous mode [ 156.103902][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.113820][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.127672][ T7486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.127758][ T7486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.127807][ T7486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.127972][ T7486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.153667][T10857] loop4: detected capacity change from 0 to 7 [ 156.154128][ T3302] loop4: unable to read partition table [ 156.158097][T10857] loop4: unable to read partition table [ 156.158123][T10857] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 156.375864][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.415697][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.474424][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.511656][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.758022][ T12] team0: Port device ip6gre1 removed [ 156.855022][ T12] bond0 (unregistering): Released all slaves [ 156.863310][ T12] bond1 (unregistering): Released all slaves [ 156.880697][ T12] bond2 (unregistering): Released all slaves [ 156.908204][ T12] bond3 (unregistering): Released all slaves [ 156.932929][ T12] bond4 (unregistering): Released all slaves [ 156.961616][ T12] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 156.971966][ T12] bond5 (unregistering): Released all slaves [ 156.981519][ T12] bond6 (unregistering): Released all slaves [ 156.994793][ T12] bond7 (unregistering): Released all slaves [ 157.004714][ T12] bond8 (unregistering): Released all slaves [ 157.014967][ T12] bond9 (unregistering): Released all slaves [ 157.025531][ T12] bond10 (unregistering): Released all slaves [ 157.050593][T10902] netlink: 'syz.2.3037': attribute type 12 has an invalid length. [ 157.058486][T10902] netlink: 'syz.2.3037': attribute type 29 has an invalid length. [ 157.066372][T10902] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3037'. [ 157.075477][T10902] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3037'. [ 157.124238][ T12] hsr_slave_0: left promiscuous mode [ 157.139899][ T12] hsr_slave_1: left promiscuous mode [ 157.160534][ T12] veth1_macvtap: left promiscuous mode [ 157.171126][ T12] veth0_macvtap: left promiscuous mode [ 157.186929][ T12] veth1_vlan: left promiscuous mode [ 157.206342][ T12] veth0_vlan: left promiscuous mode [ 157.458209][T10869] chnl_net:caif_netlink_parms(): no params data found [ 157.505706][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.513072][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.521058][T10869] bridge_slave_0: entered allmulticast mode [ 157.527652][T10869] bridge_slave_0: entered promiscuous mode [ 157.535001][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.542302][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.549711][T10869] bridge_slave_1: entered allmulticast mode [ 157.556806][T10869] bridge_slave_1: entered promiscuous mode [ 157.576758][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.587821][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.608633][T10869] team0: Port device team_slave_0 added [ 157.616340][T10869] team0: Port device team_slave_1 added [ 157.633773][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.640871][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.667331][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.679313][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.686366][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.712667][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.749384][T10869] hsr_slave_0: entered promiscuous mode [ 157.755604][T10869] hsr_slave_1: entered promiscuous mode [ 157.762147][T10869] debugfs: 'hsr0' already exists in 'hsr' [ 157.767902][T10869] Cannot create hsr debugfs directory [ 158.034900][T10869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.045756][T10869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.061533][T10869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.073449][T10869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.122228][T10987] loop2: detected capacity change from 0 to 256 [ 158.207061][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.239880][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.250805][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.257944][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.302567][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.309733][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.348029][T11016] loop4: detected capacity change from 0 to 7 [ 158.374954][T11021] netlink: 'syz.1.3060': attribute type 12 has an invalid length. [ 158.382993][T11021] netlink: 'syz.1.3060': attribute type 29 has an invalid length. [ 158.391108][T11021] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3060'. [ 158.400323][T11021] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3060'. [ 158.416037][T10869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.421343][ T3001] loop4: unable to read partition table [ 158.426789][T10869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.444224][T11016] loop4: unable to read partition table [ 158.450609][T11016] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 158.488631][ T3001] loop4: unable to read partition table [ 158.497473][T11027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11027 comm=syz.2.3061 [ 158.553145][T11035] loop4: detected capacity change from 0 to 256 [ 158.581774][T11035] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 158.589877][T11035] FAT-fs (loop4): Filesystem has been set read-only [ 158.600893][T11027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 158.617242][T11027] bond8: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 158.642928][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.806677][T11057] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.836305][T10869] veth0_vlan: entered promiscuous mode [ 158.847760][T10869] veth1_vlan: entered promiscuous mode [ 158.894153][T10869] veth0_macvtap: entered promiscuous mode [ 158.902622][T10869] veth1_macvtap: entered promiscuous mode [ 158.922318][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.945424][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.958571][ T7486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.987330][ T7486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.005918][ T7486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.017562][ T7486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.054189][T11082] netlink: 'syz.3.3033': attribute type 1 has an invalid length. [ 159.071968][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3033'. [ 159.142294][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3087'. [ 159.231190][T11099] loop4: detected capacity change from 0 to 136 [ 159.268106][T11099] Attempt to read inode for relocated directory [ 159.467292][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.527087][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.568164][T11123] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 159.585178][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.612419][T11123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.624065][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3096'. [ 159.654186][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.675504][T11104] chnl_net:caif_netlink_parms(): no params data found [ 159.887322][T11104] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.894662][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.902241][T11104] bridge_slave_0: entered allmulticast mode [ 159.909072][T11104] bridge_slave_0: entered promiscuous mode [ 159.925328][T11104] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.932519][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.972586][T11104] bridge_slave_1: entered allmulticast mode [ 159.988214][T11104] bridge_slave_1: entered promiscuous mode [ 160.011837][ T50] bridge_slave_1: left allmulticast mode [ 160.017556][ T50] bridge_slave_1: left promiscuous mode [ 160.023414][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.035790][T11151] loop2: detected capacity change from 0 to 7 [ 160.045327][ T50] bridge_slave_0: left allmulticast mode [ 160.051181][ T50] bridge_slave_0: left promiscuous mode [ 160.057075][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.202484][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.220407][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.240559][ T50] bond0 (unregistering): Released all slaves [ 160.248625][ T50] bond1 (unregistering): Released all slaves [ 160.259041][ T50] bond2 (unregistering): Released all slaves [ 160.271070][ T50] bond3 (unregistering): Released all slaves [ 160.281698][ T50] bond4 (unregistering): Released all slaves [ 160.295599][ T50] bond5 (unregistering): Released all slaves [ 160.305659][ T50] bond6 (unregistering): Released all slaves [ 160.315889][ T50] bond7 (unregistering): Released all slaves [ 160.325691][ T50] bond8 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 160.335972][ T50] bond8 (unregistering): Released all slaves [ 160.389235][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.407223][ T50] hsr_slave_0: left promiscuous mode [ 160.414835][ T50] hsr_slave_1: left promiscuous mode [ 160.422698][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.423514][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.437483][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.463471][ T50] veth1_macvtap: left promiscuous mode [ 160.463498][ T50] veth0_macvtap: left promiscuous mode [ 160.463603][ T50] veth1_vlan: left promiscuous mode [ 160.463638][ T50] veth0_vlan: left promiscuous mode [ 160.476754][ T3302] udevd[3302]: Failed to create symlink /run/udev/watch/3404: File exists [ 160.502409][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 160.502427][ T30] audit: type=1326 audit(1769600409.712:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.4.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5855aeb9 code=0x7ffc0000 [ 160.503442][ T30] audit: type=1326 audit(1769600409.722:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.4.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7faa5855aeb9 code=0x7ffc0000 [ 160.503473][ T30] audit: type=1326 audit(1769600409.722:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.4.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5855aeb9 code=0x7ffc0000 [ 160.658106][ T50] team0 (unregistering): Port device team_slave_1 removed [ 160.678124][ T50] team0 (unregistering): Port device team_slave_0 removed [ 160.819515][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.878807][T11104] team0: Port device team_slave_0 added [ 160.887389][T11104] team0: Port device team_slave_1 added [ 160.914724][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.914739][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.914820][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.916608][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.916719][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.916746][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.968851][T11104] hsr_slave_0: entered promiscuous mode [ 160.969424][T11104] hsr_slave_1: entered promiscuous mode [ 160.969795][T11104] debugfs: 'hsr0' already exists in 'hsr' [ 160.969814][T11104] Cannot create hsr debugfs directory [ 160.979260][T11198] loop0: detected capacity change from 0 to 136 [ 161.032523][T11198] Attempt to read inode for relocated directory [ 161.367916][T11104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.397039][T11104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.435022][T11104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.449990][T11104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.542685][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.620085][T11104] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.632860][T11245] tmpfs: Bad value for 'mpol' [ 161.637668][ T30] audit: type=1400 audit(1769600410.852:278): avc: denied { mounton } for pid=11243 comm="syz.4.3127" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 161.695367][T11247] loop4: detected capacity change from 0 to 256 [ 161.731708][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.738863][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.758115][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.765297][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.838022][T11104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.043690][T11104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.190917][T11104] veth0_vlan: entered promiscuous mode [ 162.208307][T11104] veth1_vlan: entered promiscuous mode [ 162.243688][T11104] veth0_macvtap: entered promiscuous mode [ 162.259611][T11104] veth1_macvtap: entered promiscuous mode [ 162.273270][T11104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.285808][T11104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.297698][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.306730][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.334508][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.354072][ T7484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.407953][T11296] loop2: detected capacity change from 0 to 7 [ 162.560841][T11316] loop2: detected capacity change from 0 to 128 [ 162.598966][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.608411][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.632123][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.632129][T11321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11321 comm=syz.2.3151 [ 162.654482][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.663111][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.676559][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.749912][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.758725][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.886217][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.895125][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.903993][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.913052][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.922028][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.933716][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.943776][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.952777][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.126212][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3161'. [ 163.262239][T11357] loop4: detected capacity change from 0 to 128 [ 163.269023][T11357] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.281640][T11357] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.329889][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.342410][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.383931][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.404756][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.422904][T11370] 9p: Bad value for 'wfdno' [ 163.424861][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.436939][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.473382][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.482095][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.538671][T11380] loop3: detected capacity change from 0 to 128 [ 163.545721][T11380] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.558100][T11380] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.903116][T11394] loop4: detected capacity change from 0 to 128 [ 163.971899][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.987819][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.007438][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3190'. [ 164.196038][T11421] loop3: detected capacity change from 0 to 136 [ 164.219987][T11421] Attempt to read inode for relocated directory [ 164.363254][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.372892][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.384909][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.394772][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.421041][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.440266][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.455900][T11429] loop2: detected capacity change from 0 to 7 [ 164.523078][T11431] syz.1.3201 (11431) used greatest stack depth: 8768 bytes left [ 164.604897][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.617088][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.664056][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.673835][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.684536][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.695001][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.888139][T11435] loop0: detected capacity change from 0 to 2048 [ 164.940669][ T3302] loop0: p3 < > p4 < > [ 164.945048][ T3302] loop0: partition table partially beyond EOD, truncated [ 164.952584][ T3302] loop0: p3 start 4284289 is beyond EOD, truncated [ 164.964767][T11435] loop0: p3 < > p4 < > [ 164.969055][T11435] loop0: partition table partially beyond EOD, truncated [ 164.983049][T11435] loop0: p3 start 4284289 is beyond EOD, truncated [ 165.149558][T11453] loop2: detected capacity change from 0 to 256 [ 165.156876][T11453] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.191082][T11455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.200677][T11455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.230599][T11457] netlink: 'syz.4.3213': attribute type 1 has an invalid length. [ 165.244868][T11457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.290896][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3214'. [ 165.633936][T11480] loop4: detected capacity change from 0 to 256 [ 165.653558][T11480] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.767924][T11482] loop3: detected capacity change from 0 to 8192 [ 165.791653][T11490] program syz.4.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.979569][T11498] loop2: detected capacity change from 0 to 128 [ 165.987253][T11498] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.999780][T11498] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.040198][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.103771][T11502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11502 comm=syz.2.3231 [ 166.118013][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'. [ 166.242242][ T30] audit: type=1400 audit(1769600415.462:279): avc: denied { unmount } for pid=11510 comm="syz.2.3235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.335166][T11517] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 166.343915][T11517] tmpfs: Unexpected value for 'noswap' [ 166.709312][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.718980][ C1] buffer_io_error: 22 callbacks suppressed [ 166.718999][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.733375][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.743076][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.751040][T11537] loop7: unable to read partition table [ 166.757005][T11537] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 166.760723][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.780573][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.810151][T11538] support for the xor transformation has been removed. [ 166.820468][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.830158][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.843986][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.853660][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.861789][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.871444][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.882717][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.892394][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.946063][T11548] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 166.960778][T11548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.970489][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3251'. [ 167.560561][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3258'. [ 168.052711][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3273'. [ 168.147659][ T30] audit: type=1400 audit(1769600417.362:280): avc: denied { remount } for pid=11605 comm="syz.0.3276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.237774][T11615] 9p: Bad value for 'rfdno' [ 168.256760][T11617] Attempt to read inode for relocated directory [ 168.300639][T11620] netlink: 'syz.1.3281': attribute type 1 has an invalid length. [ 168.332823][T11620] 8021q: adding VLAN 0 to HW filter on device bond14 [ 168.845341][T11631] team0: No ports can be present during mode change [ 169.022994][T11645] netlink: 'syz.1.3293': attribute type 12 has an invalid length. [ 169.040423][T11647] set_capacity_and_notify: 4 callbacks suppressed [ 169.040442][T11647] loop4: detected capacity change from 0 to 128 [ 169.092490][T11649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11649 comm=syz.2.3295 [ 169.126071][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3297'. [ 169.152225][T11655] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 169.185460][T11655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.221754][T11655] macvlan2: entered promiscuous mode [ 169.227177][T11655] macvlan2: entered allmulticast mode [ 169.243252][T11655] bond3: entered allmulticast mode [ 169.248440][T11655] bond3: entered promiscuous mode [ 169.267767][T11655] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.296855][T11655] team0: Port device macvlan2 added [ 169.561426][T11684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11684 comm=syz.4.3310 [ 169.615033][T11688] loop4: detected capacity change from 0 to 128 [ 169.622737][T11688] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.639691][T11688] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.663791][ T3437] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.039863][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3317'. [ 170.109390][T11705] loop2: detected capacity change from 0 to 7 [ 170.143333][T11707] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11707 comm=syz.1.3321 [ 170.158814][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3321'. [ 170.181247][T11711] loop0: detected capacity change from 0 to 128 [ 170.191912][T11711] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.209468][T11711] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.254583][ T7486] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.383242][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'. [ 170.401157][T11731] loop2: detected capacity change from 0 to 136 [ 170.410825][T11731] Attempt to read inode for relocated directory [ 171.177745][T11764] xt_hashlimit: invalid rate [ 171.268445][T11772] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11772 comm=syz.1.3351 [ 171.288701][T11774] netlink: 'syz.2.3352': attribute type 1 has an invalid length. [ 171.296752][T11770] loop0: detected capacity change from 0 to 8192 [ 171.317013][T11774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.342760][T11774] macvlan2: entered promiscuous mode [ 171.348183][T11774] macvlan2: entered allmulticast mode [ 171.446263][T11784] netlink: 'syz.1.3356': attribute type 12 has an invalid length. [ 171.454255][T11784] netlink: 'syz.1.3356': attribute type 29 has an invalid length. [ 171.462186][T11784] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3356'. [ 171.471422][T11784] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 171.479570][T11784] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3356'. [ 171.681664][T11797] loop1: detected capacity change from 0 to 136 [ 171.691963][T11797] Attempt to read inode for relocated directory [ 171.836616][T11808] 9p: Bad value for 'rfdno' [ 172.273284][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3371'. [ 172.337630][T11825] loop2: detected capacity change from 0 to 7 [ 172.541785][T11834] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 172.556402][T11834] 8021q: adding VLAN 0 to HW filter on device bond15 [ 172.569731][T11834] macvlan2: entered promiscuous mode [ 172.575136][T11834] macvlan2: entered allmulticast mode [ 172.645937][T11843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11843 comm=syz.3.3380 [ 172.680276][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'. [ 172.704295][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 172.804605][T11860] loop2: detected capacity change from 0 to 7 [ 173.035215][T11886] loop2: detected capacity change from 0 to 7 [ 173.129742][T11895] netlink: 'syz.1.3405': attribute type 1 has an invalid length. [ 173.179592][T11895] 8021q: adding VLAN 0 to HW filter on device bond16 [ 173.181283][T11904] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.200339][T11904] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.226203][ T2399] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.235892][T11895] macvlan3: entered promiscuous mode [ 173.241426][T11895] macvlan3: entered allmulticast mode [ 173.415418][T11930] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.463464][T11930] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.489715][ T7486] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.530195][T11944] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 173.544598][T11944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.622890][T11956] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 173.691615][ T30] audit: type=1400 audit(1769600422.912:281): avc: denied { getopt } for pid=11963 comm="syz.4.3436" lport=42095 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 173.760939][T11967] /dev/loop4: Can't open blockdev [ 173.815591][T11973] netlink: 'syz.4.3439': attribute type 4 has an invalid length. [ 173.834568][T11975] netlink: 'syz.3.3441': attribute type 9 has an invalid length. [ 173.842529][T11975] netlink: 'syz.3.3441': attribute type 7 has an invalid length. [ 174.112067][ T30] audit: type=1400 audit(1769600423.332:282): avc: denied { name_bind } for pid=11990 comm="syz.4.3448" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 174.235551][T11993] set_capacity_and_notify: 4 callbacks suppressed [ 174.235574][T11993] loop2: detected capacity change from 0 to 7 [ 174.447455][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3452'. [ 174.521971][T12001] loop2: detected capacity change from 0 to 128 [ 174.531577][T12001] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.576348][T12001] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.640454][ T2399] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.669698][T12017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12017 comm=syz.4.3461 [ 174.684285][T12019] 9p: Bad value for 'wfdno' [ 174.699667][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3461'. [ 174.782431][T12024] bridge_slave_0: left allmulticast mode [ 174.788167][T12024] bridge_slave_0: left promiscuous mode [ 174.794106][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.810973][T12024] bridge_slave_1: left allmulticast mode [ 174.816717][T12024] bridge_slave_1: left promiscuous mode [ 174.822647][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.846921][T12024] bond0: (slave bond_slave_0): Releasing backup interface [ 174.886195][T12024] bond0: (slave bond_slave_1): Releasing backup interface [ 174.910658][T12024] team0: Port device team_slave_0 removed [ 174.924486][T12024] team0: Port device team_slave_1 removed [ 174.934323][T12024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.941989][T12024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.957311][T12024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.964896][T12024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.975400][T12024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.117947][T12064] loop2: detected capacity change from 0 to 7 [ 175.210369][T12077] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3487'. [ 175.351551][T12091] 9p: Bad value for 'wfdno' [ 176.742351][T12144] chnl_net:caif_netlink_parms(): no params data found [ 176.820072][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.827321][T12144] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.834870][T12144] bridge_slave_0: entered allmulticast mode [ 176.842804][T12144] bridge_slave_0: entered promiscuous mode [ 176.849853][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.857035][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.865995][T12144] bridge_slave_1: entered allmulticast mode [ 176.872614][T12144] bridge_slave_1: entered promiscuous mode [ 176.894051][T12144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.904717][T12144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.951006][T12144] team0: Port device team_slave_0 added [ 176.965810][T12144] team0: Port device team_slave_1 added [ 176.995776][T12144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.002839][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.028858][T12144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.052832][T12144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.059860][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.085883][T12144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.130577][T12191] loop2: detected capacity change from 0 to 164 [ 177.164693][T12144] hsr_slave_0: entered promiscuous mode [ 177.185322][T12144] hsr_slave_1: entered promiscuous mode [ 177.198160][T12144] debugfs: 'hsr0' already exists in 'hsr' [ 177.204068][T12144] Cannot create hsr debugfs directory [ 177.278531][T12206] tmpfs: Bad value for 'nr_inodes' [ 177.361314][T12144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.440546][T12144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.474401][T12144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.548467][T12144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.634264][T12144] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.650225][T12144] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.664065][T12144] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.675730][T12144] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.714812][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.721935][T12144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.729386][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.736480][T12144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.756123][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.772723][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.824336][T12144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.838019][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.848449][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.855623][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.876666][T12144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.887272][T12144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.902023][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.909225][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.976792][T12144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.060274][T12144] veth0_vlan: entered promiscuous mode [ 178.068934][T12144] veth1_vlan: entered promiscuous mode [ 178.095248][T12144] veth0_macvtap: entered promiscuous mode [ 178.103608][T12144] veth1_macvtap: entered promiscuous mode [ 178.119694][T12144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.139326][T12144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.152853][ T3437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.170633][ T3437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.197363][ T3437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.212752][ T3437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.379755][T12269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.387062][T12269] IPv6: NLM_F_CREATE should be set when creating new route [ 179.471807][T12348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.479085][T12348] IPv6: NLM_F_CREATE should be set when creating new route [ 179.921005][T12379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3605'. [ 180.003574][ T30] audit: type=1400 audit(1769600429.222:283): avc: denied { map } for pid=12384 comm="syz.0.3607" path="socket:[38006]" dev="sockfs" ino=38006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.057493][ T30] audit: type=1400 audit(1769600429.222:284): avc: denied { accept } for pid=12384 comm="syz.0.3607" path="socket:[38006]" dev="sockfs" ino=38006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.132660][T12385] loop0: detected capacity change from 0 to 2048 [ 180.200574][ T3302] loop0: p3 p4 < > [ 180.213398][ T3302] loop0: p3 start 33554432 is beyond EOD, truncated [ 180.241665][T12385] loop0: p3 p4 < > [ 180.260308][T12385] loop0: p3 start 33554432 is beyond EOD, truncated [ 180.372526][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 180.416123][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 181.179822][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3645'. [ 181.261528][T12472] veth0_to_bridge: entered promiscuous mode [ 181.267592][T12472] veth0_to_bridge: entered allmulticast mode [ 181.301738][T12476] loop0: detected capacity change from 0 to 512 [ 181.376481][T12476] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 181.385250][T12476] FAT-fs (loop0): Filesystem has been set read-only [ 181.453325][ T30] audit: type=1400 audit(1769600430.672:285): avc: denied { sqpoll } for pid=12489 comm="syz.2.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.489017][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.496345][T12493] IPv6: NLM_F_CREATE should be set when creating new route [ 182.110877][T12551] 9p: Bad value for 'rfdno' [ 182.304925][T12567] loop1: detected capacity change from 0 to 128 [ 182.524443][ T26] kworker/u8:1: attempt to access beyond end of device [ 182.524443][ T26] loop1: rw=1, sector=138, nr_sectors = 112 limit=128 [ 182.692552][T12580] 9p: Bad value for 'rfdno' [ 183.051653][T12619] 9p: Bad value for 'rfdno' [ 183.154112][T12627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3719'. [ 183.312423][T12640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12640 comm=syz.3.3725 [ 183.337727][T12640] validate_nla: 5 callbacks suppressed [ 183.337748][T12640] netlink: 'syz.3.3725': attribute type 1 has an invalid length. [ 183.371093][T12640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.379546][T12643] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3726'. [ 183.405726][T12640] bond2: (slave veth0_virt_wifi): making interface the new active one [ 183.422932][T12640] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 183.515991][T12652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3730'. [ 183.665942][T12662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.739414][T12670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12670 comm=syz.1.3738 [ 183.827475][T12682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3744'. [ 183.837205][T12670] netlink: 'syz.1.3738': attribute type 1 has an invalid length. [ 183.889173][T12670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.938522][T12678] bond1: (slave veth0_virt_wifi): making interface the new active one [ 183.948819][T12678] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 184.107435][T12713] 9p: Bad value for 'rfdno' [ 184.131028][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3761'. [ 184.216947][T12727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12727 comm=syz.4.3765 [ 184.242038][T12729] netlink: 'syz.1.3766': attribute type 12 has an invalid length. [ 184.243460][T12727] netlink: 'syz.4.3765': attribute type 1 has an invalid length. [ 184.249951][T12729] netlink: 'syz.1.3766': attribute type 29 has an invalid length. [ 184.265559][T12729] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3766'. [ 184.283670][T12727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.307861][T12734] bond4: (slave veth0_virt_wifi): making interface the new active one [ 184.341605][T12734] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 184.391082][T12738] loop2: detected capacity change from 0 to 764 [ 184.400747][T12738] rock: directory entry would overflow storage [ 184.407181][T12738] rock: sig=0x5850, size=36, remaining=22 [ 184.437686][T12738] batadv_slave_1: entered promiscuous mode [ 184.458343][T12743] 9p: Bad value for 'rfdno' [ 184.463363][T12743] sctp: [Deprecated]: syz.1.3771 (pid 12743) Use of int in max_burst socket option deprecated. [ 184.463363][T12743] Use struct sctp_assoc_value instead [ 184.481354][T12737] batadv_slave_1: left promiscuous mode [ 184.501217][T12745] 9pnet_fd: Insufficient options for proto=fd [ 184.571267][T12753] loop1: detected capacity change from 0 to 512 [ 184.782238][T12775] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 184.827726][T12779] netlink: 'syz.0.3788': attribute type 12 has an invalid length. [ 184.835660][T12779] netlink: 'syz.0.3788': attribute type 29 has an invalid length. [ 184.843539][T12779] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3788'. [ 184.907870][T12787] 9pnet_fd: Insufficient options for proto=fd [ 184.969873][T12793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12793 comm=syz.3.3795 [ 184.985028][T12793] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 185.002718][T12793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.015730][T12793] bond2: (slave veth0_virt_wifi): Releasing active interface [ 185.027986][T12793] bond3: (slave veth0_virt_wifi): making interface the new active one [ 185.038604][T12793] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 185.073691][T12803] loop3: detected capacity change from 0 to 512 [ 185.080367][T12803] msdos: Bad value for 'uid' [ 185.085044][T12803] msdos: Bad value for 'uid' [ 185.162254][T12812] 9pnet_fd: Insufficient options for proto=fd [ 185.262967][T12824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12824 comm=syz.2.3809 [ 185.277394][T12824] netlink: 'syz.2.3809': attribute type 1 has an invalid length. [ 185.291690][T12824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.312878][T12824] bond2: (slave veth0_virt_wifi): making interface the new active one [ 185.325022][T12824] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 185.497312][T12852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12852 comm=syz.0.3822 [ 185.511331][T12852] netlink: 'syz.0.3822': attribute type 1 has an invalid length. [ 185.545404][T12857] loop4: detected capacity change from 0 to 128 [ 185.582820][T12852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.594298][T12860] bond2: (slave veth0_virt_wifi): making interface the new active one [ 185.604269][T12860] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 185.826136][T12890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12890 comm=syz.0.3839 [ 185.864251][T12890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.878484][T12890] bond2: (slave veth0_virt_wifi): Releasing active interface [ 185.892360][T12890] bond3: (slave veth0_virt_wifi): making interface the new active one [ 185.902236][T12890] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 185.993556][T12900] loop3: detected capacity change from 0 to 128 [ 186.255781][T12921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12921 comm=syz.3.3854 [ 186.316423][T12921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.331550][T12927] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3855'. [ 186.348226][T12921] bond3: (slave veth0_virt_wifi): Releasing active interface [ 186.360907][T12921] bond4: (slave veth0_virt_wifi): making interface the new active one [ 186.391085][T12921] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 186.453769][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3858'. [ 186.720306][T12953] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3866'. [ 186.781790][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3872'. [ 186.903254][T12980] loop4: detected capacity change from 0 to 128 [ 186.951093][ T3437] kworker/u8:7: attempt to access beyond end of device [ 186.951093][ T3437] loop4: rw=1, sector=154, nr_sectors = 6 limit=128 [ 187.051277][T12991] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3885'. [ 187.078891][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.087360][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.095695][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.103935][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.112995][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.121374][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.129665][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.137865][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.146178][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.155055][T12993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.186391][T12995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3887'. [ 187.248320][T13001] 9p: Bad value for 'rfdno' [ 187.296156][T13006] veth0_vlan: left promiscuous mode [ 187.303190][T13006] vlan0: entered promiscuous mode [ 187.308270][T13006] veth0_vlan: entered promiscuous mode [ 187.321519][T13006] team0: Port device vlan0 added [ 187.400358][T13014] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3896'. [ 188.703067][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.712328][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.974592][T13130] loop1: detected capacity change from 0 to 128 [ 189.081879][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.096207][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.572733][T13189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3978'. [ 189.836416][T13219] loop2: detected capacity change from 0 to 512 [ 189.896974][T13219] EXT4-fs (loop2): 1 truncate cleaned up [ 189.911024][T13219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.923654][ T30] audit: type=1400 audit(1769600439.142:286): avc: denied { mount } for pid=13217 comm="syz.2.3991" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 189.976850][ T30] audit: type=1400 audit(1769600439.172:287): avc: denied { add_name } for pid=13217 comm="syz.2.3991" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.997717][ T30] audit: type=1400 audit(1769600439.172:288): avc: denied { create } for pid=13217 comm="syz.2.3991" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.018088][ T30] audit: type=1400 audit(1769600439.172:289): avc: denied { read write } for pid=13217 comm="syz.2.3991" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.040781][ T30] audit: type=1400 audit(1769600439.172:290): avc: denied { open } for pid=13217 comm="syz.2.3991" path="/201/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.064048][ T30] audit: type=1400 audit(1769600439.182:291): avc: denied { create } for pid=13206 comm="syz.4.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.148763][T13238] validate_nla: 10 callbacks suppressed [ 190.148782][T13238] netlink: 'syz.3.4000': attribute type 12 has an invalid length. [ 190.162682][T13238] netlink: 'syz.3.4000': attribute type 29 has an invalid length. [ 190.163179][T13239] loop1: detected capacity change from 0 to 256 [ 190.170659][T13238] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4000'. [ 190.193099][ T30] audit: type=1400 audit(1769600439.362:292): avc: denied { ioctl } for pid=13237 comm="syz.3.4000" path="socket:[41003]" dev="sockfs" ino=41003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.220233][ T30] audit: type=1400 audit(1769600439.432:293): avc: denied { allowed } for pid=13240 comm="syz.0.4001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.220348][T11104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.295979][T13239] FAT-fs (loop1): codepage cp1255 not found [ 190.386292][ T30] audit: type=1400 audit(1769600439.602:294): avc: denied { create } for pid=13253 comm="syz.3.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.453805][ T30] audit: type=1400 audit(1769600439.622:295): avc: denied { setopt } for pid=13253 comm="syz.3.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.475692][T13262] loop3: detected capacity change from 0 to 512 [ 190.499524][T13262] EXT4-fs: Ignoring removed oldalloc option [ 190.540635][T13262] EXT4-fs (loop3): 1 truncate cleaned up [ 190.561058][T13262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.654613][T10869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.799777][T13287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4021'. [ 190.840544][T13289] loop1: detected capacity change from 0 to 512 [ 190.872828][T13289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.960907][T12144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.979723][T13297] loop0: detected capacity change from 0 to 512 [ 191.016850][T13297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.020922][T13303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36112 sclass=netlink_route_socket pid=13303 comm=syz.3.4027 [ 191.042442][T13297] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.067876][T13297] EXT4-fs (loop0): shut down requested (1) [ 191.086550][T13297] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 191.101846][T13297] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 191.231653][T10419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.262101][T13312] loop4: detected capacity change from 0 to 512 [ 191.303926][T13312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.329672][T13312] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.366488][T13312] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4032: Failed to acquire dquot type 0 [ 191.409037][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.436741][T13335] loop0: detected capacity change from 0 to 128 [ 191.451543][T13335] syz.0.4039: attempt to access beyond end of device [ 191.451543][T13335] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 191.465975][T13335] syz.0.4039: attempt to access beyond end of device [ 191.465975][T13335] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 191.485825][T13335] syz.0.4039: attempt to access beyond end of device [ 191.485825][T13335] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 191.500193][T13335] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 191.520056][T13338] syz.0.4039: attempt to access beyond end of device [ 191.520056][T13338] loop0: rw=2049, sector=170, nr_sectors = 2 limit=128 [ 191.532220][T13340] lo: entered promiscuous mode [ 191.538487][T13340] lo: entered allmulticast mode [ 191.552597][T13340] tunl0: entered promiscuous mode [ 191.557734][T13340] tunl0: entered allmulticast mode [ 191.568324][T13340] gre0: entered promiscuous mode [ 191.573441][T13340] gre0: entered allmulticast mode [ 191.585228][T13340] gretap0: entered promiscuous mode [ 191.590630][T13340] gretap0: entered allmulticast mode [ 191.596546][T13335] syz.0.4039: attempt to access beyond end of device [ 191.596546][T13335] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 191.610295][T13340] erspan0: entered promiscuous mode [ 191.612334][T13343] __nla_validate_parse: 1 callbacks suppressed [ 191.612386][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'. [ 191.615556][T13340] erspan0: entered allmulticast mode [ 191.625836][T13335] syz.0.4039: attempt to access beyond end of device [ 191.625836][T13335] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 191.635653][T13340] ip_vti0: entered promiscuous mode [ 191.636306][T13335] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 191.649892][T13340] ip_vti0: entered allmulticast mode [ 191.654506][T13340] ip6_vti0: entered promiscuous mode [ 191.663739][T13335] syz.0.4039: attempt to access beyond end of device [ 191.663739][T13335] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 191.669136][T13340] ip6_vti0: entered allmulticast mode [ 191.673588][T13340] sit0: entered promiscuous mode [ 191.678501][T13335] syz.0.4039: attempt to access beyond end of device [ 191.678501][T13335] loop0: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 191.688642][T13340] sit0: entered allmulticast mode [ 191.693392][T13335] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 191.704661][T13340] ip6tnl0: entered promiscuous mode [ 191.724525][T13335] syz.0.4039: attempt to access beyond end of device [ 191.724525][T13335] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 191.726249][T13340] ip6tnl0: entered allmulticast mode [ 191.733045][T13335] syz.0.4039: attempt to access beyond end of device [ 191.733045][T13335] loop0: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 191.748745][T13340] ip6gre0: entered promiscuous mode [ 191.749690][T13335] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 191.763571][T13340] ip6gre0: entered allmulticast mode [ 191.782863][T13340] syz_tun: entered promiscuous mode [ 191.788091][T13335] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 191.796169][T13335] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 191.796688][T13340] syz_tun: entered allmulticast mode [ 191.808909][T13335] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 191.819421][T13340] ip6gretap0: entered promiscuous mode [ 191.821623][T13335] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 191.826129][T13340] ip6gretap0: entered allmulticast mode [ 191.836633][T13335] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 191.844160][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.850846][T13335] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 191.855135][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.871354][T13340] bridge0: entered promiscuous mode [ 191.876629][T13340] bridge0: entered allmulticast mode [ 191.884182][T13340] vcan0: entered promiscuous mode [ 191.889352][T13340] vcan0: entered allmulticast mode [ 191.896107][T13340] bond0: entered promiscuous mode [ 191.901349][T13340] bond_slave_0: entered promiscuous mode [ 191.907157][T13340] bond_slave_1: entered promiscuous mode [ 191.912950][T13340] bond0: entered allmulticast mode [ 191.918112][T13340] bond_slave_0: entered allmulticast mode [ 191.923932][T13340] bond_slave_1: entered allmulticast mode [ 191.931794][T13340] team0: entered promiscuous mode [ 191.936912][T13340] team_slave_0: entered promiscuous mode [ 191.942751][T13340] team_slave_1: entered promiscuous mode [ 191.948637][T13340] team0: entered allmulticast mode [ 191.953851][T13340] team_slave_0: entered allmulticast mode [ 191.959639][T13340] team_slave_1: entered allmulticast mode [ 191.965402][T13340] vlan0: entered allmulticast mode [ 191.970610][T13340] veth0_vlan: entered allmulticast mode [ 191.978244][T13340] dummy0: entered promiscuous mode [ 191.983469][T13340] dummy0: entered allmulticast mode [ 191.994819][T13340] nlmon0: entered promiscuous mode [ 192.000062][T13340] nlmon0: entered allmulticast mode [ 192.006722][T13340] caif0: entered promiscuous mode [ 192.011828][T13340] caif0: entered allmulticast mode [ 192.017575][T13340] batadv0: entered promiscuous mode [ 192.023077][T13340] batadv0: entered allmulticast mode [ 192.030460][T13340] vxcan0: entered promiscuous mode [ 192.035714][T13340] vxcan0: entered allmulticast mode [ 192.042508][T13340] vxcan1: entered promiscuous mode [ 192.047870][T13340] vxcan1: entered allmulticast mode [ 192.054306][T13340] veth0: entered promiscuous mode [ 192.059629][T13340] veth0: entered allmulticast mode [ 192.071163][T13340] veth1: entered promiscuous mode [ 192.072897][T13347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4045'. [ 192.076304][T13340] veth1: entered allmulticast mode [ 192.092542][T13340] wg0: entered promiscuous mode [ 192.097454][T13340] wg0: entered allmulticast mode [ 192.104363][T13340] wg1: entered promiscuous mode [ 192.109237][T13340] wg1: entered allmulticast mode [ 192.115701][T13340] wg2: entered promiscuous mode [ 192.120628][T13340] wg2: entered allmulticast mode [ 192.126810][T13340] veth0_to_bridge: entered promiscuous mode [ 192.133273][T13340] veth0_to_bridge: entered allmulticast mode [ 192.144182][T13340] veth1_to_bridge: entered promiscuous mode [ 192.150398][T13340] veth1_to_bridge: entered allmulticast mode [ 192.163341][T13322] net_ratelimit: 38 callbacks suppressed [ 192.163420][T13322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.168827][T13340] veth0_to_bond: entered promiscuous mode [ 192.183407][T13340] veth0_to_bond: entered allmulticast mode [ 192.191206][T13340] veth1_to_bond: entered promiscuous mode [ 192.197001][T13340] veth1_to_bond: entered allmulticast mode [ 192.208160][T13340] veth0_to_team: entered promiscuous mode [ 192.213981][T13340] veth0_to_team: entered allmulticast mode [ 192.222821][T13340] veth1_to_team: entered promiscuous mode [ 192.228835][T13340] veth1_to_team: entered allmulticast mode [ 192.240445][T13340] veth0_to_batadv: entered promiscuous mode [ 192.246436][T13340] veth0_to_batadv: entered allmulticast mode [ 192.254276][T13340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.261924][T13340] batadv_slave_0: entered promiscuous mode [ 192.267887][T13340] batadv_slave_0: entered allmulticast mode [ 192.276496][T13340] veth1_to_batadv: entered promiscuous mode [ 192.282507][T13340] veth1_to_batadv: entered allmulticast mode [ 192.290844][T13340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.295039][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.298528][T13340] batadv_slave_1: entered promiscuous mode [ 192.312275][T13340] batadv_slave_1: entered allmulticast mode [ 192.321678][T13340] xfrm0: entered promiscuous mode [ 192.326780][T13340] xfrm0: entered allmulticast mode [ 192.333621][T13340] veth0_to_hsr: entered promiscuous mode [ 192.339817][T13340] veth0_to_hsr: entered allmulticast mode [ 192.347281][T13340] hsr_slave_0: entered allmulticast mode [ 192.354346][T13340] veth1_to_hsr: entered promiscuous mode [ 192.360108][T13340] veth1_to_hsr: entered allmulticast mode [ 192.374307][T13340] hsr_slave_1: entered allmulticast mode [ 192.382600][T13340] hsr0: entered promiscuous mode [ 192.387648][T13340] hsr0: entered allmulticast mode [ 192.394256][T13340] veth1_virt_wifi: entered promiscuous mode [ 192.400346][T13340] veth1_virt_wifi: entered allmulticast mode [ 192.407534][T13340] veth0_virt_wifi: entered promiscuous mode [ 192.413683][T13340] veth0_virt_wifi: entered allmulticast mode [ 192.421199][T13340] veth1_vlan: entered allmulticast mode [ 192.432339][T13340] macvlan0: entered promiscuous mode [ 192.437702][T13340] macvlan0: entered allmulticast mode [ 192.444649][T13340] macvlan1: entered promiscuous mode [ 192.450228][T13340] macvlan1: entered allmulticast mode [ 192.458189][T13340] ipvlan0: entered promiscuous mode [ 192.463488][T13340] ipvlan0: entered allmulticast mode [ 192.468920][T13340] ipvlan1: entered promiscuous mode [ 192.474518][T13340] ipvlan1: entered allmulticast mode [ 192.480452][T13340] veth1_macvtap: entered allmulticast mode [ 192.487406][T13340] veth0_macvtap: entered allmulticast mode [ 192.496426][T13340] macvtap0: entered promiscuous mode [ 192.501850][T13340] macvtap0: entered allmulticast mode [ 192.509112][T13340] macsec0: entered promiscuous mode [ 192.514536][T13340] macsec0: entered allmulticast mode [ 192.521420][T13340] geneve0: entered promiscuous mode [ 192.526674][T13340] geneve0: entered allmulticast mode [ 192.533546][T13340] geneve1: entered promiscuous mode [ 192.538800][T13340] geneve1: entered allmulticast mode [ 192.546138][T13340] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 192.553781][T13340] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 192.562207][T13340] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 192.569626][T13340] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 192.578224][T13340] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 192.585751][T13340] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 192.594812][T13340] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 192.602389][T13340] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 192.610931][T13340] bond1: entered promiscuous mode [ 192.616038][T13340] bond1: entered allmulticast mode [ 192.622080][T13340] bond2: entered promiscuous mode [ 192.627228][T13340] bond2: entered allmulticast mode [ 192.634995][T13340] bond4: entered promiscuous mode [ 192.640256][T13340] bond4: entered allmulticast mode [ 192.648919][T13343] macsec1: entered promiscuous mode [ 192.657431][ T2399] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.699040][ T2399] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.718426][ T2399] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.732259][T13373] loop0: detected capacity change from 0 to 128 [ 192.739958][T13372] loop4: detected capacity change from 0 to 512 [ 192.748047][T13369] 9pnet_fd: Insufficient options for proto=fd [ 192.753159][ T2399] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.797501][T13373] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.827626][T13372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.849894][T13372] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.864388][T13373] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.900933][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.937353][T10419] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.990239][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4064'. [ 193.004963][T13395] loop3: detected capacity change from 0 to 512 [ 193.014891][T13399] loop1: detected capacity change from 0 to 128 [ 193.056415][T13406] loop4: detected capacity change from 0 to 512 [ 193.065624][T13395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.109695][T13411] 9pnet_fd: Insufficient options for proto=fd [ 193.138654][T13406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 193.174354][T13406] ext4 filesystem being mounted at /202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.185879][T13395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 193.206193][T13423] loop2: detected capacity change from 0 to 512 [ 193.232932][T13395] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.245361][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 193.256806][T13428] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4079'. [ 193.285515][T13395] EXT4-fs warning (device loop3): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 193.326489][T13423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.341984][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.352030][T10869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 193.361473][T13423] ext4 filesystem being mounted at /217/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.433841][T11104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.473060][T13447] xt_hashlimit: size too large, truncated to 1048576 [ 193.606174][T13458] Invalid ELF header len 16 [ 194.370904][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.492331][T13515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.504725][T13515] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.517182][T13515] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.4108: lblock 0 mapped to illegal pblock 0 (length 6) [ 194.533311][T13515] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.4108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 194.553552][T13515] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.4108: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.567873][T13515] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.4108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 194.589650][T13515] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.4108: lblock 3 mapped to illegal pblock 3 (length 3) [ 194.604201][T13515] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.4108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 194.635636][T11104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.821656][T13535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13535 comm=syz.4.4114 [ 194.956882][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 194.956901][ T30] audit: type=1400 audit(1769600444.172:327): avc: denied { read write } for pid=13546 comm="syz.2.4120" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.987399][ T30] audit: type=1400 audit(1769600444.172:328): avc: denied { open } for pid=13546 comm="syz.2.4120" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 195.024152][ T30] audit: type=1400 audit(1769600444.242:329): avc: denied { create } for pid=13550 comm="syz.2.4122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.044306][ T30] audit: type=1400 audit(1769600444.242:330): avc: denied { ioctl } for pid=13550 comm="syz.2.4122" path="socket:[41474]" dev="sockfs" ino=41474 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.080180][ T30] audit: type=1400 audit(1769600444.292:331): avc: denied { bind } for pid=13550 comm="syz.2.4122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.104007][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.151451][T13557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13557 comm=syz.1.4125 [ 195.225410][T13562] FAT-fs (loop4): Directory bread(block 64) failed [ 195.240076][T13562] FAT-fs (loop4): Directory bread(block 65) failed [ 195.254173][T13562] FAT-fs (loop4): Directory bread(block 66) failed [ 195.270102][T13562] FAT-fs (loop4): Directory bread(block 67) failed [ 195.276769][T13562] FAT-fs (loop4): Directory bread(block 68) failed [ 195.290139][T13562] FAT-fs (loop4): Directory bread(block 69) failed [ 195.300183][T13562] FAT-fs (loop4): Directory bread(block 70) failed [ 195.306776][T13562] FAT-fs (loop4): Directory bread(block 71) failed [ 195.359671][T13562] FAT-fs (loop4): Directory bread(block 72) failed [ 195.366570][T13562] FAT-fs (loop4): Directory bread(block 73) failed [ 195.413027][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.525284][T13588] netlink: 'syz.1.4140': attribute type 4 has an invalid length. [ 195.543373][T13588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13588 comm=syz.1.4140 [ 195.558933][ T7486] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.027904][T13594] set_capacity_and_notify: 3 callbacks suppressed [ 196.027920][T13594] loop4: detected capacity change from 0 to 512 [ 196.045411][T13594] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4141: iget: bad extra_isize 50264 (inode size 256) [ 196.061385][T13594] EXT4-fs (loop4): Remounting filesystem read-only [ 196.068614][T13594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.092731][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.453248][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.924955][ T30] audit: type=1326 audit(1769600446.142:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33eeeaeb9 code=0x7ffc0000 [ 196.980042][ T30] audit: type=1326 audit(1769600446.172:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa33eeeaeb9 code=0x7ffc0000 [ 197.003573][ T30] audit: type=1326 audit(1769600446.172:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa33ee8c2d9 code=0x7ffc0000 [ 197.027099][ T30] audit: type=1326 audit(1769600446.172:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa33ee8c2d9 code=0x7ffc0000 [ 197.050472][ T30] audit: type=1326 audit(1769600446.172:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa33ee8c2d9 code=0x7ffc0000 [ 197.260967][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.493194][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.570110][T13591] Bluetooth: hci0: command 0x1003 tx timeout [ 197.570134][ T3842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.888281][T13661] loop1: detected capacity change from 0 to 512 [ 197.910559][T13661] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.917263][T13661] EXT4-fs: inline encryption not supported [ 197.945234][T13661] EXT4-fs: test_dummy_encryption option not supported [ 198.130225][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.300538][T13667] loop4: detected capacity change from 0 to 256 [ 198.324628][T13667] bio_check_eod: 15 callbacks suppressed [ 198.324667][T13667] syz.4.4172: attempt to access beyond end of device [ 198.324667][T13667] loop4: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 198.383107][T13669] syz.4.4172: attempt to access beyond end of device [ 198.383107][T13669] loop4: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 198.533527][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.921205][T13689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4180'. [ 198.970051][T13693] tmpfs: Unsupported parameter 'huge' [ 198.977338][T13691] loop1: detected capacity change from 0 to 1024 [ 198.997686][T13691] EXT4-fs: Ignoring removed bh option [ 199.022446][T13691] EXT4-fs: Ignoring removed nobh option [ 199.042081][T13691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.065205][T13693] loop0: detected capacity change from 0 to 512 [ 199.105555][T13693] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 199.118902][T13693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.149388][T12144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.168088][T13693] EXT4-fs (loop0): 1 truncate cleaned up [ 199.174101][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.200457][T13693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.330366][T13704] loop1: detected capacity change from 0 to 128 [ 199.368719][T13704] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.392015][T13704] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.404237][T10419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.476524][T12144] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.539762][T13711] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4189'. [ 199.573236][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.573268][T13713] loop0: detected capacity change from 0 to 512 [ 199.618920][T13717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4191'. [ 199.635692][T13719] loop1: detected capacity change from 0 to 128 [ 199.668722][T13719] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.683202][T13719] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.703344][T13713] loop0: detected capacity change from 0 to 1024 [ 199.758206][T12144] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.803033][T13713] EXT4-fs: Ignoring removed bh option [ 199.858042][T13713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.920725][T13732] loop4: detected capacity change from 0 to 512 [ 199.934509][T13732] EXT4-fs: test_dummy_encryption option not supported [ 200.010444][T10419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.071136][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4203'. [ 200.131234][T13740] syzkaller0: entered promiscuous mode [ 200.136762][T13740] syzkaller0: entered allmulticast mode [ 200.188915][T13749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.272844][ T30] kauditd_printk_skb: 7165 callbacks suppressed [ 200.272864][ T30] audit: type=1400 audit(1769600449.492:7502): avc: denied { map } for pid=13748 comm="syz.3.4205" path="/218/file0/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.336925][T13749] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4205: bg 0: block 234: padding at end of block bitmap is not set [ 200.390146][T13749] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1532 with error 117 [ 200.402781][T13749] EXT4-fs (loop3): This should not happen!! Data will be lost [ 200.402781][T13749] [ 200.612750][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.622281][T10869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.667829][T13775] /dev/loop4: Can't open blockdev [ 200.726610][T13780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4216'. [ 201.121620][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4229'. [ 201.408506][T13832] set_capacity_and_notify: 3 callbacks suppressed [ 201.408520][T13832] loop0: detected capacity change from 0 to 1024 [ 201.667434][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.718003][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4240'. [ 202.182836][T13864] loop1: detected capacity change from 0 to 512 [ 202.193579][T13864] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 202.210134][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.352337][T13877] loop1: detected capacity change from 0 to 512 [ 202.369727][T13877] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.447473][T13883] loop3: detected capacity change from 0 to 1024 [ 202.477333][T13883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.480197][T13887] loop1: detected capacity change from 0 to 1024 [ 202.509746][T13887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.522033][T13887] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.535562][T13883] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.541011][ T30] audit: type=1400 audit(1769600451.752:7503): avc: denied { map } for pid=13886 comm="syz.1.4264" path="/134/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.562889][T13887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4264: bg 0: block 112: padding at end of block bitmap is not set [ 202.569389][ T30] audit: type=1400 audit(1769600451.752:7504): avc: denied { execute } for pid=13886 comm="syz.1.4264" path="/134/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.612702][T13887] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 202.625343][T13887] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.625343][T13887] [ 202.640864][T13893] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.4264: lblock 0 mapped to illegal pblock 0 (length 4) [ 202.654673][T13893] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 202.667040][T13893] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.667040][T13893] [ 202.693029][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.730715][T10869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.747096][T12144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.780660][ T30] audit: type=1400 audit(1769600451.992:7505): avc: denied { setopt } for pid=13896 comm="syz.3.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.832977][ T30] audit: type=1326 audit(1769600452.052:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.0.4268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79a293aeb9 code=0x0 [ 203.020172][T13915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4274'. [ 203.601534][ T30] audit: type=1400 audit(1769600452.802:7507): avc: denied { connect } for pid=13939 comm="syz.1.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.622094][ T30] audit: type=1400 audit(1769600452.812:7508): avc: denied { mounton } for pid=13937 comm="syz.2.4283" path="/proc/532/cgroup" dev="proc" ino=43131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 203.645397][ T30] audit: type=1400 audit(1769600452.812:7509): avc: denied { remount } for pid=13937 comm="syz.2.4283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 203.733293][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.934899][T13971] loop2: detected capacity change from 0 to 256 [ 203.976531][T13975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4299'. [ 203.988962][T13971] FAT-fs (loop2): IO charset macinuit not found [ 204.083303][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4303'. [ 204.126842][T13990] loop1: detected capacity change from 0 to 512 [ 204.189594][T13990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.203227][T13990] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.229708][ T30] audit: type=1400 audit(1769600453.442:7510): avc: denied { ioctl } for pid=13989 comm="syz.1.4306" path="/145/file0/blkio.bfq.io_service_bytes" dev="loop1" ino=18 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.283323][T12144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.321454][ T30] audit: type=1400 audit(1769600453.542:7511): avc: denied { append } for pid=13999 comm="syz.1.4308" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.592135][T14008] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4312'. [ 204.790615][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.299112][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.357927][T14033] loop4: detected capacity change from 0 to 512 [ 205.386142][T14033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.404090][T14039] loop0: detected capacity change from 0 to 256 [ 205.406775][T14033] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.411830][T14039] vfat: Unknown parameter 'codepags]e' [ 205.445479][T14033] EXT4-fs (loop4): shut down requested (2) [ 205.463402][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.491413][T14041] loop4: detected capacity change from 0 to 2048 [ 205.498488][T14041] EXT4-fs: Ignoring removed nobh option [ 205.555781][T14041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.613874][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 205.613893][ T30] audit: type=1400 audit(1769600454.832:7513): avc: denied { ioctl } for pid=14047 comm="syz.2.4327" path="socket:[43232]" dev="sockfs" ino=43232 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.646923][ T30] audit: type=1404 audit(1769600454.832:7514): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 205.662448][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.687383][ T30] audit: type=1400 audit(1769600454.892:7515): avc: denied { read write } for pid=14038 comm="syz.0.4324" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 205.712528][ T30] audit: type=1400 audit(1769600454.912:7516): avc: denied { read write } for pid=11104 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.737488][ T30] audit: type=1400 audit(1769600454.952:7517): avc: denied { map_create } for pid=14050 comm="syz.2.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.756825][ T30] audit: type=1400 audit(1769600454.962:7518): avc: denied { read write } for pid=10588 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.781259][ T30] audit: type=1400 audit(1769600454.972:7519): avc: denied { prog_load } for pid=14050 comm="syz.2.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.800541][ T30] audit: type=1400 audit(1769600454.972:7520): avc: denied { create } for pid=14050 comm="syz.2.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 205.823429][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.832432][ T30] audit: type=1400 audit(1769600455.042:7521): avc: denied { read write } for pid=11104 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.870051][ T30] audit: type=1400 audit(1769600455.082:7522): avc: denied { name_bind } for pid=14053 comm="syz.4.4328" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 206.856623][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.864924][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.895420][T14117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.693149][T14186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.749030][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.902865][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.137302][T14207] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 208.370377][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.932883][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.005720][T14244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.013995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.520440][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4421'. [ 209.812787][T14283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4430'. [ 209.982955][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.343227][T14303] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 210.588227][T14314] netlink: 'syz.0.4443': attribute type 3 has an invalid length. [ 210.623274][ T30] kauditd_printk_skb: 294 callbacks suppressed [ 210.623295][ T30] audit: type=1400 audit(1769600459.842:7817): avc: denied { read write } for pid=14315 comm="syz.2.4445" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 210.778973][T14314] netlink: 'syz.0.4443': attribute type 3 has an invalid length. [ 210.905014][ T30] audit: type=1400 audit(1769600460.122:7818): avc: denied { read write } for pid=10869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.946615][ T30] audit: type=1400 audit(1769600460.162:7819): avc: denied { read write } for pid=10869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.012777][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.025457][ T30] audit: type=1400 audit(1769600460.182:7820): avc: denied { read write } for pid=10588 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.049911][ T30] audit: type=1400 audit(1769600460.202:7821): avc: denied { create } for pid=14321 comm="syz.4.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 211.069784][ T30] audit: type=1400 audit(1769600460.212:7822): avc: denied { read write } for pid=14320 comm="syz.3.4447" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.093980][ T30] audit: type=1400 audit(1769600460.222:7823): avc: denied { read append } for pid=14320 comm="syz.3.4447" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.118246][ T30] audit: type=1400 audit(1769600460.232:7824): avc: denied { read write } for pid=10588 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.142565][ T30] audit: type=1400 audit(1769600460.242:7825): avc: denied { read write } for pid=10869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.176374][ T30] audit: type=1400 audit(1769600460.282:7826): avc: denied { mounton } for pid=14324 comm="syz.4.4449" path="/proc/620/task" dev="proc" ino=43863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 211.227754][T14334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4452'. [ 211.411202][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.176777][T14390] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 212.260306][T14396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4481'. [ 212.372098][ T7484] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.989886][T14423] ================================================================== [ 212.998050][T14423] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 213.006735][T14423] [ 213.009167][T14423] write to 0xffff888104bb13a8 of 8 bytes by task 14422 on cpu 0: [ 213.016918][T14423] shmem_file_splice_read+0x470/0x600 [ 213.022359][T14423] splice_direct_to_actor+0x26e/0x670 [ 213.027798][T14423] do_splice_direct+0x119/0x1a0 [ 213.032682][T14423] do_sendfile+0x382/0x650 [ 213.037134][T14423] __x64_sys_sendfile64+0x105/0x150 [ 213.042539][T14423] x64_sys_call+0x2db1/0x3000 [ 213.047306][T14423] do_syscall_64+0xc0/0x2a0 [ 213.051858][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.057782][T14423] [ 213.060132][T14423] write to 0xffff888104bb13a8 of 8 bytes by task 14423 on cpu 1: [ 213.067887][T14423] shmem_file_splice_read+0x470/0x600 [ 213.073337][T14423] splice_direct_to_actor+0x26e/0x670 [ 213.078744][T14423] do_splice_direct+0x119/0x1a0 [ 213.083626][T14423] do_sendfile+0x382/0x650 [ 213.088078][T14423] __x64_sys_sendfile64+0x105/0x150 [ 213.093314][T14423] x64_sys_call+0x2db1/0x3000 [ 213.098037][T14423] do_syscall_64+0xc0/0x2a0 [ 213.102586][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.108519][T14423] [ 213.110866][T14423] value changed: 0x000000000002511e -> 0x0000000000025132 [ 213.118006][T14423] [ 213.120362][T14423] Reported by Kernel Concurrency Sanitizer on: [ 213.126560][T14423] CPU: 1 UID: 0 PID: 14423 Comm: syz.3.4493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.136575][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.146711][T14423] ================================================================== [ 213.169220][ T3489] net_ratelimit: 3 callbacks suppressed [ 213.169244][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.212884][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.450086][ T3842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.450062][T13591] Bluetooth: hci0: command 0x1003 tx timeout [ 214.462453][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.263050][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.293596][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.450960][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.091206][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.332641][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.490333][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.373129][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.012357][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.422996][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.463078][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.530182][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.492945][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.570399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.578767][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.532462][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog